This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft File: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json) Hash identifier: KBf/qzvkTrwNwPKAEvsN+zvBFIT9CtKyqN1nsfXSMNE= Subject key identifier: 45:2E:FB:37:C1:39:1D:90:45:49:4E:DF:D3:80:E7:DA:7D:E3:89:43 Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71 Certificate issuer: /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571 Certificate serial: 019AF49BB7E0041D1119702BD84B9228B979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft Manifest number: 0BAE Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: 8E1TSzPmUAc/9v3fKnMxWnbTKr2gwFlXExPQromloec=) 2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b7:e0:04:1d:11:19:70:2b:d8:4b:92:28:b9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571 Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=452efb37c1391d9045494edfd380e7da7de38943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:76:b4:79:b5:3a:f2:b8:a0:d6:45:77:25:e7: 23:f4:78:ea:bf:fb:37:57:ed:60:25:bb:5b:8a:10: 4f:4f:35:f2:e7:ab:0d:a6:87:0d:7f:53:ac:99:6a: 6a:39:78:d4:48:de:5c:74:6c:0d:48:66:d7:6c:78: 6e:34:cd:19:91:3a:5d:12:54:6c:bd:f9:10:f2:8b: 52:a1:0d:fc:ea:7d:40:9d:25:f2:06:20:0b:2a:c3: ef:db:28:4d:b3:76:80:5a:22:5c:4f:a0:e3:7f:44: e0:3c:66:7a:a5:58:3c:11:3b:44:8d:99:eb:1a:d6: 1c:ac:47:5a:9a:27:8c:27:b5:4c:77:0d:00:79:89: bb:50:4b:4d:11:a3:c6:c6:d0:18:c3:24:39:bb:14: 37:34:91:7c:7f:d8:47:7f:dd:f5:04:74:51:99:ee: 8d:4f:b6:59:46:b6:8a:64:da:bc:e7:30:b0:67:87: 70:73:b2:cf:4c:d9:a3:51:b0:cc:0b:91:b1:f8:ff: fe:54:f6:d6:10:ad:d1:6f:88:5d:b8:8c:2f:83:03: a0:27:65:a9:13:39:11:a6:4f:e0:1b:7c:61:ce:72: 8c:28:3c:05:5d:cf:db:2d:d7:e7:72:a7:d1:7f:b1: 4a:d6:19:bb:85:e3:71:1e:34:e2:50:35:bb:72:83: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2E:FB:37:C1:39:1D:90:45:49:4E:DF:D3:80:E7:DA:7D:E3:89:43 X509v3 Authority Key Identifier: keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:20:82:b8:47:fe:8f:32:4b:bb:53:79:9c:1a:b0:44:39:73: 76:48:c1:6b:e2:72:b4:cf:7c:d1:2d:e2:ed:ee:4c:1f:fc:3b: d3:11:eb:14:02:96:55:a4:f4:fb:72:54:0c:96:82:54:08:67: 8e:23:29:18:92:8b:80:36:46:77:37:64:3a:0e:bf:11:91:42: 5b:af:35:86:47:a9:56:bf:00:e3:81:1d:55:29:6d:0d:ce:af: 4e:61:13:b3:cc:d4:9e:c8:c6:cd:1e:e3:88:42:18:ca:03:88: a6:9a:30:7e:5a:bd:0f:4a:78:d7:b9:81:09:71:19:8e:eb:c1: 16:36:4f:5d:e8:84:21:08:42:0c:00:24:67:92:5b:5d:ad:4f: f4:2a:98:65:8c:ce:09:f4:81:78:66:14:c9:8f:ea:2e:66:ea: 63:eb:b5:84:e3:64:fe:de:d8:d2:55:bd:32:90:00:a0:64:59: fb:a2:a4:3a:21:52:55:59:db:99:a9:84:a9:1b:82:02:a9:1f: 94:4b:30:64:de:b7:a4:e9:05:dd:4f:07:63:a8:de:cb:98:50: 19:24:a1:8c:b8:b2:12:d3:3e:1a:ca:c7:2b:e3:0a:17:2d:81: 05:9c:61:ea:20:14:06:8b:d1:67:30:15:2e:86:25:af:90:5c: 66:94:40:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7fgBB0RGXAr2EuSKLl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MWY4ZWZkY2Y2ZTI2NmE4MmM2MTMwMjUyNmY2YmNmYzQ2 NWU1NzEwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD Eyg0NTJlZmIzN2MxMzkxZDkwNDU0OTRlZGZkMzgwZTdkYTdkZTM4OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHa0ebU68rig1kV3Jecj9Hjqv/s3 V+1gJbtbihBPTzXy56sNpocNf1OsmWpqOXjUSN5cdGwNSGbXbHhuNM0ZkTpdElRs vfkQ8otSoQ386n1AnSXyBiALKsPv2yhNs3aAWiJcT6Djf0TgPGZ6pVg8ETtEjZnr GtYcrEdamieMJ7VMdw0AeYm7UEtNEaPGxtAYwyQ5uxQ3NJF8f9hHf931BHRRme6N T7ZZRraKZNq85zCwZ4dwc7LPTNmjUbDMC5Gx+P/+VPbWEK3Rb4hduIwvgwOgJ2Wp EzkRpk/gG3xhznKMKDwFXc/bLdfncqfRf7FK1hm7heNxHjTiUDW7coMGuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUu+zfBOR2QRUlO39OA59p944lDMB8GA1UdIwQY MBaAFNQfjv3PbiZqgsYTAlJva8/EZeVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUItT19jOXVKbXFDeGhNQ1VtOXJ6OFJsNVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81OTE2MDAtOGIyNi00Mjg2LTllYzIt NzcwMDJmNzBmYjRhLzEvMUItT19jOXVKbXFDeGhNQ1VtOXJ6OFJsNVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81OTE2MDAtOGIyNi00Mjg2LTllYzItNzcwMDJmNzBmYjRh LzEvMUItT19jOXVKbXFDeGhNQ1VtOXJ6OFJsNVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyCCuEf+ jzJLu1N5nBqwRDlzdkjBa+JytM980S3i7e5MH/w70xHrFAKWVaT0+3JUDJaCVAhn jiMpGJKLgDZGdzdkOg6/EZFCW681hkepVr8A44EdVSltDc6vTmETs8zUnsjGzR7j iEIYygOIppowflq9D0p417mBCXEZjuvBFjZPXeiEIQhCDAAkZ5JbXa1P9CqYZYzO CfSBeGYUyY/qLmbqY+u1hONk/t7Y0lW9MpAAoGRZ+6KkOiFSVVnbmamEqRuCAqkf lEswZN63pOkF3U8HY6jey5hQGSShjLiyEtM+GsrHK+MKFy2BBZxh6iAUBovRZzAV LoYlr5BcZpRAnQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:30 2025 by rpki-client