This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json) Hash identifier: K03LhbRnnZNz0iPu+W0YFWUu8wdT8Cfj7akmXjEbHXA= Subject key identifier: 0C:2E:03:B1:F5:E0:C5:7B:25:29:99:D4:0D:C6:16:1B:ED:75:29:14 Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019AF49C3B166BDA03E0B749422A02773257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft Manifest number: 1778 Signing time: Sat 06 Dec 2025 17:01:10 +0000 Manifest this update: Sat 06 Dec 2025 17:01:10 +0000 Manifest next update: Sun 07 Dec 2025 17:01:10 +0000 Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=) 2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=) 3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: bmpIUwtVN5rfqunkYgdu8uegNhW5eTtf+wSPkt+PJ2w=) 4: XSix0k71H2Zb9YIt04I-2-4I8sA.roa (hash: tLM6K/svH3mdt3MnB92tM359DcHoAYR6hLSIdF3Sjb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:3b:16:6b:da:03:e0:b7:49:42:2a:02:77:32:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Dec 6 17:01:10 2025 GMT Not After : Dec 7 17:01:10 2025 GMT Subject: CN=0c2e03b1f5e0c57b252999d40dc6161bed752914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:9a:0f:cd:80:d9:dd:28:20:73:e4:cd:97: 73:67:8a:12:65:38:e0:6e:88:1e:00:f5:64:df:e1: 72:4e:0e:f1:ed:65:57:62:e4:a3:d9:f1:d4:5d:b3: 49:c1:c8:82:18:77:d0:6f:77:4f:87:05:0e:e8:99: 9c:90:cd:f1:9c:0f:4c:8e:75:5e:cf:d5:07:d3:1f: ec:6a:30:cb:d4:d2:35:f4:35:81:24:f1:cb:ea:c3: 6c:77:fb:c2:a9:45:cd:21:07:32:67:95:d9:e0:cc: 2c:2b:8c:ac:fd:5e:0d:1c:40:71:9e:7c:68:cd:cb: 49:50:b5:d4:1b:0c:40:1c:c7:45:18:5e:93:50:dc: 84:d6:74:ac:81:8f:af:2a:a0:ad:44:14:22:71:ce: 5d:e5:75:cd:7f:ee:c6:bb:f9:11:a4:e3:d8:6d:d6: 64:4b:45:7c:75:ea:5e:0a:02:c5:6b:ce:42:b6:c2: e5:14:c6:51:48:ec:2d:cc:a2:50:f2:86:19:c0:0a: 29:76:4c:05:88:4f:bd:cd:03:3d:20:65:90:f6:b5: a0:b9:9e:1c:db:3c:ab:53:a2:79:a3:39:12:57:a8: 8f:eb:b6:47:71:54:68:3f:d5:73:e3:c1:5b:36:2f: 48:2e:0d:40:f3:c3:05:78:4a:bf:f1:87:2d:02:70: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2E:03:B1:F5:E0:C5:7B:25:29:99:D4:0D:C6:16:1B:ED:75:29:14 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:86:fc:ac:76:d7:a3:10:fb:4b:5b:ff:59:80:fe:a1:98:75: d4:f2:af:94:e1:3e:3c:6f:19:e6:cd:0e:44:04:10:fa:ca:77: 18:de:c1:62:87:f9:31:2d:2a:34:a1:4f:70:06:98:00:58:55: 0a:60:99:83:57:82:08:3b:7e:f4:bd:e0:b7:cc:7a:6c:6b:53: fe:7f:1a:b4:40:51:fc:35:f0:5d:62:44:dc:91:ef:32:a2:92: cb:e3:91:da:91:67:9f:c4:fc:bc:e7:a4:b2:9c:45:4f:28:0e: 2f:31:91:99:84:30:1d:2e:6f:3f:9a:24:42:70:2a:bb:86:98: 9f:49:2b:98:6e:6e:58:c7:26:06:8d:43:47:36:0b:c8:80:34: 8c:70:78:fd:b0:06:63:62:1f:45:6f:0d:e9:47:b0:73:35:bf: 9a:5a:14:c9:9a:6c:16:93:6c:86:e0:ed:87:d6:97:e8:95:1a: 7e:c8:19:18:12:83:5b:a2:ad:0d:f1:a9:59:e1:81:24:4b:45: fd:87:bc:df:00:99:a3:59:d6:9b:13:cf:5f:18:e3:95:83:f9: e0:0c:f1:f3:9b:07:0e:67:92:9f:2d:07:55:15:90:0a:87:a8: 0c:f4:e8:66:2d:06:6e:4f:28:4d:fc:41:67:7d:83:6e:5c:6e: e8:0f:fb:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDsWa9oD4LdJQioCdzJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjUxMjA2MTcwMTEwWhcNMjUxMjA3MTcwMTEwWjAzMTEwLwYDVQQD EygwYzJlMDNiMWY1ZTBjNTdiMjUyOTk5ZDQwZGM2MTYxYmVkNzUyOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSGaD82A2d0oIHPkzZdzZ4oSZTjg bogeAPVk3+FyTg7x7WVXYuSj2fHUXbNJwciCGHfQb3dPhwUO6JmckM3xnA9MjnVe z9UH0x/sajDL1NI19DWBJPHL6sNsd/vCqUXNIQcyZ5XZ4MwsK4ys/V4NHEBxnnxo zctJULXUGwxAHMdFGF6TUNyE1nSsgY+vKqCtRBQicc5d5XXNf+7Gu/kRpOPYbdZk S0V8depeCgLFa85CtsLlFMZRSOwtzKJQ8oYZwAopdkwFiE+9zQM9IGWQ9rWguZ4c 2zyrU6J5ozkSV6iP67ZHcVRoP9Vz48FbNi9ILg1A88MFeEq/8YctAnCmsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwuA7H14MV7JSmZ1A3GFhvtdSkUMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIb8rHbX oxD7S1v/WYD+oZh11PKvlOE+PG8Z5s0ORAQQ+sp3GN7BYof5MS0qNKFPcAaYAFhV CmCZg1eCCDt+9L3gt8x6bGtT/n8atEBR/DXwXWJE3JHvMqKSy+OR2pFnn8T8vOek spxFTygOLzGRmYQwHS5vP5okQnAqu4aYn0krmG5uWMcmBo1DRzYLyIA0jHB4/bAG Y2IfRW8N6UewczW/mloUyZpsFpNshuDth9aX6JUafsgZGBKDW6KtDfGpWeGBJEtF /Ye83wCZo1nWmxPPXxjjlYP54Azx85sHDmeSny0HVRWQCoeoDPToZi0Gbk8oTfxB Z32Dblxu6A/7pw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:45 2025 by rpki-client