This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json) Hash identifier: GkTvoyAhrGTdfoPRGUomVFGUSYkuF0Fex1RQRN9Cx/c= Subject key identifier: 18:97:D5:65:EA:45:22:5E:A6:14:3B:00:29:36:F8:ED:A1:93:51:51 Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Certificate serial: 019B4091ABC357C78B3B5AB8BA3C87B6ED26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft Manifest number: 0E2C Signing time: Sun 21 Dec 2025 11:00:46 +0000 Manifest this update: Sun 21 Dec 2025 11:00:46 +0000 Manifest next update: Mon 22 Dec 2025 11:00:46 +0000 Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: 4d1+lkZHN2VRa6lhj/EQaEYO4/9EhiY2xSm9w5akcPI=) 2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ab:c3:57:c7:8b:3b:5a:b8:ba:3c:87:b6:ed:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Validity Not Before: Dec 21 11:00:46 2025 GMT Not After : Dec 22 11:00:46 2025 GMT Subject: CN=1897d565ea45225ea6143b002936f8eda1935151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2f:19:3c:2a:7e:0d:80:87:2e:2d:a5:e4:f5: b1:de:61:7c:00:4a:c9:d2:44:90:2c:43:47:3d:66: b0:52:ca:6a:05:68:e5:e2:01:ab:68:c1:5e:8b:ed: 00:ee:66:61:73:13:b9:2d:66:22:61:f5:52:56:ed: 2d:eb:5e:d6:c7:cf:0b:d6:c4:dc:4d:0d:65:3a:39: f5:33:94:aa:92:b7:79:10:58:c9:9a:f2:2f:5e:d6: 95:52:2a:fa:1a:de:d0:7e:05:9a:51:f5:6a:28:be: dd:cd:9c:33:b0:ae:7f:07:90:ba:77:43:0f:e2:df: 27:60:da:91:b0:26:1a:da:e0:8f:1a:83:98:98:ad: 6f:86:47:4c:30:0a:0c:17:f8:a7:ed:ef:b0:b5:7d: 58:90:33:14:6a:44:6e:5d:4f:e8:8e:6b:c0:fb:1c: 29:38:19:01:f8:fc:20:b9:06:98:98:5f:32:a7:30: e2:6c:8f:ce:41:17:ca:61:8e:d1:30:a9:50:46:9a: 88:77:1c:f3:d6:89:f0:13:44:fe:54:83:55:28:82: c9:8b:bf:41:62:4f:81:66:ba:12:dd:c6:3b:e8:45: ab:20:76:57:02:04:74:85:56:9b:97:c1:1a:cf:4f: 15:f9:b5:aa:76:7c:c0:6e:c7:c8:f6:c8:3f:93:b3: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:97:D5:65:EA:45:22:5E:A6:14:3B:00:29:36:F8:ED:A1:93:51:51 X509v3 Authority Key Identifier: keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b7:cd:ed:17:74:2b:92:01:1f:fd:77:e4:49:a3:71:4f:c4: 03:92:eb:e1:d6:44:07:13:0b:70:c7:5f:df:b1:12:b0:6d:06: 3e:63:6f:df:46:85:fd:96:36:93:0a:0d:f8:b9:db:de:97:15: 53:18:5e:a4:6a:dd:23:94:36:52:62:4a:f9:18:f2:b1:ce:90: 66:80:2f:fd:c2:6b:75:6b:59:d0:2a:c4:3a:5b:fc:b3:8b:76: 27:7d:2c:71:10:c8:51:a5:85:78:8b:9f:47:7c:b5:d6:f2:dc: 89:ee:09:2d:e5:1f:a5:09:84:04:a6:85:10:86:69:89:94:6f: cb:76:e8:c4:4b:47:63:aa:5a:59:31:96:fb:3a:c9:aa:49:f9: 01:e5:36:9f:60:9c:7c:44:00:49:9c:9f:07:33:56:d5:9a:73: c9:23:fd:f9:f9:79:9a:5d:69:b1:76:b2:e4:7c:8d:a3:37:13: 80:08:57:a0:8e:10:15:16:4e:a4:b3:91:de:b5:24:91:0c:61: cc:a7:fe:ce:1f:09:96:96:cd:1b:94:72:af:f0:53:f1:91:af: ad:10:9c:d8:e0:96:75:48:e4:ca:ce:5f:6e:c4:06:41:bb:ed: 65:00:a7:d0:ab:2b:a4:69:78:41:0b:e0:43:7c:cb:ae:f3:5e: 3c:10:d7:7e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAkavDV8eLO1q4ujyHtu0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj N2U3NjkwHhcNMjUxMjIxMTEwMDQ2WhcNMjUxMjIyMTEwMDQ2WjAzMTEwLwYDVQQD EygxODk3ZDU2NWVhNDUyMjVlYTYxNDNiMDAyOTM2ZjhlZGExOTM1MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y8ZPCp+DYCHLi2l5PWx3mF8AErJ 0kSQLENHPWawUspqBWjl4gGraMFei+0A7mZhcxO5LWYiYfVSVu0t617Wx88L1sTc TQ1lOjn1M5Sqkrd5EFjJmvIvXtaVUir6Gt7QfgWaUfVqKL7dzZwzsK5/B5C6d0MP 4t8nYNqRsCYa2uCPGoOYmK1vhkdMMAoMF/in7e+wtX1YkDMUakRuXU/ojmvA+xwp OBkB+PwguQaYmF8ypzDibI/OQRfKYY7RMKlQRpqIdxzz1onwE0T+VINVKILJi79B Yk+BZroS3cY76EWrIHZXAgR0hVabl8Eaz08V+bWqdnzAbsfI9sg/k7MLRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBiX1WXqRSJephQ7ACk2+O2hk1FRMB8GA1UdIwQY MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2 LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELfN 7Rd0K5IBH/135EmjcU/EA5Lr4dZEBxMLcMdf37ESsG0GPmNv30aF/ZY2kwoN+Lnb 3pcVUxhepGrdI5Q2UmJK+Rjysc6QZoAv/cJrdWtZ0CrEOlv8s4t2J30scRDIUaWF eIufR3y11vLcie4JLeUfpQmEBKaFEIZpiZRvy3boxEtHY6paWTGW+zrJqkn5AeU2 n2CcfEQASZyfBzNW1ZpzySP9+fl5ml1psXay5HyNozcTgAhXoI4QFRZOpLOR3rUk kQxhzKf+zh8JlpbNG5Ryr/BT8ZGvrRCc2OCWdUjkys5fbsQGQbvtZQCn0KsrpGl4 QQvgQ3zLrvNePBDXfg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:58:09 2025 by rpki-client