This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json) Hash identifier: 7POIjD0yG6OlEpdHEKaw87/SVDS8ww2/xvg2pI298pY= Subject key identifier: 90:20:79:4B:4B:97:2C:FD:99:33:B8:EF:22:75:7B:28:44:CD:75:8B Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Certificate serial: 019B1012E4F1055FD734ED7450A44FB9A3CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft Manifest number: 02FF Signing time: Fri 12 Dec 2025 01:00:32 +0000 Manifest this update: Fri 12 Dec 2025 01:00:32 +0000 Manifest next update: Sat 13 Dec 2025 01:00:32 +0000 Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: 81xbnt1OPAUXu1xGAP8ZhLJJiH1sERqyxSx74uZZ/D4=) 2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=) 3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:e4:f1:05:5f:d7:34:ed:74:50:a4:4f:b9:a3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Validity Not Before: Dec 12 01:00:32 2025 GMT Not After : Dec 13 01:00:32 2025 GMT Subject: CN=9020794b4b972cfd9933b8ef22757b2844cd758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:10:f7:2c:bd:4e:5f:fe:a5:a1:bc:93:41: 26:f0:f6:a2:4e:8d:2b:3f:00:28:a4:f4:e0:82:14: 50:1e:89:2a:94:ce:83:b5:52:60:05:e1:03:3d:e7: 82:bb:3f:b5:61:69:b9:8a:8b:17:04:95:8e:51:f6: 45:44:c6:ce:0e:0f:13:69:f8:21:55:8a:ce:5f:8d: 39:20:ae:cf:bb:8a:b5:bc:0e:3f:0b:b4:7b:f5:28: 13:52:b3:65:61:85:10:cb:24:6a:45:a3:0c:a2:51: ef:43:c0:5a:f1:d4:25:a5:71:81:d9:3c:bb:37:16: 5a:c3:22:83:a0:b1:64:2c:9d:9f:ba:35:7b:4b:e1: d9:00:2b:13:f1:cc:74:66:cf:f7:8d:d9:5d:c9:38: 28:8f:21:1a:b6:61:b7:df:16:d4:4a:fd:30:57:57: 65:d3:32:d7:d5:42:78:0b:b0:f6:dd:b6:9a:c4:49: 96:5c:be:14:dc:fa:f3:6e:60:c4:cf:98:8d:50:d6: 1b:eb:ec:78:8d:a9:39:54:9b:78:50:54:0b:2f:5c: 56:71:1c:ac:70:38:7a:18:80:fc:8f:ad:e6:e0:08: 49:d6:52:f5:4c:da:55:a9:ce:87:dd:14:bf:47:4a: 69:2c:3e:65:6e:96:e2:c7:26:4a:7f:db:a1:e4:6b: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:79:4B:4B:97:2C:FD:99:33:B8:EF:22:75:7B:28:44:CD:75:8B X509v3 Authority Key Identifier: keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5c:54:da:b2:51:c3:3d:4f:4b:c9:7d:4d:d3:67:51:65:59: 7f:ec:49:44:6e:63:77:f9:11:ee:b9:44:f7:2e:33:3e:0f:e1: 7e:b6:6a:87:2f:2a:f7:af:59:b5:b1:69:06:91:cd:0b:e8:d6: 12:7e:36:a6:0b:4a:f7:1e:02:4e:ff:89:3e:a7:c6:ed:94:8b: 91:dd:c2:89:8a:0e:ca:fa:49:3a:c8:ad:18:12:49:b0:52:fb: 02:d7:1a:fd:13:50:ca:b0:e5:83:7a:b5:7d:78:31:89:c7:ff: 12:c6:da:13:2b:66:3e:b7:b7:48:61:f1:ca:de:c6:9f:63:50: 3d:35:b8:f4:b3:5d:2c:ea:1f:ae:52:f5:1c:6e:9b:7e:e1:b7: b6:a3:71:07:04:23:42:05:b9:56:bd:3b:12:59:7a:6f:f6:83: 00:ed:6f:f8:70:d3:a2:e6:71:44:ab:33:06:62:ce:60:84:ec: 32:c3:9d:6c:5b:0b:df:00:34:76:54:52:62:e6:39:9d:cf:92: 21:07:01:ce:57:e8:14:43:d6:8f:63:51:4b:86:be:3a:a5:7b: 25:96:c5:57:c0:bb:64:28:40:2e:40:43:9c:7d:87:43:56:73: 7c:07:86:4a:0b:30:10:47:14:ea:7c:8f:25:a7:1c:2d:35:12: 7f:a1:1b:cf -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsQEuTxBV/XNO10UKRPuaPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw NDRmNTcwHhcNMjUxMjEyMDEwMDMyWhcNMjUxMjEzMDEwMDMyWjAzMTEwLwYDVQQD Eyg5MDIwNzk0YjRiOTcyY2ZkOTkzM2I4ZWYyMjc1N2IyODQ0Y2Q3NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvMQ9yy9Tl/+paG8k0Em8PaiTo0r PwAopPTgghRQHokqlM6DtVJgBeEDPeeCuz+1YWm5iosXBJWOUfZFRMbODg8Tafgh VYrOX405IK7Pu4q1vA4/C7R79SgTUrNlYYUQyyRqRaMMolHvQ8Ba8dQlpXGB2Ty7 NxZawyKDoLFkLJ2fujV7S+HZACsT8cx0Zs/3jdldyTgojyEatmG33xbUSv0wV1dl 0zLX1UJ4C7D23baaxEmWXL4U3PrzbmDEz5iNUNYb6+x4jak5VJt4UFQLL1xWcRys cDh6GID8j63m4AhJ1lL1TNpVqc6H3RS/R0ppLD5lbpbixyZKf9uh5Gt1jQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJAgeUtLlyz9mTO47yJ1eyhEzXWLMB8GA1UdIwQY MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlxU 2rJRwz1PS8l9TdNnUWVZf+xJRG5jd/kR7rlE9y4zPg/hfrZqhy8q969ZtbFpBpHN C+jWEn42pgtK9x4CTv+JPqfG7ZSLkd3CiYoOyvpJOsitGBJJsFL7Atca/RNQyrDl g3q1fXgxicf/EsbaEytmPre3SGHxyt7Gn2NQPTW49LNdLOofrlL1HG6bfuG3tqNx BwQjQgW5Vr07Ell6b/aDAO1v+HDTouZxRKszBmLOYITsMsOdbFsL3wA0dlRSYuY5 nc+SIQcBzlfoFEPWj2NRS4a+OqV7JZbFV8C7ZChALkBDnH2HQ1ZzfAeGSgswEEcU 6nyPJaccLTUSf6Ebzw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:35:34 2025 by rpki-client