This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft File: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json) Hash identifier: 0nZybkXhuul9vRbjZj2suXpS2Yj/vDdYlX2sAqQHWhY= Subject key identifier: 45:A1:92:9B:9D:AA:30:7D:85:91:6E:FA:F7:22:75:48:58:DD:0B:2F Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22 Certificate issuer: /CN=fb02f648de95b88479364346ed01e78769577922 Certificate serial: 019B28C04E8A6BCC31C5B7828D95DADBD5E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 20:00:50 +0000 Manifest this update: Tue 16 Dec 2025 20:00:50 +0000 Manifest next update: Wed 17 Dec 2025 20:00:50 +0000 Files and hashes: 1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: yBR+CLXAvLLxgg1lazeJ37W42oMu5JpukTCNbaNnsWk=) 2: 3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (hash: j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:4e:8a:6b:cc:31:c5:b7:82:8d:95:da:db:d5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb02f648de95b88479364346ed01e78769577922 Validity Not Before: Dec 16 20:00:50 2025 GMT Not After : Dec 17 20:00:50 2025 GMT Subject: CN=45a1929b9daa307d85916efaf722754858dd0b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:41:d6:88:b2:7d:cf:0d:5f:9b:df:24:57: 0c:84:78:5c:3f:86:60:71:e2:d1:1e:26:4b:d3:36: c3:f6:d7:2c:37:0e:a9:67:a3:c4:21:c5:d3:81:10: 0b:6a:30:57:1e:f1:26:81:19:7c:e6:7a:5d:e7:64: 36:42:55:9c:2c:25:bf:f7:f3:29:90:d5:9d:35:54: 71:59:97:28:12:3f:79:5d:98:ee:c8:7f:80:b7:d8: bd:98:81:f6:74:1b:d8:da:97:e4:44:8a:83:92:79: 52:d8:9f:e5:f7:90:60:31:5a:1e:5f:96:fd:38:32: 43:c0:d4:48:2b:e9:fa:72:c0:c1:ea:ac:e3:d6:37: c0:32:fe:c1:22:37:0a:cd:ec:5c:b7:53:41:42:1a: 44:0c:42:65:a8:46:a4:8f:c2:21:fb:83:38:b6:49: ec:34:e4:b4:fd:c8:d2:2e:34:4f:77:6d:ee:a4:3c: 6a:ed:1e:ff:ed:e8:ab:92:fd:1e:4f:4d:c7:e0:df: 5f:8c:f7:7f:0a:2f:ef:8e:20:08:af:2f:b8:6b:df: 95:d6:fe:df:e7:6e:05:92:07:fb:24:74:6e:8a:66: 14:dd:a1:af:1d:16:3e:e0:4e:e2:10:2f:40:3f:b6: 9e:90:47:d9:25:db:21:f7:d7:0d:74:30:93:26:26: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A1:92:9B:9D:AA:30:7D:85:91:6E:FA:F7:22:75:48:58:DD:0B:2F X509v3 Authority Key Identifier: keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:36:24:59:12:f2:ac:cf:42:99:e6:ea:41:da:07:38:e7:80: f5:e7:87:8f:b2:34:71:f2:a8:d8:7d:20:8a:69:02:5d:19:71: 25:ba:5a:69:e3:b7:af:65:60:36:10:1e:49:44:ff:43:ff:38: d5:dd:27:c4:86:7c:84:48:8d:6c:16:b5:52:81:0e:62:43:9c: 43:cf:56:69:c0:87:9f:63:40:79:41:4f:38:76:a8:d5:43:ed: 5b:90:33:8a:62:76:c3:73:c5:4e:a4:00:4c:ee:9e:63:0a:97: 33:d8:db:9f:13:65:46:70:53:36:c8:9b:da:f3:1c:92:39:72: f1:5a:20:a2:fe:70:f5:c4:4b:ba:eb:03:d5:ee:de:ac:65:44: a1:36:64:fa:2c:e7:e3:9e:c9:f6:10:41:b8:71:39:bc:3c:25: d9:fc:cc:e4:e3:ad:63:98:69:f7:fb:25:8f:11:4d:2a:ad:22: 6b:7e:29:b5:dc:6e:ef:aa:33:c0:40:50:fe:2e:d3:c6:4e:e2: b4:8f:2d:0d:1c:67:51:21:c1:5d:51:70:7c:9a:88:48:94:3b: 4e:62:a5:60:a8:23:b0:1f:49:e3:13:41:7e:58:9f:78:a4:2a: 1e:32:d2:87:0b:4d:1c:6a:22:2b:9f:79:d3:81:ae:4f:7b:7a: 6f:26:f4:48 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsowE6Ka8wxxbeCjZXa29XpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDJmNjQ4ZGU5NWI4ODQ3OTM2NDM0NmVkMDFlNzg3Njk1 Nzc5MjIwHhcNMjUxMjE2MjAwMDUwWhcNMjUxMjE3MjAwMDUwWjAzMTEwLwYDVQQD Eyg0NWExOTI5YjlkYWEzMDdkODU5MTZlZmFmNzIyNzU0ODU4ZGQwYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki5B1oiyfc8NX5vfJFcMhHhcP4Zg ceLRHiZL0zbD9tcsNw6pZ6PEIcXTgRALajBXHvEmgRl85npd52Q2QlWcLCW/9/Mp kNWdNVRxWZcoEj95XZjuyH+At9i9mIH2dBvY2pfkRIqDknlS2J/l95BgMVoeX5b9 ODJDwNRIK+n6csDB6qzj1jfAMv7BIjcKzexct1NBQhpEDEJlqEakj8Ih+4M4tkns NOS0/cjSLjRPd23upDxq7R7/7eirkv0eT03H4N9fjPd/Ci/vjiAIry+4a9+V1v7f 524Fkgf7JHRuimYU3aGvHRY+4E7iEC9AP7aekEfZJdsh99cNdDCTJibswQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEWhkpudqjB9hZFu+vcidUhY3QsvMB8GA1UdIwQY MBaAFPsC9kjelbiEeTZDRu0B54dpV3kiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13TDJTTjZWdUlSNU5rTkc3UUhuaDJsWGVTSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMTZhNDhiLTZkMmEtNDBlMi05YmMz LThjZDliMzNhNTY4NC8xLzEtd0wyU042VnVJUjVOa05HN1FIbmgybFhlU0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcxLzE2YTQ4Yi02ZDJhLTQwZTItOWJjMy04Y2Q5YjMzYTU2 ODQvMS8xLXdMMlNONlZ1SVI1TmtORzdRSG5oMmxYZVNJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDYk WRLyrM9CmebqQdoHOOeA9eeHj7I0cfKo2H0gimkCXRlxJbpaaeO3r2VgNhAeSUT/ Q/841d0nxIZ8hEiNbBa1UoEOYkOcQ89WacCHn2NAeUFPOHao1UPtW5AzimJ2w3PF TqQATO6eYwqXM9jbnxNlRnBTNsib2vMckjly8Vogov5w9cRLuusD1e7erGVEoTZk +izn457J9hBBuHE5vDwl2fzM5OOtY5hp9/sljxFNKq0ia34ptdxu76ozwEBQ/i7T xk7itI8tDRxnUSHBXVFwfJqISJQ7TmKlYKgjsB9J4xNBflifeKQqHjLShwtNHGoi K59504GuT3t6byb0SA== -----END CERTIFICATE-----Generated at Wed Dec 17 06:13:12 2025 by rpki-client