This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft File: 1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json) Hash identifier: xKChVMNk0JBdJ6mDq6Hivn1SBMfhzkMeW/B6cwYONYA= Subject key identifier: D7:BA:E2:D6:C9:35:34:27:03:61:8C:FE:E9:CB:22:B8:3D:69:AC:F9 Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65 Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365 Certificate serial: 019B3DC7A3D2A2D382899839D8C45D99B10E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft Manifest number: 148A Signing time: Sat 20 Dec 2025 22:00:52 +0000 Manifest this update: Sat 20 Dec 2025 22:00:52 +0000 Manifest next update: Sun 21 Dec 2025 22:00:52 +0000 Files and hashes: 1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: 1pDB+oqzm/GwePBSEKyGx64BI3U9qTy7HoktSwDrb28=) 2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a3:d2:a2:d3:82:89:98:39:d8:c4:5d:99:b1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365 Validity Not Before: Dec 20 22:00:52 2025 GMT Not After : Dec 21 22:00:52 2025 GMT Subject: CN=d7bae2d6c935342703618cfee9cb22b83d69acf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:f7:d9:b0:fe:fa:a2:3b:bb:26:d7:15:aa: 70:83:9d:84:58:32:0d:d4:95:88:86:64:2d:29:0b: df:63:cd:e9:79:ab:4f:d8:4e:c9:27:4b:22:ba:5a: 6e:12:1c:40:60:09:c3:4b:97:15:6d:b5:e6:6f:01: bc:92:43:46:dc:27:75:3a:a6:30:b8:58:ba:c8:06: 0e:e9:21:c5:5a:e5:46:9e:f4:ec:7c:2a:b0:ed:05: cf:ce:84:43:be:f8:1e:ae:86:31:f7:c8:85:a0:44: e0:c3:16:01:00:6c:59:e5:b3:c4:db:6a:ef:81:da: 63:a1:8e:8c:f0:82:9d:7c:eb:91:77:3f:a6:d6:46: 4e:12:af:66:6e:e2:86:fe:0b:e2:83:ca:06:a8:f4: 20:d4:7e:88:9e:69:b7:f4:3e:a9:6d:19:7b:e6:bc: 2b:3a:33:8f:7b:a6:6f:7a:9a:d2:17:d7:f9:07:5a: 31:38:e1:6c:2a:37:d1:d1:b9:a4:17:c3:b8:27:7e: 82:14:d8:fe:b4:61:1a:c7:49:35:51:8b:10:f8:1c: ee:fb:fe:57:2b:3f:3d:d8:b4:42:5b:de:62:81:7b: a2:79:63:31:cb:e1:5e:b6:49:79:88:8b:12:36:06: 73:b0:6b:3f:62:54:ea:96:17:25:3e:7e:6e:ff:1c: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:E2:D6:C9:35:34:27:03:61:8C:FE:E9:CB:22:B8:3D:69:AC:F9 X509v3 Authority Key Identifier: keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e3:de:18:43:35:2e:a4:3a:4f:d4:a0:02:52:93:ea:69:5e: 9f:f0:94:fc:e4:ae:8c:87:bc:4e:27:c5:20:44:64:b0:e3:0e: a7:ba:e8:42:ff:9a:50:63:a4:b3:6a:eb:3c:77:fd:91:db:02: ca:53:85:55:29:68:79:34:86:13:3d:ff:09:46:23:be:27:89: f4:aa:63:0f:fd:a4:43:7b:ae:9e:98:b7:49:58:6e:35:c1:d3: e0:75:c2:a7:1b:97:74:99:f7:84:2a:b2:0b:5f:7a:5d:a2:23: 0f:85:9a:d6:cc:a9:e8:8d:cd:03:45:72:15:ce:ac:00:db:91: 9c:c9:b9:7d:d0:e3:8b:a4:69:59:4c:8a:8e:00:f4:c7:0e:f0: f2:55:81:3d:ba:74:04:d6:45:5b:fe:fb:37:80:e7:b6:76:38: 8d:5c:de:59:42:b1:6e:f6:f4:f1:fe:ce:e6:42:59:bc:85:c5: df:4e:8f:16:e1:e3:b4:42:38:6a:b0:a3:91:ed:83:ca:5a:06: 58:76:99:34:23:ad:5c:27:f7:8f:14:c3:76:19:d3:48:fc:7a: d2:17:cb:d4:74:8f:23:17:74:85:c3:7f:e7:10:c3:ae:46:85: c9:43:65:65:84:95:01:53:35:bc:ba:89:1d:93:03:c5:9c:4d: 73:3d:4d:ea -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9x6PSotOCiZg52MRdmbEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDFmZmQ3ZGE1ZWU0NTBmY2IxYTY1NmFiZmM2ZTBiMWIy MWMzNjUwHhcNMjUxMjIwMjIwMDUyWhcNMjUxMjIxMjIwMDUyWjAzMTEwLwYDVQQD EyhkN2JhZTJkNmM5MzUzNDI3MDM2MThjZmVlOWNiMjJiODNkNjlhY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pP32bD++qI7uybXFapwg52EWDIN 1JWIhmQtKQvfY83peatP2E7JJ0siulpuEhxAYAnDS5cVbbXmbwG8kkNG3Cd1OqYw uFi6yAYO6SHFWuVGnvTsfCqw7QXPzoRDvvgeroYx98iFoETgwxYBAGxZ5bPE22rv gdpjoY6M8IKdfOuRdz+m1kZOEq9mbuKG/gvig8oGqPQg1H6Inmm39D6pbRl75rwr OjOPe6ZveprSF9f5B1oxOOFsKjfR0bmkF8O4J36CFNj+tGEax0k1UYsQ+Bzu+/5X Kz892LRCW95igXuieWMxy+Fetkl5iIsSNgZzsGs/YlTqlhclPn5u/xx3VQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNe64tbJNTQnA2GM/unLIrg9aaz5MB8GA1UdIwQY MBaAFPsB/9faXuRQ/LGmVqv8bgsbIcNlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13SF8xOXBlNUZEOHNhWldxX3h1Q3hzaHcyVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTI2Y2VhLWY2NjAtNDhhMy04NjJm LTkwNTAxYWJmNTM5MS8xLzEtd0hfMTlwZTVGRDhzYVpXcV94dUN4c2h3MlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI5L2UyNmNlYS1mNjYwLTQ4YTMtODYyZi05MDUwMWFiZjUz OTEvMS8xLXdIXzE5cGU1RkQ4c2FaV3FfeHVDeHNodzJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuPe GEM1LqQ6T9SgAlKT6mlen/CU/OSujIe8TifFIERksOMOp7roQv+aUGOks2rrPHf9 kdsCylOFVSloeTSGEz3/CUYjvieJ9KpjD/2kQ3uunpi3SVhuNcHT4HXCpxuXdJn3 hCqyC196XaIjD4Wa1syp6I3NA0VyFc6sANuRnMm5fdDji6RpWUyKjgD0xw7w8lWB Pbp0BNZFW/77N4DntnY4jVzeWUKxbvb08f7O5kJZvIXF306PFuHjtEI4arCjke2D yloGWHaZNCOtXCf3jxTDdhnTSPx60hfL1HSPIxd0hcN/5xDDrkaFyUNlZYSVAVM1 vLqJHZMDxZxNcz1N6g== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:00 2025 by rpki-client