This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json) Hash identifier: 7jlQvEHUeiDdrgvfrtVttcJC7iJnkD6gEd/k7Dxlqzs= Subject key identifier: FA:CA:06:91:9E:95:29:34:BB:2B:2B:B6:10:9E:13:EB:58:88:E5:C2 Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a Certificate serial: 019AF276EA9570DE38B12261B13B49B3E114 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft Manifest number: 0155 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: b6MnEWsq4QhhJWpJne8EpEO3P/azRrz8IkCZmIbQhHE=) 2: 1j10fGgoumz7WTH368PI_luQFZo.roa (hash: I8kLuezU2XygaqC04v/laZ7klhdBf+W1z6e/cSddoJA=) 3: warGeR8KF_Qduq42XjiOHRQiVOo.roa (hash: rRr5EdH0nhSwX6FyG7IpMNhRuhDpGs/F3/vvkFXiG7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ea:95:70:de:38:b1:22:61:b1:3b:49:b3:e1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=faca06919e952934bb2b2bb6109e13eb5888e5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:89:7a:70:c4:a9:c7:8a:8f:6f:ab:79:66: a7:df:fb:02:47:fa:68:54:13:00:09:3e:ed:41:6a: 70:de:ec:9b:d9:99:93:3b:46:14:62:d3:b1:f1:b1: 12:48:34:71:a4:29:6b:ae:3c:e3:43:8c:2b:1a:3f: 8d:82:f9:58:e6:ca:2f:68:d9:14:ef:d0:de:80:dd: 70:b9:6a:2e:5d:c0:a3:18:00:31:2e:33:0d:78:d2: ff:0b:3b:17:75:0a:57:76:d9:23:b0:56:ff:19:e7: 09:35:c2:0d:ca:81:18:53:8e:57:15:54:46:df:2e: 2a:ee:fc:42:e6:4d:b0:f7:8a:38:49:30:45:26:57: 46:41:4b:af:10:f6:31:59:24:b9:75:62:cb:bf:37: 60:5f:41:f5:ea:32:40:b9:b4:eb:65:66:ac:30:b2: 89:11:7f:5a:0c:87:db:36:95:c8:ab:c6:25:76:1f: d2:2b:c7:7f:88:75:b0:a2:c7:47:ad:b1:8b:fe:5b: c7:e7:3b:99:ef:51:b2:a3:b4:30:2d:be:73:c4:5b: d6:34:14:48:17:7f:9a:ad:a0:a2:cd:95:96:06:e3: 9a:d2:4c:c6:bc:5f:0d:08:70:81:d8:51:43:5e:b4: de:f9:a5:88:90:d1:ac:69:5f:f1:13:f9:df:cd:cb: a1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:06:91:9E:95:29:34:BB:2B:2B:B6:10:9E:13:EB:58:88:E5:C2 X509v3 Authority Key Identifier: keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e7:fc:a1:8e:6f:a2:18:0d:88:19:f3:ff:33:36:2f:79:f5: 87:cb:4b:13:37:52:7c:e5:a5:b8:c4:bd:c4:4b:99:c1:0c:3a: 4f:10:67:f1:c2:e9:46:9e:85:6c:ca:e4:5f:ea:70:30:f1:2c: 1b:83:00:c3:b0:cf:24:dc:7d:66:84:22:7e:98:6c:7e:85:07: 9f:01:46:3e:5a:15:c6:54:56:10:8d:92:97:65:2d:85:3c:54: 2d:f8:5e:7e:ca:01:f7:81:4a:6a:fe:e3:97:60:5a:22:69:6f: 7c:1f:db:5e:03:69:84:b9:1c:51:ef:35:20:e6:f6:23:03:c4: 76:9c:6b:25:0a:3f:ef:ee:cb:5c:6b:66:59:10:90:a3:0f:ca: e0:50:d2:9d:6d:e9:06:f6:68:0f:2c:87:a8:07:7e:ec:7f:ac: 00:98:9b:63:21:09:66:63:08:2c:21:16:30:91:1f:7e:65:3c: a1:75:5b:fc:e0:29:00:04:1c:9c:e8:08:22:d7:6c:5b:d6:4b: 12:01:6b:66:4c:70:88:9e:c3:3f:8a:d3:c0:d1:a3:c0:91:e7: 2e:18:ac:2d:23:fa:5c:13:18:93:c9:3a:d9:a3:af:5c:87:37: 96:13:a4:31:66:af:f1:b0:bd:ed:bb:28:da:1d:7a:a4:34:44: 3d:fb:0d:90 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryduqVcN44sSJhsTtJs+EUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Yjc2MDBlNzgxZjkzMDViODhjYTQ5MzFhN2RiMDA5Zjhj NzJiM2EwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EyhmYWNhMDY5MTllOTUyOTM0YmIyYjJiYjYxMDllMTNlYjU4ODhlNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10eJenDEqceKj2+reWan3/sCR/po VBMACT7tQWpw3uyb2ZmTO0YUYtOx8bESSDRxpClrrjzjQ4wrGj+NgvlY5sovaNkU 79DegN1wuWouXcCjGAAxLjMNeNL/CzsXdQpXdtkjsFb/GecJNcINyoEYU45XFVRG 3y4q7vxC5k2w94o4STBFJldGQUuvEPYxWSS5dWLLvzdgX0H16jJAubTrZWasMLKJ EX9aDIfbNpXIq8Yldh/SK8d/iHWwosdHrbGL/lvH5zuZ71Gyo7QwLb5zxFvWNBRI F3+araCizZWWBuOa0kzGvF8NCHCB2FFDXrTe+aWIkNGsaV/xE/nfzcuhzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPrKBpGelSk0uysrthCeE+tYiOXCMB8GA1UdIwQY MBaAFPi3YA54H5MFuIykkxp9sAn4xys6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MZGdEbmdma3dXNGpLU1RHbjJ3Q2ZqSEt6by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlh LWU1YWZlMjYzZjBhMi8xLzEtTGRnRG5nZmt3VzRqS1NUR24yd0NmakhLem8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzEyL2IzZmVjZS05MDVmLTRjYjMtOWE5YS1lNWFmZTI2M2Yw YTIvMS8xLUxkZ0RuZ2Zrd1c0aktTVEduMndDZmpIS3pvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOf8 oY5vohgNiBnz/zM2L3n1h8tLEzdSfOWluMS9xEuZwQw6TxBn8cLpRp6FbMrkX+pw MPEsG4MAw7DPJNx9ZoQifphsfoUHnwFGPloVxlRWEI2Sl2UthTxULfhefsoB94FK av7jl2BaImlvfB/bXgNphLkcUe81IOb2IwPEdpxrJQo/7+7LXGtmWRCQow/K4FDS nW3pBvZoDyyHqAd+7H+sAJibYyEJZmMILCEWMJEffmU8oXVb/OApAAQcnOgIItds W9ZLEgFrZkxwiJ7DP4rTwNGjwJHnLhisLSP6XBMYk8k62aOvXIc3lhOkMWav8bC9 7bso2h16pDREPfsNkA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:57 2025 by rpki-client