This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json) Hash identifier: g12XOi6/IArYQzrn8flXVf8PRSAv5LY2J4R3TJmzI5k= Subject key identifier: 1F:9C:37:9A:40:DF:37:90:F0:23:0D:60:23:6F:05:58:F3:E8:26:FB Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db Certificate serial: 019AF27723B09110C0838B4F6D76402DA402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: dNheiQUnb4gn+Lsy6oKok1CGGp5FUPGi6tLtbkbOhk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:23:b0:91:10:c0:83:8b:4f:6d:76:40:2d:a4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=1f9c379a40df3790f0230d60236f0558f3e826fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:e7:bc:ae:81:f5:44:06:90:af:4c:6b:68: 7b:0e:2f:1a:6a:88:97:80:7f:76:89:f9:b7:a7:c5: de:6a:ee:07:ab:05:03:a9:bd:54:48:00:54:41:09: 5b:ad:a4:64:47:48:aa:b9:75:c3:67:e2:40:03:b1: 40:7f:b3:87:8d:ba:72:99:92:fe:80:df:00:fe:25: 0c:18:3f:20:d4:8b:84:8d:d4:a7:cf:d4:ee:38:f3: 21:a4:36:fc:38:e9:27:a4:da:8e:6d:90:27:66:ba: 81:ec:fa:b0:88:5b:4f:c1:b2:c6:61:03:49:27:c0: f5:e6:f7:e1:61:30:a8:00:a1:8e:7f:a1:a1:4b:94: 2f:a3:b9:57:5e:ff:36:ee:ee:ca:c8:f5:14:31:37: 69:31:d0:28:83:a8:4b:2d:d2:18:65:c5:30:80:ac: aa:b9:3a:36:9d:ab:8c:f7:34:de:9c:33:00:70:93: 6a:96:e9:91:28:a2:27:b2:f2:3d:f5:ce:a4:ce:3f: ee:bd:5a:68:d3:d9:e8:7c:0e:36:b8:cd:86:d9:1e: 0e:d2:66:8c:c1:59:8b:a6:69:91:60:68:1c:e5:18: 92:d0:99:41:10:73:bc:26:79:b3:04:10:d3:a7:74: 93:7c:d6:80:d2:e7:5f:94:31:85:09:b4:94:78:f8: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9C:37:9A:40:DF:37:90:F0:23:0D:60:23:6F:05:58:F3:E8:26:FB X509v3 Authority Key Identifier: keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:03:88:98:2e:c1:3e:01:b9:e3:e8:e0:d7:2e:49:60:83:e3: f0:42:61:ea:a2:e7:dc:d1:bd:a4:75:cd:af:63:2a:0e:8c:6c: 5c:ad:7f:0d:dd:98:d9:a9:76:f7:fe:89:0c:8e:8a:62:17:73: 47:44:df:6c:06:1f:ef:11:ba:36:7c:ed:ad:b9:91:7e:35:c8: da:d4:35:45:40:6d:fa:f8:b8:40:a1:28:ad:c9:34:e8:21:ae: e1:be:9d:83:be:68:24:a1:f7:ee:96:da:84:6c:d4:3e:be:10: 19:e0:c2:64:69:b6:f6:e7:5f:4d:64:04:71:8c:3a:99:e8:98: 48:62:8a:bd:e7:30:73:de:05:77:fa:4b:1f:5d:17:c9:19:28: c8:08:39:48:73:65:d5:88:96:0c:32:a1:f8:98:3b:b2:32:7d: 14:96:a3:50:d3:39:a1:19:12:58:2f:31:29:44:fd:a2:50:44: 26:7d:33:b4:02:85:8b:26:c3:56:59:b9:e1:2f:50:cf:fb:7e: 3f:75:e3:1a:34:21:16:85:7c:83:06:7e:ff:d9:b9:9a:99:8f: fb:3a:a4:3d:4e:e0:d3:06:37:3a:e7:50:83:75:f0:82:7a:f4: 19:a5:58:41:1c:36:ca:a8:67:d4:45:81:58:9e:be:46:95:49: 5c:7d:34:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyOwkRDAg4tPbXZALaQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTVkNTI0NzFlYTg3NDg5ZDQ4YTA2MjA4NDdhNmQ1NTZm MTYzZGIwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD EygxZjljMzc5YTQwZGYzNzkwZjAyMzBkNjAyMzZmMDU1OGYzZTgyNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryLnvK6B9UQGkK9Ma2h7Di8aaoiX gH92ifm3p8Xeau4HqwUDqb1USABUQQlbraRkR0iquXXDZ+JAA7FAf7OHjbpymZL+ gN8A/iUMGD8g1IuEjdSnz9TuOPMhpDb8OOknpNqObZAnZrqB7PqwiFtPwbLGYQNJ J8D15vfhYTCoAKGOf6GhS5Qvo7lXXv827u7KyPUUMTdpMdAog6hLLdIYZcUwgKyq uTo2nauM9zTenDMAcJNqlumRKKInsvI99c6kzj/uvVpo09nofA42uM2G2R4O0maM wVmLpmmRYGgc5RiS0JlBEHO8JnmzBBDTp3STfNaA0udflDGFCbSUePi5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+cN5pA3zeQ8CMNYCNvBVjz6Cb7MB8GA1UdIwQY MBaAFNTl1SRx6odInUigYghHptVW8WPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMt MDE4MmNiMDJjODAwLzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMtMDE4MmNiMDJjODAw LzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgOImC7B PgG54+jg1y5JYIPj8EJh6qLn3NG9pHXNr2MqDoxsXK1/Dd2Y2al29/6JDI6KYhdz R0TfbAYf7xG6NnztrbmRfjXI2tQ1RUBt+vi4QKEorck06CGu4b6dg75oJKH37pba hGzUPr4QGeDCZGm29udfTWQEcYw6meiYSGKKvecwc94Fd/pLH10XyRkoyAg5SHNl 1YiWDDKh+Jg7sjJ9FJajUNM5oRkSWC8xKUT9olBEJn0ztAKFiybDVlm54S9Qz/t+ P3XjGjQhFoV8gwZ+/9m5mpmP+zqkPU7g0wY3OudQg3Xwgnr0GaVYQRw2yqhn1EWB WJ6+RpVJXH00/w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:09 2025 by rpki-client