This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft File: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json) Hash identifier: hbkNfaMHZcg3z3eZ6VR7pC5dRovELI1nde54RCQwlg4= Subject key identifier: C6:8B:13:13:E1:C3:11:0A:9C:AF:04:2A:3A:65:66:48:98:F6:75:95 Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35 Certificate issuer: /CN=f35f3f2ebf80c77669250a759be1e5c91e388435 Certificate serial: 019AF464C149B1B4A02FE6689876C5518AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: 3dPxh2Yt1X87b2jVVgho8Mwgtgb8TrwYd7dGTWwMhuU=) 2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c1:49:b1:b4:a0:2f:e6:68:98:76:c5:51:8a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=c68b1313e1c3110a9caf042a3a65664898f67595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:9a:70:15:2a:8c:14:ea:44:97:1f:ed:bf: bc:e1:aa:38:cf:6c:c2:a9:79:eb:a3:9d:f0:a3:65: 65:05:9a:52:9c:2e:8e:b2:23:ed:2b:14:27:3d:d0: 72:df:3c:da:0e:07:c7:cb:0c:b3:d9:af:d6:32:1d: 51:6e:a5:78:bc:22:4e:d5:47:d9:4f:6d:a6:86:b4: 49:78:77:1c:6a:47:1a:50:79:0a:11:3b:84:74:e1: d6:32:0e:58:db:63:ab:2b:de:77:30:e8:55:9d:ef: 09:e1:34:62:3d:08:e6:f7:a1:2d:8a:b4:3d:6e:f5: b3:f5:ca:78:75:7c:3b:c9:39:43:2f:ce:d7:5c:e0: b9:12:3f:65:d7:81:88:db:82:45:10:74:21:4e:41: 80:91:56:ca:a8:57:c1:be:58:5d:b6:d8:8c:d9:81: 82:9e:21:d7:ed:33:33:40:31:f2:7c:e7:d8:92:e1: f5:9f:58:9b:d7:f2:ed:22:8b:ae:01:87:26:9b:cc: 24:69:a5:1b:bb:e0:bf:2a:89:44:11:d4:52:24:3c: 9e:10:02:b9:75:50:1c:88:b2:c8:64:01:9c:80:0d: c2:3e:c3:7b:48:81:21:aa:fb:f6:a5:45:0b:af:e5: f2:09:b6:9c:5d:17:ff:3d:73:6f:9c:1b:83:97:15: 85:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:13:13:E1:C3:11:0A:9C:AF:04:2A:3A:65:66:48:98:F6:75:95 X509v3 Authority Key Identifier: keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:15:b6:5c:28:d0:83:3c:9a:d4:21:2d:2e:28:a1:16:df:e8: 0e:25:fc:89:17:33:2f:40:06:31:88:8c:a7:f2:b1:d7:85:fb: ce:0e:96:50:67:4a:ed:d9:d1:63:64:35:31:59:c4:2e:30:c9: df:eb:fa:56:d8:75:fc:72:13:f0:ed:8e:77:d8:79:e5:1e:26: 1b:c9:16:c2:35:37:1d:db:33:1d:3a:10:b3:15:2a:cf:e1:00: e4:a6:0f:61:6b:0a:e4:7c:32:22:5b:17:f8:a6:48:f0:ef:f2: 43:ec:09:cc:66:c9:74:05:d5:a3:bc:81:f5:f1:20:a6:91:d9: 05:0d:74:2a:6a:78:6a:c6:3f:ba:7c:70:51:d5:5a:d3:ba:ff: 4f:bf:8d:0f:88:c7:04:bd:1e:75:1e:a7:07:12:4a:7a:e0:3b: 79:14:80:cb:20:f3:3a:88:b6:d0:df:4e:7e:d7:03:29:1a:26: a9:3a:5c:fa:d2:c4:21:df:b5:38:d9:45:0a:31:6a:ad:47:b0: 45:2e:a2:0b:b0:3d:f8:1c:27:ec:cf:79:1e:0a:4a:b5:61:c7: 6a:94:6b:de:d4:10:38:0b:69:db:b7:ac:e3:2b:b3:3a:df:a9: 0e:c9:09:85:d7:9a:83:31:06:6c:03:d2:ad:84:f9:77:4b:16: 3e:49:60:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMFJsbSgL+ZomHbFUYrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNWYzZjJlYmY4MGM3NzY2OTI1MGE3NTliZTFlNWM5MWUz ODg0MzUwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EyhjNjhiMTMxM2UxYzMxMTBhOWNhZjA0MmEzYTY1NjY0ODk4ZjY3NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXWacBUqjBTqRJcf7b+84ao4z2zC qXnro53wo2VlBZpSnC6OsiPtKxQnPdBy3zzaDgfHywyz2a/WMh1RbqV4vCJO1UfZ T22mhrRJeHccakcaUHkKETuEdOHWMg5Y22OrK953MOhVne8J4TRiPQjm96EtirQ9 bvWz9cp4dXw7yTlDL87XXOC5Ej9l14GI24JFEHQhTkGAkVbKqFfBvlhdttiM2YGC niHX7TMzQDHyfOfYkuH1n1ib1/LtIouuAYcmm8wkaaUbu+C/KolEEdRSJDyeEAK5 dVAciLLIZAGcgA3CPsN7SIEhqvv2pUULr+XyCbacXRf/PXNvnBuDlxWFLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaLExPhwxEKnK8EKjplZkiY9nWVMB8GA1UdIwQY MBaAFPNfPy6/gMd2aSUKdZvh5ckeOIQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjkt NWNhYzk0YjgzNmI2LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjktNWNhYzk0YjgzNmI2 LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBW2XCjQ gzya1CEtLiihFt/oDiX8iRczL0AGMYiMp/Kx14X7zg6WUGdK7dnRY2Q1MVnELjDJ 3+v6Vth1/HIT8O2Od9h55R4mG8kWwjU3HdszHToQsxUqz+EA5KYPYWsK5HwyIlsX +KZI8O/yQ+wJzGbJdAXVo7yB9fEgppHZBQ10Kmp4asY/unxwUdVa07r/T7+ND4jH BL0edR6nBxJKeuA7eRSAyyDzOoi20N9OftcDKRomqTpc+tLEId+1ONlFCjFqrUew RS6iC7A9+Bwn7M95HgpKtWHHapRr3tQQOAtp27es4yuzOt+pDskJhdeagzEGbAPS rYT5d0sWPklgjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:15 2025 by rpki-client