This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json) Hash identifier: YntdjrfNWYr6Ioqbcq5Jo1ofJWqvQSwBt5xThsIvwcs= Subject key identifier: 36:28:36:93:EA:79:EB:DE:8E:F6:64:4C:2C:B2:F8:6F:B4:86:65:F8 Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Certificate serial: 019AF1D22DBDD51E36B15A74C5986148A3FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft Manifest number: 1503 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: 7GlI9kj8/1tFBkP4dwbpyhap7JbC/7HcsIiifPRohpE=) 2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2d:bd:d5:1e:36:b1:5a:74:c5:98:61:48:a3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=36283693ea79ebde8ef6644c2cb2f86fb48665f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:37:57:2f:e0:a6:c3:6e:77:e5:4c:73:73: 27:61:b1:c2:31:53:a6:e1:52:28:e6:c2:87:a1:7b: d1:8f:d6:0d:5e:8e:b9:90:5b:14:92:61:01:39:0f: 72:bb:b9:a8:6d:91:e8:41:7a:37:d2:cd:fd:3b:85: 43:d0:54:ec:43:37:0e:fc:e7:10:d6:e7:7a:c3:ac: f7:b5:40:28:e0:88:eb:7a:9b:13:8d:1c:b4:10:c1: c5:c1:ae:43:94:f2:1a:9a:4c:b1:de:fb:d8:85:6c: 68:f9:8c:b6:49:6c:2f:c1:36:6a:b9:16:92:7e:c2: 58:e0:c6:39:6f:e7:9f:ed:b1:73:71:a2:83:34:bc: c5:ee:fa:36:6d:56:62:9e:7a:a9:c8:fe:b4:bd:72: be:d5:c9:8a:45:11:49:26:bd:c8:3b:38:8e:c1:ab: 98:fe:a9:e0:76:a2:32:ad:7b:3e:98:e6:6d:ce:4f: 80:49:74:33:4b:1a:b6:31:33:84:13:5f:ae:92:b2: 0b:40:7a:82:c3:88:e6:e3:28:10:69:a4:40:57:67: 4e:31:f7:8e:9f:5e:7e:ec:bb:29:ae:84:68:44:58: 53:7f:68:7f:64:c7:ed:6e:d1:8c:9e:c5:05:de:b2: 48:ba:ef:fb:2e:4e:69:7e:08:2e:f5:d7:42:51:92: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:28:36:93:EA:79:EB:DE:8E:F6:64:4C:2C:B2:F8:6F:B4:86:65:F8 X509v3 Authority Key Identifier: keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:74:79:78:67:53:6e:00:1e:e9:ab:3a:3d:bc:e2:14:8d:5b: a9:dc:7c:4e:78:2f:af:3b:9a:45:10:26:25:c3:50:7c:73:5b: 79:7b:4f:0a:3e:f6:33:9d:21:b9:8c:52:81:04:2c:fb:05:83: 4b:e4:20:42:18:6c:37:24:cd:f9:84:b0:d5:23:9d:66:2e:76: cf:45:f3:19:87:f4:c2:ad:aa:28:6e:f9:94:76:ef:64:26:4e: 48:c7:52:e4:fa:15:30:83:b7:a5:7d:cd:01:28:10:a4:8a:52: 26:19:2d:67:73:1b:80:57:cb:62:ae:84:26:a3:fb:ef:a8:9f: 0a:ed:a2:57:7f:5b:ff:8d:f7:1c:13:18:1c:c4:8d:56:87:bd: 8d:e7:e5:98:a0:35:fa:c1:ca:94:1d:4b:b4:54:9b:2b:f0:5d: f8:e9:b8:b8:f5:56:4b:b7:95:90:12:f3:38:53:ea:67:5e:3e: 74:5b:e5:0d:fc:36:3d:30:c4:0f:0d:14:dd:ea:63:24:0f:11: 01:be:06:0c:b7:86:dc:f8:56:2c:08:82:5c:81:68:df:6d:72: b8:1e:71:ff:f8:6e:22:9e:a2:f7:a2:6a:c9:b5:02:99:b9:85: 3b:e9:f3:89:d8:cf:56:5e:c7:24:4e:a6:77:6c:0e:68:3d:f6: 1f:0a:29:07 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0i291R42sVp0xZhhSKP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0 ZmM5OGUwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EygzNjI4MzY5M2VhNzllYmRlOGVmNjY0NGMyY2IyZjg2ZmI0ODY2NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVY3Vy/gpsNud+VMc3MnYbHCMVOm 4VIo5sKHoXvRj9YNXo65kFsUkmEBOQ9yu7mobZHoQXo30s39O4VD0FTsQzcO/OcQ 1ud6w6z3tUAo4IjrepsTjRy0EMHFwa5DlPIamkyx3vvYhWxo+Yy2SWwvwTZquRaS fsJY4MY5b+ef7bFzcaKDNLzF7vo2bVZinnqpyP60vXK+1cmKRRFJJr3IOziOwauY /qngdqIyrXs+mOZtzk+ASXQzSxq2MTOEE1+ukrILQHqCw4jm4ygQaaRAV2dOMfeO n15+7LsproRoRFhTf2h/ZMftbtGMnsUF3rJIuu/7Lk5pfggu9ddCUZJFdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDYoNpPqeevejvZkTCyy+G+0hmX4MB8GA1UdIwQY MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5 MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHR5 eGdTbgAe6as6PbziFI1bqdx8TngvrzuaRRAmJcNQfHNbeXtPCj72M50huYxSgQQs +wWDS+QgQhhsNyTN+YSw1SOdZi52z0XzGYf0wq2qKG75lHbvZCZOSMdS5PoVMIO3 pX3NASgQpIpSJhktZ3MbgFfLYq6EJqP776ifCu2iV39b/433HBMYHMSNVoe9jefl mKA1+sHKlB1LtFSbK/Bd+Om4uPVWS7eVkBLzOFPqZ14+dFvlDfw2PTDEDw0U3epj JA8RAb4GDLeG3PhWLAiCXIFo321yuB5x//huIp6i96JqybUCmbmFO+nzidjPVl7H JE6md2wOaD32HwopBw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:38 2025 by rpki-client