This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json) Hash identifier: C4e7m9P9YXiboYpn8dDH50pznYJvMUVReSIxAD/sC0M= Subject key identifier: 0E:A0:07:7B:84:7B:4B:1C:35:18:87:C6:8A:95:7D:28:0E:93:42:49 Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Certificate serial: 019AF49C5E86889F157B9FBA8F37927154BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:01:19 +0000 Manifest this update: Sat 06 Dec 2025 17:01:19 +0000 Manifest next update: Sun 07 Dec 2025 17:01:19 +0000 Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: tVJFI83W6HBng8E83B2scoNkPvX+RneM9juGrKlopU8=) 2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5e:86:88:9f:15:7b:9f:ba:8f:37:92:71:54:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Validity Not Before: Dec 6 17:01:19 2025 GMT Not After : Dec 7 17:01:19 2025 GMT Subject: CN=0ea0077b847b4b1c351887c68a957d280e934249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:1d:8c:84:65:cf:d2:b0:99:11:7a:6a:9b: 77:bb:d6:8d:af:c8:f9:a5:60:ce:75:77:1d:19:05: b4:9a:21:df:f4:d7:6c:e1:62:c9:ea:35:62:7d:f4: 02:58:ee:3b:7a:79:43:e3:c4:b2:b2:b9:b7:d0:f2: d8:c7:92:13:d1:25:1c:f8:40:1d:e6:63:51:ca:4d: f5:57:22:59:3b:52:db:92:d0:49:3a:85:65:8c:30: 83:89:55:b6:c7:a1:a1:24:ff:50:e8:ee:e9:4d:9b: e0:7d:d8:9a:16:38:78:ed:3f:6b:a0:3e:e5:ae:08: 12:66:08:5a:a5:6c:43:d1:28:30:d0:08:da:95:f0: 2f:88:00:c4:55:64:31:f4:e3:65:eb:a5:a2:7a:1e: 3b:49:e4:04:ec:ea:eb:b0:68:50:58:6b:8e:eb:78: 54:9f:37:12:a8:c5:a8:1d:49:be:b2:34:c0:cf:50: 80:88:a0:13:0d:56:27:99:f9:a5:b5:0c:61:b3:cf: 7e:e7:da:3e:0b:f3:12:8f:b2:e0:07:0f:5b:51:de: 8a:36:8c:96:29:7b:11:f4:70:fd:f2:8c:b7:fc:10: 2d:46:b3:02:68:66:c5:72:5d:68:97:bc:23:5d:76: a7:bd:af:26:9d:27:af:a4:34:ca:9a:00:22:6c:92: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:07:7B:84:7B:4B:1C:35:18:87:C6:8A:95:7D:28:0E:93:42:49 X509v3 Authority Key Identifier: keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:d6:62:27:86:31:3a:fd:33:8a:6c:47:8d:23:72:96:7b:41: b5:4d:2f:3f:6b:00:6e:6f:b1:79:7b:e3:8a:f4:d1:1e:31:75: 84:52:2d:ac:bf:67:61:d1:b8:b1:76:55:4b:99:58:5c:9e:fd: 43:76:db:fe:6b:af:0b:87:37:46:1a:76:83:72:74:9a:67:bc: 42:dd:d9:dc:bf:57:50:44:e1:6a:f6:9f:7c:b7:e4:9a:4b:f9: 5b:75:cf:a6:36:c5:9b:ea:1c:a5:67:9b:0b:6e:fd:4f:f6:b8: f8:bc:d0:e3:eb:1b:ba:47:a9:52:0f:58:af:3b:30:62:5a:3a: b6:07:68:4e:c5:c0:63:6a:7d:c9:a1:d2:e3:0f:94:35:97:35: aa:ff:f8:39:f6:7f:11:35:cf:75:c2:84:ba:d2:f0:3e:97:99: 8d:29:ac:8b:bd:36:42:6b:16:11:8e:4c:97:d8:3e:6a:51:d1: 8c:6d:56:12:cb:7f:01:93:66:40:67:a7:f7:b7:a9:7c:47:3c: aa:63:b2:be:96:22:c7:8d:87:b9:79:90:52:cd:1c:d1:fe:66: ec:af:f8:b5:a5:55:4d:f9:8b:19:40:35:af:ae:52:2b:88:b9: 55:9b:94:e1:68:43:4e:64:54:17:5e:5b:2d:32:d5:40:45:64: a4:19:f2:5c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0nF6GiJ8Ve5+6jzeScVS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi NzZmMDAwHhcNMjUxMjA2MTcwMTE5WhcNMjUxMjA3MTcwMTE5WjAzMTEwLwYDVQQD EygwZWEwMDc3Yjg0N2I0YjFjMzUxODg3YzY4YTk1N2QyODBlOTM0MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA250djIRlz9KwmRF6apt3u9aNr8j5 pWDOdXcdGQW0miHf9Nds4WLJ6jViffQCWO47enlD48Sysrm30PLYx5IT0SUc+EAd 5mNRyk31VyJZO1LbktBJOoVljDCDiVW2x6GhJP9Q6O7pTZvgfdiaFjh47T9roD7l rggSZghapWxD0Sgw0AjalfAviADEVWQx9ONl66Wieh47SeQE7OrrsGhQWGuO63hU nzcSqMWoHUm+sjTAz1CAiKATDVYnmfmltQxhs89+59o+C/MSj7LgBw9bUd6KNoyW KXsR9HD98oy3/BAtRrMCaGbFcl1ol7wjXXanva8mnSevpDTKmgAibJJTKQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA6gB3uEe0scNRiHxoqVfSgOk0JJMB8GA1UdIwQY MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1 LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA39Zi J4YxOv0zimxHjSNylntBtU0vP2sAbm+xeXvjivTRHjF1hFItrL9nYdG4sXZVS5lY XJ79Q3bb/muvC4c3Rhp2g3J0mme8Qt3Z3L9XUEThavaffLfkmkv5W3XPpjbFm+oc pWebC279T/a4+LzQ4+sbukepUg9YrzswYlo6tgdoTsXAY2p9yaHS4w+UNZc1qv/4 OfZ/ETXPdcKEutLwPpeZjSmsi702QmsWEY5Ml9g+alHRjG1WEst/AZNmQGen97ep fEc8qmOyvpYix42HuXmQUs0c0f5m7K/4taVVTfmLGUA1r65SK4i5VZuU4WhDTmRU F15bLTLVQEVkpBnyXA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:53 2025 by rpki-client