This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json) Hash identifier: SofBVuezzoBpd2UWMYxDzhQOxcWwEsRd5Wd04vcGQy8= Subject key identifier: 4A:08:D1:DC:B3:A6:93:6B:62:E8:D1:E8:D2:C3:BF:8D:63:61:0F:FD Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b Certificate serial: 019B3D59F01876EE122FA804CABC7EF96B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft Manifest number: 0C92 Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: PdaKT0kz9cpmezXgkb092PU0vC8/n1bVSM/hfJeupO8=) 2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f0:18:76:ee:12:2f:a8:04:ca:bc:7e:f9:6b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=4a08d1dcb3a6936b62e8d1e8d2c3bf8d63610ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:06:a0:3c:70:36:0d:63:9a:3e:95:c6:af: d7:bd:17:52:b4:15:8c:84:22:4e:ed:c4:9d:2a:42: 38:d5:87:26:da:4e:6d:ad:74:de:8d:da:4b:c0:3d: e7:02:81:f7:3d:9d:0e:55:d4:c9:0e:50:d3:5f:a2: 06:05:08:ef:8f:a0:85:37:3b:6f:eb:6b:b9:23:ce: b3:23:a2:96:84:a3:75:34:f1:ad:47:f6:9c:a8:2a: 0a:e5:f7:ac:9e:d4:07:78:5d:85:f6:a2:fd:f3:39: 1d:4c:4e:d7:62:40:de:5c:87:a5:ac:ab:b7:47:17: 4c:6c:36:91:62:0e:0e:a0:e1:24:56:78:1b:28:3a: f1:42:0d:d3:0a:47:e3:92:b7:bb:e6:5e:b6:fe:00: ce:cc:c6:68:c7:09:00:35:e8:ad:04:9f:fc:47:85: e9:5f:96:b2:dd:fa:bb:c3:6b:7f:2a:95:cf:c0:06: 12:3e:35:38:80:4e:e1:a7:61:49:00:b6:37:99:a6: 0d:06:e8:20:6e:cd:45:0d:58:86:63:6f:c2:4b:06: fb:c6:bf:28:42:59:31:c2:d9:9b:cd:36:41:73:0a: 48:44:47:0b:42:50:44:f9:e1:23:10:ac:60:65:da: c8:e2:e3:66:c5:42:67:d1:9c:7c:c9:d0:8a:cc:70: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:08:D1:DC:B3:A6:93:6B:62:E8:D1:E8:D2:C3:BF:8D:63:61:0F:FD X509v3 Authority Key Identifier: keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:08:f0:4c:59:44:0e:1d:ee:37:a0:70:b9:53:e1:7c:7f:31: 88:04:0a:f0:44:3e:61:dd:ac:aa:99:80:58:a6:9b:d7:26:dc: 1b:06:d6:0d:ed:5a:ed:3d:36:83:68:7d:2d:4e:d3:56:4a:b6: 13:b5:32:e9:b7:4a:f7:01:17:09:06:8a:b0:fa:30:2b:2e:cb: 08:6a:8f:ee:90:24:61:9a:c3:07:69:b9:7e:43:2a:12:c1:fb: 3f:04:cb:a3:26:36:0d:6e:81:90:ae:55:84:22:94:d0:3b:65: 0e:bc:c3:dc:4e:fc:15:a6:31:05:93:58:08:ab:9d:cd:b0:be: c6:69:a5:69:67:2f:29:23:c2:51:ae:8c:53:e5:91:b6:78:4d: 73:46:7a:ef:58:25:19:e5:a2:f0:b9:8b:b4:7e:90:3e:f6:a3: 1a:43:17:93:a6:6e:95:e0:90:ff:1e:77:78:7a:ae:fb:b2:5d: af:51:d4:f6:14:e0:33:47:07:57:a2:61:34:f4:ac:c6:e6:56: 14:17:c8:c5:22:6a:a6:0b:2d:ae:7b:c2:52:bb:47:9f:2a:ee: c0:dc:3b:ed:52:46:93:c5:ce:0b:79:0a:5e:d0:16:16:47:9e: 15:b5:02:ed:25:7c:70:ef:69:fa:2a:96:d4:19:cb:4b:c1:16: d1:a3:22:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfAYdu4SL6gEyrx++WtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0M2IyMjEzMGFhOWE3NzM0MjU0NzY5ZWMxM2JmZTE3MWZh MWUyOGIwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD Eyg0YTA4ZDFkY2IzYTY5MzZiNjJlOGQxZThkMmMzYmY4ZDYzNjEwZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAoGoDxwNg1jmj6Vxq/XvRdStBWM hCJO7cSdKkI41Ycm2k5trXTejdpLwD3nAoH3PZ0OVdTJDlDTX6IGBQjvj6CFNztv 62u5I86zI6KWhKN1NPGtR/acqCoK5fesntQHeF2F9qL98zkdTE7XYkDeXIelrKu3 RxdMbDaRYg4OoOEkVngbKDrxQg3TCkfjkre75l62/gDOzMZoxwkANeitBJ/8R4Xp X5ay3fq7w2t/KpXPwAYSPjU4gE7hp2FJALY3maYNBuggbs1FDViGY2/CSwb7xr8o QlkxwtmbzTZBcwpIREcLQlBE+eEjEKxgZdrI4uNmxUJn0Zx8ydCKzHC2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoI0dyzppNrYujR6NLDv41jYQ/9MB8GA1UdIwQY MBaAFNQ7IhMKqadzQlR2nsE7/hcfoeKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURzaUV3cXBwM05DVkhhZXdUdi1GeC1oNG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wODA1NjktM2JiNS00NmRlLTgyYmEt YTYzMGMyZWEyM2Y5LzEvMURzaUV3cXBwM05DVkhhZXdUdi1GeC1oNG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wODA1NjktM2JiNS00NmRlLTgyYmEtYTYzMGMyZWEyM2Y5 LzEvMURzaUV3cXBwM05DVkhhZXdUdi1GeC1oNG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQjwTFlE Dh3uN6BwuVPhfH8xiAQK8EQ+Yd2sqpmAWKab1ybcGwbWDe1a7T02g2h9LU7TVkq2 E7Uy6bdK9wEXCQaKsPowKy7LCGqP7pAkYZrDB2m5fkMqEsH7PwTLoyY2DW6BkK5V hCKU0DtlDrzD3E78FaYxBZNYCKudzbC+xmmlaWcvKSPCUa6MU+WRtnhNc0Z671gl GeWi8LmLtH6QPvajGkMXk6ZuleCQ/x53eHqu+7Jdr1HU9hTgM0cHV6JhNPSsxuZW FBfIxSJqpgstrnvCUrtHnyruwNw77VJGk8XOC3kKXtAWFkeeFbUC7SV8cO9p+iqW 1BnLS8EW0aMivA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:30 2025 by rpki-client