This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json) Hash identifier: fBk1khuZkuP83Qlq3BARWfkLOOuwVo+2WBo3Z6jpviY= Subject key identifier: A0:01:D2:73:60:98:1B:F0:5A:2D:8E:BC:1B:A7:09:3B:4F:21:4B:BC Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Certificate serial: 019B3E6E1E7BE96DAA8B068594E537C98E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 01:02:42 +0000 Manifest this update: Sun 21 Dec 2025 01:02:42 +0000 Manifest next update: Mon 22 Dec 2025 01:02:42 +0000 Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: 63MJZFnNiGQJ6hnhXgkW9fm9VZ7nlJDWQF3z4uYesU0=) 2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:1e:7b:e9:6d:aa:8b:06:85:94:e5:37:c9:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Validity Not Before: Dec 21 01:02:42 2025 GMT Not After : Dec 22 01:02:42 2025 GMT Subject: CN=a001d27360981bf05a2d8ebc1ba7093b4f214bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:32:31:e6:9f:c8:06:f1:e5:8d:6d:6a:ae: 5f:a0:d1:19:6e:d7:2b:3c:7f:a0:ec:3a:c8:e8:8e: 3e:37:40:56:89:ed:8e:e6:4e:fb:27:00:00:28:00: a6:5c:ce:05:6a:39:b1:6d:ee:5d:ce:39:4e:0c:c7: c6:93:2e:67:61:55:d7:dc:27:3b:0b:e2:1a:72:36: 2e:35:5a:a4:e2:de:b1:b9:df:69:bf:8d:12:cb:5d: 74:a3:e9:cd:50:25:a3:34:4d:01:e8:97:66:a8:dd: d9:23:a2:b9:36:bf:1f:36:e0:5a:f4:99:fb:09:ef: 3b:78:89:ef:be:d8:e3:c5:3f:e9:85:80:d7:05:28: 87:e2:be:a6:b7:cc:b3:98:fb:c8:c5:fb:c7:65:42: 9c:d3:e7:35:c6:18:a3:5e:99:e5:6e:f6:7b:d8:f2: 75:22:6b:69:a2:5c:93:b9:c6:d2:a1:38:12:79:0f: 96:c6:88:42:a1:51:36:41:14:b6:db:81:58:db:69: 73:d4:79:d9:c9:c4:2c:b5:53:78:2e:f5:a2:dd:3d: 3f:28:cf:cc:91:15:e9:6f:94:87:1c:ce:ce:45:c7: 49:a8:2f:de:c2:4b:25:94:fd:69:8e:b2:ae:56:9a: f2:00:b0:86:cf:0e:e3:06:05:36:b0:28:d3:d3:b8: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:01:D2:73:60:98:1B:F0:5A:2D:8E:BC:1B:A7:09:3B:4F:21:4B:BC X509v3 Authority Key Identifier: keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cb:a7:36:6c:c1:2e:73:da:f0:3c:e6:d1:0f:c4:90:8a:99: 13:8b:f3:4e:b0:f1:cc:ed:ec:4a:5b:b5:36:c6:31:73:1c:4d: e0:ea:2b:8b:88:98:7f:db:d0:b9:1f:16:2f:b3:cc:50:98:2d: 24:0c:88:41:e1:8e:1c:7a:5f:94:78:01:2e:4a:fc:a3:01:35: a4:b3:77:30:2d:03:c7:47:d6:2b:5c:8f:12:1a:4f:d5:89:f7: 2f:23:90:9e:13:31:0d:6a:a8:4f:5f:86:f2:73:4f:91:b2:71: 25:b9:38:aa:68:48:33:20:a2:f4:48:62:5a:d8:d1:f7:4e:e7: 93:8c:af:e2:6d:4c:84:a8:3a:c3:72:27:96:1a:e7:59:97:33: 9f:a4:52:d0:02:e7:f5:0a:35:4c:9a:82:de:cc:38:3d:f4:62: f0:2e:83:ff:92:51:03:68:04:f8:e3:ba:3b:2c:c8:4b:b5:51: ed:d1:e1:9a:50:ff:41:24:b2:c2:c8:ec:9f:ee:69:dc:58:83: 7b:fc:d9:ea:9e:73:e2:1f:ca:b8:74:62:ab:29:d9:6a:ab:dd: 69:8f:c3:34:9e:55:c6:af:46:ef:4a:a1:5e:dc:26:fc:fe:54: 98:5d:15:c3:21:74:91:93:e7:f5:88:3a:99:71:6a:b8:66:e7: e9:b5:76:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bh576W2qiwaFlOU3yY5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm MGYzNWUwHhcNMjUxMjIxMDEwMjQyWhcNMjUxMjIyMDEwMjQyWjAzMTEwLwYDVQQD EyhhMDAxZDI3MzYwOTgxYmYwNWEyZDhlYmMxYmE3MDkzYjRmMjE0YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUyMeafyAbx5Y1taq5foNEZbtcr PH+g7DrI6I4+N0BWie2O5k77JwAAKACmXM4Fajmxbe5dzjlODMfGky5nYVXX3Cc7 C+IacjYuNVqk4t6xud9pv40Sy110o+nNUCWjNE0B6JdmqN3ZI6K5Nr8fNuBa9Jn7 Ce87eInvvtjjxT/phYDXBSiH4r6mt8yzmPvIxfvHZUKc0+c1xhijXpnlbvZ72PJ1 ImtpolyTucbSoTgSeQ+WxohCoVE2QRS224FY22lz1HnZycQstVN4LvWi3T0/KM/M kRXpb5SHHM7ORcdJqC/ewksllP1pjrKuVpryALCGzw7jBgU2sCjT07gQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAB0nNgmBvwWi2OvBunCTtPIUu8MB8GA1UdIwQY MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3 LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMunNmzB LnPa8Dzm0Q/EkIqZE4vzTrDxzO3sSlu1NsYxcxxN4Oori4iYf9vQuR8WL7PMUJgt JAyIQeGOHHpflHgBLkr8owE1pLN3MC0Dx0fWK1yPEhpP1Yn3LyOQnhMxDWqoT1+G 8nNPkbJxJbk4qmhIMyCi9EhiWtjR907nk4yv4m1MhKg6w3InlhrnWZczn6RS0ALn 9Qo1TJqC3sw4PfRi8C6D/5JRA2gE+OO6OyzIS7VR7dHhmlD/QSSywsjsn+5p3FiD e/zZ6p5z4h/KuHRiqynZaqvdaY/DNJ5Vxq9G70qhXtwm/P5UmF0VwyF0kZPn9Yg6 mXFquGbn6bV2cw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:11 2025 by rpki-client