This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json) Hash identifier: jt1jvDRUG/Wmgdoa91vsOPNWC/G+NxPQUE9AJSx5aYE= Subject key identifier: B5:BA:73:34:76:2E:87:4C:A7:26:7C:8F:81:84:64:12:76:49:FE:8B Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Certificate serial: 019B5907EC139EA1FBC84B5FCD51E236AC1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 05:00:49 +0000 Manifest this update: Fri 26 Dec 2025 05:00:49 +0000 Manifest next update: Sat 27 Dec 2025 05:00:49 +0000 Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: wY6CiQ6ymofHyOTcO7/xG3cXkD7AConE+R6AqpyO7Tk=) 2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:ec:13:9e:a1:fb:c8:4b:5f:cd:51:e2:36:ac:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Validity Not Before: Dec 26 05:00:49 2025 GMT Not After : Dec 27 05:00:49 2025 GMT Subject: CN=b5ba7334762e874ca7267c8f818464127649fe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:0c:7a:07:bf:fb:d5:ad:79:58:3b:d6:5b: 99:36:7e:b3:4c:bd:85:15:e9:a1:ac:c8:11:00:49: 9a:40:01:5f:d8:4b:69:65:41:f7:11:8b:18:85:c3: 30:e0:1c:d2:aa:dc:14:0a:8d:d2:eb:40:39:9e:0e: b1:38:35:2b:06:09:4e:82:5d:0c:62:25:b6:bc:1c: 9a:2f:b1:cf:dc:f7:18:ae:9d:94:a7:dd:dc:ac:5e: 17:9f:86:3d:56:b1:13:be:2f:47:41:b3:61:9b:27: 96:d0:e0:56:99:5c:88:7f:ff:de:68:31:33:12:a0: 03:fc:00:a7:fa:75:df:e2:84:1a:53:f2:b8:95:79: 80:69:f9:76:39:e7:b4:94:99:06:75:2e:30:ba:f3: 9c:6b:aa:32:c8:de:ab:35:29:04:ea:ab:0e:b8:d0: dc:d2:15:17:32:75:ae:9b:19:a8:b8:1a:a7:43:2f: 07:f6:ab:d2:c0:65:1f:9e:d2:04:42:49:b6:c8:89: ca:84:c5:d7:5c:69:a9:1f:de:90:1f:16:2f:c2:47: 01:0a:38:b5:c0:1a:81:ad:2d:4d:4d:0f:51:b3:e3: e4:f8:66:42:05:93:cd:a3:b0:e0:44:47:fa:82:2d: 20:f9:82:31:7d:b1:a9:7c:23:0e:dc:50:77:0c:2a: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:73:34:76:2E:87:4C:A7:26:7C:8F:81:84:64:12:76:49:FE:8B X509v3 Authority Key Identifier: keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e1:77:f9:bc:ab:7a:ce:4c:52:43:33:fe:fb:dc:bf:7a:38: 1f:db:19:86:68:0a:87:66:b9:9b:c7:e9:bb:33:a7:18:19:da: 88:ec:73:25:0b:c8:ec:e9:66:38:bc:b9:2c:8c:7c:72:cc:1d: 32:fb:c6:fd:a2:d1:ac:93:88:86:39:26:03:f4:fe:19:af:24: a5:36:88:dd:50:49:8e:35:c8:b8:75:13:ab:a4:4c:fc:d9:0f: 3f:d8:1e:f5:bb:d9:e3:57:c0:88:66:d5:9a:82:a6:81:19:e8: c6:ab:9c:5b:ff:52:e0:41:cf:57:34:d4:ed:2c:9f:48:f8:8b: 0c:e4:e3:76:18:0b:fa:55:c0:a0:7c:81:aa:1d:89:7d:ca:a0: 58:21:c1:98:f0:ca:58:67:88:15:16:c0:5e:00:2a:47:6f:b0: 56:3c:4a:a7:be:4e:96:a3:a0:4b:a8:06:ac:2e:66:fd:1b:1a: 4f:5f:43:d5:bd:86:f7:73:f3:0b:46:1c:02:37:fa:33:b7:48: 88:f5:52:c9:6b:a2:b9:98:0d:a7:d7:f9:4e:fd:1f:0d:49:2d: 05:d5:94:1b:97:bb:05:68:ca:d3:31:b0:3e:44:cf:41:3c:01: 1b:2d:bf:ea:06:de:64:27:08:de:7d:48:f7:a2:e3:86:a2:25: 3b:3c:36:8b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZB+wTnqH7yEtfzVHiNqwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi NzZmMDAwHhcNMjUxMjI2MDUwMDQ5WhcNMjUxMjI3MDUwMDQ5WjAzMTEwLwYDVQQD EyhiNWJhNzMzNDc2MmU4NzRjYTcyNjdjOGY4MTg0NjQxMjc2NDlmZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr18Mege/+9WteVg71luZNn6zTL2F FemhrMgRAEmaQAFf2EtpZUH3EYsYhcMw4BzSqtwUCo3S60A5ng6xODUrBglOgl0M YiW2vByaL7HP3PcYrp2Up93crF4Xn4Y9VrETvi9HQbNhmyeW0OBWmVyIf//eaDEz EqAD/ACn+nXf4oQaU/K4lXmAafl2Oee0lJkGdS4wuvOca6oyyN6rNSkE6qsOuNDc 0hUXMnWumxmouBqnQy8H9qvSwGUfntIEQkm2yInKhMXXXGmpH96QHxYvwkcBCji1 wBqBrS1NTQ9Rs+Pk+GZCBZPNo7DgREf6gi0g+YIxfbGpfCMO3FB3DCo6cQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLW6czR2LodMpyZ8j4GEZBJ2Sf6LMB8GA1UdIwQY MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1 LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOF3 +byres5MUkMz/vvcv3o4H9sZhmgKh2a5m8fpuzOnGBnaiOxzJQvI7OlmOLy5LIx8 cswdMvvG/aLRrJOIhjkmA/T+Ga8kpTaI3VBJjjXIuHUTq6RM/NkPP9ge9bvZ41fA iGbVmoKmgRnoxqucW/9S4EHPVzTU7SyfSPiLDOTjdhgL+lXAoHyBqh2JfcqgWCHB mPDKWGeIFRbAXgAqR2+wVjxKp75OlqOgS6gGrC5m/RsaT19D1b2G93PzC0YcAjf6 M7dIiPVSyWuiuZgNp9f5Tv0fDUktBdWUG5e7BWjK0zGwPkTPQTwBGy2/6gbeZCcI 3n1I96LjhqIlOzw2iw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:47 2025 by rpki-client