This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json) Hash identifier: nj3Z6L7vyywhtAgGDtkBYORv/s3JpXWC1W3QQEeTARw= Subject key identifier: 70:0A:19:D2:B9:1B:F2:43:E6:26:F3:FB:D9:8A:31:F2:00:C1:41:F7 Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Certificate serial: 019AF0BEE998F36C790127BD90D27F92F8C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft Manifest number: C6 Signing time: Fri 05 Dec 2025 23:00:34 +0000 Manifest this update: Fri 05 Dec 2025 23:00:34 +0000 Manifest next update: Sat 06 Dec 2025 23:00:34 +0000 Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: CEbn/3znJW6PB9HKT/Qnyrju3X/6Ow5P4g7TU9fjWQo=) 2: 7oB3ar7GwFtb0clbtSqh_ldJanw.roa (hash: d421V6jyf/lL0flOYjT5So8TNIpbSRnpdeNItUDXdnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e9:98:f3:6c:79:01:27:bd:90:d2:7f:92:f8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Validity Not Before: Dec 5 23:00:34 2025 GMT Not After : Dec 6 23:00:34 2025 GMT Subject: CN=700a19d2b91bf243e626f3fbd98a31f200c141f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:0a:08:bf:11:e7:86:a4:52:6d:68:8e:1a: 36:0d:99:11:aa:45:28:33:ae:94:5c:0c:bf:92:26: 98:94:05:2c:eb:a7:3d:c3:30:f2:c8:de:5c:15:c6: f9:c2:48:e6:7d:e7:71:9e:34:87:7f:f8:53:d6:52: 64:dc:df:25:2e:9d:53:bf:b3:81:24:bb:b5:c7:7e: 01:52:cc:9b:04:43:0e:3a:55:d4:df:ce:e5:44:41: 60:fa:81:57:a3:14:cc:f7:b9:83:e2:44:16:3c:2e: e6:4d:18:3a:f2:6f:1d:27:7e:c3:a8:65:2c:79:16: 90:e5:6b:52:ca:8d:ef:37:21:e5:85:71:9b:2b:76: c1:9b:4e:33:6a:cc:9e:de:db:b1:d1:f5:11:d6:ce: 0b:36:19:22:ec:cc:2c:8f:cf:ef:a6:5d:0d:3a:07: e8:37:ce:75:8d:d7:87:cd:1b:28:00:10:44:62:be: a6:27:06:cf:ab:2a:9f:e0:7c:01:f6:c1:16:66:43: 4d:9e:b2:8a:c5:a7:5b:18:ae:60:95:01:b1:22:02: 9c:0f:cc:fe:ea:ab:c2:a6:96:34:60:1e:ec:bf:0b: 04:0f:c4:df:02:32:31:0f:9e:65:dd:35:81:2f:84: 36:ce:da:e2:16:10:12:e8:ee:6b:62:78:c8:83:10: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:19:D2:B9:1B:F2:43:E6:26:F3:FB:D9:8A:31:F2:00:C1:41:F7 X509v3 Authority Key Identifier: keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:92:d8:89:fa:c0:4e:4e:91:bf:ec:1b:58:c0:9f:8e:3f: 28:27:3e:7d:f5:eb:1a:2b:eb:fe:bd:73:a0:b9:44:95:9c:5c: 4a:3c:bd:57:44:6e:af:b2:3f:a2:de:46:87:5c:60:58:49:0c: a9:d3:0d:6f:94:bc:cb:3b:a7:0d:5b:74:c9:47:c9:1d:a7:62: 7f:ed:d4:18:db:69:df:91:a6:f0:f7:b7:fa:76:c0:7e:75:b9: fb:c0:24:11:d5:d9:63:57:7b:f8:ed:5c:2f:c4:d1:7e:c1:98: 41:95:8f:2d:65:79:de:1b:42:f9:5e:2e:28:24:89:12:e3:6a: 98:32:e1:70:a8:3c:94:1f:0e:01:7b:28:7b:17:4d:3a:73:d2: 66:bd:73:ea:a1:44:80:3f:f5:ea:b6:9f:f9:5e:37:53:02:ae: 7f:81:a2:a0:79:7d:7e:d2:7b:e8:b6:f6:bd:11:2e:08:fc:48: ed:e9:5c:18:14:e5:19:30:5e:5d:b1:2f:84:17:6f:3e:f5:d3: 65:e1:cb:f9:f5:df:68:8b:a0:b1:07:85:3a:f8:96:f9:4c:78: ad:a7:d4:f0:fa:05:41:4c:bf:9c:54:9f:b2:44:b5:82:a5:77: 5c:fd:0e:a5:67:21:6a:e5:70:0a:4d:95:28:1f:44:39:d6:fe: f4:5d:66:d1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwvumY82x5ASe9kNJ/kvjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj MTVmNWEwHhcNMjUxMjA1MjMwMDM0WhcNMjUxMjA2MjMwMDM0WjAzMTEwLwYDVQQD Eyg3MDBhMTlkMmI5MWJmMjQzZTYyNmYzZmJkOThhMzFmMjAwYzE0MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4KCL8R54akUm1ojho2DZkRqkUo M66UXAy/kiaYlAUs66c9wzDyyN5cFcb5wkjmfedxnjSHf/hT1lJk3N8lLp1Tv7OB JLu1x34BUsybBEMOOlXU387lREFg+oFXoxTM97mD4kQWPC7mTRg68m8dJ37DqGUs eRaQ5WtSyo3vNyHlhXGbK3bBm04zasye3tux0fUR1s4LNhki7Mwsj8/vpl0NOgfo N851jdeHzRsoABBEYr6mJwbPqyqf4HwB9sEWZkNNnrKKxadbGK5glQGxIgKcD8z+ 6qvCppY0YB7svwsED8TfAjIxD55l3TWBL4Q2ztriFhAS6O5rYnjIgxDt+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHAKGdK5G/JD5ibz+9mKMfIAwUH3MB8GA1UdIwQY MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0 LTkzMTQxNDEwMWEwMS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2Q1OTI0Ni05NTNlLTQyM2EtOTcwNC05MzE0MTQxMDFh MDEvMS8xLWxkVmRpMy1USEROZzdNS0U3ZUN4UF9CWDFvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActyS 2In6wE5Okb/sG1jAn44/KCc+ffXrGivr/r1zoLlElZxcSjy9V0Rur7I/ot5Gh1xg WEkMqdMNb5S8yzunDVt0yUfJHadif+3UGNtp35Gm8Pe3+nbAfnW5+8AkEdXZY1d7 +O1cL8TRfsGYQZWPLWV53htC+V4uKCSJEuNqmDLhcKg8lB8OAXsoexdNOnPSZr1z 6qFEgD/16raf+V43UwKuf4GioHl9ftJ76Lb2vREuCPxI7elcGBTlGTBeXbEvhBdv PvXTZeHL+fXfaIugsQeFOviW+Ux4rafU8PoFQUy/nFSfskS1gqV3XP0OpWchauVw Ck2VKB9EOdb+9F1m0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:21 2025 by rpki-client