This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json) Hash identifier: cINNYxGO/Z+kCq56wqAwE3nz/PAh+1KcOYgZGNQBdXY= Subject key identifier: E3:C5:02:E4:03:C8:CE:8F:29:18:94:EE:99:C4:88:04:D7:DE:15:DC Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51 Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51 Certificate serial: 019B5A520F170BF85EF8839E7DDB86D10BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft Manifest number: 06F6 Signing time: Fri 26 Dec 2025 11:01:25 +0000 Manifest this update: Fri 26 Dec 2025 11:01:25 +0000 Manifest next update: Sat 27 Dec 2025 11:01:25 +0000 Files and hashes: 1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: e9W578Yt3fwmkXyX2fxNSfj1aI/7fpe77L4mgm83B8o=) 2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0f:17:0b:f8:5e:f8:83:9e:7d:db:86:d1:0b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51 Validity Not Before: Dec 26 11:01:25 2025 GMT Not After : Dec 27 11:01:25 2025 GMT Subject: CN=e3c502e403c8ce8f291894ee99c48804d7de15dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:e7:5c:08:0e:2a:81:12:c5:80:90:b3:08: 4b:aa:5a:8c:76:0f:c5:4e:b8:d9:0a:13:c5:97:e8: 8a:45:37:b9:d1:85:33:d2:7b:10:c6:80:97:0a:c7: c5:04:98:48:06:30:10:ac:0c:d6:2c:52:dd:ff:95: 4c:e6:af:2a:06:f3:a7:9f:7c:1b:1a:df:8a:1b:ae: 62:92:32:47:38:43:02:39:ba:18:f7:ee:9b:4f:67: 71:b5:bb:37:4b:e6:2d:84:ba:1f:6e:50:05:6c:7a: 13:44:d3:67:5b:89:5c:22:86:36:b2:bd:c6:be:86: ad:57:3c:7d:37:ac:ff:dc:74:f8:9c:4e:50:f8:1d: 32:7e:a2:bd:f7:b6:19:d6:55:e8:2f:2f:87:ba:45: 0a:77:48:a1:b2:05:15:4a:7f:09:9e:86:1d:81:a3: ab:da:a6:35:98:d5:65:27:2f:df:8e:c4:27:b4:41: 77:25:59:3c:7f:b0:6a:dd:f8:cd:ad:eb:a2:f5:a4: 74:db:72:09:5c:e8:ea:2a:41:f8:13:e7:61:1b:30: d9:a7:3c:4a:44:02:6c:28:f4:fc:6a:b8:af:cf:a7: f3:96:c4:83:28:95:9a:0e:cf:49:e1:b6:1c:18:61: de:f4:01:57:60:f9:26:46:d6:a0:2e:4d:3c:0c:de: c4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C5:02:E4:03:C8:CE:8F:29:18:94:EE:99:C4:88:04:D7:DE:15:DC X509v3 Authority Key Identifier: keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:38:8a:e6:e0:4f:32:b0:e7:05:f2:f8:ea:2b:53:54:35: a1:1a:14:10:1a:bd:23:0f:1e:c8:ff:50:48:6d:0f:41:13:d3: aa:fb:a5:82:f0:0a:0f:cc:d0:f2:a5:6a:c9:bc:3a:1d:39:d0: 3a:86:c7:0c:08:59:70:8f:75:ec:ad:ae:88:aa:66:ec:f1:1b: b8:72:ac:a2:af:c5:a5:9f:bb:2b:52:6d:85:51:9e:01:d1:e0: c2:29:8c:6c:07:45:2b:19:a0:b0:cf:1a:85:f6:2d:ff:f0:3d: 4b:c4:b9:78:11:a8:30:3d:96:cf:2f:7b:66:42:2d:0c:3d:1d: 90:2b:c8:23:2d:ae:9d:6b:28:15:21:48:3b:a4:9c:12:6c:c8: 73:73:32:47:d5:62:53:21:eb:28:dd:07:d6:82:ff:60:36:f2: 96:d8:40:f1:a6:65:85:58:03:f6:83:8b:6b:22:a2:5e:54:97: 67:a0:e2:3f:94:5a:2e:87:ee:57:27:55:c7:5c:71:81:12:be: bc:eb:b1:e4:16:a5:ca:fc:2a:e8:32:4b:57:22:04:08:38:a9: 73:17:bd:9a:c1:2e:92:9f:c2:4e:50:8e:23:d3:34:95:82:38: fc:14:87:e2:80:6d:8e:2c:44:39:a0:f2:46:d1:47:32:c7:d9: 69:79:0a:9d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaUg8XC/he+IOefduG0Qv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZWMxNDY4ZWUzMTAzZmU1M2IxY2Y1YTk4NzVhZWNkNGUy OGFkNTEwHhcNMjUxMjI2MTEwMTI1WhcNMjUxMjI3MTEwMTI1WjAzMTEwLwYDVQQD EyhlM2M1MDJlNDAzYzhjZThmMjkxODk0ZWU5OWM0ODgwNGQ3ZGUxNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QrnXAgOKoESxYCQswhLqlqMdg/F TrjZChPFl+iKRTe50YUz0nsQxoCXCsfFBJhIBjAQrAzWLFLd/5VM5q8qBvOnn3wb Gt+KG65ikjJHOEMCOboY9+6bT2dxtbs3S+YthLofblAFbHoTRNNnW4lcIoY2sr3G voatVzx9N6z/3HT4nE5Q+B0yfqK997YZ1lXoLy+HukUKd0ihsgUVSn8JnoYdgaOr 2qY1mNVlJy/fjsQntEF3JVk8f7Bq3fjNreui9aR023IJXOjqKkH4E+dhGzDZpzxK RAJsKPT8arivz6fzlsSDKJWaDs9J4bYcGGHe9AFXYPkmRtagLk08DN7E4QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOPFAuQDyM6PKRiU7pnEiATX3hXcMB8GA1UdIwQY MBaAFPjsFGjuMQP+U7HPWph1rs1OKK1RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Pd1VhTzR4QV81VHNjOWFtSFd1elU0b3JWRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlh LTU4NzhhODE3M2M0NC8xLzEtT3dVYU80eEFfNVRzYzlhbUhXdXpVNG9yVkUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RlL2IwMjRiZC0yZDBjLTQ1NzItYTQ5YS01ODc4YTgxNzNj NDQvMS8xLU93VWFPNHhBXzVUc2M5YW1IV3V6VTRvclZFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDw4 iubgTzKw5wXy+OorU1Q1oRoUEBq9Iw8eyP9QSG0PQRPTqvulgvAKD8zQ8qVqybw6 HTnQOobHDAhZcI917K2uiKpm7PEbuHKsoq/FpZ+7K1JthVGeAdHgwimMbAdFKxmg sM8ahfYt//A9S8S5eBGoMD2Wzy97ZkItDD0dkCvIIy2unWsoFSFIO6ScEmzIc3My R9ViUyHrKN0H1oL/YDbylthA8aZlhVgD9oOLayKiXlSXZ6DiP5RaLofuVydVx1xx gRK+vOux5Balyvwq6DJLVyIECDipcxe9msEukp/CTlCOI9M0lYI4/BSH4oBtjixE OaDyRtFHMsfZaXkKnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:22 2025 by rpki-client