This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json) Hash identifier: njncdI1vBoighMM6QMXLQwO7ZnM5FRU1Qz72S+SIrcc= Subject key identifier: 75:93:8E:7B:EE:C8:52:8A:45:82:50:14:C2:7C:C4:92:75:90:55:11 Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33 Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233 Certificate serial: 019B318C7D9BF6073D3B7D00C424CAB68FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 13:00:49 +0000 Manifest this update: Thu 18 Dec 2025 13:00:49 +0000 Manifest next update: Fri 19 Dec 2025 13:00:49 +0000 Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: 79GhPtDRfgWBW4rrzbrRCyo5s341TaXND3heRS2K0+E=) 2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:7d:9b:f6:07:3d:3b:7d:00:c4:24:ca:b6:8f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233 Validity Not Before: Dec 18 13:00:49 2025 GMT Not After : Dec 19 13:00:49 2025 GMT Subject: CN=75938e7beec8528a45825014c27cc49275905511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:ad:87:07:81:19:79:f3:0c:bc:d0:d0:a0: ca:06:c4:dc:49:0c:10:72:52:2c:ed:a7:88:fd:00: dc:96:bd:7e:07:50:67:8b:98:8e:ef:a7:60:78:b1: 17:ab:92:e4:b3:ad:93:6a:b6:c5:fb:d9:3a:c7:50: ac:27:3b:95:54:ab:d7:ec:2d:5f:95:86:10:a0:2a: 13:b6:32:0a:d2:c5:16:de:76:0f:0a:11:11:b1:6f: 78:1a:5d:33:ec:4e:3f:6b:a3:96:3a:02:d2:fe:26: f0:10:cf:01:e9:5c:ba:47:0b:2d:ee:d3:0c:b9:28: cb:08:e2:0c:65:59:7e:34:4e:62:50:7d:74:79:3f: f2:b1:dd:7e:12:aa:12:f8:4b:3c:a7:f4:0f:08:b6: b1:3c:bc:bc:1e:f1:fc:f5:65:7c:86:83:39:65:07: ba:f3:8c:08:04:20:d1:c0:34:75:cd:b5:86:0a:ba: e5:93:1a:c5:f7:89:68:38:af:94:9d:10:85:6e:f8: 98:95:cb:e0:b2:95:ac:ae:63:b4:73:9c:9b:cb:2a: 86:87:61:7a:36:b9:61:19:a8:0c:86:a8:3d:e1:1b: ba:fd:72:49:ac:84:35:c3:2c:45:68:0b:ec:d2:2d: e4:c5:45:a1:f7:25:9a:eb:f1:f5:1d:8c:5c:71:b7: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:93:8E:7B:EE:C8:52:8A:45:82:50:14:C2:7C:C4:92:75:90:55:11 X509v3 Authority Key Identifier: keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:37:ad:73:2e:e3:e1:38:69:14:14:dd:2b:f1:c9:4b:6f:0d: d0:16:b1:55:2c:29:b0:ba:6e:9d:b2:c3:f6:89:85:31:1b:67: 04:b1:04:36:5d:44:ad:b1:3d:a9:bf:08:b9:af:9e:de:80:11: 3f:15:d5:31:b7:9a:7a:8d:f5:6b:a3:72:1e:17:2e:f1:75:8d: 31:c9:3b:57:d9:18:0a:37:cd:30:bf:59:fe:cd:55:e6:96:a4: a5:76:d9:ee:59:1c:20:f7:fe:af:a1:e0:16:1d:34:6d:f9:da: 25:17:d4:ac:03:4a:da:83:48:0e:51:16:04:b5:05:30:9e:38: f7:bf:92:94:df:2c:c0:7b:38:9e:e0:a9:25:f3:32:4e:c4:92: aa:58:b8:a9:02:45:0b:96:9f:c8:af:39:8c:87:8e:90:18:42: f8:97:89:46:95:d1:b2:a2:b2:75:b3:01:f1:1d:e3:0c:0c:f2: 22:70:1f:6f:81:25:ac:cc:76:85:01:b2:ed:e4:15:b5:24:71: e2:0f:fa:fe:21:dc:7a:7e:09:0e:f8:72:46:1e:bf:d2:c2:53: c6:39:8c:d1:d8:7b:d0:86:1a:54:37:4c:c9:b7:c9:9e:c5:0a: 90:17:60:11:20:32:a2:69:46:f1:64:c4:b0:fb:26:24:2c:bc: f1:5f:c5:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjH2b9gc9O30AxCTKto/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NDNhZWMyMmY4MTljZjAxZjJjNjM2MzAzNWQ5N2Y4ZTBl MzgyMzMwHhcNMjUxMjE4MTMwMDQ5WhcNMjUxMjE5MTMwMDQ5WjAzMTEwLwYDVQQD Eyg3NTkzOGU3YmVlYzg1MjhhNDU4MjUwMTRjMjdjYzQ5Mjc1OTA1NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVathweBGXnzDLzQ0KDKBsTcSQwQ clIs7aeI/QDclr1+B1Bni5iO76dgeLEXq5Lks62TarbF+9k6x1CsJzuVVKvX7C1f lYYQoCoTtjIK0sUW3nYPChERsW94Gl0z7E4/a6OWOgLS/ibwEM8B6Vy6Rwst7tMM uSjLCOIMZVl+NE5iUH10eT/ysd1+EqoS+Es8p/QPCLaxPLy8HvH89WV8hoM5ZQe6 84wIBCDRwDR1zbWGCrrlkxrF94loOK+UnRCFbviYlcvgspWsrmO0c5ybyyqGh2F6 NrlhGagMhqg94Ru6/XJJrIQ1wyxFaAvs0i3kxUWh9yWa6/H1HYxccbdOXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWTjnvuyFKKRYJQFMJ8xJJ1kFURMB8GA1UdIwQY MBaAFNZDrsIvgZzwHyxjYwNdl/jg44IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYt ZjZmMzIzZmQ5NmUwLzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYtZjZmMzIzZmQ5NmUw LzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzetcy7j 4ThpFBTdK/HJS28N0BaxVSwpsLpunbLD9omFMRtnBLEENl1ErbE9qb8Iua+e3oAR PxXVMbeaeo31a6NyHhcu8XWNMck7V9kYCjfNML9Z/s1V5pakpXbZ7lkcIPf+r6Hg Fh00bfnaJRfUrANK2oNIDlEWBLUFMJ4497+SlN8swHs4nuCpJfMyTsSSqli4qQJF C5afyK85jIeOkBhC+JeJRpXRsqKydbMB8R3jDAzyInAfb4ElrMx2hQGy7eQVtSRx 4g/6/iHcen4JDvhyRh6/0sJTxjmM0dh70IYaVDdMybfJnsUKkBdgESAyomlG8WTE sPsmJCy88V/FBQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:09:33 2025 by rpki-client