This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json) Hash identifier: XboFTs5hh5/+AHOLV9h1/oGe8DPgBwQGPr09kof7AvM= Subject key identifier: 1D:49:AB:E1:B0:E7:D1:B4:48:34:87:A1:73:7C:14:F9:41:2F:15:7F Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Certificate serial: 019AF19AC70D3A55ECB432791989511E6FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: /mJEJ8rUZJdKxqqIesmIN47WGUKkGWCKrnnueRXOyc4=) 2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=) 3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=) 4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c7:0d:3a:55:ec:b4:32:79:19:89:51:1e:6f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=1d49abe1b0e7d1b4483487a1737c14f9412f157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:58:62:ff:c6:84:ce:ae:4b:d4:51:9e:c4: ac:a1:67:5f:b0:8d:91:95:b5:aa:13:2c:f7:95:02: a5:b4:31:e3:93:fc:00:ef:54:75:b0:e4:60:13:bd: 4c:12:33:80:4a:23:39:9f:65:3c:4a:c0:5e:67:c8: 98:ca:a0:c6:93:2f:ff:e1:b5:08:6d:76:e8:bd:39: ef:74:cd:40:e9:b3:c1:1e:43:87:6a:d1:40:7f:1f: 45:af:8c:46:3f:8c:d1:76:42:64:c5:64:9f:63:cb: c6:f4:68:b4:6d:d5:9e:aa:7d:19:46:22:6b:ad:a0: 5d:63:42:5e:91:6a:af:95:4e:d9:6c:a1:b8:88:b6: 78:42:fe:c7:0f:b8:c9:36:ec:58:a6:ba:04:b2:af: dc:45:32:14:8f:82:49:97:2e:72:7f:9c:0e:12:0a: d2:31:83:f0:f5:50:27:3c:64:2e:34:74:7f:58:b4: ef:95:da:65:1a:a7:19:8f:85:bf:86:15:95:b3:0e: e0:1e:9f:a9:42:d5:e7:db:3f:e0:f8:4e:e0:d9:b6: c0:02:37:a6:8f:a2:cb:f9:30:1a:b3:1f:12:1e:5d: 6d:e3:c2:b1:c7:b5:27:23:50:ca:60:15:47:50:64: a4:c0:42:5d:c4:4b:df:c9:b6:f0:0c:22:63:ca:19: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:49:AB:E1:B0:E7:D1:B4:48:34:87:A1:73:7C:14:F9:41:2F:15:7F X509v3 Authority Key Identifier: keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ff:70:ed:e0:c2:93:81:cb:e9:ba:7f:37:b9:74:dd:a5:a1: 7e:50:49:14:90:bf:c0:5c:e0:27:61:93:4d:7c:cb:e5:f6:84: ff:c7:d9:7d:e8:d4:e5:07:6a:dc:f2:3a:5e:b2:01:90:d3:03: 48:37:58:fd:df:ca:4a:d5:04:d0:a0:0d:ad:61:fb:bd:4f:35: 09:b4:40:55:e3:d1:67:b1:19:18:f7:9e:ae:6a:09:00:0f:28: bd:06:a7:35:7b:87:c4:b7:61:0e:44:49:a1:9a:bf:5a:83:e3: 0e:a3:43:26:b9:a1:ce:80:ab:7f:d8:de:b0:42:1d:da:53:51: 78:73:9f:2b:b8:99:9b:d1:ba:6f:2d:94:35:d1:0d:6a:8a:f4: c4:ff:5a:69:55:4c:b9:04:52:f8:cb:1e:1e:c9:47:47:72:d9: 2a:a5:40:9b:31:39:fb:00:5b:e5:ba:71:ae:00:09:57:69:a7: 57:ec:27:66:81:ff:29:c8:23:9c:87:85:69:f1:32:ab:1a:3a: 5c:33:0c:b3:30:59:6e:02:55:7d:32:81:ea:2d:56:e3:11:5a: 90:03:66:11:38:1a:32:46:8e:b8:15:46:58:53:5c:fd:20:30: 07:57:f6:d2:bb:90:b8:1f:64:d0:2a:ca:c7:ae:c0:62:74:35: 46:99:3d:ee -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmscNOlXstDJ5GYlRHm+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk N2JjNzIwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EygxZDQ5YWJlMWIwZTdkMWI0NDgzNDg3YTE3MzdjMTRmOTQxMmYxNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60hYYv/GhM6uS9RRnsSsoWdfsI2R lbWqEyz3lQKltDHjk/wA71R1sORgE71MEjOASiM5n2U8SsBeZ8iYyqDGky//4bUI bXbovTnvdM1A6bPBHkOHatFAfx9Fr4xGP4zRdkJkxWSfY8vG9Gi0bdWeqn0ZRiJr raBdY0JekWqvlU7ZbKG4iLZ4Qv7HD7jJNuxYproEsq/cRTIUj4JJly5yf5wOEgrS MYPw9VAnPGQuNHR/WLTvldplGqcZj4W/hhWVsw7gHp+pQtXn2z/g+E7g2bbAAjem j6LL+TAasx8SHl1t48Kxx7UnI1DKYBVHUGSkwEJdxEvfybbwDCJjyhl1EwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB1Jq+Gw59G0SDSHoXN8FPlBLxV/MB8GA1UdIwQY MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm LThiZjRmZTRjNzczMi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgyLzI3NmMyNC0yYTdmLTQ3MjYtOGQ5Zi04YmY0ZmU0Yzc3 MzIvMS8xLWxiSDVtQ3h4MDQ3QXhpeFF6akQ4QTNYdkhJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf9w 7eDCk4HL6bp/N7l03aWhflBJFJC/wFzgJ2GTTXzL5faE/8fZfejU5Qdq3PI6XrIB kNMDSDdY/d/KStUE0KANrWH7vU81CbRAVePRZ7EZGPeermoJAA8ovQanNXuHxLdh DkRJoZq/WoPjDqNDJrmhzoCrf9jesEId2lNReHOfK7iZm9G6by2UNdENaor0xP9a aVVMuQRS+MseHslHR3LZKqVAmzE5+wBb5bpxrgAJV2mnV+wnZoH/KcgjnIeFafEy qxo6XDMMszBZbgJVfTKB6i1W4xFakANmETgaMkaOuBVGWFNc/SAwB1f20ruQuB9k 0CrKx67AYnQ1Rpk97g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:16 2025 by rpki-client