This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json) Hash identifier: J2vIWMhVKMuZwIFriu9GL2u6pd9Yj04gXA06Z3+RjRo= Subject key identifier: D2:EE:AC:B0:B0:7C:43:D8:DE:C8:E3:00:B9:6A:ED:DF:32:14:6B:8F Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d Certificate serial: 019B5BD2A5FD6523544FF4CC6FDD9773078A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 18:01:30 +0000 Manifest this update: Fri 26 Dec 2025 18:01:30 +0000 Manifest next update: Sat 27 Dec 2025 18:01:30 +0000 Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: 3xJ49pvRqUJv5tl0E14wCkgKpkI29etiu1XtebtY78Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:a5:fd:65:23:54:4f:f4:cc:6f:dd:97:73:07:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d Validity Not Before: Dec 26 18:01:30 2025 GMT Not After : Dec 27 18:01:30 2025 GMT Subject: CN=d2eeacb0b07c43d8dec8e300b96aeddf32146b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:73:f8:e6:03:2e:89:27:54:d4:c5:dc:15: ef:19:6a:bb:40:87:ff:6e:a2:ec:10:bc:eb:7d:25: 38:9e:35:1c:24:dd:e8:a9:e7:a4:ad:1d:cc:25:b9: dd:3a:14:34:a4:a0:a4:e6:2d:af:78:63:66:a3:7d: ab:cb:f3:d9:da:7c:af:20:c8:85:f5:f1:fb:f2:15: b6:31:a0:4a:8e:42:21:c5:4b:70:59:db:cd:29:f3: 6c:1b:25:a4:a6:9a:e3:1c:71:fd:09:23:77:ce:65: bf:17:97:24:a5:60:b5:96:27:9a:bf:b9:27:96:25: 41:c9:e7:98:06:ec:d9:3d:93:ca:9a:52:e6:9c:08: f8:9f:d6:fe:84:b0:e8:d4:fb:70:46:83:dd:59:5c: e7:e7:f2:57:2a:09:9f:57:3c:31:a3:2b:23:10:3e: ef:bc:b9:9a:56:67:a2:fe:d3:31:5e:79:8f:10:c3: f6:2e:bb:b8:5b:e1:c4:58:1b:2b:7a:44:d1:6a:19: d2:b3:c9:61:92:2f:d5:da:a8:fb:1a:a5:03:96:c1: 4a:a1:0d:d3:ac:aa:22:ee:77:1d:29:5f:23:39:f5: 3a:cd:d6:10:c4:0e:ec:df:52:67:28:37:9b:f4:55: fe:48:5a:8f:69:a8:cb:d6:6f:a1:cc:99:07:28:36: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:AC:B0:B0:7C:43:D8:DE:C8:E3:00:B9:6A:ED:DF:32:14:6B:8F X509v3 Authority Key Identifier: keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:32:55:ae:1f:f2:49:b7:88:15:d3:ac:62:b9:44:b3:ff:de: fa:d4:bf:f6:6b:b2:3b:04:57:db:d3:1a:84:89:5f:44:fd:b3: 99:ff:b5:bd:6a:f9:01:f6:0e:60:27:08:f9:23:61:ad:cd:30: 3a:17:1f:05:cb:6f:8e:4d:10:da:fc:66:a8:b2:82:5d:57:5c: 3a:c1:df:98:23:b8:25:7f:d4:32:f5:f3:80:a2:98:20:be:15: d8:66:09:46:d5:6b:5b:9f:b1:82:46:84:de:d7:61:c9:d2:a0: e4:c0:8a:c8:a2:66:85:a1:12:8c:8a:88:a0:0f:b4:64:f0:cc: 8e:9f:2f:34:09:a3:9d:de:60:c0:e4:98:fb:42:e0:8a:2b:72: 46:94:78:f1:56:e0:9a:ec:87:bb:12:20:27:12:59:37:11:bd: e5:5a:4d:bf:59:96:c3:3a:1f:eb:75:2a:d0:b2:6a:9b:6a:50: 84:85:3a:c8:1c:27:17:5f:68:0b:26:8a:1a:0b:ad:0d:76:15: 49:82:a5:6b:82:93:d0:8e:34:51:cf:be:1a:f3:cd:9c:82:5f: 10:91:ac:5a:46:e9:82:a7:6e:34:66:79:39:23:15:75:15:c3: 2c:96:96:e3:8d:1c:92:da:dc:a0:9b:8f:44:cd:8f:c0:6a:4d: fb:4b:3c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0qX9ZSNUT/TMb92XcweKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTNiMGJkM2Q2MjQxODAzMjlkMjFhM2VjZGNjYTFiMmZi ZWRlNmQwHhcNMjUxMjI2MTgwMTMwWhcNMjUxMjI3MTgwMTMwWjAzMTEwLwYDVQQD EyhkMmVlYWNiMGIwN2M0M2Q4ZGVjOGUzMDBiOTZhZWRkZjMyMTQ2YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnZz+OYDLoknVNTF3BXvGWq7QIf/ bqLsELzrfSU4njUcJN3oqeekrR3MJbndOhQ0pKCk5i2veGNmo32ry/PZ2nyvIMiF 9fH78hW2MaBKjkIhxUtwWdvNKfNsGyWkpprjHHH9CSN3zmW/F5ckpWC1lieav7kn liVByeeYBuzZPZPKmlLmnAj4n9b+hLDo1PtwRoPdWVzn5/JXKgmfVzwxoysjED7v vLmaVmei/tMxXnmPEMP2Lru4W+HEWBsrekTRahnSs8lhki/V2qj7GqUDlsFKoQ3T rKoi7ncdKV8jOfU6zdYQxA7s31JnKDeb9FX+SFqPaajL1m+hzJkHKDbNuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLurLCwfEPY3sjjALlq7d8yFGuPMB8GA1UdIwQY MBaAFKdTsL09YkGAMp0ho+zcyhsvvt5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMt OWEyNjJmZjQ2MjZjLzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMtOWEyNjJmZjQ2MjZj LzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDJVrh/y SbeIFdOsYrlEs//e+tS/9muyOwRX29MahIlfRP2zmf+1vWr5AfYOYCcI+SNhrc0w OhcfBctvjk0Q2vxmqLKCXVdcOsHfmCO4JX/UMvXzgKKYIL4V2GYJRtVrW5+xgkaE 3tdhydKg5MCKyKJmhaESjIqIoA+0ZPDMjp8vNAmjnd5gwOSY+0LgiityRpR48Vbg muyHuxIgJxJZNxG95VpNv1mWwzof63Uq0LJqm2pQhIU6yBwnF19oCyaKGgutDXYV SYKla4KT0I40Uc++GvPNnIJfEJGsWkbpgqduNGZ5OSMVdRXDLJaW440cktrcoJuP RM2PwGpN+0s87Q== -----END CERTIFICATE-----Generated at Sat Dec 27 04:07:19 2025 by rpki-client