This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json) Hash identifier: cKZFZ+GNMmWcjKLx277IG0+aTpEKfsy+bScgfIDUWSg= Subject key identifier: 28:06:6B:3A:C2:59:5A:3B:AB:CE:49:2B:49:92:2E:BC:A4:9B:37:49 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019B3A21C53FB7F783F4563F4130C2A8E611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft Manifest number: 0A54 Signing time: Sat 20 Dec 2025 05:00:50 +0000 Manifest this update: Sat 20 Dec 2025 05:00:50 +0000 Manifest next update: Sun 21 Dec 2025 05:00:50 +0000 Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=) 2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: ahRDVMiTSGR1ZFqo1+MiBqm0jtbeE1xQeH2IFcxfBLQ=) 3: 9Q9cRSrqO0gGZAuxW3CcT54BmRw.roa (hash: xBLy6u0/M+XEaIsdpfHtNWSuIplbcblmlQJP4tu98tI=) 4: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=) 5: Fp3Bc4KlexjPquIQYqHT2u4idYY.roa (hash: FBIjAIhPWNb74EivXlWLk+ANKo/lf5tCnraIq5V/Hkk=) 6: Ocy8B8GYPCZGmS9JKWpHx-7xVE0.roa (hash: OAvrh5o6OA/RrTaG3tWg2tqIxQuUrrMi/BaxLjPughU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:c5:3f:b7:f7:83:f4:56:3f:41:30:c2:a8:e6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Dec 20 05:00:50 2025 GMT Not After : Dec 21 05:00:50 2025 GMT Subject: CN=28066b3ac2595a3babce492b49922ebca49b3749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:ae:f3:7f:ed:26:e4:29:04:42:78:44:98: 1f:ca:38:b7:48:55:84:b2:71:1d:cc:2f:60:34:96: 14:99:4a:53:47:f4:37:e8:a4:d3:ca:19:a6:18:8b: 11:37:5e:aa:b7:c3:21:4f:ae:32:fd:5a:f7:89:c0: 37:92:30:a5:a0:66:f0:5f:a5:94:76:f4:1b:e9:00: 4e:2d:b8:f6:7a:98:83:d8:d5:1f:f2:91:0f:f1:19: 36:99:a8:fa:59:49:96:e9:9f:8c:24:9d:7e:94:56: 89:b3:40:14:bd:7e:c8:f9:18:4e:a4:5f:1f:e0:b1: e8:af:13:2a:32:64:39:89:fd:16:b2:de:61:a0:a5: ab:f2:4c:ae:b2:14:2e:9b:2a:77:c2:55:0a:82:bb: eb:12:80:e0:de:dc:72:fe:88:bb:0c:87:08:62:38: 89:4c:cb:d8:56:b7:27:47:13:f0:a4:1a:c5:f8:d8: 7a:8b:a5:41:aa:94:4f:12:01:48:f0:1f:46:1c:40: aa:fe:b7:bb:5e:c9:cf:38:0f:80:8f:b8:bb:45:ec: a9:7c:37:ad:4f:2c:7b:34:4d:96:d2:15:8a:7b:8c: 68:80:27:a0:b4:b7:15:1f:d7:8e:4e:70:d4:ff:99: 75:f0:d3:99:14:45:5a:6a:4c:2f:36:98:48:02:50: fa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:06:6B:3A:C2:59:5A:3B:AB:CE:49:2B:49:92:2E:BC:A4:9B:37:49 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:61:c5:fc:fc:66:5b:8d:3a:c9:71:06:c2:6c:86:e7:ed:b1: da:74:71:f0:f3:9c:0e:9b:e0:80:ef:bb:4c:14:d5:95:eb:b8: 8b:4f:41:d7:5b:02:b7:ee:b6:ef:d8:a4:d9:7f:e4:18:32:cf: f7:33:4b:2e:0d:c6:a4:de:1d:59:03:3e:9f:38:33:d7:7b:4d: ca:c5:b6:36:52:1f:cc:09:b9:05:5c:a1:96:61:6a:a1:51:5f: 9f:2e:83:26:de:55:5b:74:88:f8:ba:2b:22:c8:9a:f4:08:ba: d8:d7:d4:20:3e:42:10:56:a9:77:f1:4a:72:4a:32:73:0f:ef: 00:e8:6f:c8:59:b1:19:94:ee:f6:65:e1:a6:60:86:4e:11:71: c6:f1:fd:3d:b9:0e:1d:ee:7c:1b:ff:89:76:eb:e2:0c:c2:1f: b4:52:2b:69:cb:e4:f8:83:b1:34:85:67:a2:44:42:62:06:ae: 11:54:cc:3d:39:e4:f3:d3:a4:b4:eb:40:09:cc:89:53:e1:3e: 2a:2f:b2:2a:23:45:f0:66:ee:1e:ed:b1:f0:8f:50:23:51:5f: 45:85:6b:fd:36:7e:c0:68:5f:06:e2:04:a5:c9:a8:95:27:c2: 09:58:2a:3a:f9:d4:ad:10:ad:01:e3:7a:bf:1e:6c:d1:b5:ad: fe:91:a5:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IcU/t/eD9FY/QTDCqOYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjUxMjIwMDUwMDUwWhcNMjUxMjIxMDUwMDUwWjAzMTEwLwYDVQQD EygyODA2NmIzYWMyNTk1YTNiYWJjZTQ5MmI0OTkyMmViY2E0OWIzNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Ku83/tJuQpBEJ4RJgfyji3SFWE snEdzC9gNJYUmUpTR/Q36KTTyhmmGIsRN16qt8MhT64y/Vr3icA3kjCloGbwX6WU dvQb6QBOLbj2epiD2NUf8pEP8Rk2maj6WUmW6Z+MJJ1+lFaJs0AUvX7I+RhOpF8f 4LHorxMqMmQ5if0Wst5hoKWr8kyushQumyp3wlUKgrvrEoDg3txy/oi7DIcIYjiJ TMvYVrcnRxPwpBrF+Nh6i6VBqpRPEgFI8B9GHECq/re7XsnPOA+Aj7i7ReypfDet Tyx7NE2W0hWKe4xogCegtLcVH9eOTnDU/5l18NOZFEVaakwvNphIAlD69QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgGazrCWVo7q85JK0mSLrykmzdJMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmHF/Pxm W406yXEGwmyG5+2x2nRx8POcDpvggO+7TBTVleu4i09B11sCt+6279ik2X/kGDLP 9zNLLg3GpN4dWQM+nzgz13tNysW2NlIfzAm5BVyhlmFqoVFfny6DJt5VW3SI+Lor Isia9Ai62NfUID5CEFapd/FKckoycw/vAOhvyFmxGZTu9mXhpmCGThFxxvH9PbkO He58G/+JduviDMIftFIracvk+IOxNIVnokRCYgauEVTMPTnk89OktOtACcyJU+E+ Ki+yKiNF8GbuHu2x8I9QI1FfRYVr/TZ+wGhfBuIEpcmolSfCCVgqOvnUrRCtAeN6 vx5s0bWt/pGl3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:09 2025 by rpki-client