This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json) Hash identifier: BDkBUqNYttE/0FMQzoUGENY2YQrtqZUv6K1g3LX9gCg= Subject key identifier: F7:09:51:FB:29:4D:A5:A2:68:9B:23:04:E9:6E:11:59:31:26:C9:63 Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Certificate serial: 019AF6F9A3AFDC8944CE7991C0CF3D193C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft Manifest number: 118F Signing time: Sun 07 Dec 2025 04:02:26 +0000 Manifest this update: Sun 07 Dec 2025 04:02:26 +0000 Manifest next update: Mon 08 Dec 2025 04:02:26 +0000 Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: pWx52CFZhBEZ8of1uM57frYicufklsanRzPrcD15z2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:a3:af:dc:89:44:ce:79:91:c0:cf:3d:19:3c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Validity Not Before: Dec 7 04:02:26 2025 GMT Not After : Dec 8 04:02:26 2025 GMT Subject: CN=f70951fb294da5a2689b2304e96e11593126c963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:be:b9:9f:aa:b5:a6:0b:2c:9b:b6:16:4e: 8e:b1:95:17:48:0e:db:99:9a:ac:15:a3:64:83:77: f8:a2:ac:33:32:8b:bd:79:31:ca:d0:13:65:f6:b5: 6c:96:71:a1:fa:de:fc:68:09:24:96:65:db:29:f3: c8:39:7d:8f:5a:ed:85:70:0c:55:91:90:6d:7a:2e: d9:80:ab:1f:20:37:69:0b:45:fe:07:8a:cd:76:7f: 76:92:ce:fc:ef:9c:0a:25:35:c5:c4:11:59:8d:fb: 5d:67:90:20:2d:43:74:77:30:36:d6:c0:b4:1e:f5: ce:35:12:95:80:eb:94:23:55:74:b9:27:4e:38:27: 6e:6f:2d:c2:61:91:22:bd:0b:db:ef:1a:35:7c:e1: 09:b7:7f:00:02:ac:37:c7:8c:dd:b4:0c:81:b8:fe: 9b:2c:93:09:96:43:13:ff:d8:ad:a7:34:95:59:10: 57:c4:31:6a:08:41:d8:75:3f:e3:e3:85:54:f6:d8: 0b:40:8e:17:ad:58:68:b0:8c:59:d7:e8:08:7d:68: ee:68:e2:e5:5d:b3:a4:f5:ef:07:94:3d:c4:85:b3: e3:bc:76:c9:37:ef:a2:5d:a8:84:01:f2:2a:19:09: bb:54:86:98:77:91:3f:dc:68:c1:53:f7:d7:00:18: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:09:51:FB:29:4D:A5:A2:68:9B:23:04:E9:6E:11:59:31:26:C9:63 X509v3 Authority Key Identifier: keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c2:16:32:30:1e:62:fb:bd:c4:a6:19:b5:4f:e6:00:b7:c3: 12:41:a5:87:86:2a:1a:8c:5a:e8:b0:06:e1:0d:00:bb:97:f3: e5:04:f1:5c:b4:b7:14:d9:ea:d5:da:d7:f7:d9:76:5d:47:b6: 80:40:2c:e7:58:76:ab:5b:f1:7b:02:08:98:cd:c7:be:90:b9: fb:d9:2a:82:e4:67:42:7a:d6:ac:7c:c2:ed:05:8b:0a:db:72: 57:fa:56:c6:10:7a:f9:be:7c:f0:bf:80:92:a0:82:a5:8d:be: 0c:68:48:63:38:d5:66:c1:5e:71:61:68:ea:97:3b:94:f9:f3: 39:d9:9f:9a:de:26:f6:2d:e2:d7:59:62:0c:46:b8:c2:e8:e3: fd:f4:b7:b9:86:6c:e4:cd:23:40:82:4b:9a:f5:45:a9:d9:eb: 33:98:0e:df:71:fe:7b:7c:2d:f1:9c:2b:2e:5c:c8:da:16:f1: 87:e4:4d:c8:3b:6d:62:66:77:bb:83:f4:f9:c5:df:9f:e6:b9: fd:89:80:b2:18:9d:26:2c:cb:8e:87:2f:2e:bb:73:96:18:5d: cb:f3:d9:0c:92:2d:2e:67:fa:a7:6b:65:e1:9c:29:ed:3a:b0: 3c:5c:46:64:d9:ff:99:7d:e5:51:e1:32:29:08:34:66:af:7c: 2f:01:bb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+aOv3IlEznmRwM89GTx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj MjUwZmIwHhcNMjUxMjA3MDQwMjI2WhcNMjUxMjA4MDQwMjI2WjAzMTEwLwYDVQQD EyhmNzA5NTFmYjI5NGRhNWEyNjg5YjIzMDRlOTZlMTE1OTMxMjZjOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Fe+uZ+qtaYLLJu2Fk6OsZUXSA7b mZqsFaNkg3f4oqwzMou9eTHK0BNl9rVslnGh+t78aAkklmXbKfPIOX2PWu2FcAxV kZBtei7ZgKsfIDdpC0X+B4rNdn92ks7875wKJTXFxBFZjftdZ5AgLUN0dzA21sC0 HvXONRKVgOuUI1V0uSdOOCduby3CYZEivQvb7xo1fOEJt38AAqw3x4zdtAyBuP6b LJMJlkMT/9itpzSVWRBXxDFqCEHYdT/j44VU9tgLQI4XrVhosIxZ1+gIfWjuaOLl XbOk9e8HlD3EhbPjvHbJN++iXaiEAfIqGQm7VIaYd5E/3GjBU/fXABgRwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcJUfspTaWiaJsjBOluEVkxJsljMB8GA1UdIwQY MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt MmQzZWY5YjBhZDIzLzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcIWMjAe Yvu9xKYZtU/mALfDEkGlh4YqGoxa6LAG4Q0Au5fz5QTxXLS3FNnq1drX99l2XUe2 gEAs51h2q1vxewIImM3HvpC5+9kqguRnQnrWrHzC7QWLCttyV/pWxhB6+b588L+A kqCCpY2+DGhIYzjVZsFecWFo6pc7lPnzOdmfmt4m9i3i11liDEa4wujj/fS3uYZs 5M0jQIJLmvVFqdnrM5gO33H+e3wt8ZwrLlzI2hbxh+RNyDttYmZ3u4P0+cXfn+a5 /YmAshidJizLjocvLrtzlhhdy/PZDJItLmf6p2tl4Zwp7TqwPFxGZNn/mX3lUeEy KQg0Zq98LwG7vw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:55:26 2025 by rpki-client