This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json) Hash identifier: OrZOPVENDmxz2/pUyuxlGH7SpSKNAF1PYTU9bJbqR3g= Subject key identifier: 24:7F:D3:2E:2C:03:5B:E8:0F:D9:D7:43:31:FA:F6:A7:AD:3E:2B:52 Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Certificate serial: 019B5ABFEB9C98E9643E5BB7C9FE5D75A367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 13:01:25 +0000 Manifest this update: Fri 26 Dec 2025 13:01:25 +0000 Manifest next update: Sat 27 Dec 2025 13:01:25 +0000 Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: f/GcG7CB8V0gaQS51mk6la7QeoGWQCJjSBrcFKGyXms=) 2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:eb:9c:98:e9:64:3e:5b:b7:c9:fe:5d:75:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Validity Not Before: Dec 26 13:01:25 2025 GMT Not After : Dec 27 13:01:25 2025 GMT Subject: CN=247fd32e2c035be80fd9d74331faf6a7ad3e2b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:2f:10:1f:64:1d:be:80:6c:e5:4f:b0:50: 3a:ee:7b:ab:83:7e:5c:69:6e:7a:27:2c:43:38:15: ec:bf:23:9a:8a:6c:5c:3e:7c:33:e1:32:08:f5:d1: f1:73:4e:a5:4a:a3:4d:ab:98:2e:64:30:50:54:88: 5f:4d:95:99:45:77:f1:ce:b2:20:5d:0c:cd:8b:9a: 6e:b4:f6:f6:bc:5b:17:9c:15:36:bd:d4:00:f0:e1: a2:5e:1e:dd:00:a1:22:4c:c1:bd:e1:d2:89:e8:68: 07:05:d4:e8:db:b6:6b:e6:32:eb:3a:dc:bd:9c:60: e5:f6:9d:8d:52:6d:07:33:93:54:4d:3f:ee:56:78: 0b:37:78:c3:05:74:f8:9d:2d:8f:93:3d:7d:77:7a: 09:f4:5e:67:67:89:87:68:21:01:5e:ee:62:99:0a: fb:22:25:21:36:a1:50:84:27:fc:e2:b2:96:5d:c3: 70:80:b6:d2:b2:c4:2c:ee:2b:05:08:25:f8:04:0d: 24:90:e2:55:7f:5c:f3:2b:ff:1a:fd:ed:6e:66:95: 00:16:f7:6f:26:07:07:5b:6e:1f:e2:b8:b7:62:67: 1e:35:15:38:54:d2:48:0c:6e:71:3c:20:c9:47:30: ba:48:5a:fd:13:d1:98:df:91:f4:27:cb:0e:c2:cf: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7F:D3:2E:2C:03:5B:E8:0F:D9:D7:43:31:FA:F6:A7:AD:3E:2B:52 X509v3 Authority Key Identifier: keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:db:d9:a3:4a:87:8e:1a:db:cb:ad:0f:32:bc:98:df:c9:58: 67:0d:d3:22:4b:e2:37:46:d3:8b:39:24:2f:1f:33:b8:ed:e5: 16:de:a5:37:6c:f2:c6:a4:cf:6f:a8:48:41:4a:83:ce:6a:57: 2a:0d:a5:26:9e:76:34:64:a1:4e:67:54:a1:c0:62:23:c5:51: ea:96:ed:c7:bf:6d:5c:2c:23:29:2b:c9:54:b5:e1:dc:97:dd: fe:20:bf:c3:82:f7:71:a1:b7:23:ab:64:25:fb:ad:49:46:cc: 4f:69:86:21:e1:35:57:b2:db:1d:e9:66:f3:38:5c:e6:b2:d9: 92:17:1f:c1:4e:10:2b:bf:10:54:e7:a6:40:da:0f:b7:4f:76: f1:96:44:bb:90:e3:41:b9:97:c7:66:b3:3d:f2:b6:1b:71:69: d9:54:19:59:10:ad:57:bf:e8:80:74:62:0a:9c:64:fc:96:cd: 1c:e9:2e:a7:fb:c1:69:f1:90:ca:1b:c5:41:44:84:46:d3:7d: 5d:d3:9c:f5:80:ba:5e:0c:65:f5:01:1e:db:68:45:78:4e:20: c0:5e:27:15:7b:ca:ff:88:31:e0:9b:e0:04:49:d0:06:bf:94: 14:3f:89:c1:02:28:49:77:ec:c3:22:0c:36:27:47:a1:7d:28: 05:d4:bd:5c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtav+ucmOlkPlu3yf5ddaNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk YjU5OGMwHhcNMjUxMjI2MTMwMTI1WhcNMjUxMjI3MTMwMTI1WjAzMTEwLwYDVQQD EygyNDdmZDMyZTJjMDM1YmU4MGZkOWQ3NDMzMWZhZjZhN2FkM2UyYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsvEB9kHb6AbOVPsFA67nurg35c aW56JyxDOBXsvyOaimxcPnwz4TII9dHxc06lSqNNq5guZDBQVIhfTZWZRXfxzrIg XQzNi5putPb2vFsXnBU2vdQA8OGiXh7dAKEiTMG94dKJ6GgHBdTo27Zr5jLrOty9 nGDl9p2NUm0HM5NUTT/uVngLN3jDBXT4nS2Pkz19d3oJ9F5nZ4mHaCEBXu5imQr7 IiUhNqFQhCf84rKWXcNwgLbSssQs7isFCCX4BA0kkOJVf1zzK/8a/e1uZpUAFvdv JgcHW24f4ri3YmceNRU4VNJIDG5xPCDJRzC6SFr9E9GY35H0J8sOws8bAQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCR/0y4sA1voD9nXQzH69qetPitSMB8GA1UdIwQY MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNvZ o0qHjhrby60PMryY38lYZw3TIkviN0bTizkkLx8zuO3lFt6lN2zyxqTPb6hIQUqD zmpXKg2lJp52NGShTmdUocBiI8VR6pbtx79tXCwjKSvJVLXh3Jfd/iC/w4L3caG3 I6tkJfutSUbMT2mGIeE1V7LbHelm8zhc5rLZkhcfwU4QK78QVOemQNoPt0928ZZE u5DjQbmXx2azPfK2G3Fp2VQZWRCtV7/ogHRiCpxk/JbNHOkup/vBafGQyhvFQUSE RtN9XdOc9YC6Xgxl9QEe22hFeE4gwF4nFXvK/4gx4JvgBEnQBr+UFD+JwQIoSXfs wyIMNidHoX0oBdS9XA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:05 2025 by rpki-client