This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json) Hash identifier: vq1fVI/QCQWDwF4aYuME3iirKxZnjeElFrTgxi/7lmc= Subject key identifier: 5E:92:88:B9:49:C4:E1:01:99:72:E6:B8:F3:A0:AF:14:1D:39:93:53 Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Certificate serial: 019B2EF976B002115C5BB62810BD60942611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft Manifest number: 0E9D Signing time: Thu 18 Dec 2025 01:00:59 +0000 Manifest this update: Thu 18 Dec 2025 01:00:59 +0000 Manifest next update: Fri 19 Dec 2025 01:00:59 +0000 Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: bW9P2Jsvat9BnD5inPqjgsnB+VAX4MhIZbYhHsY0WCA=) 2: M1kVheswqf8ij0x2nrQ-DKJ80bw.roa (hash: yMSCzGCO+yw4klt7Sg0l/zNTUp3KJulcSXgC+xqFL10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:76:b0:02:11:5c:5b:b6:28:10:bd:60:94:26:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Validity Not Before: Dec 18 01:00:59 2025 GMT Not After : Dec 19 01:00:59 2025 GMT Subject: CN=5e9288b949c4e1019972e6b8f3a0af141d399353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:99:d4:6b:82:fa:80:c1:7a:fb:75:c1:50: 55:95:08:a5:54:1b:34:1c:9f:04:25:c7:94:68:ad: 0f:60:08:07:34:10:39:15:45:c8:fe:d2:05:3f:29: bb:a3:a4:b9:58:ae:72:8c:54:21:07:0b:f7:d6:bc: 65:d9:5a:a7:c5:cf:8f:6e:d7:c5:43:3d:ee:7b:b3: a5:6d:bd:92:65:84:fd:d1:94:da:8a:83:a1:97:e9: 40:c1:29:23:8f:38:a9:a0:ae:7c:94:e6:f6:cf:d2: 7d:f0:41:3d:68:0b:b9:a7:cb:cd:67:9b:6f:90:77: b1:fd:2d:30:43:65:a5:d6:22:f9:6d:72:cd:5d:76: 92:7a:6d:13:c6:03:4a:85:ca:e3:bb:05:32:2d:9e: de:ea:1f:a3:78:94:40:db:79:c7:4c:59:cf:5b:11: 68:05:db:c1:43:01:01:57:1c:ee:9a:81:19:82:4a: 1d:3c:d7:da:e0:df:1f:f7:7a:47:83:c1:7b:4b:cf: 73:39:ec:d9:df:01:ce:f6:bb:61:dd:f5:1f:44:2d: 76:7d:5f:17:39:7f:8d:01:07:e9:d8:56:56:80:95: c6:64:9c:4b:36:8e:51:7e:c3:8c:8a:7e:36:5f:f1: 39:46:25:f4:23:dd:31:7f:52:4b:e6:ca:e1:4c:64: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:88:B9:49:C4:E1:01:99:72:E6:B8:F3:A0:AF:14:1D:39:93:53 X509v3 Authority Key Identifier: keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7d:bc:45:25:3f:46:5d:ca:53:cc:74:c1:b8:ba:7e:3b:63: ea:f9:56:24:6d:e6:14:3b:83:d3:fa:30:42:95:8b:89:0d:55: 01:6b:1c:41:b8:a0:3f:bf:ef:95:aa:96:d1:c6:0a:34:7e:f3: 63:0e:80:20:3a:2a:e6:5b:cb:5b:e4:60:53:a3:2c:8b:ec:16: 1b:a4:bb:fc:b3:53:97:44:6c:77:01:fb:82:48:0d:b7:c2:a9: f5:e0:eb:30:7f:2b:06:d8:b9:f1:ef:bf:74:67:61:92:a1:77: 53:5f:27:0a:81:de:e5:ed:d9:41:85:53:fb:5b:00:6a:1d:86: 8b:59:c3:1e:14:13:44:68:70:d7:4f:a5:41:e5:6c:9c:4b:5c: da:b3:ee:7a:dc:ee:b6:82:80:e0:cc:3a:e9:c8:f1:06:ff:03: be:6b:17:27:b7:bc:17:55:46:5c:ac:9b:8c:1a:51:ad:42:0b: d4:06:3f:f3:3f:bd:7b:93:33:e4:c6:5e:6d:52:b8:f4:bf:b2: 8b:e4:3f:f2:bb:f5:c6:00:61:50:e3:8e:92:aa:32:d9:f2:aa: 6d:af:65:0c:5a:f5:b1:95:a4:11:b7:63:03:9e:38:0c:be:c4: dc:58:5c:64:1b:34:5b:a6:a8:b0:bd:96:82:33:a4:bb:12:e8: 26:f5:10:18 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsu+XawAhFcW7YoEL1glCYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MWQyMGM5MmM2NTM5YWQ2NmRhODdjN2NmZTY1YTlmYWFj Y2EwNjMwHhcNMjUxMjE4MDEwMDU5WhcNMjUxMjE5MDEwMDU5WjAzMTEwLwYDVQQD Eyg1ZTkyODhiOTQ5YzRlMTAxOTk3MmU2YjhmM2EwYWYxNDFkMzk5MzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCGZ1GuC+oDBevt1wVBVlQilVBs0 HJ8EJceUaK0PYAgHNBA5FUXI/tIFPym7o6S5WK5yjFQhBwv31rxl2Vqnxc+PbtfF Qz3ue7Olbb2SZYT90ZTaioOhl+lAwSkjjzipoK58lOb2z9J98EE9aAu5p8vNZ5tv kHex/S0wQ2Wl1iL5bXLNXXaSem0TxgNKhcrjuwUyLZ7e6h+jeJRA23nHTFnPWxFo BdvBQwEBVxzumoEZgkodPNfa4N8f93pHg8F7S89zOezZ3wHO9rth3fUfRC12fV8X OX+NAQfp2FZWgJXGZJxLNo5RfsOMin42X/E5RiX0I90xf1JL5srhTGQ8HQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF6SiLlJxOEBmXLmuPOgrxQdOZNTMB8GA1UdIwQY MBaAFPkdIMksZTmtZtqHx8/mWp+qzKBjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SMGd5U3hsT2ExbTJvZkh6LVphbjZyTW9HTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZTY1MTNmLTcxNzUtNDYzYi1hZTg1 LWMxOGU0N2JkOWM2NC8xLzEtUjBneVN4bE9hMW0yb2ZIei1aYW42ck1vR00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I1L2U2NTEzZi03MTc1LTQ2M2ItYWU4NS1jMThlNDdiZDlj NjQvMS8xLVIwZ3lTeGxPYTFtMm9mSHotWmFuNnJNb0dNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin28 RSU/Rl3KU8x0wbi6fjtj6vlWJG3mFDuD0/owQpWLiQ1VAWscQbigP7/vlaqW0cYK NH7zYw6AIDoq5lvLW+RgU6Msi+wWG6S7/LNTl0RsdwH7gkgNt8Kp9eDrMH8rBti5 8e+/dGdhkqF3U18nCoHe5e3ZQYVT+1sAah2Gi1nDHhQTRGhw10+lQeVsnEtc2rPu etzutoKA4Mw66cjxBv8DvmsXJ7e8F1VGXKybjBpRrUIL1AY/8z+9e5Mz5MZebVK4 9L+yi+Q/8rv1xgBhUOOOkqoy2fKqba9lDFr1sZWkEbdjA544DL7E3FhcZBs0W6ao sL2WgjOkuxLoJvUQGA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:05:40 2025 by rpki-client