This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json) Hash identifier: 7I7p/bqJxHdutVj/xkRMHmT7jd/rpU3kxZammyPs+f0= Subject key identifier: C5:40:FC:23:8C:89:BC:37:EF:F9:20:69:3E:26:82:5B:ED:CD:C5:9D Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Certificate serial: 019AFB42D0E145B122C19AAC1A143C64D31F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft Manifest number: 1765 Signing time: Mon 08 Dec 2025 00:00:51 +0000 Manifest this update: Mon 08 Dec 2025 00:00:51 +0000 Manifest next update: Tue 09 Dec 2025 00:00:51 +0000 Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: F6yABFjUxSTyakbFRY3Q6mnYu+ACItnXOJo0VO34lbo=) 2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:d0:e1:45:b1:22:c1:9a:ac:1a:14:3c:64:d3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Validity Not Before: Dec 8 00:00:51 2025 GMT Not After : Dec 9 00:00:51 2025 GMT Subject: CN=c540fc238c89bc37eff920693e26825bedcdc59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:32:68:90:d3:e5:2d:93:01:61:61:2e:5c: f0:20:a6:45:6a:bd:54:b9:14:5e:29:38:6e:c6:b6: fa:85:ea:38:7c:e8:bd:fa:28:54:3a:87:5d:97:8c: 9d:40:89:9b:9b:16:5a:fd:c0:fc:ed:cd:16:21:ad: 9c:e9:d2:9f:73:2b:c2:59:c3:48:b8:8d:70:88:04: 39:31:1c:95:7d:e7:0f:7d:ea:f0:3d:aa:5f:8f:07: cd:94:9b:29:79:e2:20:58:d0:f2:e7:a3:3c:72:93: af:e1:7a:f2:1f:0b:39:b1:c1:0e:b8:e7:74:18:fe: e5:48:0e:f2:2e:16:04:85:00:df:b7:5c:cf:ce:b4: f8:00:79:6c:95:a3:d4:8d:e3:c8:88:d6:9b:ee:14: 6b:69:2f:94:fe:5b:90:92:35:bd:55:01:01:5c:88: da:22:8b:a1:04:e4:27:91:9a:e9:ea:05:3e:0a:40: d4:bb:b3:82:ca:de:e3:c3:b7:77:35:66:8f:ed:af: ed:e0:8c:4b:c6:47:48:af:a3:64:4d:6c:68:b4:b4: f2:f3:d3:49:58:28:39:09:8a:ff:67:b2:69:f7:65: 69:5c:b2:4f:55:98:a7:90:bf:5d:e6:2d:80:12:ac: 29:aa:fa:9c:98:2b:5c:96:94:78:c5:4a:c9:48:fe: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:40:FC:23:8C:89:BC:37:EF:F9:20:69:3E:26:82:5B:ED:CD:C5:9D X509v3 Authority Key Identifier: keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3b:ca:54:50:11:27:fa:35:e8:48:e5:63:fe:a9:48:d2:06: 2c:fe:3f:1a:97:69:8b:ac:df:f4:0a:d3:81:e4:9c:e3:06:a3: 81:de:a1:20:6f:32:17:3a:97:3f:25:d5:48:19:a1:00:93:c7: c2:da:ae:b3:94:f1:35:46:e8:83:88:3c:88:87:9f:f6:ca:62: a7:42:5e:62:79:d7:d9:19:ef:8c:53:73:c6:9f:06:f5:66:f3: 4a:d3:fd:8a:76:36:79:7d:b0:d3:be:ef:4d:56:48:ea:28:c4: 42:f3:3f:25:c2:3a:c1:a2:f4:c6:e9:93:ee:58:52:68:85:ac: 9b:ed:88:a8:26:e4:78:43:68:8c:ea:fd:46:81:79:f9:ef:af: 1b:10:1e:3d:75:85:0b:d2:e6:03:db:05:1c:9e:b7:16:c1:82: 98:9b:6c:ff:50:1f:7f:33:06:e4:43:99:98:96:b5:fd:38:c7: 56:76:d5:8e:2a:3c:73:0c:1d:1d:f6:c0:d1:e3:c7:27:7a:e1: a3:5d:6b:5d:9b:f2:aa:7b:58:5f:8a:e1:be:cf:14:ce:de:1f: 62:cf:bd:f9:29:ce:13:0d:85:65:ca:17:10:dd:90:d4:a6:87: 08:3d:8e:a6:36:96:33:c8:2f:72:8d:f5:fb:c5:4f:bd:a4:60: 30:74:0f:2a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr7QtDhRbEiwZqsGhQ8ZNMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5 NzFmOTcwHhcNMjUxMjA4MDAwMDUxWhcNMjUxMjA5MDAwMDUxWjAzMTEwLwYDVQQD EyhjNTQwZmMyMzhjODliYzM3ZWZmOTIwNjkzZTI2ODI1YmVkY2RjNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e0yaJDT5S2TAWFhLlzwIKZFar1U uRReKThuxrb6heo4fOi9+ihUOoddl4ydQImbmxZa/cD87c0WIa2c6dKfcyvCWcNI uI1wiAQ5MRyVfecPferwPapfjwfNlJspeeIgWNDy56M8cpOv4XryHws5scEOuOd0 GP7lSA7yLhYEhQDft1zPzrT4AHlslaPUjePIiNab7hRraS+U/luQkjW9VQEBXIja IouhBOQnkZrp6gU+CkDUu7OCyt7jw7d3NWaP7a/t4IxLxkdIr6NkTWxotLTy89NJ WCg5CYr/Z7Jp92VpXLJPVZinkL9d5i2AEqwpqvqcmCtclpR4xUrJSP64sQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMVA/COMibw37/kgaT4mglvtzcWdMB8GA1UdIwQY MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4 LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzvK VFARJ/o16EjlY/6pSNIGLP4/Gpdpi6zf9ArTgeSc4wajgd6hIG8yFzqXPyXVSBmh AJPHwtqus5TxNUbog4g8iIef9spip0JeYnnX2RnvjFNzxp8G9WbzStP9inY2eX2w 077vTVZI6ijEQvM/JcI6waL0xumT7lhSaIWsm+2IqCbkeENojOr9RoF5+e+vGxAe PXWFC9LmA9sFHJ63FsGCmJts/1AffzMG5EOZmJa1/TjHVnbVjio8cwwdHfbA0ePH J3rho11rXZvyqntYX4rhvs8Uzt4fYs+9+SnOEw2FZcoXEN2Q1KaHCD2OpjaWM8gv co31+8VPvaRgMHQPKg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:55 2025 by rpki-client