This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json) Hash identifier: zbI8jdvFI7rNBpicwbA2Wn9vaxn0vhxGUU2Ku7US9BI= Subject key identifier: 76:D9:5C:79:3E:6D:71:18:DE:A9:4D:43:DE:A5:29:93:D8:3D:30:2C Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Certificate serial: 019B5A51DA98A67E8D3C481A036371668106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft Manifest number: 41 Signing time: Fri 26 Dec 2025 11:01:12 +0000 Manifest this update: Fri 26 Dec 2025 11:01:12 +0000 Manifest next update: Sat 27 Dec 2025 11:01:12 +0000 Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: nSj40cz5BRavjWJaEI1eR4mQ479GtVXwYGF0/HMCSD4=) 2: eK1Z4-kI7xtwgkRHFwokm6IQfiA.roa (hash: Amg8RSjuWxmCHDVccTSJSqHK9UDEuD22DTzLYwn/oU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:da:98:a6:7e:8d:3c:48:1a:03:63:71:66:81:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Validity Not Before: Dec 26 11:01:12 2025 GMT Not After : Dec 27 11:01:12 2025 GMT Subject: CN=76d95c793e6d7118dea94d43dea52993d83d302c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:b5:b8:ca:ee:ab:d4:15:03:47:d5:e2:7f: 89:9e:95:88:af:35:03:47:ca:4f:36:25:89:61:db: 8e:27:44:50:9a:42:d2:0d:e3:76:67:81:f9:df:8e: bc:59:5a:5e:a3:00:40:4d:1f:57:de:9b:e5:29:22: dc:72:0f:4f:5a:9b:ec:16:f3:c8:07:43:d2:17:e3: eb:3c:8f:0d:77:d0:64:fd:b4:94:c8:05:91:69:c1: 63:80:56:8f:d5:76:00:84:f1:9a:6b:ba:83:1d:39: ba:ca:37:69:11:80:16:87:ca:72:32:f4:09:c9:e9: 6a:fd:4f:52:3c:f7:8c:fe:83:e9:76:b0:80:f4:b2: c6:9a:c4:73:d3:59:67:b7:b6:64:6b:84:51:dc:42: e9:00:79:3a:15:11:9b:53:9f:43:04:ca:40:b6:6a: f4:80:df:70:c6:61:98:8d:d1:78:87:5d:d8:42:9b: d2:5e:a9:81:3d:49:a5:d4:12:74:87:13:ea:a4:e0: d5:33:d8:7e:a2:1b:ac:ca:4d:dc:80:45:a4:f7:2a: 20:82:7b:16:92:5e:da:0a:43:64:29:1c:a9:9c:ef: a9:cb:65:1a:1c:b1:6a:bf:d0:10:56:5c:65:32:a9: 14:55:db:08:42:77:a2:c1:d2:73:ed:7b:f0:dd:01: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:5C:79:3E:6D:71:18:DE:A9:4D:43:DE:A5:29:93:D8:3D:30:2C X509v3 Authority Key Identifier: keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e7:33:e0:99:27:4a:b1:71:f2:e6:fa:e7:ae:b4:18:a1:e2: ff:b1:10:07:89:46:38:e0:e1:31:59:a1:65:a9:33:a5:71:2f: 72:4f:e6:1b:57:1c:a3:2a:02:03:66:5f:d0:c4:a4:4f:47:ad: de:c0:5c:3a:51:0a:76:ea:06:ca:83:21:e1:fc:26:71:2a:8d: 69:ad:5d:1f:3b:47:78:3b:a0:8e:9a:dd:11:bc:34:b2:e8:eb: ba:7f:04:8c:da:9f:fa:7d:67:e8:42:13:07:00:17:34:7f:e4: 8c:71:33:c1:1f:a2:73:c6:2b:0c:fd:92:c8:fe:cf:ac:a6:2c: ff:a5:47:9c:22:f9:da:86:7e:3b:0e:cc:05:a0:2b:63:ee:d4: 6b:2f:33:60:5a:ea:10:a3:85:89:e5:26:76:3e:49:7f:56:83: 4c:f6:15:8b:74:39:45:e2:f8:62:f2:a0:04:46:b0:91:e9:2c: f0:4e:e3:e3:b3:70:73:76:ac:51:1a:46:87:2b:ae:a4:48:6e: e8:3a:70:ab:f5:e9:2d:94:fb:99:a2:8d:17:1a:05:5d:59:9b: a0:fc:d3:f0:45:11:19:59:56:ef:42:b2:4f:24:61:92:93:43: 98:60:bb:a7:9f:5f:c9:62:04:99:d2:1d:c5:68:fd:32:b7:f2: 49:db:e0:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaUdqYpn6NPEgaA2NxZoEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNWEyNTk4MmY3Yjc0NzExMmIwZmYzNThmM2QyNGE1NjJj ZmNmZWMwHhcNMjUxMjI2MTEwMTEyWhcNMjUxMjI3MTEwMTEyWjAzMTEwLwYDVQQD Eyg3NmQ5NWM3OTNlNmQ3MTE4ZGVhOTRkNDNkZWE1Mjk5M2Q4M2QzMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUm1uMruq9QVA0fV4n+JnpWIrzUD R8pPNiWJYduOJ0RQmkLSDeN2Z4H53468WVpeowBATR9X3pvlKSLccg9PWpvsFvPI B0PSF+PrPI8Nd9Bk/bSUyAWRacFjgFaP1XYAhPGaa7qDHTm6yjdpEYAWh8pyMvQJ yelq/U9SPPeM/oPpdrCA9LLGmsRz01lnt7Zka4RR3ELpAHk6FRGbU59DBMpAtmr0 gN9wxmGYjdF4h13YQpvSXqmBPUml1BJ0hxPqpODVM9h+ohusyk3cgEWk9yoggnsW kl7aCkNkKRypnO+py2UaHLFqv9AQVlxlMqkUVdsIQneiwdJz7Xvw3QGg1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHbZXHk+bXEY3qlNQ96lKZPYPTAsMB8GA1UdIwQY MBaAFPpaJZgve3RxErD/NY89JKViz8/sMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sb2xtQzk3ZEhFU3NQODFqejBrcFdMUHotdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNzZkN2FlLWRlNjctNGEwNS1hNzFi LWRlNzc0YjBlMzFkZi8xLzEtbG9sbUM5N2RIRVNzUDgxanowa3BXTFB6LXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E5Lzc2ZDdhZS1kZTY3LTRhMDUtYTcxYi1kZTc3NGIwZTMx ZGYvMS8xLWxvbG1DOTdkSEVTc1A4MWp6MGtwV0xQei13LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+cz 4JknSrFx8ub65660GKHi/7EQB4lGOODhMVmhZakzpXEvck/mG1ccoyoCA2Zf0MSk T0et3sBcOlEKduoGyoMh4fwmcSqNaa1dHztHeDugjprdEbw0sujrun8EjNqf+n1n 6EITBwAXNH/kjHEzwR+ic8YrDP2SyP7PrKYs/6VHnCL52oZ+Ow7MBaArY+7Uay8z YFrqEKOFieUmdj5Jf1aDTPYVi3Q5ReL4YvKgBEawkeks8E7j47Nwc3asURpGhyuu pEhu6Dpwq/XpLZT7maKNFxoFXVmboPzT8EURGVlW70KyTyRhkpNDmGC7p59fyWIE mdIdxWj9MrfySdvgag== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:20 2025 by rpki-client