This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json) Hash identifier: dbcGpnCFdY3byMJXxYQSysRRW4myXDVxlTyNPCe4/Wc= Subject key identifier: 6D:24:69:0F:DE:77:ED:73:08:13:35:B4:EA:A8:65:3A:BC:6C:2D:1D Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Certificate serial: 019B390EFEA103B036AD03572B9D9789FDB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 00:00:42 +0000 Manifest this update: Sat 20 Dec 2025 00:00:42 +0000 Manifest next update: Sun 21 Dec 2025 00:00:42 +0000 Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: UWerJpVvrmuEtWEZGw1zJUzc9YRXPJ3Ehxgop4d6/eo=) 2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:fe:a1:03:b0:36:ad:03:57:2b:9d:97:89:fd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Validity Not Before: Dec 20 00:00:42 2025 GMT Not After : Dec 21 00:00:42 2025 GMT Subject: CN=6d24690fde77ed73081335b4eaa8653abc6c2d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:bc:cf:0e:61:c6:8a:8c:17:75:0b:1b:95: 4a:56:93:5d:3b:f7:d2:43:25:c2:4d:9f:75:34:6d: 1f:9f:20:9c:38:df:04:15:b6:bb:44:cf:e2:8d:f9: e4:24:c0:ff:4a:60:60:b5:b2:a2:d8:ec:69:bf:df: 8f:bf:8c:b0:4b:2e:cd:3f:85:b5:14:77:01:40:08: c8:4a:8b:7c:7c:b4:a9:9c:36:71:02:cc:1f:20:81: 1d:a5:a6:99:18:1c:44:94:0a:f4:0a:9d:2a:81:1b: a0:24:7c:40:02:fa:71:cf:66:a8:88:14:55:4e:91: 67:e7:18:fd:79:0e:e9:11:b7:a9:e2:49:f5:74:35: de:7b:72:eb:1d:67:b8:3e:b6:07:5d:c5:0f:df:29: f0:86:df:21:26:d6:c6:0d:3c:01:66:01:34:73:b8: ed:55:b7:3c:c5:dd:4d:40:23:1d:3e:17:e9:03:dc: 1c:de:6a:cb:62:e2:a8:c3:75:44:ab:b4:8a:85:1a: b9:d2:a2:b2:7e:b9:cf:7c:a4:90:b5:4d:98:99:7b: 12:86:d9:a1:61:22:f7:26:ca:17:de:81:15:f7:9f: 96:01:43:c9:13:0d:68:35:15:c6:5c:e4:38:ef:ea: 21:2f:80:f6:87:31:d7:84:b8:6d:f9:0b:7b:c3:d1: 72:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:24:69:0F:DE:77:ED:73:08:13:35:B4:EA:A8:65:3A:BC:6C:2D:1D X509v3 Authority Key Identifier: keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b8:0c:49:82:35:8d:24:8c:eb:1a:52:02:1b:c2:fa:2b:c9: 25:64:52:db:04:97:dd:57:20:7f:9a:48:23:de:ad:02:e6:44: 83:92:ca:8e:26:1a:a6:3f:2b:7d:f6:58:2d:0c:45:9e:43:e2: 74:7a:76:35:08:a9:bc:de:85:50:21:53:c1:1c:ca:c5:ba:9c: 55:d5:20:4d:01:2f:05:fd:5c:9c:a6:e4:7b:b8:69:6a:e7:3e: 12:e5:40:40:1e:81:fc:37:b3:b8:0e:ad:d5:0c:a1:d9:c9:73: 1f:dc:90:d1:7e:93:96:0e:95:cb:48:5f:85:9f:71:05:37:09: 82:c7:53:fc:6f:c1:5e:b4:96:b4:42:cc:25:32:f3:36:2d:3c: 5f:7c:a4:3b:a9:1f:a0:65:dc:55:31:bd:79:ec:71:25:ec:29: 60:3b:ce:fd:94:14:91:e7:83:06:a1:6a:da:6a:77:36:8e:e4: 54:ab:06:b5:48:e9:b9:0c:7f:70:e8:85:5c:84:b9:a0:bd:96: 1e:9a:27:2d:2e:92:71:4c:d0:41:b1:36:a3:85:d8:9a:01:90: 8a:39:d9:1b:83:1f:f9:ce:26:66:80:f8:0b:cb:d2:fc:d6:e5: e1:fa:2a:f4:04:64:1b:56:83:62:17:85:2e:0a:3a:8c:a6:15: b1:e6:df:87 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5Dv6hA7A2rQNXK52Xif2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5 NzFmOTcwHhcNMjUxMjIwMDAwMDQyWhcNMjUxMjIxMDAwMDQyWjAzMTEwLwYDVQQD Eyg2ZDI0NjkwZmRlNzdlZDczMDgxMzM1YjRlYWE4NjUzYWJjNmMyZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk28zw5hxoqMF3ULG5VKVpNdO/fS QyXCTZ91NG0fnyCcON8EFba7RM/ijfnkJMD/SmBgtbKi2Oxpv9+Pv4ywSy7NP4W1 FHcBQAjISot8fLSpnDZxAswfIIEdpaaZGBxElAr0Cp0qgRugJHxAAvpxz2aoiBRV TpFn5xj9eQ7pEbep4kn1dDXee3LrHWe4PrYHXcUP3ynwht8hJtbGDTwBZgE0c7jt Vbc8xd1NQCMdPhfpA9wc3mrLYuKow3VEq7SKhRq50qKyfrnPfKSQtU2YmXsShtmh YSL3JsoX3oEV95+WAUPJEw1oNRXGXOQ47+ohL4D2hzHXhLht+Qt7w9FyIwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG0kaQ/ed+1zCBM1tOqoZTq8bC0dMB8GA1UdIwQY MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4 LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7gM SYI1jSSM6xpSAhvC+ivJJWRS2wSX3Vcgf5pII96tAuZEg5LKjiYapj8rffZYLQxF nkPidHp2NQipvN6FUCFTwRzKxbqcVdUgTQEvBf1cnKbke7hpauc+EuVAQB6B/Dez uA6t1Qyh2clzH9yQ0X6Tlg6Vy0hfhZ9xBTcJgsdT/G/BXrSWtELMJTLzNi08X3yk O6kfoGXcVTG9eexxJewpYDvO/ZQUkeeDBqFq2mp3No7kVKsGtUjpuQx/cOiFXIS5 oL2WHponLS6ScUzQQbE2o4XYmgGQijnZG4Mf+c4mZoD4C8vS/Nbl4foq9ARkG1aD YheFLgo6jKYVsebfhw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:28:54 2025 by rpki-client