This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json) Hash identifier: IFYdjlxSzW33bj9iQwRzrpOOsiq4oQtqCXd9gHiynRI= Subject key identifier: 44:EE:EE:94:07:CC:CC:30:83:21:F8:4A:64:27:46:23:47:CB:83:8E Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Certificate serial: 019B258883F2506A799EB45ED6457FDB4AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft Manifest number: 11A8 Signing time: Tue 16 Dec 2025 05:01:02 +0000 Manifest this update: Tue 16 Dec 2025 05:01:02 +0000 Manifest next update: Wed 17 Dec 2025 05:01:02 +0000 Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: 7CchRTcqV/D+evYltyeRZMI/29PAQdqEdc5nTBs8NyY=) 2: QUWFgCmw4YvFuNhA76fhRZo1qdA.asa (hash: qlWMvZSHFjKwoiR9XSDKRHRr7ChwOKhh6yQ7lTCbwBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:83:f2:50:6a:79:9e:b4:5e:d6:45:7f:db:4a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Validity Not Before: Dec 16 05:01:02 2025 GMT Not After : Dec 17 05:01:02 2025 GMT Subject: CN=44eeee9407cccc308321f84a6427462347cb838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:98:a2:b1:b5:67:7c:2c:9f:e4:07:1b:a3: 8b:86:64:1d:af:d7:fb:49:5f:33:31:1a:4a:35:6d: cf:2d:c8:fa:56:cd:20:c3:41:78:62:5c:56:1e:d6: 06:d4:f7:68:5e:d8:a3:8a:f6:10:2e:1e:20:85:3e: 59:d8:60:5e:92:d9:74:83:3c:00:e3:5a:bc:6d:00: cf:5f:1a:75:71:f7:68:8f:65:18:f8:ea:76:3f:b3: c1:33:40:43:e0:f8:9b:7a:bd:77:58:51:ac:dc:4b: 71:60:80:28:42:69:e0:e0:f5:69:f2:c3:83:d3:8f: 88:a9:8d:91:03:9a:a7:cd:08:7b:6f:3b:b8:e5:ff: 2b:17:e0:d0:1c:9e:44:04:86:04:cd:4d:fe:ec:a7: 0b:c6:15:51:12:20:a3:14:a5:4a:23:f0:ab:2e:e0: 20:d1:bd:93:96:82:61:d6:91:ea:18:9f:b9:ed:b2: 33:4f:06:6a:1a:a1:a1:4b:e3:46:b4:11:d0:ae:89: e7:99:11:4a:da:a5:97:e5:72:c5:bf:57:5d:9f:d6: 4c:b1:bb:75:be:84:11:f9:25:8d:c9:b4:2d:8a:4a: 2a:ba:4a:f0:87:e6:f2:87:20:75:cf:ba:66:03:fd: ac:64:a9:c6:88:49:8a:9b:3f:ba:dd:d5:7f:7e:f6: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EE:EE:94:07:CC:CC:30:83:21:F8:4A:64:27:46:23:47:CB:83:8E X509v3 Authority Key Identifier: keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:47:6f:43:f2:63:07:16:bf:04:5f:e4:ab:bc:ab:44:5a:dd: 0e:08:af:e4:46:93:22:52:85:47:0b:bc:87:f9:3f:de:5c:f9: f2:ef:7b:08:cd:9a:01:6f:54:42:69:07:7c:52:72:ef:f2:57: 7d:b0:62:af:ff:07:4f:49:f3:82:9d:17:13:d2:e1:72:20:b3: 38:4e:d9:32:96:9c:cf:03:c4:ce:b7:38:97:30:10:41:e6:af: ec:76:85:ac:d2:42:1f:81:5a:33:98:7c:fb:ca:4d:57:8f:51: c5:14:9a:29:8b:45:1f:8b:7b:eb:d2:32:26:b9:80:68:8c:09: a9:3a:01:08:86:dd:c7:4d:ec:8c:4d:72:49:a0:f4:c7:d2:9a: 73:61:e1:07:99:c1:4e:13:bc:10:6f:4b:54:ca:fc:f6:18:aa: 05:0f:e1:a0:1e:38:44:c2:7c:f1:8e:24:2a:94:0e:55:57:c7: 6f:21:17:6f:6e:86:b6:aa:7e:6b:04:aa:39:a5:6a:f3:46:ae: b1:ee:92:fe:45:e4:3b:a0:0f:7b:6c:67:5e:99:1a:6e:ce:86: d2:06:e3:3d:64:79:b6:5a:2c:03:6b:ba:11:c7:36:37:37:6d: af:e8:42:3c:b1:26:74:a0:ce:08:2a:18:5f:00:59:4f:d8:9c: d6:66:85:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliIPyUGp5nrRe1kV/20rRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj MjUwZmIwHhcNMjUxMjE2MDUwMTAyWhcNMjUxMjE3MDUwMTAyWjAzMTEwLwYDVQQD Eyg0NGVlZWU5NDA3Y2NjYzMwODMyMWY4NGE2NDI3NDYyMzQ3Y2I4MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BqYorG1Z3wsn+QHG6OLhmQdr9f7 SV8zMRpKNW3PLcj6Vs0gw0F4YlxWHtYG1PdoXtijivYQLh4ghT5Z2GBektl0gzwA 41q8bQDPXxp1cfdoj2UY+Op2P7PBM0BD4Piber13WFGs3EtxYIAoQmng4PVp8sOD 04+IqY2RA5qnzQh7bzu45f8rF+DQHJ5EBIYEzU3+7KcLxhVREiCjFKVKI/CrLuAg 0b2TloJh1pHqGJ+57bIzTwZqGqGhS+NGtBHQronnmRFK2qWX5XLFv1ddn9ZMsbt1 voQR+SWNybQtikoqukrwh+byhyB1z7pmA/2sZKnGiEmKmz+63dV/fvYIEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETu7pQHzMwwgyH4SmQnRiNHy4OOMB8GA1UdIwQY MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt MmQzZWY5YjBhZDIzLzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkdvQ/Jj Bxa/BF/kq7yrRFrdDgiv5EaTIlKFRwu8h/k/3lz58u97CM2aAW9UQmkHfFJy7/JX fbBir/8HT0nzgp0XE9LhciCzOE7ZMpaczwPEzrc4lzAQQeav7HaFrNJCH4FaM5h8 +8pNV49RxRSaKYtFH4t769IyJrmAaIwJqToBCIbdx03sjE1ySaD0x9Kac2HhB5nB ThO8EG9LVMr89hiqBQ/hoB44RMJ88Y4kKpQOVVfHbyEXb26Gtqp+awSqOaVq80au se6S/kXkO6APe2xnXpkabs6G0gbjPWR5tlosA2u6Ecc2Nzdtr+hCPLEmdKDOCCoY XwBZT9ic1maFYw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:48:31 2025 by rpki-client