This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json) Hash identifier: CpDfVCnt0wO7C7s4znrcU5wEshtC+Sao0morZRoUiis= Subject key identifier: 62:77:C7:83:B8:E7:4C:31:76:FB:C6:FB:3D:40:57:07:CC:13:4C:D4 Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2 Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2 Certificate serial: 019B5A8834F41C172650B4866009F5457B4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft Manifest number: 058D Signing time: Fri 26 Dec 2025 12:00:34 +0000 Manifest this update: Fri 26 Dec 2025 12:00:34 +0000 Manifest next update: Sat 27 Dec 2025 12:00:34 +0000 Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: 9E/etQoYqOkt5Bxa2iDS1ofFo6V9XD4RtyRfZEsYUiE=) 2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:34:f4:1c:17:26:50:b4:86:60:09:f5:45:7b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2 Validity Not Before: Dec 26 12:00:34 2025 GMT Not After : Dec 27 12:00:34 2025 GMT Subject: CN=6277c783b8e74c3176fbc6fb3d405707cc134cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:07:f0:d4:21:9e:b2:ac:b4:8b:ab:df:bb: b4:e9:38:00:fc:bc:eb:85:38:ed:67:98:2a:1b:1e: 82:df:da:90:77:2d:57:c4:bb:45:52:fe:fe:b1:a4: aa:75:08:67:9d:19:9c:99:48:ad:7b:f9:d2:93:08: 5d:ac:e9:38:07:4d:8f:90:2a:ef:e8:bf:9a:a4:a7: 7a:48:69:18:94:7c:33:47:3e:ce:37:fd:0b:5c:05: 5f:82:eb:bb:06:29:cb:cb:42:60:18:34:2e:dc:06: f6:86:88:37:7d:2d:5d:51:e8:2a:a7:1c:db:6f:66: 18:01:0d:91:68:4a:09:a5:64:3c:ef:ec:71:d1:41: 9a:66:13:4d:af:d9:25:86:b6:9b:60:d4:43:76:bf: 60:a3:65:2b:b9:90:a2:e3:8c:00:d6:57:be:53:91: 00:e9:43:f9:a5:9b:f7:02:95:72:e2:2e:ea:c3:12: 8c:a1:52:27:4a:83:d3:e4:75:f6:53:95:2e:05:f9: d2:8b:0a:9b:da:92:16:71:b5:85:9d:a8:7f:00:4f: d4:7b:ff:cc:5b:af:8b:79:02:c2:0d:03:89:9a:e4: 51:fa:b3:90:28:98:bf:35:f5:74:61:51:14:0d:15: 47:dc:a1:de:5e:61:64:0d:95:cb:43:d5:d3:4f:dd: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:77:C7:83:B8:E7:4C:31:76:FB:C6:FB:3D:40:57:07:CC:13:4C:D4 X509v3 Authority Key Identifier: keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cd:1d:12:99:76:b9:35:0d:d9:dc:f2:12:79:9b:68:89:08: 9b:8e:48:8b:2a:6b:c3:c3:23:0a:f5:51:36:f6:ae:0e:f9:24: b6:f2:0b:30:c0:a5:68:d2:be:d5:4e:57:6e:b7:79:90:90:4a: 93:f2:c9:7c:b4:b8:23:07:4e:2a:40:2c:e3:ef:a7:90:76:48: fd:61:1a:06:2f:ed:14:ae:ba:9f:71:16:0e:47:8e:b8:ae:3a: 99:63:f0:b4:5c:cb:03:fd:eb:c4:3c:99:da:f9:4c:27:44:8d: 66:31:54:79:3b:42:3e:59:ac:2d:51:f8:50:65:77:8e:06:01: c5:70:18:cb:81:57:82:b2:47:0e:fd:40:36:02:1e:0f:47:83: 86:08:99:5b:30:f6:e1:ab:4b:32:50:b4:e1:4a:ec:dd:bb:8e: 8a:97:4e:80:8b:9b:6f:90:29:c0:53:0c:8c:c4:82:11:a5:50: d5:8e:d0:bc:da:c2:de:1e:4f:2b:28:8f:1e:92:6a:bf:e4:00: 47:be:16:04:05:68:8b:ab:e5:f8:5b:20:68:c0:a0:8a:28:5e: e8:d4:f2:fe:fd:52:77:3a:43:92:3c:88:1c:b9:9b:8a:30:da: 1f:2d:7d:b1:ed:cd:73:da:6e:68:4d:a9:fc:f5:4c:06:33:ef: 79:a9:0d:a7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaiDT0HBcmULSGYAn1RXtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1 NTBkZjIwHhcNMjUxMjI2MTIwMDM0WhcNMjUxMjI3MTIwMDM0WjAzMTEwLwYDVQQD Eyg2Mjc3Yzc4M2I4ZTc0YzMxNzZmYmM2ZmIzZDQwNTcwN2NjMTM0Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+8H8NQhnrKstIur37u06TgA/Lzr hTjtZ5gqGx6C39qQdy1XxLtFUv7+saSqdQhnnRmcmUite/nSkwhdrOk4B02PkCrv 6L+apKd6SGkYlHwzRz7ON/0LXAVfguu7BinLy0JgGDQu3Ab2hog3fS1dUegqpxzb b2YYAQ2RaEoJpWQ87+xx0UGaZhNNr9klhrabYNRDdr9go2UruZCi44wA1le+U5EA 6UP5pZv3ApVy4i7qwxKMoVInSoPT5HX2U5UuBfnSiwqb2pIWcbWFnah/AE/Ue//M W6+LeQLCDQOJmuRR+rOQKJi/NfV0YVEUDRVH3KHeXmFkDZXLQ9XTT93XbQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGJ3x4O450wxdvvG+z1AVwfME0zUMB8GA1UdIwQY MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4 LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc0d Epl2uTUN2dzyEnmbaIkIm45Iiyprw8MjCvVRNvauDvkktvILMMClaNK+1U5Xbrd5 kJBKk/LJfLS4IwdOKkAs4++nkHZI/WEaBi/tFK66n3EWDkeOuK46mWPwtFzLA/3r xDyZ2vlMJ0SNZjFUeTtCPlmsLVH4UGV3jgYBxXAYy4FXgrJHDv1ANgIeD0eDhgiZ WzD24atLMlC04Urs3buOipdOgIubb5ApwFMMjMSCEaVQ1Y7QvNrC3h5PKyiPHpJq v+QAR74WBAVoi6vl+FsgaMCgiihe6NTy/v1SdzpDkjyIHLmbijDaHy19se3Nc9pu aE2p/PVMBjPveakNpw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:28 2025 by rpki-client