This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json) Hash identifier: AcwkqAQrqA6nlnx3bOB4j0KoiJn7HND2HSmk/yLNOuY= Subject key identifier: 4C:28:CD:B0:B1:64:FC:66:04:03:D1:5E:57:1E:62:12:C8:CE:79:79 Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57 Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957 Certificate serial: 019B39B455D10191114CEE1408A6F2E8A2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 03:01:18 +0000 Manifest this update: Sat 20 Dec 2025 03:01:18 +0000 Manifest next update: Sun 21 Dec 2025 03:01:18 +0000 Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: 2jy+4s8LNynrVTMcPq/sX+3bZsjmiZXTkSL0Z/BoFU8=) 2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:55:d1:01:91:11:4c:ee:14:08:a6:f2:e8:a2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957 Validity Not Before: Dec 20 03:01:18 2025 GMT Not After : Dec 21 03:01:18 2025 GMT Subject: CN=4c28cdb0b164fc660403d15e571e6212c8ce7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:6a:5a:12:59:17:7a:c7:70:6d:fb:af:36: 53:59:cc:03:40:69:ec:f3:33:37:e6:ce:a8:43:cc: 7a:37:f2:75:2e:95:ba:b8:0b:40:12:5e:2b:cc:b5: 86:71:c6:ae:52:eb:65:17:d9:b1:6a:a9:f5:70:17: fd:9e:24:44:7e:72:f8:ed:40:d1:3b:cc:31:d4:8e: 4a:71:5b:bc:2e:3f:4f:1e:3c:b5:ca:f7:89:05:00: 51:9c:29:94:0b:5b:ac:5c:e7:71:98:ad:ab:75:87: cc:e8:0d:ea:28:86:af:55:bb:7d:5c:6b:76:7c:51: 77:e1:ea:89:10:c0:70:86:5d:54:90:cd:69:26:ce: ee:63:9c:f8:d8:d3:cc:46:7f:c6:bf:df:f9:49:9e: 3b:0c:1c:07:5f:c9:8e:a0:52:86:7b:56:7c:e6:26: 3a:51:0a:7f:59:dc:3c:0d:e8:55:4a:e1:5c:55:95: 38:15:87:c6:3b:08:d9:86:ee:5a:53:b0:44:a6:41: 8c:a5:72:09:8f:ce:76:8b:15:92:bf:93:1f:02:59: 9c:0a:06:49:1b:2b:e9:11:2f:42:be:61:b1:af:6b: a9:65:e2:81:06:9c:76:cf:1b:7e:a5:d9:45:65:1c: 46:fe:26:3e:88:93:8d:b0:1e:ed:1a:d4:2e:58:06: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:28:CD:B0:B1:64:FC:66:04:03:D1:5E:57:1E:62:12:C8:CE:79:79 X509v3 Authority Key Identifier: keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f3:60:d6:6b:e7:9c:47:77:15:af:80:7b:e9:f2:4e:9c:93: ea:77:ee:33:76:f8:9b:4f:a6:e0:bb:5d:c5:ac:ce:99:f7:72: 7c:d5:85:25:e7:24:f6:f0:bf:bf:52:0d:aa:09:b4:b1:bc:45: ff:fa:b6:36:a6:5c:5d:30:24:04:7b:2a:89:17:49:ee:c5:a5: bb:61:ad:a8:56:fc:3b:de:01:90:ee:b6:12:ec:5e:a8:5c:d7: ee:86:d1:dd:b1:2f:b5:98:96:60:c6:e7:98:3c:30:3e:71:8c: 1e:ae:da:35:f4:95:13:5f:7f:76:02:7f:3b:08:f0:32:83:91: ed:ad:aa:f2:e1:79:3e:90:ae:52:fa:4f:d4:37:f8:c5:b0:d0: e5:42:af:c3:00:de:72:63:45:e5:41:22:8f:ab:5b:e7:59:2c: b7:39:38:53:55:da:83:c0:dd:da:9f:a2:00:d6:e4:f6:c5:5c: 61:fb:be:28:55:15:8b:a2:39:98:58:23:55:c4:b6:be:f8:c8: a0:df:a6:78:ab:b0:61:08:72:3c:45:b5:fd:0f:f9:30:6d:b4: 3a:5f:08:4d:40:c1:11:6a:a2:43:c5:9c:7d:a6:e4:3e:ac:2f: 9f:0d:36:11:f4:5f:99:7b:53:3f:66:81:24:be:be:ec:ad:b8: 4d:02:a2:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFXRAZERTO4UCKby6KL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YmJlZDYzMDkxNDM5ODIzZWQzOTFhNDcyNTM2YzBmY2Fm ZTg5NTcwHhcNMjUxMjIwMDMwMTE4WhcNMjUxMjIxMDMwMTE4WjAzMTEwLwYDVQQD Eyg0YzI4Y2RiMGIxNjRmYzY2MDQwM2QxNWU1NzFlNjIxMmM4Y2U3OTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApupqWhJZF3rHcG37rzZTWcwDQGns 8zM35s6oQ8x6N/J1LpW6uAtAEl4rzLWGccauUutlF9mxaqn1cBf9niREfnL47UDR O8wx1I5KcVu8Lj9PHjy1yveJBQBRnCmUC1usXOdxmK2rdYfM6A3qKIavVbt9XGt2 fFF34eqJEMBwhl1UkM1pJs7uY5z42NPMRn/Gv9/5SZ47DBwHX8mOoFKGe1Z85iY6 UQp/Wdw8DehVSuFcVZU4FYfGOwjZhu5aU7BEpkGMpXIJj852ixWSv5MfAlmcCgZJ GyvpES9CvmGxr2upZeKBBpx2zxt+pdlFZRxG/iY+iJONsB7tGtQuWAY9PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwozbCxZPxmBAPRXlceYhLIznl5MB8GA1UdIwQY MBaAFNS77WMJFDmCPtORpHJTbA/K/olXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUt MTdiZjIwMmU1ZWVlLzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUtMTdiZjIwMmU1ZWVl LzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/Ng1mvn nEd3Fa+Ae+nyTpyT6nfuM3b4m0+m4LtdxazOmfdyfNWFJeck9vC/v1INqgm0sbxF //q2NqZcXTAkBHsqiRdJ7sWlu2GtqFb8O94BkO62EuxeqFzX7obR3bEvtZiWYMbn mDwwPnGMHq7aNfSVE19/dgJ/OwjwMoOR7a2q8uF5PpCuUvpP1Df4xbDQ5UKvwwDe cmNF5UEij6tb51kstzk4U1Xag8Dd2p+iANbk9sVcYfu+KFUVi6I5mFgjVcS2vvjI oN+meKuwYQhyPEW1/Q/5MG20Ol8ITUDBEWqiQ8WcfabkPqwvnw02EfRfmXtTP2aB JL6+7K24TQKiRg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:02:48 2025 by rpki-client