This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json) Hash identifier: Ibsu0paRrsd80Qba9MAW3YYKPEPNqp7ULLKby0jJDlA= Subject key identifier: 17:26:85:CB:2D:69:D7:7E:FD:88:73:A7:3B:C7:03:F9:07:B9:E3:F4 Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Certificate serial: 019B3C0FF4F083F173F23EF619265D2D99BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft Manifest number: ED Signing time: Sat 20 Dec 2025 14:00:37 +0000 Manifest this update: Sat 20 Dec 2025 14:00:37 +0000 Manifest next update: Sun 21 Dec 2025 14:00:37 +0000 Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: /4NS7IqB5Any440qFvF/ClBKOgc+qunG5R9J9C48BF8=) 2: 7oB3ar7GwFtb0clbtSqh_ldJanw.roa (hash: d421V6jyf/lL0flOYjT5So8TNIpbSRnpdeNItUDXdnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f4:f0:83:f1:73:f2:3e:f6:19:26:5d:2d:99:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Validity Not Before: Dec 20 14:00:37 2025 GMT Not After : Dec 21 14:00:37 2025 GMT Subject: CN=172685cb2d69d77efd8873a73bc703f907b9e3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:d2:60:a1:6a:ff:b1:69:f3:0c:94:14:fe: d5:c1:25:09:75:15:0f:a2:6b:17:be:3e:2a:e1:e1: 6f:18:b6:ef:e4:5d:ec:16:22:82:47:5f:f5:7b:4e: 7b:da:7e:ec:bc:35:19:6d:40:49:37:5c:a5:7f:dd: b5:24:23:53:58:e9:a0:f4:8b:79:d7:e3:87:36:26: 9f:89:6b:59:c6:16:e0:69:70:de:60:25:33:8d:4b: dc:4c:80:9a:6f:a5:7c:d6:8c:b6:6d:40:36:0f:7d: c7:56:9b:3c:05:44:74:c6:f8:96:0b:4a:31:4c:9a: 62:39:31:37:5e:19:3b:e8:05:72:24:e6:31:58:dd: ce:80:53:25:cc:a7:bc:2e:5f:3f:42:11:b0:bc:14: ea:78:12:4b:bc:78:b1:14:a8:54:c0:90:88:f4:c1: 71:0a:2f:ba:67:33:b5:32:d7:2d:cf:40:f8:4c:03: 7b:e7:ff:45:fc:52:4a:76:bc:87:5d:31:8e:a1:ad: 51:40:5d:3d:d1:e9:e3:ff:c9:99:ff:e8:8f:fe:b5: 1b:99:ad:90:21:e5:d5:a8:cb:f0:c7:ff:98:5a:e4: a9:fe:c1:6e:f2:cc:cb:75:96:0c:20:33:55:40:c9: f2:fb:08:63:78:2f:1e:27:4e:e9:0c:aa:6e:fc:09: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:26:85:CB:2D:69:D7:7E:FD:88:73:A7:3B:C7:03:F9:07:B9:E3:F4 X509v3 Authority Key Identifier: keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ea:df:1c:40:13:14:68:76:50:ad:3a:5f:59:4d:52:77:08: e7:7e:97:a4:d0:c3:ff:65:a1:aa:b6:da:33:70:b7:4f:bd:9d: 29:fd:84:ab:82:53:84:42:4b:ec:d1:88:c2:63:a7:af:45:a5: f7:97:a6:ff:a7:d5:95:18:a8:f3:89:b7:54:a7:72:5b:30:7b: c7:ee:21:00:ec:91:88:63:35:b7:4b:7f:08:3e:57:f6:b1:f0: 27:54:e5:55:0a:52:9a:e9:e1:d8:d0:cf:b0:a8:17:75:24:d1: de:cf:fb:a3:0a:38:96:51:ba:e6:69:e5:f0:4b:a2:c6:ed:6c: 97:02:1c:a6:1b:9f:60:ef:b1:86:a9:63:87:16:88:a1:67:ea: a8:d1:4b:69:9f:71:e9:cc:3c:be:6a:ae:dd:60:59:95:67:3f: de:2a:15:27:cb:13:99:b0:8a:65:62:19:c9:eb:23:38:13:b2: ed:3a:95:03:b4:d3:cc:4c:82:3a:02:a8:e2:8a:70:d4:a7:26: 96:c6:b9:43:d8:5d:e4:1e:d4:ae:d7:ac:ab:33:63:f8:45:91: e7:b4:2a:fc:1e:56:ec:ec:49:01:e2:b7:4f:0f:ed:79:eb:b5: b6:1e:35:3e:03:fd:b7:93:02:98:a7:d6:a9:6e:88:aa:98:cc: e4:cc:c4:8c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8D/Twg/Fz8j72GSZdLZm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj MTVmNWEwHhcNMjUxMjIwMTQwMDM3WhcNMjUxMjIxMTQwMDM3WjAzMTEwLwYDVQQD EygxNzI2ODVjYjJkNjlkNzdlZmQ4ODczYTczYmM3MDNmOTA3YjllM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqDSYKFq/7Fp8wyUFP7VwSUJdRUP omsXvj4q4eFvGLbv5F3sFiKCR1/1e0572n7svDUZbUBJN1ylf921JCNTWOmg9It5 1+OHNiafiWtZxhbgaXDeYCUzjUvcTICab6V81oy2bUA2D33HVps8BUR0xviWC0ox TJpiOTE3Xhk76AVyJOYxWN3OgFMlzKe8Ll8/QhGwvBTqeBJLvHixFKhUwJCI9MFx Ci+6ZzO1Mtctz0D4TAN75/9F/FJKdryHXTGOoa1RQF090enj/8mZ/+iP/rUbma2Q IeXVqMvwx/+YWuSp/sFu8szLdZYMIDNVQMny+whjeC8eJ07pDKpu/AkH9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBcmhcstadd+/YhzpzvHA/kHueP0MB8GA1UdIwQY MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0 LTkzMTQxNDEwMWEwMS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2Q1OTI0Ni05NTNlLTQyM2EtOTcwNC05MzE0MTQxMDFh MDEvMS8xLWxkVmRpMy1USEROZzdNS0U3ZUN4UF9CWDFvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOrf HEATFGh2UK06X1lNUncI536XpNDD/2WhqrbaM3C3T72dKf2Eq4JThEJL7NGIwmOn r0Wl95em/6fVlRio84m3VKdyWzB7x+4hAOyRiGM1t0t/CD5X9rHwJ1TlVQpSmunh 2NDPsKgXdSTR3s/7owo4llG65mnl8Euixu1slwIcphufYO+xhqljhxaIoWfqqNFL aZ9x6cw8vmqu3WBZlWc/3ioVJ8sTmbCKZWIZyesjOBOy7TqVA7TTzEyCOgKo4opw 1Kcmlsa5Q9hd5B7UrtesqzNj+EWR57Qq/B5W7OxJAeK3Tw/teeu1th41PgP9t5MC mKfWqW6IqpjM5MzEjA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:29:47 2025 by rpki-client