This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json) Hash identifier: 4grwttY3KuorKZRAIHipirB9pTkGlekQEwd9pl6GIbE= Subject key identifier: 81:24:60:2D:ED:49:84:23:FF:15:92:B5:2D:B8:42:E8:39:B7:7E:44 Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24 Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024 Certificate serial: 019AF2ADEFEDDDA9B99E7E29D0AA15E57818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft Manifest number: 0FE8 Signing time: Sat 06 Dec 2025 08:01:16 +0000 Manifest this update: Sat 06 Dec 2025 08:01:16 +0000 Manifest next update: Sun 07 Dec 2025 08:01:16 +0000 Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: hSXFFa1BgPYnYtnmc/VWe2XlLGRfLG2h1spOz7gIQaY=) 2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ef:ed:dd:a9:b9:9e:7e:29:d0:aa:15:e5:78:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024 Validity Not Before: Dec 6 08:01:16 2025 GMT Not After : Dec 7 08:01:16 2025 GMT Subject: CN=8124602ded498423ff1592b52db842e839b77e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:02:ac:82:e0:2b:9d:2f:73:12:d1:cc:f2: 15:b9:7e:c1:67:eb:c2:f5:0a:6b:d6:40:4a:c4:e2: 7e:83:37:6d:21:de:fa:39:c1:f5:68:ca:b0:c7:64: 9b:77:0a:70:10:78:4e:c9:56:62:92:ee:71:5f:ed: d9:e3:a8:6e:a1:c1:23:19:e8:4d:ff:24:ac:6e:41: cd:b1:08:2d:12:60:51:97:92:0b:28:5d:b4:0d:00: 52:e9:14:a7:80:7a:29:d2:ce:aa:02:77:46:fc:e9: ee:11:b9:d8:84:69:ec:43:ea:74:c2:7f:62:51:f5: a6:11:98:4a:af:9d:7e:5e:ce:c4:01:01:6d:7e:7c: 80:66:f9:bf:ae:3b:ca:4e:2f:cd:f6:cb:a4:ca:c4: 62:35:bc:7b:f9:73:3a:29:86:a4:88:e5:86:44:74: ce:6a:08:a5:82:fe:f7:0a:b8:dd:18:88:02:64:bb: 55:65:9e:83:ef:16:d6:c5:20:81:c4:85:98:0f:54: 30:b9:aa:3c:66:9c:9f:df:ce:6c:1b:93:84:70:5f: 9f:3b:50:d7:45:4f:13:24:f2:5a:10:57:98:38:bf: 35:c1:bc:22:f5:f9:e3:d8:d0:7f:15:d4:78:71:50: e9:4a:16:58:d1:9e:bd:ed:22:df:03:82:10:10:96: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:60:2D:ED:49:84:23:FF:15:92:B5:2D:B8:42:E8:39:B7:7E:44 X509v3 Authority Key Identifier: keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ed:e4:aa:82:8f:b8:b4:9b:e0:0b:41:c8:2f:7e:cf:16:52: 4b:cf:45:9c:65:b1:31:17:f2:b6:de:81:42:7b:4c:b6:0d:e8: c3:e7:6d:96:2c:b2:57:84:93:79:f7:82:9b:67:df:91:93:4a: a4:b4:47:a3:aa:fc:29:ff:4d:ee:2b:a4:4d:06:07:ed:d3:29: ea:73:f5:93:d2:aa:40:99:99:8c:18:46:08:3a:3a:6f:9e:bb: 66:d3:d4:9e:d2:0d:0b:d7:4b:23:56:bf:9d:d1:5a:5c:59:c4: 97:6b:1c:27:66:45:90:98:72:f5:6d:f2:f2:de:9c:cb:06:b9: 48:a3:99:b1:8e:6b:cb:48:38:e7:42:e4:0c:8f:91:2a:c8:eb: fb:fb:b2:3b:2e:da:ca:06:e0:71:e3:b8:20:f7:a3:bb:c5:90: a6:f5:05:ff:d8:d9:95:96:2e:14:47:46:ed:fa:d6:85:92:86: 56:01:16:fb:2a:72:5b:04:ff:8f:a6:81:3e:e9:1e:73:2e:55: 3d:b3:d5:1a:67:4e:d1:3b:90:38:5d:a6:c9:0c:e3:9b:0d:a3: 8a:37:9e:8c:91:12:9c:ee:1e:2e:53:3f:fd:a4:ec:27:09:f0: 46:67:2a:cd:9e:8c:5d:6b:73:4d:f7:f5:1a:ee:c9:c9:2d:6c: 9e:bb:e4:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryre/t3am5nn4p0KoV5XgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4 ZTQwMjQwHhcNMjUxMjA2MDgwMTE2WhcNMjUxMjA3MDgwMTE2WjAzMTEwLwYDVQQD Eyg4MTI0NjAyZGVkNDk4NDIzZmYxNTkyYjUyZGI4NDJlODM5Yjc3ZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqECrILgK50vcxLRzPIVuX7BZ+vC 9Qpr1kBKxOJ+gzdtId76OcH1aMqwx2SbdwpwEHhOyVZiku5xX+3Z46huocEjGehN /ySsbkHNsQgtEmBRl5ILKF20DQBS6RSngHop0s6qAndG/OnuEbnYhGnsQ+p0wn9i UfWmEZhKr51+Xs7EAQFtfnyAZvm/rjvKTi/N9sukysRiNbx7+XM6KYakiOWGRHTO agilgv73CrjdGIgCZLtVZZ6D7xbWxSCBxIWYD1Qwuao8Zpyf385sG5OEcF+fO1DX RU8TJPJaEFeYOL81wbwi9fnj2NB/FdR4cVDpShZY0Z697SLfA4IQEJbPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEkYC3tSYQj/xWStS24Qug5t35EMB8GA1UdIwQY MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct YjhjZjA0YjU0MjUxLzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACe3kqoKP uLSb4AtByC9+zxZSS89FnGWxMRfytt6BQntMtg3ow+dtliyyV4STefeCm2ffkZNK pLRHo6r8Kf9N7iukTQYH7dMp6nP1k9KqQJmZjBhGCDo6b567ZtPUntINC9dLI1a/ ndFaXFnEl2scJ2ZFkJhy9W3y8t6cywa5SKOZsY5ry0g450LkDI+RKsjr+/uyOy7a ygbgceO4IPeju8WQpvUF/9jZlZYuFEdG7frWhZKGVgEW+ypyWwT/j6aBPukecy5V PbPVGmdO0TuQOF2myQzjmw2jijeejJESnO4eLlM//aTsJwnwRmcqzZ6MXWtzTff1 Gu7JyS1snrvkxA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:14 2025 by rpki-client