This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json) Hash identifier: D8Bs5w0F9qgTeVeOceF+pnEm12kmfg46zMEn1UK0/U8= Subject key identifier: 5D:35:C1:52:9B:BA:88:37:4B:69:03:2D:9E:E8:45:14:02:0D:B5:6F Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Certificate serial: 019B1A606707025D0096BA9ED2B504B07516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft Manifest number: 1518 Signing time: Sun 14 Dec 2025 01:01:23 +0000 Manifest this update: Sun 14 Dec 2025 01:01:23 +0000 Manifest next update: Mon 15 Dec 2025 01:01:23 +0000 Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: 5OPgLpu501NPKZamohnRvr9Q8Jwf4IbsNv7B7O7mWWU=) 2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:67:07:02:5d:00:96:ba:9e:d2:b5:04:b0:75:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e Validity Not Before: Dec 14 01:01:23 2025 GMT Not After : Dec 15 01:01:23 2025 GMT Subject: CN=5d35c1529bba88374b69032d9ee84514020db56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:6e:95:7c:b0:f1:a9:2e:f7:c9:9c:da:a6: 37:f3:1b:b7:2b:13:7c:ee:57:de:d1:81:1b:06:77: 28:9d:e9:cf:d9:81:6d:61:f6:64:ab:76:13:ab:27: 02:16:a2:94:b6:43:d2:30:64:42:96:46:b7:61:8f: a9:b9:1c:94:ac:eb:f1:31:4c:ea:c1:de:ce:ac:18: 37:a9:cf:e8:ec:e4:17:c4:03:0c:8a:fd:3e:f4:47: 89:16:5d:89:16:4d:dc:17:9a:f5:31:61:ab:72:30: 92:9c:a4:6e:6a:0b:b6:7a:d2:a8:b3:f7:95:e2:9a: 24:a8:5a:f4:bd:a8:57:ba:7e:a5:50:80:bf:f7:40: 65:74:8d:d0:86:a4:3d:3d:b4:7d:5f:8f:f2:69:d1: 4b:ac:40:96:d3:ca:5f:54:b5:8d:4e:59:65:48:6a: be:14:6f:71:ae:f3:f4:ac:2b:24:d4:12:01:16:66: 70:a2:eb:4c:a0:89:a3:f0:6b:d2:f6:18:9f:d1:72: b6:46:92:86:1c:ee:b0:0a:44:87:47:d3:d5:25:dd: 21:85:a3:dd:1a:6d:e3:a3:18:80:75:8e:64:8d:bd: cb:e8:49:e1:d8:da:77:97:5a:d0:6d:2a:a4:2a:e7: c8:d2:db:8d:27:a9:ff:6c:1a:1a:23:61:6e:29:58: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:35:C1:52:9B:BA:88:37:4B:69:03:2D:9E:E8:45:14:02:0D:B5:6F X509v3 Authority Key Identifier: keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e0:6d:ef:be:57:96:1d:37:86:73:82:9f:c4:76:57:5f:f6: 38:ca:fa:bc:d8:97:b9:a4:0b:36:8b:86:35:5c:71:b6:03:54: 2b:5b:4e:c6:96:15:c5:de:31:41:c2:06:1b:db:fd:63:ae:f1: 2d:21:95:9d:17:cb:09:36:3f:1d:49:05:85:aa:aa:25:c4:95: 7a:48:56:63:30:99:a0:32:8f:65:1d:83:6f:de:6b:44:0e:c1: 71:13:e2:84:8b:6c:2b:e3:52:ef:4b:b9:42:ef:71:16:8a:25: 2f:19:81:22:80:4d:8d:08:b3:f6:f0:aa:e1:ee:ee:9a:18:ad: 7a:7e:f0:b8:ee:84:1d:bf:a9:b8:a1:63:7a:7d:1f:46:50:71: 4f:3e:cd:6f:5f:8b:2e:3c:de:66:b6:28:52:02:c0:06:ee:23: b8:5a:14:d2:40:df:3b:df:eb:31:97:85:34:f8:6d:9e:1a:1c: ea:38:46:04:b3:f8:63:74:65:3a:ad:f1:c7:6e:5d:7e:04:43: 48:5c:ce:c2:00:b0:ab:bc:fb:f2:da:89:8c:a7:01:ad:a0:85: 3b:a1:9f:6a:a9:5a:15:bb:88:99:fe:69:9c:5b:cc:cc:b4:08: b3:34:9e:f2:08:d4:20:92:6b:92:16:2c:70:86:6e:06:6b:96: 23:74:92:ce -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsaYGcHAl0Alrqe0rUEsHUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0 ZmM5OGUwHhcNMjUxMjE0MDEwMTIzWhcNMjUxMjE1MDEwMTIzWjAzMTEwLwYDVQQD Eyg1ZDM1YzE1MjliYmE4ODM3NGI2OTAzMmQ5ZWU4NDUxNDAyMGRiNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ZulXyw8aku98mc2qY38xu3KxN8 7lfe0YEbBnconenP2YFtYfZkq3YTqycCFqKUtkPSMGRClka3YY+puRyUrOvxMUzq wd7OrBg3qc/o7OQXxAMMiv0+9EeJFl2JFk3cF5r1MWGrcjCSnKRuagu2etKos/eV 4pokqFr0vahXun6lUIC/90BldI3QhqQ9PbR9X4/yadFLrECW08pfVLWNTlllSGq+ FG9xrvP0rCsk1BIBFmZwoutMoImj8GvS9hif0XK2RpKGHO6wCkSHR9PVJd0hhaPd Gm3joxiAdY5kjb3L6Enh2Np3l1rQbSqkKufI0tuNJ6n/bBoaI2FuKVju6QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF01wVKbuog3S2kDLZ7oRRQCDbVvMB8GA1UdIwQY MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5 MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouBt 775Xlh03hnOCn8R2V1/2OMr6vNiXuaQLNouGNVxxtgNUK1tOxpYVxd4xQcIGG9v9 Y67xLSGVnRfLCTY/HUkFhaqqJcSVekhWYzCZoDKPZR2Db95rRA7BcRPihItsK+NS 70u5Qu9xFoolLxmBIoBNjQiz9vCq4e7umhiten7wuO6EHb+puKFjen0fRlBxTz7N b1+LLjzeZrYoUgLABu4juFoU0kDfO9/rMZeFNPhtnhoc6jhGBLP4Y3RlOq3xx25d fgRDSFzOwgCwq7z78tqJjKcBraCFO6GfaqlaFbuImf5pnFvMzLQIszSe8gjUIJJr khYscIZuBmuWI3SSzg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:29 2025 by rpki-client