This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json) Hash identifier: NUfRQ2q1h86Nve7MtG2f1xpGYsidpqiVHLie9M7p8Y4= Subject key identifier: 55:E9:14:49:CA:78:B1:E2:EA:1A:A1:00:C2:5B:7C:AE:99:EF:D2:AB Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Certificate serial: 019B6166914D7EA349E0907217AB185C2401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft Manifest number: 11C7 Signing time: Sat 27 Dec 2025 20:01:10 +0000 Manifest this update: Sat 27 Dec 2025 20:01:10 +0000 Manifest next update: Sun 28 Dec 2025 20:01:10 +0000 Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: 3mS3M8hfRaAXhQKqu7faCdf0hFQsso27lvl1X6r680Y=) 2: QUWFgCmw4YvFuNhA76fhRZo1qdA.asa (hash: qlWMvZSHFjKwoiR9XSDKRHRr7ChwOKhh6yQ7lTCbwBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:91:4d:7e:a3:49:e0:90:72:17:ab:18:5c:24:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Validity Not Before: Dec 27 20:01:10 2025 GMT Not After : Dec 28 20:01:10 2025 GMT Subject: CN=55e91449ca78b1e2ea1aa100c25b7cae99efd2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:d9:d0:79:e9:a0:5b:15:c6:72:de:41:42: 2d:ae:d4:63:f8:83:d5:c4:97:27:9c:44:86:22:c2: d7:c8:91:31:f7:df:80:2d:50:c5:f8:e0:7f:72:d7: 1a:73:cd:d7:4c:63:1b:96:9a:1c:00:30:f4:e7:95: 87:7d:b6:ce:28:43:fd:7a:c4:7e:94:ea:ac:79:23: 52:cf:2d:17:52:09:48:31:32:eb:04:53:c5:af:4c: 73:12:62:7d:d1:5a:59:45:5a:cf:e0:3b:b7:33:20: 08:25:87:01:c1:db:2d:ab:a3:c9:1f:60:06:58:6d: 4f:37:26:d3:ba:0b:96:e6:47:0a:82:fc:f7:19:8a: 27:b1:0b:db:38:fa:16:33:1e:00:21:30:b4:eb:fe: bf:6b:d4:6b:70:c5:65:b7:63:a3:bd:22:74:48:71: c0:08:23:9e:10:33:01:9e:d3:20:1c:74:44:9f:9b: 75:11:47:48:16:c4:f0:c2:d4:a1:bf:d2:2f:e9:01: 77:ca:a6:29:70:50:3e:b8:06:01:b9:49:af:2c:81: d8:7d:df:52:88:b6:6c:70:8b:a5:48:34:24:72:53: 01:07:e3:d5:70:63:07:04:6b:97:cd:44:d7:de:6f: 37:fb:99:34:85:52:f8:8f:6c:d0:03:c3:4d:f5:08: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E9:14:49:CA:78:B1:E2:EA:1A:A1:00:C2:5B:7C:AE:99:EF:D2:AB X509v3 Authority Key Identifier: keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f8:e4:68:a0:a0:70:c1:d1:a9:06:0d:c9:b0:d7:9e:74:b0: ba:29:80:36:19:e6:70:3c:f4:ec:2b:c7:d9:de:4c:a2:f5:6c: 19:01:d1:15:21:20:dc:da:ab:94:65:ac:02:94:0f:3c:d7:b5: 68:aa:7f:7b:dd:2a:84:d3:66:83:bb:ba:4a:d9:3d:9a:b7:50: f3:7c:ca:dd:fc:e8:71:34:b3:45:eb:ce:fb:df:03:79:2e:a6: 5c:15:ba:96:c6:b6:62:70:35:fe:2f:cc:0f:65:6f:49:bd:cb: eb:61:1c:64:cb:d4:39:c0:84:b4:31:c5:14:72:fe:3c:03:c0: 62:f4:dd:12:12:ad:e6:f2:5e:a5:09:7c:4f:6a:16:db:30:19: e9:b4:8a:ba:7c:ad:0b:ef:a5:db:6e:32:14:17:71:0c:5d:02: 56:d2:6e:f1:15:a1:8e:13:00:e5:53:03:da:5c:1a:7d:75:23: 51:e4:77:77:83:46:ce:87:ff:60:9c:f3:f4:9f:c2:52:4f:6d: e5:0c:8f:b5:f4:01:27:5c:05:52:1d:f2:cf:fe:6b:14:67:66: fa:cd:36:b9:b8:92:95:86:3f:1c:a3:d5:39:7b:29:27:76:d8: aa:30:84:8c:b0:76:97:4b:90:15:d9:fd:31:86:5f:9f:1d:5b: 0d:83:14:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZpFNfqNJ4JByF6sYXCQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj MjUwZmIwHhcNMjUxMjI3MjAwMTEwWhcNMjUxMjI4MjAwMTEwWjAzMTEwLwYDVQQD Eyg1NWU5MTQ0OWNhNzhiMWUyZWExYWExMDBjMjViN2NhZTk5ZWZkMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRvZ0HnpoFsVxnLeQUItrtRj+IPV xJcnnESGIsLXyJEx99+ALVDF+OB/ctcac83XTGMblpocADD055WHfbbOKEP9esR+ lOqseSNSzy0XUglIMTLrBFPFr0xzEmJ90VpZRVrP4Du3MyAIJYcBwdstq6PJH2AG WG1PNybTuguW5kcKgvz3GYonsQvbOPoWMx4AITC06/6/a9RrcMVlt2OjvSJ0SHHA CCOeEDMBntMgHHREn5t1EUdIFsTwwtShv9Iv6QF3yqYpcFA+uAYBuUmvLIHYfd9S iLZscIulSDQkclMBB+PVcGMHBGuXzUTX3m83+5k0hVL4j2zQA8NN9QiBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXpFEnKeLHi6hqhAMJbfK6Z79KrMB8GA1UdIwQY MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt MmQzZWY5YjBhZDIzLzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvjkaKCg cMHRqQYNybDXnnSwuimANhnmcDz07CvH2d5MovVsGQHRFSEg3NqrlGWsApQPPNe1 aKp/e90qhNNmg7u6Stk9mrdQ83zK3fzocTSzRevO+98DeS6mXBW6lsa2YnA1/i/M D2VvSb3L62EcZMvUOcCEtDHFFHL+PAPAYvTdEhKt5vJepQl8T2oW2zAZ6bSKunyt C++l224yFBdxDF0CVtJu8RWhjhMA5VMD2lwafXUjUeR3d4NGzof/YJzz9J/CUk9t 5QyPtfQBJ1wFUh3yz/5rFGdm+s02ubiSlYY/HKPVOXspJ3bYqjCEjLB2l0uQFdn9 MYZfnx1bDYMUHg== -----END CERTIFICATE-----Generated at Sun Dec 28 03:12:35 2025 by rpki-client