This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json) Hash identifier: BdROFPesVh65BSJwp8ZtcdR202d8XuB/bSyLy7IpTjg= Subject key identifier: 59:B6:58:5F:3B:F1:AF:A9:99:95:A6:48:54:42:F7:F3:25:62:61:DE Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Certificate serial: 019AF540A0F1F0792B532DC6C2FA8894A97C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft Manifest number: 0E05 Signing time: Sat 06 Dec 2025 20:00:44 +0000 Manifest this update: Sat 06 Dec 2025 20:00:44 +0000 Manifest next update: Sun 07 Dec 2025 20:00:44 +0000 Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: gky1z8xfqjJJDenRqrlg+AVXHYhKma95i/PDL9BcOEQ=) 2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:a0:f1:f0:79:2b:53:2d:c6:c2:fa:88:94:a9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Validity Not Before: Dec 6 20:00:44 2025 GMT Not After : Dec 7 20:00:44 2025 GMT Subject: CN=59b6585f3bf1afa99995a6485442f7f3256261de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:3b:95:d0:28:ac:62:46:13:68:1d:08:5a: 37:16:ed:95:ba:90:c4:de:12:87:0a:bc:8a:f3:9f: dc:7d:3c:4b:47:79:c7:32:1d:7c:b1:53:35:1e:4d: f1:c6:09:a5:d0:a5:7b:70:ce:cc:6b:be:83:a9:5d: 10:fc:4e:b4:f4:b8:02:9e:bb:bf:72:a4:8c:58:4b: 59:50:27:2e:4e:7c:1a:8c:c2:a7:c2:ab:6b:d6:4d: a9:48:da:10:29:4f:61:e0:39:cd:9c:1a:09:48:e6: 3b:7f:d2:24:d9:6b:f2:83:4a:0a:fc:a8:87:e4:4f: 65:57:65:97:45:31:d8:0f:ad:7f:aa:df:b3:bd:af: 20:ca:5f:79:58:74:9f:30:81:32:b1:d0:56:06:00: 19:c2:7b:17:e6:3d:84:25:58:64:26:19:23:75:49: 49:d8:3c:ca:93:a8:b8:fd:b0:4e:98:1c:80:f0:a3: 2a:79:bb:67:65:4e:2d:db:73:a2:a6:0e:ee:bc:86: a3:ba:63:f7:4c:7e:b8:9f:d1:68:f8:b8:b3:d1:9c: 19:22:33:e9:3e:f7:5e:96:cd:2e:76:ec:21:24:e7: b1:7d:a4:b5:a3:73:6a:bf:2f:34:f7:e2:d1:a8:2f: b8:f4:bb:18:2b:cd:b1:2a:d2:a5:6f:b1:ff:c7:37: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B6:58:5F:3B:F1:AF:A9:99:95:A6:48:54:42:F7:F3:25:62:61:DE X509v3 Authority Key Identifier: keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:01:55:ef:85:0a:ed:00:51:60:17:77:21:8e:73:9c:49:e6: fb:f7:dc:4c:c1:fd:a6:28:18:dd:ae:aa:70:ee:c5:fb:98:16: 86:8b:1b:06:cb:95:a2:8c:2a:27:a9:2a:52:3d:be:fb:9a:c7: f7:4b:40:b3:86:1a:06:35:24:81:b6:d7:d7:cb:f1:96:01:19: 58:6c:9b:10:0e:37:44:ed:5a:39:ea:2b:8d:d5:29:3a:0b:8d: 86:7d:80:c7:31:6c:aa:f5:42:51:2d:5b:c8:74:7b:df:5e:61: 01:9d:f2:f5:4e:eb:53:de:0e:67:9a:b5:48:2c:3b:3b:2b:2e: a3:6e:cd:66:70:19:06:c6:62:41:c4:b4:8b:d6:3a:d1:78:8f: 1e:ec:55:d6:da:5a:fe:00:84:4a:25:1d:8e:94:d6:3a:4d:58: 4c:69:e2:2b:f0:3a:bc:71:26:89:07:79:19:07:3d:2a:6e:20: ad:1c:33:fe:8e:4b:b0:46:ec:46:f1:87:41:75:6a:fb:e1:c4: 8b:3e:e7:a3:72:0d:c8:b7:29:d1:91:8e:d4:49:ee:65:69:7a: 25:da:96:fc:c9:49:99:5a:0e:a9:1f:d6:b4:ac:c7:15:51:78: f0:1a:72:79:13:da:0e:76:7a:cb:e6:6a:a8:c8:42:4f:c3:80: 3a:d2:3c:43 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1QKDx8HkrUy3GwvqIlKl8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj N2U3NjkwHhcNMjUxMjA2MjAwMDQ0WhcNMjUxMjA3MjAwMDQ0WjAzMTEwLwYDVQQD Eyg1OWI2NTg1ZjNiZjFhZmE5OTk5NWE2NDg1NDQyZjdmMzI1NjI2MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3447ldAorGJGE2gdCFo3Fu2VupDE 3hKHCryK85/cfTxLR3nHMh18sVM1Hk3xxgml0KV7cM7Ma76DqV0Q/E609LgCnru/ cqSMWEtZUCcuTnwajMKnwqtr1k2pSNoQKU9h4DnNnBoJSOY7f9Ik2Wvyg0oK/KiH 5E9lV2WXRTHYD61/qt+zva8gyl95WHSfMIEysdBWBgAZwnsX5j2EJVhkJhkjdUlJ 2DzKk6i4/bBOmByA8KMqebtnZU4t23Oipg7uvIajumP3TH64n9Fo+Liz0ZwZIjPp Pvdels0uduwhJOexfaS1o3Nqvy809+LRqC+49LsYK82xKtKlb7H/xzddaQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFm2WF878a+pmZWmSFRC9/MlYmHeMB8GA1UdIwQY MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2 LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAFV 74UK7QBRYBd3IY5znEnm+/fcTMH9pigY3a6qcO7F+5gWhosbBsuVoowqJ6kqUj2+ +5rH90tAs4YaBjUkgbbX18vxlgEZWGybEA43RO1aOeorjdUpOguNhn2AxzFsqvVC US1byHR7315hAZ3y9U7rU94OZ5q1SCw7Oysuo27NZnAZBsZiQcS0i9Y60XiPHuxV 1tpa/gCESiUdjpTWOk1YTGniK/A6vHEmiQd5GQc9Km4grRwz/o5LsEbsRvGHQXVq ++HEiz7no3INyLcp0ZGO1EnuZWl6JdqW/MlJmVoOqR/WtKzHFVF48BpyeRPaDnZ6 y+ZqqMhCT8OAOtI8Qw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:19 2025 by rpki-client