This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json) Hash identifier: JOpYwnfbdmQe27n1ApVpJAzdxt64mJh3KcqHXIIoH0I= Subject key identifier: FB:0C:91:E5:2B:DC:2C:D6:FD:CF:69:A5:93:CE:1D:E1:9D:A6:8D:28 Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89 Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789 Certificate serial: 019AF46548E29EA20F4018687B72326B0935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft Manifest number: 10DE Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: wHP6f9y/tNnq8WUQqN4IY8Ma7SnO5+AGnyf4iN7qhMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:48:e2:9e:a2:0f:40:18:68:7b:72:32:6b:09:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789 Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=fb0c91e52bdc2cd6fdcf69a593ce1de19da68d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:69:15:a5:88:36:d5:2e:ae:15:02:c4:46: 6a:cb:87:35:0b:1b:b7:35:40:d7:67:ca:c3:b3:fd: ee:53:1c:39:cc:5d:ef:63:95:ae:98:46:c2:fd:f2: 93:44:7f:0d:e3:c9:fe:66:94:81:76:42:36:50:c6: f7:ab:3d:14:df:d8:f7:f8:f7:2c:d3:d6:1b:b9:7b: 2b:d2:45:d7:26:23:15:31:e0:fb:d7:89:57:5f:33: c6:04:05:7a:09:71:87:7d:83:62:27:59:14:c8:63: 6f:6e:d3:bf:a1:47:85:14:b6:92:60:bf:64:f7:62: 17:c9:67:26:e5:5a:93:a3:e0:24:74:58:cd:ae:81: c5:09:90:58:98:7d:b8:78:59:57:59:6e:dc:95:a9: ae:60:b3:1b:3d:20:dc:88:2c:58:88:80:d3:71:ef: 05:b8:93:99:a2:e5:e8:1d:23:5a:7d:7c:1b:fc:36: c5:96:ba:46:e8:66:db:fc:ab:f5:c4:41:7c:3a:bd: 9e:1c:c3:5f:63:cf:7c:40:27:a8:5d:5d:8d:a5:e4: 38:dc:96:6f:67:97:d4:a4:f7:62:96:9e:1b:c1:42: a5:e6:d3:58:49:0b:c4:47:19:f3:6d:7a:74:02:ae: ee:fe:c7:d0:1e:dd:84:25:ad:37:7f:75:21:fc:b3: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0C:91:E5:2B:DC:2C:D6:FD:CF:69:A5:93:CE:1D:E1:9D:A6:8D:28 X509v3 Authority Key Identifier: keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8f:0b:32:0e:db:9d:98:2d:1d:67:9f:09:e8:a5:f6:3d:94: 11:5c:9d:2c:44:13:e0:9a:ba:9b:e7:ca:be:72:84:18:b0:f9: 9c:28:15:aa:d9:ab:b9:83:48:e7:8d:3b:1c:5e:8a:c5:65:33: 7e:56:ce:d5:9c:d1:87:23:3a:b4:dd:13:5a:a3:c6:90:03:86: 10:74:2b:09:1e:c8:87:8f:73:ca:a7:ab:68:d9:7e:3c:a1:30: 0e:cf:4c:af:0f:b7:66:a3:6d:4f:53:58:1e:7d:39:e8:7b:57: 21:44:65:59:6c:c4:0a:8b:da:1e:a6:74:23:6d:24:a8:8e:32: 34:76:22:9c:f2:19:37:3e:10:5d:ee:b4:29:34:7e:3f:fc:76: 13:9a:6d:cc:a8:a4:0d:90:bd:6b:59:70:8c:39:cf:bc:13:0e: 53:cc:79:db:23:c4:7e:de:a1:c7:19:21:21:45:a9:a1:27:6c: 58:a6:6f:04:b7:e6:1c:c9:17:2e:70:fd:48:ac:09:36:e7:e0: 93:26:79:3a:2a:b1:ce:ad:0c:5f:ee:f3:b4:c0:3a:88:71:bd: 4c:d5:51:ff:cf:a8:e3:33:60:96:90:fd:88:ce:4b:48:a4:0f: 7b:95:43:60:b1:27:72:e9:19:11:9d:42:f8:48:a8:45:f8:b3: 3e:b3:92:ee -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0ZUjinqIPQBhoe3Iyawk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Yjc3MDE2MDU1Mzc2MGMzNTY3ZGY1MWE4NDdlZDZjNTI5 YzA3ODkwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD EyhmYjBjOTFlNTJiZGMyY2Q2ZmRjZjY5YTU5M2NlMWRlMTlkYTY4ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi49pFaWINtUurhUCxEZqy4c1Cxu3 NUDXZ8rDs/3uUxw5zF3vY5WumEbC/fKTRH8N48n+ZpSBdkI2UMb3qz0U39j3+Pcs 09YbuXsr0kXXJiMVMeD714lXXzPGBAV6CXGHfYNiJ1kUyGNvbtO/oUeFFLaSYL9k 92IXyWcm5VqTo+AkdFjNroHFCZBYmH24eFlXWW7clamuYLMbPSDciCxYiIDTce8F uJOZouXoHSNafXwb/DbFlrpG6Gbb/Kv1xEF8Or2eHMNfY898QCeoXV2NpeQ43JZv Z5fUpPdilp4bwUKl5tNYSQvERxnzbXp0Aq7u/sfQHt2EJa03f3Uh/LM0+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPsMkeUr3CzW/c9ppZPOHeGdpo0oMB8GA1UdIwQY MBaAFPi3cBYFU3YMNWffUahH7WxSnAeJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MZHdGZ1ZUZGd3MVo5OVJxRWZ0YkZLY0I0ay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMzI1M2FjLThmYTctNDI1Yi04YTkw LTliOWI0MDE0NTllNi8xLzEtTGR3RmdWVGRndzFaOTlScUVmdGJGS2NCNGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVlLzMyNTNhYy04ZmE3LTQyNWItOGE5MC05YjliNDAxNDU5 ZTYvMS8xLUxkd0ZnVlRkZ3cxWjk5UnFFZnRiRktjQjRrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAco8L Mg7bnZgtHWefCeil9j2UEVydLEQT4Jq6m+fKvnKEGLD5nCgVqtmruYNI5407HF6K xWUzflbO1ZzRhyM6tN0TWqPGkAOGEHQrCR7Ih49zyqeraNl+PKEwDs9Mrw+3ZqNt T1NYHn056HtXIURlWWzECovaHqZ0I20kqI4yNHYinPIZNz4QXe60KTR+P/x2E5pt zKikDZC9a1lwjDnPvBMOU8x52yPEft6hxxkhIUWpoSdsWKZvBLfmHMkXLnD9SKwJ NufgkyZ5Oiqxzq0MX+7ztMA6iHG9TNVR/8+o4zNglpD9iM5LSKQPe5VDYLEncukZ EZ1C+EioRfizPrOS7g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:05 2025 by rpki-client