This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json) Hash identifier: LkN1hL5jinWRXqfHwju/oiIZ2JcGw6TLTgIPg7lW4xA= Subject key identifier: 1C:5D:1A:88:F9:A0:6B:4C:5D:16:42:FB:54:D4:7F:82:1D:37:0F:F7 Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57 Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957 Certificate serial: 019B2C2F54E8C46B1DCF4EA5602A6165C2B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:00:57 +0000 Manifest this update: Wed 17 Dec 2025 12:00:57 +0000 Manifest next update: Thu 18 Dec 2025 12:00:57 +0000 Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: mP0+CNAg7eIxmZ16R16FotQ6f2EQWOAl5lH72Z7LU2Y=) 2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:54:e8:c4:6b:1d:cf:4e:a5:60:2a:61:65:c2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957 Validity Not Before: Dec 17 12:00:57 2025 GMT Not After : Dec 18 12:00:57 2025 GMT Subject: CN=1c5d1a88f9a06b4c5d1642fb54d47f821d370ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b5:86:aa:46:4f:3b:4d:aa:a4:c1:0a:59:0c: ee:06:68:c9:32:54:a7:36:88:f0:fd:b2:2e:91:6d: c8:5a:a8:88:9a:2e:5d:51:4b:8b:ae:ef:c3:c1:04: a8:25:89:0e:f8:c7:00:ca:96:33:6a:f3:21:aa:3e: e6:4f:76:59:1b:a2:af:98:b8:7f:0f:65:7d:ec:ac: 85:95:6b:a4:76:ab:3b:5a:83:f7:7b:75:82:8e:07: 2e:b6:4b:e4:6e:49:1d:79:32:0e:fa:5f:f9:31:9c: 77:d3:2d:75:20:e5:fa:b9:c9:d4:02:a4:ed:5c:63: 11:5c:d9:87:1e:c5:8d:14:c5:a7:ac:60:03:fc:31: 53:ea:51:5e:43:11:a9:2f:d8:98:f0:13:ce:d9:14: 5a:49:05:cc:9c:12:1f:c5:d8:3a:25:ac:91:80:7a: d5:e0:1a:6d:0c:44:ee:00:40:f3:64:6e:e7:b8:81: 5b:2d:6c:f2:a5:da:60:48:71:97:0e:46:98:2e:52: 52:f9:90:84:8b:ea:84:85:28:b6:94:c2:f9:91:d1: 0a:17:fd:61:90:12:44:86:74:54:2e:8b:e4:4a:de: b5:86:38:e8:ce:3b:17:6c:38:e2:a5:31:ca:18:83: f9:c1:93:27:3a:b6:24:64:b9:cf:fb:cf:10:0d:5b: ca:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5D:1A:88:F9:A0:6B:4C:5D:16:42:FB:54:D4:7F:82:1D:37:0F:F7 X509v3 Authority Key Identifier: keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0c:4a:bb:08:51:af:e4:3b:ba:c5:39:a6:d5:34:e1:ee:d7: 12:d0:85:43:61:a0:f5:b1:b0:46:83:f0:29:46:52:36:4c:43: 54:0d:30:fc:82:eb:50:a7:19:8a:76:be:3f:72:dd:5e:11:a3: 61:9b:cb:b5:cd:25:81:ee:2a:4c:22:55:58:00:d9:1d:6c:94: dc:34:6a:bc:62:ea:f2:9f:33:78:bc:fe:85:3f:3e:cd:db:a3: 56:ee:a7:d7:8f:d4:bc:9a:e1:6a:ba:ec:f4:a3:1d:39:88:c1: 9f:81:f8:14:d0:a0:84:47:4d:f8:9e:7f:4b:ee:be:6b:f1:6e: 29:a8:d3:63:f6:e8:07:fd:42:2e:4f:87:16:20:bc:c6:1e:b5: 49:d1:cc:71:0a:e0:67:50:8b:20:d5:02:51:b4:ca:d4:ac:ca: e2:30:1a:46:c7:d7:73:ed:bb:50:7e:86:3a:ef:52:6f:cf:72: 8a:28:6e:6b:e4:a8:8f:a9:fe:a0:d5:ad:d1:4c:85:fc:01:17: 99:78:e1:27:34:bc:06:b3:80:cc:fc:8c:ac:b0:fd:87:91:40: 3f:74:29:c0:97:29:78:32:36:d4:e5:58:5e:64:e9:77:0c:b4: 1b:84:b0:d6:b5:4a:c0:29:6d:8a:1f:b9:95:34:d9:78:06:0f: 20:24:54:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL1ToxGsdz06lYCphZcK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YmJlZDYzMDkxNDM5ODIzZWQzOTFhNDcyNTM2YzBmY2Fm ZTg5NTcwHhcNMjUxMjE3MTIwMDU3WhcNMjUxMjE4MTIwMDU3WjAzMTEwLwYDVQQD EygxYzVkMWE4OGY5YTA2YjRjNWQxNjQyZmI1NGQ0N2Y4MjFkMzcwZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rWGqkZPO02qpMEKWQzuBmjJMlSn Nojw/bIukW3IWqiImi5dUUuLru/DwQSoJYkO+McAypYzavMhqj7mT3ZZG6KvmLh/ D2V97KyFlWukdqs7WoP3e3WCjgcutkvkbkkdeTIO+l/5MZx30y11IOX6ucnUAqTt XGMRXNmHHsWNFMWnrGAD/DFT6lFeQxGpL9iY8BPO2RRaSQXMnBIfxdg6JayRgHrV 4BptDETuAEDzZG7nuIFbLWzypdpgSHGXDkaYLlJS+ZCEi+qEhSi2lML5kdEKF/1h kBJEhnRULovkSt61hjjozjsXbDjipTHKGIP5wZMnOrYkZLnP+88QDVvKiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxdGoj5oGtMXRZC+1TUf4IdNw/3MB8GA1UdIwQY MBaAFNS77WMJFDmCPtORpHJTbA/K/olXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUt MTdiZjIwMmU1ZWVlLzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUtMTdiZjIwMmU1ZWVl LzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwxKuwhR r+Q7usU5ptU04e7XEtCFQ2Gg9bGwRoPwKUZSNkxDVA0w/ILrUKcZina+P3LdXhGj YZvLtc0lge4qTCJVWADZHWyU3DRqvGLq8p8zeLz+hT8+zdujVu6n14/UvJrharrs 9KMdOYjBn4H4FNCghEdN+J5/S+6+a/FuKajTY/boB/1CLk+HFiC8xh61SdHMcQrg Z1CLINUCUbTK1KzK4jAaRsfXc+27UH6GOu9Sb89yiihua+Soj6n+oNWt0UyF/AEX mXjhJzS8BrOAzPyMrLD9h5FAP3QpwJcpeDI21OVYXmTpdwy0G4Sw1rVKwCltih+5 lTTZeAYPICRUeA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:00:58 2025 by rpki-client