This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json) Hash identifier: yYx/7goWKkGoZADpApb4CVpSPC5Ayo7zfKV1GTvKsFY= Subject key identifier: 56:EF:56:97:A6:0D:20:F3:7A:93:41:9D:4B:02:31:7D:19:07:CE:9A Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Certificate serial: 019B34567C953B675513B196F963FBB9A852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 02:00:41 +0000 Manifest this update: Fri 19 Dec 2025 02:00:41 +0000 Manifest next update: Sat 20 Dec 2025 02:00:41 +0000 Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: d9rLSVzKubs1gR51dhvyaLrrDPCbe5inWpnbQSwNanw=) 2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:7c:95:3b:67:55:13:b1:96:f9:63:fb:b9:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Validity Not Before: Dec 19 02:00:41 2025 GMT Not After : Dec 20 02:00:41 2025 GMT Subject: CN=56ef5697a60d20f37a93419d4b02317d1907ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:d1:7b:bb:81:a3:0c:e0:5d:f8:b0:a9:be: c3:a6:26:54:24:97:c6:42:ef:0e:6d:12:17:91:14: 23:3e:9c:63:28:09:d0:75:cc:19:9d:0a:ad:b0:99: b6:f8:95:6c:67:af:5d:b6:af:2f:b4:90:0d:5e:03: 61:d0:50:af:22:1b:3a:e7:d9:fe:d4:4b:4a:65:fa: fe:71:fb:6c:a3:4a:68:35:26:59:a3:d0:66:30:54: ba:19:82:08:59:f5:42:33:84:1c:b9:40:7f:1f:70: b8:9b:e4:f7:0b:a7:a6:20:f6:9e:a5:a9:28:95:77: e9:68:56:be:9f:98:31:c1:25:5f:8a:28:79:36:5a: 04:f1:e6:f9:d1:35:db:28:7f:64:39:88:8e:87:22: f8:98:89:13:53:84:62:25:df:29:d7:ae:cb:db:fd: 8d:ed:d5:1a:a9:e0:17:bf:88:94:d4:76:47:08:af: f1:8b:88:34:e1:f1:11:e2:86:f8:64:64:84:2b:fa: be:c2:68:40:b3:9a:6a:ce:08:f0:af:0e:e6:df:9d: 0b:af:8b:20:01:c0:be:35:53:7d:73:2c:ff:fa:86: b3:87:bd:17:5a:97:6a:29:03:d2:39:06:43:3c:c5: df:a3:82:fc:f7:56:84:ce:e1:35:d5:6b:a0:03:91: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:56:97:A6:0D:20:F3:7A:93:41:9D:4B:02:31:7D:19:07:CE:9A X509v3 Authority Key Identifier: keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e4:7a:85:d7:14:81:01:5c:4e:30:d7:27:f1:25:a8:9e:1c: 46:4a:20:d3:1a:f6:03:db:87:70:d2:28:45:57:b1:3d:81:7d: eb:c2:38:76:c3:33:74:7a:ca:11:9b:09:d7:4a:fc:19:83:d1: f0:b5:83:a9:ee:cd:8a:1e:3e:7e:f3:f3:ae:32:c2:39:40:97: 31:bb:c2:28:9a:2b:93:e6:59:5b:16:e6:71:cd:64:1f:22:52: 0a:a0:04:91:f6:7c:a1:cb:24:3c:98:c3:1d:46:20:57:d7:35: 54:d4:41:55:98:62:c2:c7:30:1f:c6:2e:9b:9f:9e:d6:27:87: 01:4f:19:19:db:bb:ce:32:e9:de:d3:d9:80:d5:4d:67:3b:db: 30:ac:da:92:a7:eb:56:73:1e:6f:e6:6c:93:92:ff:29:15:a5: d5:13:7b:33:57:8f:3b:83:97:e9:b9:c7:68:e1:88:69:6c:7a: 9b:36:0f:a8:d5:4a:c9:ed:fe:6e:78:fe:72:be:c2:95:5f:f2: e0:41:2f:78:1b:1b:66:55:ba:b4:3e:b0:ef:d5:b2:2f:9c:0a: 27:8a:53:2f:7c:d4:82:4e:4e:0a:0c:96:dd:60:f1:c3:b0:59: 38:d5:88:24:6c:dd:f2:c5:57:9b:25:52:bb:54:af:65:53:42: c2:64:a8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VnyVO2dVE7GW+WP7uahSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4 NmRmZDAwHhcNMjUxMjE5MDIwMDQxWhcNMjUxMjIwMDIwMDQxWjAzMTEwLwYDVQQD Eyg1NmVmNTY5N2E2MGQyMGYzN2E5MzQxOWQ0YjAyMzE3ZDE5MDdjZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6DRe7uBowzgXfiwqb7DpiZUJJfG Qu8ObRIXkRQjPpxjKAnQdcwZnQqtsJm2+JVsZ69dtq8vtJANXgNh0FCvIhs659n+ 1EtKZfr+cftso0poNSZZo9BmMFS6GYIIWfVCM4QcuUB/H3C4m+T3C6emIPaepako lXfpaFa+n5gxwSVfiih5NloE8eb50TXbKH9kOYiOhyL4mIkTU4RiJd8p167L2/2N 7dUaqeAXv4iU1HZHCK/xi4g04fER4ob4ZGSEK/q+wmhAs5pqzgjwrw7m350Lr4sg AcC+NVN9cyz/+oazh70XWpdqKQPSOQZDPMXfo4L891aEzuE11WugA5EeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbvVpemDSDzepNBnUsCMX0ZB86aMB8GA1UdIwQY MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOR6hdcU gQFcTjDXJ/ElqJ4cRkog0xr2A9uHcNIoRVexPYF968I4dsMzdHrKEZsJ10r8GYPR 8LWDqe7Nih4+fvPzrjLCOUCXMbvCKJork+ZZWxbmcc1kHyJSCqAEkfZ8ocskPJjD HUYgV9c1VNRBVZhiwscwH8Yum5+e1ieHAU8ZGdu7zjLp3tPZgNVNZzvbMKzakqfr VnMeb+Zsk5L/KRWl1RN7M1ePO4OX6bnHaOGIaWx6mzYPqNVKye3+bnj+cr7ClV/y 4EEveBsbZlW6tD6w79WyL5wKJ4pTL3zUgk5OCgyW3WDxw7BZONWIJGzd8sVXmyVS u1SvZVNCwmSokA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:49:59 2025 by rpki-client