This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft File: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json) Hash identifier: Nyb9jmXfhOBkGSJSDP9MmdrwX3ewXO7hiAsQEcPfKoI= Subject key identifier: 29:42:47:34:6A:4E:7A:D7:97:C3:6F:9C:7C:DA:EA:6A:CC:4B:D9:D4 Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03 Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603 Certificate serial: 019B3F11AEEBB4B273AB06B13A22281DB564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft Manifest number: 0A70 Signing time: Sun 21 Dec 2025 04:01:22 +0000 Manifest this update: Sun 21 Dec 2025 04:01:22 +0000 Manifest next update: Mon 22 Dec 2025 04:01:22 +0000 Files and hashes: 1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: zm14jqROhbIff4yHW4ppT5g/ly3G7zJWMIVcECA58ow=) 2: gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa (hash: wmCf2vHKgmQUz9n+Y0vqzCgcNZZVl9oSp5p8NfbJ984=) 3: iUuRoiZ7OKWdn5tiTJPNMo7hj3g.roa (hash: /5FZIGj6qOj6g4bM0v7qYUvi2YfwwHhDz9PnhjNz8RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ae:eb:b4:b2:73:ab:06:b1:3a:22:28:1d:b5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603 Validity Not Before: Dec 21 04:01:22 2025 GMT Not After : Dec 22 04:01:22 2025 GMT Subject: CN=294247346a4e7ad797c36f9c7cdaea6acc4bd9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:1b:b2:0a:99:0f:97:86:97:fc:6b:de:5f: a8:14:58:37:68:fe:88:51:4b:a0:23:04:e3:43:13: 17:af:97:b1:0a:c2:d2:77:d9:2f:37:bc:2b:86:75: 95:a9:eb:16:01:ad:be:5a:70:4f:bc:12:97:4b:e3: 4a:6b:ca:cd:ca:f1:41:23:a3:7e:9d:a1:91:0b:2a: a5:34:8f:3b:77:b4:2f:86:f8:9b:0e:30:66:e3:e6: d4:80:13:be:ed:25:73:e6:5e:b6:b4:d0:94:3f:61: 01:ac:cc:de:29:32:a8:1a:c3:ba:03:2c:d7:e8:b3: be:51:d7:5e:c5:24:f5:62:c2:6b:a1:72:cb:6d:0c: 9e:55:97:a7:75:fe:e8:5e:fc:01:83:87:6e:f6:1a: 5f:4f:d7:c4:0a:55:1e:5f:f2:1b:c9:48:6d:81:56: 5d:7b:f4:06:53:4b:fd:85:53:7f:94:62:cf:ee:95: ad:08:e4:e7:5e:4a:f6:c7:8e:bc:27:78:23:6c:ab: 19:6f:b9:c8:b1:f0:8c:46:49:8c:b8:3e:31:46:04: 42:52:94:42:ae:18:ca:3e:61:5c:cc:ca:13:8b:b8: 79:0d:78:12:7d:23:f0:86:28:76:13:17:e6:7d:83: 32:6e:61:0f:d3:ca:ce:a0:d1:cd:23:76:91:d7:3b: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:47:34:6A:4E:7A:D7:97:C3:6F:9C:7C:DA:EA:6A:CC:4B:D9:D4 X509v3 Authority Key Identifier: keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:70:76:ef:a7:cc:b1:d8:1c:1b:cb:96:dd:ec:2c:4a:a7:86: 59:03:3f:b1:05:ba:46:26:44:93:76:d6:bc:1e:01:2e:f6:0d: a0:bf:05:99:39:f7:90:70:e9:5c:f9:b1:a6:15:b4:b6:1c:0a: ad:68:86:51:ba:73:42:98:6f:56:85:a3:4e:33:ec:a5:cb:01: 0b:65:c0:93:41:10:72:84:d5:6f:7b:46:d9:85:8a:2f:38:d3: 83:44:5c:1b:3e:37:a4:55:bf:93:d1:0d:c3:bf:b6:60:a2:e7: 35:3e:e9:f5:cd:70:a4:83:79:00:6a:d7:1c:42:34:b1:5c:0b: af:1d:52:40:d5:12:e8:61:9c:6c:bb:c7:f2:87:13:40:dd:ac: 46:47:a2:ac:c8:b3:20:b6:bc:44:a3:eb:1b:a6:d9:83:1a:ff: d8:f1:a0:49:35:11:ba:61:11:58:20:f2:d9:28:52:3f:07:82: 4f:a1:f1:f8:3e:93:3c:c4:3f:db:31:0b:37:03:59:bc:8a:fc: 21:94:f0:2d:18:8e:08:e9:14:45:4e:24:80:36:b5:05:5c:a8: 92:06:e8:72:93:73:77:24:b9:ae:db:ee:fb:37:d8:42:45:3c: c5:f3:33:ed:ca:50:9d:bd:9d:ad:ae:80:03:e3:4f:da:81:6d: 7f:eb:74:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs/Ea7rtLJzqwaxOiIoHbVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi YzY2MDMwHhcNMjUxMjIxMDQwMTIyWhcNMjUxMjIyMDQwMTIyWjAzMTEwLwYDVQQD EygyOTQyNDczNDZhNGU3YWQ3OTdjMzZmOWM3Y2RhZWE2YWNjNGJkOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4QbsgqZD5eGl/xr3l+oFFg3aP6I UUugIwTjQxMXr5exCsLSd9kvN7wrhnWVqesWAa2+WnBPvBKXS+NKa8rNyvFBI6N+ naGRCyqlNI87d7QvhvibDjBm4+bUgBO+7SVz5l62tNCUP2EBrMzeKTKoGsO6AyzX 6LO+UddexST1YsJroXLLbQyeVZendf7oXvwBg4du9hpfT9fEClUeX/IbyUhtgVZd e/QGU0v9hVN/lGLP7pWtCOTnXkr2x468J3gjbKsZb7nIsfCMRkmMuD4xRgRCUpRC rhjKPmFczMoTi7h5DXgSfSPwhih2ExfmfYMybmEP08rOoNHNI3aR1zvXvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFClCRzRqTnrXl8NvnHza6mrMS9nUMB8GA1UdIwQY MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3 LTYxZDczMzNmODU3MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJkLzNiNTExMC01MTY3LTQ4ZTAtODU5Ny02MWQ3MzMzZjg1 NzAvMS8xLTgwQ000Q0ZjT01mLXlfTjRiaDNCeHk4WmdNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnB2 76fMsdgcG8uW3ewsSqeGWQM/sQW6RiZEk3bWvB4BLvYNoL8FmTn3kHDpXPmxphW0 thwKrWiGUbpzQphvVoWjTjPspcsBC2XAk0EQcoTVb3tG2YWKLzjTg0RcGz43pFW/ k9ENw7+2YKLnNT7p9c1wpIN5AGrXHEI0sVwLrx1SQNUS6GGcbLvH8ocTQN2sRkei rMizILa8RKPrG6bZgxr/2PGgSTURumERWCDy2ShSPweCT6Hx+D6TPMQ/2zELNwNZ vIr8IZTwLRiOCOkURU4kgDa1BVyokgbocpNzdyS5rtvu+zfYQkU8xfMz7cpQnb2d ra6AA+NP2oFtf+t03A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:09 2025 by rpki-client