This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json) Hash identifier: vzlTOefqX03yBqM8hcIL3zQhpwZUkXtM9GnTtGp52Dg= Subject key identifier: 1D:C9:20:E2:1E:74:4F:89:35:29:42:5B:28:E5:5F:63:90:75:F1:D3 Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Certificate serial: 019B4C9601048717EF8ABE6A720680B84EF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft Manifest number: 1532 Signing time: Tue 23 Dec 2025 19:00:57 +0000 Manifest this update: Tue 23 Dec 2025 19:00:57 +0000 Manifest next update: Wed 24 Dec 2025 19:00:57 +0000 Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: jHdGxQQdpJhwLft5UIynueL1gSmpG+5NaaTYuXdMi7o=) 2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:01:04:87:17:ef:8a:be:6a:72:06:80:b8:4e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Validity Not Before: Dec 23 19:00:57 2025 GMT Not After : Dec 24 19:00:57 2025 GMT Subject: CN=1dc920e21e744f893529425b28e55f639075f1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:97:5f:1c:d1:b6:18:37:b8:79:68:b4:62: 39:d2:06:f6:c6:73:1b:80:28:21:f4:38:9f:ef:91: 41:c5:56:46:29:16:5d:8e:f8:ae:24:87:ab:22:6d: 6b:e6:b6:ec:0b:ec:49:f3:eb:fa:7c:b2:67:3c:b9: db:2e:b8:15:5e:8c:ba:d5:78:05:c9:08:92:ab:8b: 64:88:8e:65:65:07:e9:70:6d:48:00:0a:79:85:f1: aa:25:b2:de:7f:f0:40:df:d1:32:c1:2d:06:5b:1c: 7d:24:35:a1:ff:44:a5:75:18:c6:93:91:b8:b1:90: 70:52:72:01:c6:a2:af:b3:9b:f3:f8:dd:15:d8:46: 28:f8:48:bb:82:e8:fe:36:31:6c:5e:87:d7:32:1a: 16:85:c2:f4:9f:a0:a8:ae:f0:d2:32:0c:9c:35:f2: cd:61:4e:bc:67:01:d4:e7:1a:6f:ee:0f:c1:eb:9d: 9e:32:87:b1:ef:02:29:80:44:8a:6e:f1:f6:1e:10: ea:9a:c2:60:b7:fc:0e:8a:08:af:3c:17:67:fe:4a: b5:4b:d2:f5:23:58:9d:31:7f:d3:cf:45:f4:e2:37: 3c:61:90:71:f7:bd:0a:16:fb:8a:40:aa:be:3e:1b: 57:16:fe:04:ee:00:d1:31:ce:5d:7d:0c:55:98:f1: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C9:20:E2:1E:74:4F:89:35:29:42:5B:28:E5:5F:63:90:75:F1:D3 X509v3 Authority Key Identifier: keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:95:73:db:52:37:32:42:39:9f:0e:e6:43:05:e6:2a:6b:74: 02:28:37:4c:6a:71:df:42:4f:41:3c:20:f1:1a:96:7b:86:8a: ab:4c:96:21:d3:ec:cb:38:fa:74:5e:1c:19:f3:23:fe:b8:a7: df:e7:b3:1f:f7:11:65:39:2f:c8:6d:ca:37:4b:54:f6:34:4f: d3:55:06:ac:5d:52:89:e4:99:cf:c6:15:d0:94:e4:59:de:1f: cd:3d:32:e2:bb:9a:82:f2:a2:d9:a5:77:44:33:96:11:b2:5b: 97:c4:29:55:e8:63:10:a4:3e:df:f1:e3:96:5b:49:93:a5:8b: 64:c9:05:6a:12:cd:f1:e6:1a:a9:37:4e:9b:0a:3b:bb:a5:b7: 1b:28:46:18:b6:f6:e7:2a:65:f9:b6:39:8b:16:01:22:12:bd: 13:e8:97:41:f8:46:f9:c5:39:26:f3:a8:1a:7a:8d:4c:8c:9e: 38:f6:ca:de:26:79:7a:1f:21:3b:10:35:b3:38:38:42:52:e5: b0:50:80:0e:9b:44:80:92:0c:f0:cc:11:79:13:5a:e5:77:a0: 44:28:79:e3:5a:1a:aa:f0:9d:09:97:5f:b1:8e:1c:f8:88:38: c8:dd:ed:ce:e5:64:c9:97:eb:fa:0b:e2:27:e4:01:58:05:61: d5:e9:aa:5e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtMlgEEhxfvir5qcgaAuE7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0 ZmM5OGUwHhcNMjUxMjIzMTkwMDU3WhcNMjUxMjI0MTkwMDU3WjAzMTEwLwYDVQQD EygxZGM5MjBlMjFlNzQ0Zjg5MzUyOTQyNWIyOGU1NWY2MzkwNzVmMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKSXXxzRthg3uHlotGI50gb2xnMb gCgh9Dif75FBxVZGKRZdjviuJIerIm1r5rbsC+xJ8+v6fLJnPLnbLrgVXoy61XgF yQiSq4tkiI5lZQfpcG1IAAp5hfGqJbLef/BA39EywS0GWxx9JDWh/0SldRjGk5G4 sZBwUnIBxqKvs5vz+N0V2EYo+Ei7guj+NjFsXofXMhoWhcL0n6CorvDSMgycNfLN YU68ZwHU5xpv7g/B652eMoex7wIpgESKbvH2HhDqmsJgt/wOigivPBdn/kq1S9L1 I1idMX/Tz0X04jc8YZBx970KFvuKQKq+PhtXFv4E7gDRMc5dfQxVmPESWQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB3JIOIedE+JNSlCWyjlX2OQdfHTMB8GA1UdIwQY MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5 MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJVz 21I3MkI5nw7mQwXmKmt0Aig3TGpx30JPQTwg8RqWe4aKq0yWIdPsyzj6dF4cGfMj /rin3+ezH/cRZTkvyG3KN0tU9jRP01UGrF1SieSZz8YV0JTkWd4fzT0y4ruagvKi 2aV3RDOWEbJbl8QpVehjEKQ+3/HjlltJk6WLZMkFahLN8eYaqTdOmwo7u6W3GyhG GLb25ypl+bY5ixYBIhK9E+iXQfhG+cU5JvOoGnqNTIyeOPbK3iZ5eh8hOxA1szg4 QlLlsFCADptEgJIM8MwReRNa5XegRCh541oaqvCdCZdfsY4c+Ig4yN3tzuVkyZfr +gviJ+QBWAVh1emqXg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:43 2025 by rpki-client