This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json) Hash identifier: 96k/9I7vkA4FzMSSz2/iqiU9m7iwajTsP+GgUxkmzRY= Subject key identifier: 05:C1:66:D2:46:26:AB:EE:06:3E:2D:E7:51:A8:93:C0:AF:8B:33:97 Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab Certificate serial: 019AF12D1ED6D19A01ACCC5D311413694E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft Manifest number: 0356 Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: VuStmL7lOKiaRZ7r7GVWINH6Ijo4ruREb8A8sHqIbKQ=) 2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=) 3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1e:d6:d1:9a:01:ac:cc:5d:31:14:13:69:4e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=05c166d24626abee063e2de751a893c0af8b3397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:f4:a9:84:d7:69:7e:32:8f:21:50:ee:01: 42:74:af:98:f5:4d:59:42:93:5e:c5:44:2d:32:49: 28:d0:58:9f:c6:33:43:aa:47:d8:69:a2:74:59:87: aa:1c:46:ff:62:dd:8c:29:85:df:aa:2a:f9:04:93: 9d:8b:a2:ba:0b:e6:ef:f4:6c:b6:50:49:d0:63:c8: 9a:2a:f6:c3:c3:61:18:96:22:dd:4b:54:59:6e:7f: 52:d4:51:a6:7b:28:d3:16:50:f8:46:d2:26:ac:4c: df:4e:6e:d7:ba:e9:b0:3c:43:92:52:41:71:cf:18: ef:6d:65:e6:6b:75:58:c4:3e:2a:be:5b:88:0e:05: 72:f5:24:74:5b:19:f4:52:55:e7:0c:f8:33:31:32: 7d:62:d3:a9:41:77:6c:d1:fb:ba:3d:c7:9c:63:40: fa:5c:7b:dc:2b:1b:70:c8:55:72:cb:20:76:df:28: ed:d0:19:2a:63:a6:36:2d:6a:ee:86:71:67:09:11: 11:cd:61:15:0e:7a:1f:b3:f8:5e:a3:1e:4e:9e:3d: 7a:23:17:d1:ef:a8:a1:00:43:cd:72:34:45:a8:94: 30:bd:f7:1f:10:c6:f3:20:2b:51:6a:55:db:c8:8b: d2:a9:05:68:a7:4f:2e:3d:66:6d:a2:b6:66:72:75: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C1:66:D2:46:26:AB:EE:06:3E:2D:E7:51:A8:93:C0:AF:8B:33:97 X509v3 Authority Key Identifier: keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e3:13:c9:e6:ad:ab:98:b6:af:60:30:f2:19:ad:60:83:d7: fa:d3:c5:75:84:75:c5:cf:c7:d7:44:5b:51:12:70:bc:a3:96: ba:cd:ef:ff:9f:2f:14:a8:2c:fa:d3:b8:c3:05:a5:b5:aa:bb: 93:48:71:7e:ad:a6:4a:cc:37:9c:06:8b:e6:89:fc:c3:35:65: 84:1e:d2:5c:8f:30:1e:d2:58:d4:89:ec:14:70:bd:fc:7b:d9: 48:09:7a:e7:da:40:13:24:95:fb:32:bf:56:22:da:ff:1a:26: 3e:6a:e9:6d:97:39:d1:c5:8e:ab:de:09:48:aa:b1:b2:09:82: 85:e1:9a:e9:30:e0:a8:3f:b2:66:02:35:28:89:71:9c:69:52: 53:3a:d3:1e:e3:71:28:b1:0b:bf:14:19:85:89:ab:37:bb:f8: ea:11:22:f6:4c:4c:a6:ad:88:e0:4e:64:96:af:be:b4:44:9d: 6b:97:1d:7c:8d:66:7d:58:93:fc:a8:1f:cf:45:48:78:80:64: 23:a5:79:1e:4d:b4:64:6e:c3:0a:f4:07:a0:58:f5:c2:e8:fb: a3:6b:59:87:a8:2d:4c:df:7e:d3:08:91:84:0b:85:ce:44:72: e9:c0:3e:48:38:11:b3:ca:de:67:f6:eb:7d:f6:95:0c:72:d9: c6:09:80:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR7W0ZoBrMxdMRQTaU4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODQzY2Q2MWQ4ZmZmMWY2Y2ZiMzgwYWUyNDNiZTBiMWQ5 NDM1YWIwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EygwNWMxNjZkMjQ2MjZhYmVlMDYzZTJkZTc1MWE4OTNjMGFmOGIzMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSX0qYTXaX4yjyFQ7gFCdK+Y9U1Z QpNexUQtMkko0FifxjNDqkfYaaJ0WYeqHEb/Yt2MKYXfqir5BJOdi6K6C+bv9Gy2 UEnQY8iaKvbDw2EYliLdS1RZbn9S1FGmeyjTFlD4RtImrEzfTm7XuumwPEOSUkFx zxjvbWXma3VYxD4qvluIDgVy9SR0Wxn0UlXnDPgzMTJ9YtOpQXds0fu6PcecY0D6 XHvcKxtwyFVyyyB23yjt0BkqY6Y2LWruhnFnCRERzWEVDnofs/heox5Onj16IxfR 76ihAEPNcjRFqJQwvfcfEMbzICtRalXbyIvSqQVop08uPWZtorZmcnWjWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXBZtJGJqvuBj4t51Gok8CvizOXMB8GA1UdIwQY MBaAFNaEPNYdj/8fbPs4CuJDvgsdlDWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUt ZWVjZDA5ZDkwYzY1LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUtZWVjZDA5ZDkwYzY1 LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOMTyeat q5i2r2Aw8hmtYIPX+tPFdYR1xc/H10RbURJwvKOWus3v/58vFKgs+tO4wwWltaq7 k0hxfq2mSsw3nAaL5on8wzVlhB7SXI8wHtJY1InsFHC9/HvZSAl659pAEySV+zK/ ViLa/xomPmrpbZc50cWOq94JSKqxsgmCheGa6TDgqD+yZgI1KIlxnGlSUzrTHuNx KLELvxQZhYmrN7v46hEi9kxMpq2I4E5klq++tESda5cdfI1mfViT/Kgfz0VIeIBk I6V5Hk20ZG7DCvQHoFj1wuj7o2tZh6gtTN9+0wiRhAuFzkRy6cA+SDgRs8reZ/br ffaVDHLZxgmACw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:38 2025 by rpki-client