This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json) Hash identifier: p1IlNR4+WJTuaXr1R8I9z4uspx7ATqHnzmzr5pVRiHw= Subject key identifier: 93:E8:70:98:C7:ED:D3:04:30:6E:89:DA:A2:98:0B:99:46:A1:35:28 Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b Certificate serial: 019AF31D08C5FE0CF2A2021124ECEA34654A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft Manifest number: 0640 Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: 7/nfsg7HKNNv7oNMR3aMh67QqSFyr1dW+ewk89ENFNI=) 2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:08:c5:fe:0c:f2:a2:02:11:24:ec:ea:34:65:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=93e87098c7edd304306e89daa2980b9946a13528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:55:83:e0:ae:24:fc:6c:38:db:67:5a:25: 79:d6:77:92:5e:7b:45:0e:da:7a:00:ef:30:3c:71: 01:51:62:8c:ef:79:97:cf:64:22:07:39:2a:e5:1b: 13:e6:80:d6:8e:66:0a:00:9b:ca:e7:02:7d:9c:41: 81:cb:52:a4:11:e0:26:d5:d5:b3:5f:23:f7:d1:01: 8e:53:6b:fd:c7:4a:a5:22:a8:46:83:dd:08:5d:a3: b6:fd:bb:64:89:6b:d0:4f:1a:9a:1e:66:c3:08:04: b1:21:98:db:f1:4b:70:27:7e:4d:2f:9a:91:86:70: 4a:26:6e:64:45:f9:dc:d5:76:eb:26:72:90:32:9d: 86:d7:d8:12:f2:ac:c8:7f:09:5e:a8:16:7c:4f:44: 7c:56:4e:89:b0:57:df:57:da:1f:5c:c5:e9:7f:a2: 14:7e:f6:04:25:02:f0:e1:f2:61:a4:e5:76:30:da: f4:8c:aa:f1:c3:b0:f8:50:cd:f9:81:eb:00:38:ff: bf:a6:1b:59:b0:6c:22:9a:cf:84:6f:f9:52:c5:54: 02:b6:c9:a9:c4:4c:8f:fa:1d:b5:df:b7:c0:00:ec: f5:bc:02:1f:1f:95:1a:9a:f6:78:f4:62:9a:d5:73: d9:02:e4:66:9b:24:5a:48:a0:65:59:31:bd:b2:14: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E8:70:98:C7:ED:D3:04:30:6E:89:DA:A2:98:0B:99:46:A1:35:28 X509v3 Authority Key Identifier: keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d4:29:96:6c:30:c6:86:8f:fb:d5:fd:d4:f4:e6:ed:ae:39: d8:71:7a:42:87:c4:cc:1f:47:e3:ab:1d:94:92:4a:b3:32:bd: e4:a9:09:1e:73:ca:d9:56:7d:60:cb:ab:d2:33:68:c4:5f:fd: 6f:7b:9f:12:ee:49:34:56:3b:53:9f:24:81:3a:3c:f6:f5:c7: b5:8f:cb:46:41:cb:a0:d3:60:c4:2a:93:98:d8:02:fc:26:15: 07:7e:b5:2e:27:46:1a:1c:62:7a:3e:42:64:db:f2:b6:a3:f3: e0:5f:ea:42:35:7d:dc:90:c5:01:35:24:34:c6:3c:fa:b5:92: 6a:14:8a:0a:f6:46:3f:33:49:e0:33:22:ae:8d:15:96:56:d9: aa:2d:56:d6:9b:f4:7c:13:c6:82:d7:aa:b2:e3:85:28:f6:51: 3e:d7:6e:1a:ee:4a:26:7b:6a:20:7e:6e:1c:97:f2:64:8c:dd: a9:0b:6e:ba:c1:c4:a0:e0:23:c9:e2:12:73:0a:0e:76:1c:c5: 94:54:a0:1b:4a:db:a6:31:d5:7d:5d:15:f5:6b:42:f8:e2:04: 1b:7c:6c:28:b0:7d:0f:b5:14:aa:4e:74:0f:89:08:a7:7e:18: 44:93:b6:39:79:35:81:94:7f:ec:bc:de:ca:61:52:2e:42:c3: 0e:07:de:28 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHQjF/gzyogIRJOzqNGVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjhkYTYwODEzN2Y4NGU0NTQ1MzIwYjRhM2JiMDQ5NjFk MmIxMmIwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD Eyg5M2U4NzA5OGM3ZWRkMzA0MzA2ZTg5ZGFhMjk4MGI5OTQ2YTEzNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN9Vg+CuJPxsONtnWiV51neSXntF Dtp6AO8wPHEBUWKM73mXz2QiBzkq5RsT5oDWjmYKAJvK5wJ9nEGBy1KkEeAm1dWz XyP30QGOU2v9x0qlIqhGg90IXaO2/btkiWvQTxqaHmbDCASxIZjb8UtwJ35NL5qR hnBKJm5kRfnc1XbrJnKQMp2G19gS8qzIfwleqBZ8T0R8Vk6JsFffV9ofXMXpf6IU fvYEJQLw4fJhpOV2MNr0jKrxw7D4UM35gesAOP+/phtZsGwims+Eb/lSxVQCtsmp xEyP+h2137fAAOz1vAIfH5UamvZ49GKa1XPZAuRmmyRaSKBlWTG9shRAdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJPocJjH7dMEMG6J2qKYC5lGoTUoMB8GA1UdIwQY MBaAFPi42mCBN/hORUUyC0o7sElh0rErMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MamFZSUUzLUU1RlJUSUxTanV3U1dIU3NTcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvODA1NTMzLWRiYzUtNDJjMC1iYzc4 LTU3NWIwMzM0NGNiMS8xLzEtTGphWUlFMy1FNUZSVElMU2p1d1NXSFNzU3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0LzgwNTUzMy1kYmM1LTQyYzAtYmM3OC01NzViMDMzNDRj YjEvMS8xLUxqYVlJRTMtRTVGUlRJTFNqdXdTV0hTc1NzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdQp lmwwxoaP+9X91PTm7a452HF6QofEzB9H46sdlJJKszK95KkJHnPK2VZ9YMur0jNo xF/9b3ufEu5JNFY7U58kgTo89vXHtY/LRkHLoNNgxCqTmNgC/CYVB361LidGGhxi ej5CZNvytqPz4F/qQjV93JDFATUkNMY8+rWSahSKCvZGPzNJ4DMiro0VllbZqi1W 1pv0fBPGgteqsuOFKPZRPtduGu5KJntqIH5uHJfyZIzdqQtuusHEoOAjyeIScwoO dhzFlFSgG0rbpjHVfV0V9WtC+OIEG3xsKLB9D7UUqk50D4kIp34YRJO2OXk1gZR/ 7LzeymFSLkLDDgfeKA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:52 2025 by rpki-client