This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json) Hash identifier: QsSBIfr0QzPKiPUVHgccKTEdXjKIVTxbd59GtTIz+Ow= Subject key identifier: 12:FE:36:21:7A:20:BF:4E:9C:83:D3:6E:19:29:3E:AD:CB:D6:33:C5 Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Certificate serial: 019AF0BF88042D977B20EF0EBE60D2611AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft Manifest number: 0E49 Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: c6xfVt+ZMY0fd/0HYsqu6dFRR9ZlQXi241Qh1RWlEIU=) 2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:88:04:2d:97:7b:20:ef:0e:be:60:d2:61:1a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=12fe36217a20bf4e9c83d36e19293eadcbd633c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:9a:81:16:e2:b2:77:49:56:bc:ab:ad:98: 1d:c5:c7:17:2e:04:5f:8d:82:7f:68:7b:17:14:e5: 1d:57:e2:41:72:83:ec:f7:84:f3:cb:98:72:cc:9c: d0:16:7d:2a:4f:c2:f5:1a:36:6c:c5:36:3e:7f:ca: 7d:23:26:97:e7:02:91:6a:ee:9c:31:81:87:96:3b: e6:86:a5:42:ff:15:a7:4a:65:7b:83:ae:02:51:5e: a8:f0:fd:83:77:bb:88:6b:e8:ed:e5:c8:95:13:35: 76:63:24:20:4b:97:91:d3:1f:b1:4f:9a:77:58:8c: a3:4b:86:fe:64:c2:3c:8d:c8:09:cb:46:ed:4a:60: 3b:22:da:3b:63:9b:64:0f:82:77:05:03:51:d6:5d: fb:45:cb:b9:82:b4:66:eb:20:4f:2a:cb:e2:38:ce: 7a:0c:23:41:a6:97:16:1c:cb:c1:f8:f1:aa:d7:58: ac:69:9b:3f:61:ad:56:57:7d:9a:bd:a7:c9:2c:63: 88:94:b9:5b:d3:e8:21:64:46:35:d9:02:14:ac:89: f0:04:4e:dd:6d:c4:9d:37:be:fd:62:1a:b2:1c:01: a0:31:8e:0d:3c:28:5d:da:15:9b:5b:18:48:2d:2c: e1:e0:60:87:83:8f:73:32:be:28:16:81:c2:1e:f9: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:36:21:7A:20:BF:4E:9C:83:D3:6E:19:29:3E:AD:CB:D6:33:C5 X509v3 Authority Key Identifier: keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:f9:45:53:df:cd:6f:e9:f6:f5:51:56:24:19:4a:b2:fc: 99:81:12:8c:bf:84:0c:a3:4e:2d:47:06:5c:dc:90:49:c3:5e: f2:3e:f3:ae:4b:ad:ca:61:17:7a:1b:34:a3:e5:82:ed:a4:fb: 07:35:8e:d2:d0:f8:77:ba:70:7c:e0:95:81:f2:d3:4d:d7:79: 1a:89:3a:65:ea:c1:5f:bf:81:57:1f:f7:56:3a:f1:49:a5:1f: 1c:9c:5c:c5:61:34:da:06:69:a6:fe:9c:58:ef:50:79:18:12: 2f:44:6a:5a:15:00:b8:75:90:94:be:b5:6e:36:e1:e3:73:e2: ff:14:8f:89:15:9a:4b:c4:d0:ea:f8:a5:9d:5b:c1:8f:62:0a: d7:a3:07:05:7b:de:1f:35:68:70:26:a8:2d:83:6a:58:89:3f: 9c:08:75:f5:bd:3e:5d:3e:01:51:0f:cb:69:66:64:11:27:13: c4:f8:e6:55:61:f6:c4:a5:1e:5a:0f:51:87:35:78:ca:7f:94: e2:69:e8:5a:0d:de:19:8d:e7:b3:c3:f0:34:eb:45:85:57:88: 65:15:2e:92:08:65:b0:a2:06:e7:a3:27:9f:78:08:1c:81:a1: 60:7f:82:df:b7:0d:9f:ed:b3:5f:7a:cc:04:1b:63:62:d2:1e: 9d:1b:dd:cb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwv4gELZd7IO8OvmDSYRqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjE4Mjg1ZjQyZWQ2N2MxMWQ4ZjgzZGY0ODhiMTBmYzg3 ZjE3YmYwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EygxMmZlMzYyMTdhMjBiZjRlOWM4M2QzNmUxOTI5M2VhZGNiZDYzM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4giagRbisndJVryrrZgdxccXLgRf jYJ/aHsXFOUdV+JBcoPs94Tzy5hyzJzQFn0qT8L1GjZsxTY+f8p9IyaX5wKRau6c MYGHljvmhqVC/xWnSmV7g64CUV6o8P2Dd7uIa+jt5ciVEzV2YyQgS5eR0x+xT5p3 WIyjS4b+ZMI8jcgJy0btSmA7Ito7Y5tkD4J3BQNR1l37Rcu5grRm6yBPKsviOM56 DCNBppcWHMvB+PGq11isaZs/Ya1WV32avafJLGOIlLlb0+ghZEY12QIUrInwBE7d bcSdN779YhqyHAGgMY4NPChd2hWbWxhILSzh4GCHg49zMr4oFoHCHvlMyQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBL+NiF6IL9OnIPTbhkpPq3L1jPFMB8GA1UdIwQY MBaAFPixgoX0LtZ8Edj4PfSIsQ/Ifxe/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MR0NoZlF1MW53UjJQZzk5SWl4RDhoX0Y3OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjMzMWNjLTZiNmQtNDY5My05MjY3 LWI0MjI3NzkxNjBiYi8xLzEtTEdDaGZRdTFud1IyUGc5OUlpeEQ4aF9GNzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyL2IzMzFjYy02YjZkLTQ2OTMtOTI2Ny1iNDIyNzc5MTYw YmIvMS8xLUxHQ2hmUXUxbndSMlBnOTlJaXhEOGhfRjc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcj5 RVPfzW/p9vVRViQZSrL8mYESjL+EDKNOLUcGXNyQScNe8j7zrkutymEXehs0o+WC 7aT7BzWO0tD4d7pwfOCVgfLTTdd5Gok6ZerBX7+BVx/3VjrxSaUfHJxcxWE02gZp pv6cWO9QeRgSL0RqWhUAuHWQlL61bjbh43Pi/xSPiRWaS8TQ6vilnVvBj2IK16MH BXveHzVocCaoLYNqWIk/nAh19b0+XT4BUQ/LaWZkEScTxPjmVWH2xKUeWg9RhzV4 yn+U4mnoWg3eGY3ns8PwNOtFhVeIZRUukghlsKIG56Mnn3gIHIGhYH+C37cNn+2z X3rMBBtjYtIenRvdyw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:59 2025 by rpki-client