This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json) Hash identifier: M80D1GWXR+ecolrvMTCsYFyZpOrQVnt8iQJTluALWW0= Subject key identifier: 42:FD:4B:2C:44:18:E5:34:C0:FA:26:A3:D8:17:B9:15:55:4E:6A:59 Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Certificate serial: 019B3C7E06A94F318FE096B139D86E34E65F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft Manifest number: 0316 Signing time: Sat 20 Dec 2025 16:00:50 +0000 Manifest this update: Sat 20 Dec 2025 16:00:50 +0000 Manifest next update: Sun 21 Dec 2025 16:00:50 +0000 Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: 09TYYMlf1okubl8iLLhTYMzY6DJvLKhLytFRZI4B3T4=) 2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=) 3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:06:a9:4f:31:8f:e0:96:b1:39:d8:6e:34:e6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Validity Not Before: Dec 20 16:00:50 2025 GMT Not After : Dec 21 16:00:50 2025 GMT Subject: CN=42fd4b2c4418e534c0fa26a3d817b915554e6a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:33:d9:5b:f3:c0:c3:84:44:9e:47:8e:8e: de:04:80:eb:f5:f6:e7:b1:6b:a8:a0:b3:c0:c1:9f: 47:f6:0f:39:bd:de:08:d1:c6:f4:5f:22:bf:a4:eb: b4:f6:33:36:ee:ed:4c:fb:31:6d:5c:8f:85:0f:47: 22:de:5a:8f:40:3a:ee:1f:34:8d:c3:33:94:e2:71: 4c:44:c6:f4:64:67:01:57:ce:e7:0e:02:20:97:ce: 48:a7:ac:e1:f6:86:ed:ab:61:40:ab:ee:ed:3b:6f: 75:6a:85:5b:3c:20:5e:96:d8:20:93:53:fa:31:92: 66:61:4d:66:6f:91:66:4c:0c:59:6a:f6:00:bd:e7: 55:1a:d6:5e:38:97:e9:1f:5d:de:6c:b9:ac:9f:27: c9:12:55:4e:e2:34:35:3d:16:6f:6b:ba:bc:d1:38: 63:08:ad:f8:80:dd:69:2c:b5:44:c7:35:0d:c3:9e: 73:bc:10:d7:68:4e:7b:e1:7c:c4:c3:ea:3c:e9:d7: a8:fd:63:86:b4:ef:18:d8:9c:a1:6a:99:40:7e:fd: 29:bd:eb:50:4e:af:ec:c3:73:54:0a:cd:d9:14:fc: 86:dc:4e:e1:3c:01:ec:8d:bf:45:40:48:98:7b:6e: 56:d2:58:f5:ee:08:9b:97:40:3c:dd:d3:81:20:71: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:4B:2C:44:18:E5:34:C0:FA:26:A3:D8:17:B9:15:55:4E:6A:59 X509v3 Authority Key Identifier: keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:73:f8:07:4a:c1:c0:1d:67:13:6e:cd:6d:48:3e:92:79:98: 08:54:35:24:db:af:d9:cf:ac:fa:31:8e:21:4d:b8:c7:be:57: 64:12:12:b0:8e:29:7d:a2:ef:2d:dc:72:8f:e7:e6:9e:7f:71: b1:44:35:2f:ec:98:88:8d:61:07:97:9d:fa:f1:37:7b:c5:c7: 6b:45:f8:70:b3:14:0b:cb:7d:15:58:a2:67:f3:6e:9b:23:94: be:60:be:25:fa:ec:81:b9:d2:06:9c:ff:85:96:ba:fb:6e:1e: dc:d0:a4:17:a2:5c:41:f0:d1:8a:36:65:f6:09:0b:2d:ab:d6: 64:b4:af:5c:96:42:68:31:8e:65:78:18:44:29:a4:df:1d:27: 54:fc:d5:fa:c9:60:20:90:c9:80:46:1e:70:61:a1:8d:75:7a: 0b:b1:25:6d:18:10:a1:ce:a2:3c:45:c4:bc:f0:41:9f:79:d9: 06:31:7f:ee:60:40:d1:3c:ea:e2:ec:c4:36:e1:c1:32:c7:e4: 62:95:48:d1:27:58:88:1e:57:91:fe:9c:f1:49:e3:48:e5:a4: 34:25:9e:23:6b:f5:42:b1:c2:a6:a5:d1:42:df:eb:de:f9:70: b6:1f:6a:93:a4:41:c3:05:cf:22:9e:67:6f:f3:64:94:3b:15: 52:5f:08:be -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8fgapTzGP4JaxOdhuNOZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw NDRmNTcwHhcNMjUxMjIwMTYwMDUwWhcNMjUxMjIxMTYwMDUwWjAzMTEwLwYDVQQD Eyg0MmZkNGIyYzQ0MThlNTM0YzBmYTI2YTNkODE3YjkxNTU1NGU2YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDUz2VvzwMOERJ5Hjo7eBIDr9fbn sWuooLPAwZ9H9g85vd4I0cb0XyK/pOu09jM27u1M+zFtXI+FD0ci3lqPQDruHzSN wzOU4nFMRMb0ZGcBV87nDgIgl85Ip6zh9obtq2FAq+7tO291aoVbPCBeltggk1P6 MZJmYU1mb5FmTAxZavYAvedVGtZeOJfpH13ebLmsnyfJElVO4jQ1PRZva7q80Thj CK34gN1pLLVExzUNw55zvBDXaE574XzEw+o86deo/WOGtO8Y2JyhaplAfv0pvetQ Tq/sw3NUCs3ZFPyG3E7hPAHsjb9FQEiYe25W0lj17gibl0A83dOBIHGqMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEL9SyxEGOU0wPomo9gXuRVVTmpZMB8GA1UdIwQY MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHP4 B0rBwB1nE27NbUg+knmYCFQ1JNuv2c+s+jGOIU24x75XZBISsI4pfaLvLdxyj+fm nn9xsUQ1L+yYiI1hB5ed+vE3e8XHa0X4cLMUC8t9FViiZ/NumyOUvmC+JfrsgbnS Bpz/hZa6+24e3NCkF6JcQfDRijZl9gkLLavWZLSvXJZCaDGOZXgYRCmk3x0nVPzV +slgIJDJgEYecGGhjXV6C7ElbRgQoc6iPEXEvPBBn3nZBjF/7mBA0Tzq4uzENuHB MsfkYpVI0SdYiB5Xkf6c8UnjSOWkNCWeI2v1QrHCpqXRQt/r3vlwth9qk6RBwwXP Ip5nb/NklDsVUl8Ivg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:30 2025 by rpki-client