This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json) Hash identifier: QD79gOJmZOOAHp+F2ARBOQXQmpoYUBdt8Pf+DVic3Fg= Subject key identifier: 86:A7:01:42:BA:B2:CB:90:A3:E2:CD:54:F7:43:AC:67:30:9B:33:05 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019AE7173807038E2657F5E710D00AF4CAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft Manifest number: 0A29 Signing time: Thu 04 Dec 2025 02:00:49 +0000 Manifest this update: Thu 04 Dec 2025 02:00:49 +0000 Manifest next update: Fri 05 Dec 2025 02:00:49 +0000 Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=) 2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: eBrqje8xhHGpGZMVhdcdUHJWt10s1y/6idoqoGlhr0g=) 3: 9Q9cRSrqO0gGZAuxW3CcT54BmRw.roa (hash: xBLy6u0/M+XEaIsdpfHtNWSuIplbcblmlQJP4tu98tI=) 4: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=) 5: Fp3Bc4KlexjPquIQYqHT2u4idYY.roa (hash: FBIjAIhPWNb74EivXlWLk+ANKo/lf5tCnraIq5V/Hkk=) 6: Ocy8B8GYPCZGmS9JKWpHx-7xVE0.roa (hash: OAvrh5o6OA/RrTaG3tWg2tqIxQuUrrMi/BaxLjPughU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:17:38:07:03:8e:26:57:f5:e7:10:d0:0a:f4:ca:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Dec 4 02:00:49 2025 GMT Not After : Dec 5 02:00:49 2025 GMT Subject: CN=86a70142bab2cb90a3e2cd54f743ac67309b3305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:16:08:ce:78:83:78:1a:b2:fa:60:20:9a: 24:aa:b7:f0:57:91:15:fe:db:5f:79:13:29:9b:11: f3:2a:e2:23:5b:75:37:0c:43:74:7b:28:7c:e9:89: 78:a2:ba:3f:33:93:83:bc:4d:8d:86:f4:6b:0c:71: 9e:68:04:84:7c:01:ed:97:f7:ab:13:c5:41:19:f6: 17:87:32:05:6c:7f:c8:0c:2c:a9:fb:29:73:30:87: 26:3c:b8:c1:6b:85:92:5d:58:67:8f:26:80:eb:2d: 5a:c5:cb:65:a8:86:db:e4:9b:fa:5a:49:cc:f8:f7: 14:02:dc:33:4a:9f:d3:83:3b:ad:84:02:08:38:c6: 03:e2:d8:37:f6:b3:6d:5a:3e:21:a1:8b:fc:b1:82: c8:9b:41:a8:17:59:e4:ee:57:74:fe:2d:19:2c:8a: 35:d4:f9:5a:e4:78:56:a4:f2:d3:51:a8:8d:d9:59: 4f:34:e1:e5:93:af:c5:1c:42:85:f9:9b:d6:aa:b0: f4:ad:c4:e0:ea:1e:24:36:14:2b:50:81:5e:23:b0: 42:1f:23:50:b8:ba:c0:b3:8c:07:7d:fe:f0:f4:94: ce:35:d1:58:d2:7b:50:99:19:74:5a:f6:eb:91:6d: 73:59:7e:58:09:91:58:b6:8f:ea:cf:ee:52:39:fd: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A7:01:42:BA:B2:CB:90:A3:E2:CD:54:F7:43:AC:67:30:9B:33:05 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:bf:7a:14:68:f0:16:83:84:77:37:af:f2:3f:98:61:37:b3: 73:78:3a:2b:c4:ed:3e:a1:02:da:01:39:91:51:5f:0b:06:7e: 15:17:b1:52:21:c1:50:ec:a0:20:2a:2a:d5:21:dc:db:23:64: e2:da:f3:83:f8:63:51:19:ff:70:56:e1:90:2d:ad:f6:da:7c: a1:29:10:e0:60:d8:a2:e5:17:e6:89:90:9d:a4:71:10:22:e6: d6:0b:fa:b2:5a:5f:db:0e:74:af:5a:0d:bf:3c:b4:a9:19:6b: 1b:ea:01:50:11:36:2e:a4:ce:93:aa:fe:43:82:3b:af:71:b1: 55:fc:2e:f0:22:13:79:95:5f:2a:83:a8:eb:69:d4:fc:31:28: 5b:1b:b5:14:9d:21:f5:3e:aa:d6:45:67:3a:3b:e7:54:18:65: 4d:29:c8:02:80:a5:ef:78:f7:48:d8:cc:c8:66:6b:6a:09:9d: 5c:19:ee:6c:50:4e:9a:a8:85:0c:f9:d4:87:71:d3:6e:90:a3: e4:94:5f:80:ff:a4:3a:e5:06:db:ce:1b:a0:24:4a:14:9a:4e: 39:1c:6d:30:e5:ee:5d:98:6b:37:51:51:c9:19:74:88:dd:65: f2:46:0d:3f:08:a3:66:82:03:91:5a:5b:92:7e:71:43:d2:55: 78:7d:8e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnFzgHA44mV/XnENAK9MqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjUxMjA0MDIwMDQ5WhcNMjUxMjA1MDIwMDQ5WjAzMTEwLwYDVQQD Eyg4NmE3MDE0MmJhYjJjYjkwYTNlMmNkNTRmNzQzYWM2NzMwOWIzMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLEWCM54g3gasvpgIJokqrfwV5EV /ttfeRMpmxHzKuIjW3U3DEN0eyh86Yl4oro/M5ODvE2NhvRrDHGeaASEfAHtl/er E8VBGfYXhzIFbH/IDCyp+ylzMIcmPLjBa4WSXVhnjyaA6y1axctlqIbb5Jv6WknM +PcUAtwzSp/TgzuthAIIOMYD4tg39rNtWj4hoYv8sYLIm0GoF1nk7ld0/i0ZLIo1 1Pla5HhWpPLTUaiN2VlPNOHlk6/FHEKF+ZvWqrD0rcTg6h4kNhQrUIFeI7BCHyNQ uLrAs4wHff7w9JTONdFY0ntQmRl0WvbrkW1zWX5YCZFYto/qz+5SOf0ApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIanAUK6ssuQo+LNVPdDrGcwmzMFMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc796FGjw FoOEdzev8j+YYTezc3g6K8TtPqEC2gE5kVFfCwZ+FRexUiHBUOygICoq1SHc2yNk 4trzg/hjURn/cFbhkC2t9tp8oSkQ4GDYouUX5omQnaRxECLm1gv6slpf2w50r1oN vzy0qRlrG+oBUBE2LqTOk6r+Q4I7r3GxVfwu8CITeZVfKoOo62nU/DEoWxu1FJ0h 9T6q1kVnOjvnVBhlTSnIAoCl73j3SNjMyGZragmdXBnubFBOmqiFDPnUh3HTbpCj 5JRfgP+kOuUG284boCRKFJpOORxtMOXuXZhrN1FRyRl0iN1l8kYNPwijZoIDkVpb kn5xQ9JVeH2OpQ== -----END CERTIFICATE-----Generated at Thu Dec 4 05:18:59 2025 by rpki-client