This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json) Hash identifier: UxllIRNREaxAiNTNiRSWwOMT9EmD1lUcdYrGj/CRYZU= Subject key identifier: AD:11:B9:D4:1E:F6:A3:6E:46:B4:72:40:92:21:1A:27:2B:ED:3F:73 Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Certificate serial: 019AF12EEFDFA871D56C878FDAE6E10D89CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft Manifest number: 02EF Signing time: Sat 06 Dec 2025 01:02:56 +0000 Manifest this update: Sat 06 Dec 2025 01:02:56 +0000 Manifest next update: Sun 07 Dec 2025 01:02:56 +0000 Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: i74BCQaeGvOvJheULhpazIPU/vWV75zWybp7RcAcq/g=) 2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=) 3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ef:df:a8:71:d5:6c:87:8f:da:e6:e1:0d:89:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Validity Not Before: Dec 6 01:02:56 2025 GMT Not After : Dec 7 01:02:56 2025 GMT Subject: CN=ad11b9d41ef6a36e46b4724092211a272bed3f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:7a:39:34:bf:fe:07:98:07:c3:d0:39:43: 8e:8a:e9:f5:0d:5e:60:8e:3c:50:32:d2:0d:53:b7: 11:b8:3b:eb:d5:0c:4c:94:0a:af:d2:7b:de:97:62: db:8d:1d:32:4c:f5:c7:61:b1:d1:f4:41:a6:ac:a7: f8:f7:6e:6a:a4:64:7c:32:38:e6:23:6a:c0:7a:b9: 56:69:d5:1e:ef:3b:4e:16:d5:bb:1c:13:78:00:dc: db:ea:5a:55:32:1e:2b:a5:f0:de:83:eb:e3:ef:e7: 33:18:c0:2b:de:fd:34:d7:5a:2d:59:3a:86:86:f2: a1:4d:17:ee:88:c1:63:5f:86:3a:6c:14:a6:3a:25: f3:c4:6f:94:96:cf:a0:fe:53:6f:d5:d3:6b:5a:30: 2c:64:21:65:3e:39:0d:c4:54:94:65:17:38:e5:a7: 3e:89:a3:37:3f:67:59:51:04:82:5d:23:1e:60:cf: 0d:86:1d:20:96:f8:fc:b1:2f:a3:b0:a7:41:73:2e: 02:74:56:15:c7:e5:9f:c8:83:14:7a:38:05:29:8d: c5:16:6a:4e:f9:14:e0:d1:4a:4d:60:31:67:b4:8b: 6a:48:a3:ed:df:4e:81:e4:fd:ed:b1:9a:97:9a:ea: 7d:0d:08:b4:ed:f5:13:ab:33:bd:43:de:13:da:b7: f9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:11:B9:D4:1E:F6:A3:6E:46:B4:72:40:92:21:1A:27:2B:ED:3F:73 X509v3 Authority Key Identifier: keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:03:4f:e0:e9:f9:80:63:ef:25:d5:c5:11:ef:1c:bf:b3:53: d0:c1:39:95:29:0e:47:ea:45:c2:0c:0b:4e:17:b0:d9:91:8b: 17:40:36:a8:1e:80:60:62:da:ed:7b:6a:b4:48:47:42:a6:3a: ae:c6:38:32:6f:9b:74:d6:0f:21:c1:e8:46:92:51:69:61:64: 80:e9:c4:24:4e:7c:7c:67:9f:55:88:eb:1d:71:7c:1d:af:95: 79:93:10:1e:e8:d7:8b:80:e8:32:d2:f4:cd:0b:86:15:9b:88: 21:78:12:f2:5e:70:75:8d:a9:14:f2:50:95:dd:10:c6:b0:48: ef:d4:e1:4c:23:d5:e6:3c:79:84:91:b5:2b:95:e3:01:f1:63: 1f:5f:c2:cc:d9:8c:58:11:49:b2:3b:e5:f9:4a:41:97:5e:43: cb:56:73:94:a6:6f:98:12:43:02:9f:9c:04:0d:bb:d4:1c:0a: 87:67:b4:6c:1f:9a:90:17:af:33:98:11:10:df:45:1d:b5:0e: 73:1e:74:60:26:e4:83:35:ae:a4:9b:29:1d:24:78:cb:75:57: d7:47:22:18:64:27:23:95:d5:c6:85:e8:44:73:c0:04:8d:bf: 21:47:29:55:0c:17:35:24:73:a5:be:e7:5c:6d:ee:49:9e:d0: 26:72:5a:15 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLu/fqHHVbIeP2ubhDYnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw NDRmNTcwHhcNMjUxMjA2MDEwMjU2WhcNMjUxMjA3MDEwMjU2WjAzMTEwLwYDVQQD EyhhZDExYjlkNDFlZjZhMzZlNDZiNDcyNDA5MjIxMWEyNzJiZWQzZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WN6OTS//geYB8PQOUOOiun1DV5g jjxQMtINU7cRuDvr1QxMlAqv0nvel2LbjR0yTPXHYbHR9EGmrKf4925qpGR8Mjjm I2rAerlWadUe7ztOFtW7HBN4ANzb6lpVMh4rpfDeg+vj7+czGMAr3v0011otWTqG hvKhTRfuiMFjX4Y6bBSmOiXzxG+Uls+g/lNv1dNrWjAsZCFlPjkNxFSUZRc45ac+ iaM3P2dZUQSCXSMeYM8Nhh0glvj8sS+jsKdBcy4CdFYVx+WfyIMUejgFKY3FFmpO +RTg0UpNYDFntItqSKPt306B5P3tsZqXmup9DQi07fUTqzO9Q94T2rf5jwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK0RudQe9qNuRrRyQJIhGicr7T9zMB8GA1UdIwQY MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQNP 4On5gGPvJdXFEe8cv7NT0ME5lSkOR+pFwgwLThew2ZGLF0A2qB6AYGLa7XtqtEhH QqY6rsY4Mm+bdNYPIcHoRpJRaWFkgOnEJE58fGefVYjrHXF8Ha+VeZMQHujXi4Do MtL0zQuGFZuIIXgS8l5wdY2pFPJQld0QxrBI79ThTCPV5jx5hJG1K5XjAfFjH1/C zNmMWBFJsjvl+UpBl15Dy1ZzlKZvmBJDAp+cBA271BwKh2e0bB+akBevM5gREN9F HbUOcx50YCbkgzWupJspHSR4y3VX10ciGGQnI5XVxoXoRHPABI2/IUcpVQwXNSRz pb7nXG3uSZ7QJnJaFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:36 2025 by rpki-client