This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft File: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json) Hash identifier: lQmt3A2zEmdlsAj/fhR6b+PNFynN/h/yAptWriR9GAg= Subject key identifier: DD:25:52:AC:5C:A6:1E:E4:DE:6B:CF:2D:A4:17:C0:03:8C:8D:E4:FD Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1 Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1 Certificate serial: 019B341F7362A22F855093D9C2CB869AB413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft Manifest number: 0269 Signing time: Fri 19 Dec 2025 01:00:34 +0000 Manifest this update: Fri 19 Dec 2025 01:00:34 +0000 Manifest next update: Sat 20 Dec 2025 01:00:34 +0000 Files and hashes: 1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: 7/hK8hhQyu6mMHrYa9Snwo92gJnV9X/CFGkAWmdG9c4=) 2: NXwlVXiim_zGBDcqjx0eFIuUGWk.roa (hash: mei7vYH+6OQG8yo3aepSsguWF4MAUBo4s0J/dbzC4gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:73:62:a2:2f:85:50:93:d9:c2:cb:86:9a:b4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1 Validity Not Before: Dec 19 01:00:34 2025 GMT Not After : Dec 20 01:00:34 2025 GMT Subject: CN=dd2552ac5ca61ee4de6bcf2da417c0038c8de4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:37:a2:b8:16:cc:9d:94:14:84:4b:4c:97: b5:71:fb:e2:b2:9c:59:13:a1:1d:4f:42:b4:0e:99: a2:24:dc:94:b1:8a:01:f2:a4:46:99:46:d9:18:db: 53:a3:ee:b2:5e:2f:e9:e1:9f:a0:9b:c6:d5:3d:04: 50:1a:db:fb:93:c4:f3:2b:f2:79:98:e2:28:f9:62: 16:9a:0a:a2:d7:eb:28:65:30:c8:37:29:3f:14:53: 19:c7:09:6b:21:1f:f1:b3:c0:04:d3:16:36:b8:cc: d8:73:17:44:a2:9a:76:94:46:b1:bd:77:6c:b8:4e: 8a:95:93:84:00:31:bd:dc:11:02:d7:b4:27:4d:5e: e9:35:16:f4:c5:8f:65:71:c1:82:3f:17:e8:b0:24: ee:83:2c:84:3b:bb:8e:1d:52:e6:3a:b2:cb:9c:c7: 07:f7:f0:6d:a7:02:5e:8d:60:ad:f9:cf:39:a1:06: 22:f0:1a:ce:68:be:fd:e4:1a:0b:95:b3:d2:fd:30: e6:95:6b:a2:ee:09:82:d4:45:26:76:f0:d7:df:a7: 9e:94:c8:69:81:37:1a:f2:70:7f:92:fa:7a:72:b9: a9:d7:b5:d9:32:a9:c7:83:2f:01:f9:22:4e:cd:52: 78:37:49:0a:49:85:0e:7b:95:94:ed:bc:0e:4b:1d: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:25:52:AC:5C:A6:1E:E4:DE:6B:CF:2D:A4:17:C0:03:8C:8D:E4:FD X509v3 Authority Key Identifier: keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e1:90:9d:4a:4c:33:4a:a6:b9:dd:29:cf:5a:8a:16:a9:5b: 9b:5c:08:a7:4c:2f:03:95:a2:10:0b:de:9a:b9:15:d5:8d:73: ca:18:a6:f2:a5:fa:7c:06:f1:31:34:45:e5:4e:88:37:af:10: b1:13:0f:13:28:71:5c:e9:fc:98:96:7c:20:45:54:20:e3:61: f5:61:bc:d6:91:0a:50:a0:9c:4c:50:81:30:f7:7e:bb:a4:89: 21:82:25:6d:a4:47:73:d5:98:37:a4:ea:c8:ea:e2:d1:bd:76: f4:8a:c1:4e:13:a0:e5:b6:fa:7c:0c:0b:3a:6d:51:c0:25:a4: bf:40:d5:5c:e9:14:e4:7b:c1:e3:51:8f:8d:40:e6:40:61:4b: 33:c8:38:ff:b1:04:24:b3:5f:e3:3a:dd:b4:2a:98:58:54:7e: 82:96:61:d7:32:d4:bf:f7:8f:87:20:dc:04:a9:4f:91:de:b4: 46:bb:ea:f1:ee:dc:15:ea:fd:cc:07:18:42:80:31:20:08:84: ac:74:99:1a:cc:b0:44:b5:09:c9:e0:8a:a0:15:99:e2:6a:30: eb:a7:c1:94:48:85:6e:15:95:ed:2f:6f:77:f6:3d:4a:40:00: 54:76:a3:7d:de:d8:29:0b:ce:2a:15:33:9b:7f:2f:03:85:06: 21:43:82:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H3Nioi+FUJPZwsuGmrQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODFmYTY2YmUyY2VhMzRiNTg4M2MyMWM2ZjgzZjM0NjRl MmVlZTEwHhcNMjUxMjE5MDEwMDM0WhcNMjUxMjIwMDEwMDM0WjAzMTEwLwYDVQQD EyhkZDI1NTJhYzVjYTYxZWU0ZGU2YmNmMmRhNDE3YzAwMzhjOGRlNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ03orgWzJ2UFIRLTJe1cfvispxZ E6EdT0K0DpmiJNyUsYoB8qRGmUbZGNtTo+6yXi/p4Z+gm8bVPQRQGtv7k8TzK/J5 mOIo+WIWmgqi1+soZTDINyk/FFMZxwlrIR/xs8AE0xY2uMzYcxdEopp2lEaxvXds uE6KlZOEADG93BEC17QnTV7pNRb0xY9lccGCPxfosCTugyyEO7uOHVLmOrLLnMcH 9/BtpwJejWCt+c85oQYi8BrOaL795BoLlbPS/TDmlWui7gmC1EUmdvDX36eelMhp gTca8nB/kvp6crmp17XZMqnHgy8B+SJOzVJ4N0kKSYUOe5WU7bwOSx0XEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0lUqxcph7k3mvPLaQXwAOMjeT9MB8GA1UdIwQY MBaAFNaB+ma+LOo0tYg8Icb4PzRk4u7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEt YTNlZjBhNGEzMTE5LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEtYTNlZjBhNGEzMTE5 LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeGQnUpM M0qmud0pz1qKFqlbm1wIp0wvA5WiEAvemrkV1Y1zyhim8qX6fAbxMTRF5U6IN68Q sRMPEyhxXOn8mJZ8IEVUIONh9WG81pEKUKCcTFCBMPd+u6SJIYIlbaRHc9WYN6Tq yOri0b129IrBThOg5bb6fAwLOm1RwCWkv0DVXOkU5HvB41GPjUDmQGFLM8g4/7EE JLNf4zrdtCqYWFR+gpZh1zLUv/ePhyDcBKlPkd60Rrvq8e7cFer9zAcYQoAxIAiE rHSZGsywRLUJyeCKoBWZ4mow66fBlEiFbhWV7S9vd/Y9SkAAVHajfd7YKQvOKhUz m38vA4UGIUOC6w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:17:47 2025 by rpki-client