This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json) Hash identifier: R+WQxmUXRmAT8KyLqhWK0l53GgJdvAvKoPUUL2sSxWo= Subject key identifier: C9:6E:C3:92:57:50:DA:28:FF:A3:6D:F6:9B:43:A3:F7:36:46:4B:10 Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Certificate serial: 019AF42E7569679CB7556521F06D787629A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:01:16 +0000 Manifest this update: Sat 06 Dec 2025 15:01:16 +0000 Manifest next update: Sun 07 Dec 2025 15:01:16 +0000 Files and hashes: 1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=) 2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: wIqiSsNecvDsD3p35FaF51J0dbx8qKyrVzoKpy4063E=) 3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=) 4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=) 5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:75:69:67:9c:b7:55:65:21:f0:6d:78:76:29:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Validity Not Before: Dec 6 15:01:16 2025 GMT Not After : Dec 7 15:01:16 2025 GMT Subject: CN=c96ec3925750da28ffa36df69b43a3f736464b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:2b:22:af:8b:e4:c1:fd:a8:84:e8:9e:c0: 5d:f3:9d:fc:20:ec:e5:32:ca:a6:d1:27:1b:a3:53: 8f:3f:cf:c3:96:c1:f9:aa:d0:29:37:bb:9f:34:c9: 50:0a:4b:b6:1d:ab:91:94:54:f5:d3:8d:c2:a4:09: a6:59:7e:d3:4c:b1:41:cd:f5:b0:93:59:22:d3:f2: 44:87:24:3d:ca:89:ac:62:d2:8c:1a:b1:9d:e0:6b: f1:ac:62:0b:c0:bf:63:b4:67:34:f8:a3:53:aa:52: 92:99:75:f2:5b:4e:91:21:98:aa:67:52:6b:69:43: 98:4f:31:05:b9:f4:14:91:f0:ca:7d:b7:b7:3a:7b: 86:9c:de:f0:ca:c0:c5:a0:a4:0d:47:44:c3:bf:2c: c5:62:39:20:46:c4:51:23:dd:86:35:50:4c:68:7d: 12:cf:77:37:e6:85:5c:fb:ee:1e:f3:c5:35:e2:9e: 01:74:16:42:51:b9:b1:ea:bb:09:b9:f5:af:78:7a: ed:c7:18:c6:75:d9:f2:5a:ba:f2:4f:4e:e9:50:33: 83:67:5b:a6:63:00:2c:e1:2e:58:c5:15:97:3f:69: ef:73:47:b2:06:dc:b4:a0:36:6d:7e:90:5f:a8:fe: 37:3a:ae:ee:da:75:c1:46:2e:31:d9:67:d0:ed:1a: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:C3:92:57:50:DA:28:FF:A3:6D:F6:9B:43:A3:F7:36:46:4B:10 X509v3 Authority Key Identifier: keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b6:0b:24:42:17:d9:7a:aa:ae:5d:f5:09:58:21:cc:90:e1: 76:72:e1:83:1a:0d:88:79:34:b6:fa:01:8b:77:b5:e8:d7:be: 87:e7:13:55:75:64:65:09:a3:68:2d:0c:65:fd:99:37:53:3f: f7:5f:52:08:70:62:aa:38:24:a9:33:b1:95:c4:69:76:40:05: 7d:b4:eb:c8:a7:37:8a:67:5a:b3:f9:41:b9:51:34:15:c2:ed: 95:f8:0a:0a:56:32:90:5f:9c:ae:d3:c5:af:ba:a0:3b:10:da: 4d:0f:f7:64:70:65:ec:21:3c:c2:97:05:df:69:ba:f1:0e:08: 63:b2:c5:21:0e:75:48:ca:7c:81:91:aa:60:b5:54:5a:e4:5d: 65:79:de:6d:0d:9f:94:cf:ef:5f:23:2b:97:c3:7d:c9:42:a6: 60:55:81:e5:8f:5b:ee:9f:da:4e:d8:9f:c8:ab:15:9c:fb:75: 31:3e:2c:8d:8d:e7:de:0f:14:3a:77:a9:26:80:45:39:21:e5: c2:44:82:1f:4a:86:c1:c1:59:30:61:85:2f:96:69:ac:93:fb: a7:d6:98:ec:d4:74:de:f6:a6:8b:f6:39:02:0f:50:35:8e:2d: a3:bd:00:f2:8e:c9:3d:99:a9:0f:5a:86:1d:19:b2:2f:64:7f: 58:e4:ff:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnVpZ5y3VWUh8G14dimjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh ODkyNjIwHhcNMjUxMjA2MTUwMTE2WhcNMjUxMjA3MTUwMTE2WjAzMTEwLwYDVQQD EyhjOTZlYzM5MjU3NTBkYTI4ZmZhMzZkZjY5YjQzYTNmNzM2NDY0YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodYrIq+L5MH9qITonsBd8538IOzl Msqm0Scbo1OPP8/DlsH5qtApN7ufNMlQCku2HauRlFT1043CpAmmWX7TTLFBzfWw k1ki0/JEhyQ9yomsYtKMGrGd4GvxrGILwL9jtGc0+KNTqlKSmXXyW06RIZiqZ1Jr aUOYTzEFufQUkfDKfbe3OnuGnN7wysDFoKQNR0TDvyzFYjkgRsRRI92GNVBMaH0S z3c35oVc++4e88U14p4BdBZCUbmx6rsJufWveHrtxxjGddnyWrryT07pUDODZ1um YwAs4S5YxRWXP2nvc0eyBty0oDZtfpBfqP43Oq7u2nXBRi4x2WfQ7RoMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMluw5JXUNoo/6Nt9ptDo/c2RksQMB8GA1UdIwQY MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt ZGYxZTk1ZDdlZGQ5LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5 LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbYLJEIX 2Xqqrl31CVghzJDhdnLhgxoNiHk0tvoBi3e16Ne+h+cTVXVkZQmjaC0MZf2ZN1M/ 919SCHBiqjgkqTOxlcRpdkAFfbTryKc3imdas/lBuVE0FcLtlfgKClYykF+crtPF r7qgOxDaTQ/3ZHBl7CE8wpcF32m68Q4IY7LFIQ51SMp8gZGqYLVUWuRdZXnebQ2f lM/vXyMrl8N9yUKmYFWB5Y9b7p/aTtifyKsVnPt1MT4sjY3n3g8UOnepJoBFOSHl wkSCH0qGwcFZMGGFL5ZprJP7p9aY7NR03vami/Y5Ag9QNY4to70A8o7JPZmpD1qG HRmyL2R/WOT/ww== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:10 2025 by rpki-client