This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft File: 1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json) Hash identifier: nho4cZ6ibRMUngmRHd7hOsgD3CS8uYbZig9VJbA3T2c= Subject key identifier: 06:32:E6:D0:7E:01:FF:DB:8C:7E:52:08:33:5F:7A:42:B4:91:2F:68 Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65 Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365 Certificate serial: 019B4D3ACA0B1EC56C17C832EA5E452B6BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft Manifest number: 1492 Signing time: Tue 23 Dec 2025 22:00:56 +0000 Manifest this update: Tue 23 Dec 2025 22:00:56 +0000 Manifest next update: Wed 24 Dec 2025 22:00:56 +0000 Files and hashes: 1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: RoDxqFh1mYFmOhk2OohFCvrr0TT4OthO73j+BUoRixI=) 2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:ca:0b:1e:c5:6c:17:c8:32:ea:5e:45:2b:6b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365 Validity Not Before: Dec 23 22:00:56 2025 GMT Not After : Dec 24 22:00:56 2025 GMT Subject: CN=0632e6d07e01ffdb8c7e5208335f7a42b4912f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:d6:8d:dc:22:54:bc:a9:44:eb:c8:14:6f: aa:8b:72:35:59:35:fd:25:6f:c0:c7:6e:80:80:e4: 70:d3:2e:24:96:90:98:8e:1a:7b:62:62:a9:bf:bf: 86:1a:95:ac:ac:52:51:0a:95:e5:b2:24:01:24:2a: d9:e3:50:da:a9:57:be:7f:d4:35:ff:80:17:30:74: 05:06:d1:af:db:df:2f:40:d7:31:b8:2c:b5:60:ab: ca:94:d3:a0:0c:15:9a:ea:d5:11:35:ab:cb:cf:ed: de:6e:e5:b1:8f:a6:8f:7a:45:9d:cc:38:1f:d2:7b: 05:38:08:dd:0b:4f:8b:1c:fe:1f:5c:68:9c:9a:6f: 27:5f:93:5d:f0:9b:7d:39:d5:8e:92:94:ed:12:06: d7:63:fb:16:0f:42:8b:71:99:5c:c3:d7:34:86:a1: 43:3e:c4:1c:2d:6e:94:60:ed:76:41:8b:11:54:2a: 94:85:01:4c:8d:dd:14:af:a3:4c:02:8d:cd:6a:0a: 71:d3:33:df:45:67:94:2c:be:49:48:55:45:92:c0: 36:c7:29:4d:02:46:b0:9b:ef:c4:b7:d0:8a:4d:8a: 08:2b:f6:ad:2e:95:48:77:8c:ac:02:e4:ca:5e:fe: 04:07:3b:d3:ce:16:b5:34:71:de:3a:b4:f3:96:d1: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:32:E6:D0:7E:01:FF:DB:8C:7E:52:08:33:5F:7A:42:B4:91:2F:68 X509v3 Authority Key Identifier: keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3a:9f:91:dd:9b:e1:b2:47:36:06:4a:69:45:2e:50:ad:08: 1d:8b:bf:8a:5b:ad:a0:a9:4d:c3:ef:46:3c:91:86:01:6e:74: 76:ea:5c:62:e2:dc:82:c2:8b:fc:49:eb:00:f8:52:7c:4c:bb: c6:57:cb:10:aa:48:f0:a7:f0:80:54:05:09:6f:1a:89:23:b2: 85:a8:20:e3:37:c1:f8:a1:99:83:23:0e:e9:67:48:a8:ae:d1: f8:0b:ec:ab:ef:46:f0:83:69:23:38:a4:04:8a:eb:32:15:c3: f1:51:7e:1b:e6:36:b6:40:cd:ab:91:75:88:6f:9c:bd:e4:f1: e8:ae:96:ff:2f:5e:fc:33:81:70:b2:2c:c6:74:9e:c7:47:9a: d5:ba:9b:db:dd:6b:72:97:53:86:5c:a9:88:91:f5:c2:2e:03: eb:93:30:40:19:86:06:f9:f8:f1:9f:9a:87:33:d5:d6:20:43: 04:3f:f5:47:2a:e4:7a:05:1f:3c:4b:d8:4c:1a:98:da:a9:0d: ce:bf:10:44:da:f6:33:2e:ef:b8:a3:8f:d7:e6:50:b9:0d:5c: c3:a0:09:90:95:b3:7c:3d:bd:35:45:af:77:db:d8:6b:d7:3b: f6:56:e7:5e:f5:a7:2a:75:cc:a9:58:26:68:57:7a:52:2c:b9: ab:35:7c:3f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtNOsoLHsVsF8gy6l5FK2v2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDFmZmQ3ZGE1ZWU0NTBmY2IxYTY1NmFiZmM2ZTBiMWIy MWMzNjUwHhcNMjUxMjIzMjIwMDU2WhcNMjUxMjI0MjIwMDU2WjAzMTEwLwYDVQQD EygwNjMyZTZkMDdlMDFmZmRiOGM3ZTUyMDgzMzVmN2E0MmI0OTEyZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9zWjdwiVLypROvIFG+qi3I1WTX9 JW/Ax26AgORw0y4klpCYjhp7YmKpv7+GGpWsrFJRCpXlsiQBJCrZ41DaqVe+f9Q1 /4AXMHQFBtGv298vQNcxuCy1YKvKlNOgDBWa6tURNavLz+3ebuWxj6aPekWdzDgf 0nsFOAjdC0+LHP4fXGicmm8nX5Nd8Jt9OdWOkpTtEgbXY/sWD0KLcZlcw9c0hqFD PsQcLW6UYO12QYsRVCqUhQFMjd0Ur6NMAo3Nagpx0zPfRWeULL5JSFVFksA2xylN Akawm+/Et9CKTYoIK/atLpVId4ysAuTKXv4EBzvTzha1NHHeOrTzltFQ4QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAYy5tB+Af/bjH5SCDNfekK0kS9oMB8GA1UdIwQY MBaAFPsB/9faXuRQ/LGmVqv8bgsbIcNlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13SF8xOXBlNUZEOHNhWldxX3h1Q3hzaHcyVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTI2Y2VhLWY2NjAtNDhhMy04NjJm LTkwNTAxYWJmNTM5MS8xLzEtd0hfMTlwZTVGRDhzYVpXcV94dUN4c2h3MlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI5L2UyNmNlYS1mNjYwLTQ4YTMtODYyZi05MDUwMWFiZjUz OTEvMS8xLXdIXzE5cGU1RkQ4c2FaV3FfeHVDeHNodzJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzqf kd2b4bJHNgZKaUUuUK0IHYu/ilutoKlNw+9GPJGGAW50dupcYuLcgsKL/EnrAPhS fEy7xlfLEKpI8KfwgFQFCW8aiSOyhagg4zfB+KGZgyMO6WdIqK7R+Avsq+9G8INp IzikBIrrMhXD8VF+G+Y2tkDNq5F1iG+cveTx6K6W/y9e/DOBcLIsxnSex0ea1bqb 291rcpdThlypiJH1wi4D65MwQBmGBvn48Z+ahzPV1iBDBD/1RyrkegUfPEvYTBqY 2qkNzr8QRNr2My7vuKOP1+ZQuQ1cw6AJkJWzfD29NUWvd9vYa9c79lbnXvWnKnXM qVgmaFd6Uiy5qzV8Pw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:33:29 2025 by rpki-client