This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json) Hash identifier: ZfjJmQoQdubx7YoBul8h1juwzIucd32Lq4/zwbSQS5A= Subject key identifier: F1:C2:13:14:7A:49:A1:B3:DE:E8:F9:99:22:AA:D7:1B:7D:E4:7B:87 Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Certificate serial: 019B0E92F5C7113038290FAF3A3BA8B0BD78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft Manifest number: 1700 Signing time: Thu 11 Dec 2025 18:01:10 +0000 Manifest this update: Thu 11 Dec 2025 18:01:10 +0000 Manifest next update: Fri 12 Dec 2025 18:01:10 +0000 Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=) 2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: 6JxNcoCy4an0te/C0At6xqBtzzRHNac1zSpVEWcqD8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:f5:c7:11:30:38:29:0f:af:3a:3b:a8:b0:bd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Validity Not Before: Dec 11 18:01:10 2025 GMT Not After : Dec 12 18:01:10 2025 GMT Subject: CN=f1c213147a49a1b3dee8f99922aad71b7de47b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:fb:e6:69:19:25:1d:28:fd:da:e0:23:4c: 87:4e:af:b0:74:59:12:64:b4:e5:5a:31:4b:65:95: bc:25:e4:89:df:21:d6:38:e0:76:e3:0f:19:4d:09: 83:fb:fe:dc:65:73:95:1f:3c:5a:a6:39:ad:19:9a: f8:49:aa:61:c3:bc:fa:a5:71:fb:12:6a:ce:a7:c0: f6:db:a6:2c:5e:2b:4a:be:54:5d:2c:e7:5a:a0:5a: d5:c2:19:e9:7a:f2:af:8f:8b:9f:68:79:ae:6d:8b: a7:7d:3e:f9:a7:d6:b4:84:f9:49:a6:1b:b2:77:0f: f0:3e:2a:bb:cd:db:18:81:f1:16:69:3c:b5:7e:8b: 50:e2:7b:1c:79:ac:93:89:11:a1:ec:6e:e1:e1:a3: be:cb:2e:eb:53:1a:23:35:b0:6e:f4:12:98:ad:2a: c4:20:ec:0f:e5:13:97:59:65:50:1c:af:e7:02:e4: 3e:87:7d:0f:b7:fa:9c:a9:ff:c5:60:48:69:25:7b: 1c:c5:2e:98:c8:b6:cd:2b:ef:c5:20:0a:c4:00:7b: ff:fb:2e:d6:ad:67:04:6f:ab:bd:d8:85:d7:c8:a3: 36:4c:a4:fc:b9:4c:5b:62:c6:59:6e:35:3f:27:d7: 40:52:61:46:ef:82:2c:66:50:5b:7e:f7:70:bb:3c: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C2:13:14:7A:49:A1:B3:DE:E8:F9:99:22:AA:D7:1B:7D:E4:7B:87 X509v3 Authority Key Identifier: keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c9:ba:84:3d:8f:48:87:62:d0:5c:96:fc:6c:db:d4:dd:9c: ed:88:50:91:6f:98:25:56:30:ac:89:58:b8:52:11:e4:e9:b8: 52:bb:de:56:99:df:22:bd:c6:75:5e:6d:8b:c1:3b:d8:6a:9c: db:f4:f0:93:5d:a8:26:1c:92:aa:26:e8:95:83:a3:55:98:db: e2:39:81:3e:21:0d:04:4d:f4:8e:f1:20:46:93:e9:b3:ce:9a: ef:fb:2a:34:21:29:30:86:28:14:33:74:7e:90:68:b5:cf:3c: 9d:b7:ef:10:2c:06:7b:22:d8:3c:92:73:7c:6f:29:de:d6:f6: 2d:34:56:80:16:5c:49:d3:ee:e0:60:b6:1e:f3:38:d3:e8:6d: d1:bf:a7:dc:d7:51:15:dc:15:97:c1:12:ec:9c:a2:a2:51:64: e5:7c:a7:6c:38:fb:e9:d2:21:99:2f:9d:a1:04:26:3f:4c:9a: ec:d1:48:44:c0:90:34:55:8a:ae:d5:f4:57:8b:fa:d4:7c:80: f9:67:ce:e5:ef:2a:cc:f7:c0:c2:13:a2:1a:58:cc:d2:6f:b6: be:eb:a2:6c:50:5c:d0:93:68:37:df:68:68:9b:d3:e5:d2:98: e5:ce:54:b9:30:92:27:25:a7:f1:54:c7:eb:88:a9:6d:1e:3e: ff:d9:8b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkvXHETA4KQ+vOjuosL14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5 ZjRmNGMwHhcNMjUxMjExMTgwMTEwWhcNMjUxMjEyMTgwMTEwWjAzMTEwLwYDVQQD EyhmMWMyMTMxNDdhNDlhMWIzZGVlOGY5OTkyMmFhZDcxYjdkZTQ3Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHP75mkZJR0o/drgI0yHTq+wdFkS ZLTlWjFLZZW8JeSJ3yHWOOB24w8ZTQmD+/7cZXOVHzxapjmtGZr4Saphw7z6pXH7 EmrOp8D226YsXitKvlRdLOdaoFrVwhnpevKvj4ufaHmubYunfT75p9a0hPlJphuy dw/wPiq7zdsYgfEWaTy1fotQ4nsceayTiRGh7G7h4aO+yy7rUxojNbBu9BKYrSrE IOwP5ROXWWVQHK/nAuQ+h30Pt/qcqf/FYEhpJXscxS6YyLbNK+/FIArEAHv/+y7W rWcEb6u92IXXyKM2TKT8uUxbYsZZbjU/J9dAUmFG74IsZlBbfvdwuzyvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHCExR6SaGz3uj5mSKq1xt95HuHMB8GA1UdIwQY MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8m6hD2P SIdi0FyW/Gzb1N2c7YhQkW+YJVYwrIlYuFIR5Om4UrveVpnfIr3GdV5ti8E72Gqc 2/Twk12oJhySqibolYOjVZjb4jmBPiENBE30jvEgRpPps86a7/sqNCEpMIYoFDN0 fpBotc88nbfvECwGeyLYPJJzfG8p3tb2LTRWgBZcSdPu4GC2HvM40+ht0b+n3NdR FdwVl8ES7JyiolFk5XynbDj76dIhmS+doQQmP0ya7NFIRMCQNFWKrtX0V4v61HyA +WfO5e8qzPfAwhOiGljM0m+2vuuibFBc0JNoN99oaJvT5dKY5c5UuTCSJyWn8VTH 64ipbR4+/9mLOA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:55 2025 by rpki-client