This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json) Hash identifier: zG7aFVT6pCTqQbbfa7VRbfS+/xvGNdL33lCbVWlohx8= Subject key identifier: 0D:3B:52:10:D2:5A:FF:45:E8:1C:47:61:F9:BA:51:3B:C5:43:B4:FA Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Certificate serial: 019AF31B8A85E833C730C0C2845D0C2F4ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: qJHjTjwvSKUrIRREAcTJQctb8wxxr1N9y9mrg/jTeGI=) 2: M1kVheswqf8ij0x2nrQ-DKJ80bw.roa (hash: yMSCzGCO+yw4klt7Sg0l/zNTUp3KJulcSXgC+xqFL10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8a:85:e8:33:c7:30:c0:c2:84:5d:0c:2f:4a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=0d3b5210d25aff45e81c4761f9ba513bc543b4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:86:f2:21:1a:f2:8a:cd:98:8a:20:ea:12: a2:31:15:eb:9d:70:af:cb:df:f9:e5:1a:cd:a8:ac: 99:28:fe:f4:25:43:e1:58:95:e9:26:8d:44:42:68: 47:b9:c0:05:f3:3e:e4:df:62:d5:fe:2e:e1:23:ff: 33:29:a2:dd:34:68:0c:5c:90:bd:02:43:b2:8a:92: fd:a8:34:ac:50:0b:d5:80:0e:e0:7e:9f:91:3b:56: 95:11:f8:87:94:c4:02:4c:40:35:1a:95:64:ef:0b: 82:6e:0c:e9:01:10:82:d2:89:2b:93:ac:45:fd:ae: ef:42:20:f2:23:9c:f7:c5:85:8d:e6:96:26:59:6c: b4:5f:d6:d4:d7:7a:d7:ff:b8:52:2b:71:61:5c:e5: ac:f7:2f:51:97:e9:c2:d6:55:35:cd:14:81:86:79: 62:f3:d5:20:18:e0:43:ed:ca:dd:a1:65:4f:e9:ef: 58:d2:18:47:75:cb:73:28:e0:be:fe:63:68:76:45: a4:09:f2:20:f8:e3:e8:30:15:59:98:4a:95:3f:72: fc:8f:91:3d:1e:94:40:df:13:b8:a2:c5:88:c6:76: a9:51:6c:fa:56:13:23:0d:30:38:5c:fa:3f:2b:fd: ff:bd:03:99:41:b1:f0:d2:76:61:62:0d:8f:1b:6e: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3B:52:10:D2:5A:FF:45:E8:1C:47:61:F9:BA:51:3B:C5:43:B4:FA X509v3 Authority Key Identifier: keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:45:a9:10:e3:09:d3:5e:50:5a:7d:f1:60:c9:88:1a:43: d5:74:53:25:f2:e8:c7:2e:e0:c9:6e:a1:fe:5c:19:43:9a:e9: 10:6b:db:25:23:6c:53:97:c5:cf:f5:b0:a7:b3:43:d1:02:0b: fb:10:7e:eb:03:82:6c:90:4b:a7:f1:47:18:9a:bf:9e:1c:d1: b3:f2:43:34:a9:32:8b:a1:58:11:9b:9e:d9:02:cd:ed:f4:34: 68:f5:43:4a:c8:78:97:d6:fb:0a:f3:63:be:6b:32:2c:2e:81: 2b:4b:8c:40:e1:1b:a5:f2:5c:b1:aa:43:21:e6:aa:31:cc:a7: 3a:ea:5d:a5:ee:dd:48:df:72:fe:44:67:b5:ec:55:fc:85:5b: e1:f5:6f:d5:f1:0c:19:fd:2e:4e:ea:03:2d:59:f7:30:ee:ec: 1d:c7:69:35:62:fe:6a:65:c2:6c:70:70:98:55:6f:eb:8c:45: bc:8c:6c:42:90:e9:c3:76:fe:b5:19:b6:66:6b:7e:31:d7:5b: b8:4a:3e:c9:d1:4c:3a:aa:11:67:09:84:48:1d:16:3b:04:c2: 45:17:e1:bb:a7:90:3e:8d:b9:d7:4c:da:c0:5e:d4:ff:0e:39: 05:68:50:d6:87:c7:49:2a:6d:cb:98:79:82:23:ef:f2:68:83: fd:2b:ff:01 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG4qF6DPHMMDChF0ML0q9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MWQyMGM5MmM2NTM5YWQ2NmRhODdjN2NmZTY1YTlmYWFj Y2EwNjMwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EygwZDNiNTIxMGQyNWFmZjQ1ZTgxYzQ3NjFmOWJhNTEzYmM1NDNiNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vSG8iEa8orNmIog6hKiMRXrnXCv y9/55RrNqKyZKP70JUPhWJXpJo1EQmhHucAF8z7k32LV/i7hI/8zKaLdNGgMXJC9 AkOyipL9qDSsUAvVgA7gfp+RO1aVEfiHlMQCTEA1GpVk7wuCbgzpARCC0okrk6xF /a7vQiDyI5z3xYWN5pYmWWy0X9bU13rX/7hSK3FhXOWs9y9Rl+nC1lU1zRSBhnli 89UgGOBD7crdoWVP6e9Y0hhHdctzKOC+/mNodkWkCfIg+OPoMBVZmEqVP3L8j5E9 HpRA3xO4osWIxnapUWz6VhMjDTA4XPo/K/3/vQOZQbHw0nZhYg2PG255OwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA07UhDSWv9F6BxHYfm6UTvFQ7T6MB8GA1UdIwQY MBaAFPkdIMksZTmtZtqHx8/mWp+qzKBjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SMGd5U3hsT2ExbTJvZkh6LVphbjZyTW9HTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZTY1MTNmLTcxNzUtNDYzYi1hZTg1 LWMxOGU0N2JkOWM2NC8xLzEtUjBneVN4bE9hMW0yb2ZIei1aYW42ck1vR00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I1L2U2NTEzZi03MTc1LTQ2M2ItYWU4NS1jMThlNDdiZDlj NjQvMS8xLVIwZ3lTeGxPYTFtMm9mSHotWmFuNnJNb0dNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaxF qRDjCdNeUFp98WDJiBpD1XRTJfLoxy7gyW6h/lwZQ5rpEGvbJSNsU5fFz/Wwp7ND 0QIL+xB+6wOCbJBLp/FHGJq/nhzRs/JDNKkyi6FYEZue2QLN7fQ0aPVDSsh4l9b7 CvNjvmsyLC6BK0uMQOEbpfJcsapDIeaqMcynOupdpe7dSN9y/kRntexV/IVb4fVv 1fEMGf0uTuoDLVn3MO7sHcdpNWL+amXCbHBwmFVv64xFvIxsQpDpw3b+tRm2Zmt+ MddbuEo+ydFMOqoRZwmESB0WOwTCRRfhu6eQPo2510zawF7U/w45BWhQ1ofHSSpt y5h5giPv8miD/Sv/AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:11 2025 by rpki-client