This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json) Hash identifier: rmzkr2KOq+RfERxj/MKkQMMqycDe0Z9QGy9jPsGuTFU= Subject key identifier: 72:27:3C:74:3B:8B:CE:E9:9F:F6:95:98:CB:B9:B4:23:D0:5A:1F:E6 Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Certificate serial: 019B42B72E5C64C1EE94E4CE895692CA980E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 21:00:59 +0000 Manifest this update: Sun 21 Dec 2025 21:00:59 +0000 Manifest next update: Mon 22 Dec 2025 21:00:59 +0000 Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: SqousZ55LA/cG9G+jWhJosubCNhLvVEXZKcwRDqv4dE=) 2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=) 3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=) 4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:2e:5c:64:c1:ee:94:e4:ce:89:56:92:ca:98:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Validity Not Before: Dec 21 21:00:59 2025 GMT Not After : Dec 22 21:00:59 2025 GMT Subject: CN=72273c743b8bcee99ff69598cbb9b423d05a1fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:b0:32:6c:ab:7c:d3:92:07:c2:05:16:33: c6:17:23:63:02:7e:d6:a3:61:4d:85:5d:3b:de:36: 32:ff:26:61:ea:db:c1:00:6e:3c:03:e9:de:3d:2a: 01:3e:bb:65:98:ca:0d:27:db:56:29:27:9d:8f:db: 82:42:2d:27:5b:cb:37:3c:0e:9f:4a:d5:b7:25:09: 37:16:c2:5c:54:50:8b:0c:47:8b:1c:0c:f4:2a:bd: d5:c6:6a:8a:94:a0:24:af:aa:f1:ba:c2:89:0a:cd: 17:95:ca:e0:b4:e7:ba:dc:49:0b:66:fa:54:df:38: a4:ab:06:b5:cc:49:ad:bd:9f:af:ad:d5:7b:47:fd: 48:f2:5c:df:70:e4:a6:5a:20:67:ae:98:15:52:b3: e4:79:f4:94:f8:ea:c6:5d:c5:b1:1d:a3:e2:c0:98: 2e:8a:79:4a:72:30:fe:68:44:55:35:ba:56:65:b0: 9d:3e:3a:57:1a:2d:59:08:cd:22:51:ea:3b:37:12: f7:24:38:ac:bf:a5:fe:0b:69:40:c8:f0:71:1c:0b: 79:2d:66:53:c8:12:4f:be:b8:a9:8b:a3:c7:5f:9d: 74:be:52:d2:66:e2:1c:3c:da:a3:31:ba:ee:72:e7: 44:3a:6f:68:77:cd:a5:42:df:8f:66:64:05:d0:c5: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:27:3C:74:3B:8B:CE:E9:9F:F6:95:98:CB:B9:B4:23:D0:5A:1F:E6 X509v3 Authority Key Identifier: keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:64:b3:92:ee:0e:aa:83:2b:4a:d9:4d:ad:a4:eb:06:52:56: 36:0b:be:8c:c0:ad:42:be:9f:4d:6a:82:79:f7:d3:4d:62:3c: ef:c2:fe:44:60:fe:c2:ba:91:9d:84:cd:d9:6d:ed:f0:38:ff: 13:ab:fa:d3:a6:3a:20:cf:79:26:d2:6b:a1:72:cc:f4:08:96: 2a:25:91:2b:20:cd:01:70:ce:24:f6:1f:a2:a5:b4:15:a5:19: 86:a3:e9:52:96:38:f8:48:98:c0:b7:36:a2:a5:ca:2d:c6:5b: 50:5b:59:da:d3:d0:c6:ed:4c:7a:85:6f:9d:59:dd:97:fd:d2: c1:10:e0:82:2a:80:46:09:d7:32:09:cc:12:c9:f4:22:4e:6c: b4:a2:75:a2:9c:e2:01:f3:23:fc:71:f2:ad:6e:68:3b:3a:b6: 24:d9:05:e8:51:bb:36:37:41:04:85:b2:8d:fe:91:bd:f5:0f: f8:75:dc:8f:b8:d1:6d:23:de:a7:2c:95:25:91:33:d7:cf:d9: 8a:1a:55:d3:44:95:2e:d5:1a:9f:7a:32:23:2b:09:c4:64:6c: f6:d9:ff:41:68:09:18:2e:c8:02:95:82:85:50:72:f6:c6:87: 44:f1:48:f0:3a:37:91:6c:20:3c:36:9d:d5:0d:1a:9a:c3:ab: 5c:e5:79:bf -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCty5cZMHulOTOiVaSypgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk N2JjNzIwHhcNMjUxMjIxMjEwMDU5WhcNMjUxMjIyMjEwMDU5WjAzMTEwLwYDVQQD Eyg3MjI3M2M3NDNiOGJjZWU5OWZmNjk1OThjYmI5YjQyM2QwNWExZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbKwMmyrfNOSB8IFFjPGFyNjAn7W o2FNhV073jYy/yZh6tvBAG48A+nePSoBPrtlmMoNJ9tWKSedj9uCQi0nW8s3PA6f StW3JQk3FsJcVFCLDEeLHAz0Kr3VxmqKlKAkr6rxusKJCs0XlcrgtOe63EkLZvpU 3zikqwa1zEmtvZ+vrdV7R/1I8lzfcOSmWiBnrpgVUrPkefSU+OrGXcWxHaPiwJgu inlKcjD+aERVNbpWZbCdPjpXGi1ZCM0iUeo7NxL3JDisv6X+C2lAyPBxHAt5LWZT yBJPvripi6PHX510vlLSZuIcPNqjMbrucudEOm9od82lQt+PZmQF0MWvwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHInPHQ7i87pn/aVmMu5tCPQWh/mMB8GA1UdIwQY MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm LThiZjRmZTRjNzczMi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgyLzI3NmMyNC0yYTdmLTQ3MjYtOGQ5Zi04YmY0ZmU0Yzc3 MzIvMS8xLWxiSDVtQ3h4MDQ3QXhpeFF6akQ4QTNYdkhJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2Sz ku4OqoMrStlNraTrBlJWNgu+jMCtQr6fTWqCeffTTWI878L+RGD+wrqRnYTN2W3t 8Dj/E6v606Y6IM95JtJroXLM9AiWKiWRKyDNAXDOJPYfoqW0FaUZhqPpUpY4+EiY wLc2oqXKLcZbUFtZ2tPQxu1MeoVvnVndl/3SwRDggiqARgnXMgnMEsn0Ik5stKJ1 opziAfMj/HHyrW5oOzq2JNkF6FG7NjdBBIWyjf6RvfUP+HXcj7jRbSPepyyVJZEz 18/ZihpV00SVLtUan3oyIysJxGRs9tn/QWgJGC7IApWChVBy9saHRPFI8Do3kWwg PDad1Q0amsOrXOV5vw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:34 2025 by rpki-client