This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json) Hash identifier: xzQh0M0kzY45Lfr1GozALe8h3EfaBiuGlMVFNnkNlrk= Subject key identifier: 92:2F:5D:90:0C:16:3F:89:E4:0B:5B:5A:48:97:7E:AE:CC:42:58:14 Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Certificate serial: 019AF2099893A0136E00F874487EB380F302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft Manifest number: 0B Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: fQ1kKiou32t4IuISbGaoEziMEy+aFlJ+wbijQJCVcQ0=) 2: eK1Z4-kI7xtwgkRHFwokm6IQfiA.roa (hash: Amg8RSjuWxmCHDVccTSJSqHK9UDEuD22DTzLYwn/oU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:98:93:a0:13:6e:00:f8:74:48:7e:b3:80:f3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=922f5d900c163f89e40b5b5a48977eaecc425814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:53:0e:c1:1a:0e:7d:cf:3b:52:94:96:15: 04:97:8b:5c:b4:97:55:47:9d:11:e6:7e:75:7e:39: c3:0e:68:0e:22:a1:51:2c:94:a4:5f:05:f3:ad:52: ec:d3:c5:ce:16:bb:08:fc:a1:5c:ff:3e:fe:10:c3: 68:50:eb:be:ec:87:fd:83:f9:df:d0:f1:16:c8:ba: d8:3b:51:9a:2e:b8:bc:13:a1:1a:81:45:3a:e0:ca: cf:42:0e:ea:ac:35:0b:ff:6f:e8:c0:3d:0a:1e:39: ee:33:16:a8:29:a7:eb:80:bc:7f:5f:44:e1:6a:8a: 8a:30:fd:60:7c:c0:67:3e:e3:1c:0c:31:47:8f:08: c3:8a:24:3b:f6:fb:0c:b0:f8:78:dd:82:dc:9a:39: cd:32:cc:7d:1d:8b:b1:33:e5:9d:ab:2a:ca:3d:c2: b6:31:c7:ff:6c:13:f7:ea:61:21:01:e3:eb:cb:bf: fe:7e:32:cb:65:8a:02:21:cd:22:57:ad:29:14:13: 4b:ea:9b:6e:05:2c:b6:60:30:b2:a3:9f:4b:be:f1: 71:bd:f0:49:e3:45:06:32:32:00:58:53:4e:0a:e1: 2e:ce:56:84:b4:ca:c6:b7:8b:9c:98:69:b7:c9:2f: a9:9a:b3:64:90:70:f5:aa:1d:fe:3c:c4:5c:8d:4d: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2F:5D:90:0C:16:3F:89:E4:0B:5B:5A:48:97:7E:AE:CC:42:58:14 X509v3 Authority Key Identifier: keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:65:eb:ed:f7:45:e9:15:61:a4:fa:1a:a7:13:09:c4:00: 2d:98:8f:32:9b:54:ea:ff:f6:71:00:6d:63:a3:48:64:76:93: e1:aa:71:1c:d2:c8:e0:d3:a5:f6:32:4c:7c:d1:d2:78:0b:37: 18:56:d7:83:9b:aa:ec:aa:c4:46:46:a9:8b:bf:b3:9b:57:c8: 71:c4:55:bb:80:49:65:63:5d:c3:9b:55:5b:a4:92:33:9e:55: 59:d8:3e:a6:89:3d:56:c9:86:0a:1c:c1:fd:92:25:66:88:34: b7:48:7c:1e:23:4f:03:68:35:91:87:a8:a1:9d:1b:78:6b:d0: 63:68:d1:21:96:8e:94:98:46:7b:a2:b8:e7:c8:81:b6:85:0c: 76:57:6c:9d:63:60:35:e0:ca:e4:15:27:04:79:89:15:81:04: ba:cd:12:cb:e8:8b:7e:5f:2e:53:d3:ae:e6:e6:4e:a0:e3:68: 66:4e:19:7d:7a:c1:d2:39:c8:59:10:09:aa:3d:29:7c:0a:78: 47:cc:38:5f:8d:1a:b8:b1:52:4d:3f:d4:0d:36:a8:b0:ae:d0: e2:84:63:db:89:26:8b:e7:34:2d:15:37:3c:07:44:1c:b8:1d: 68:6e:30:81:67:e6:6a:69:6d:41:a6:60:3d:d9:fd:d1:2a:98: 24:af:fc:cc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCZiToBNuAPh0SH6zgPMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNWEyNTk4MmY3Yjc0NzExMmIwZmYzNThmM2QyNGE1NjJj ZmNmZWMwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD Eyg5MjJmNWQ5MDBjMTYzZjg5ZTQwYjViNWE0ODk3N2VhZWNjNDI1ODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9JTDsEaDn3PO1KUlhUEl4tctJdV R50R5n51fjnDDmgOIqFRLJSkXwXzrVLs08XOFrsI/KFc/z7+EMNoUOu+7If9g/nf 0PEWyLrYO1GaLri8E6EagUU64MrPQg7qrDUL/2/owD0KHjnuMxaoKafrgLx/X0Th aoqKMP1gfMBnPuMcDDFHjwjDiiQ79vsMsPh43YLcmjnNMsx9HYuxM+WdqyrKPcK2 Mcf/bBP36mEhAePry7/+fjLLZYoCIc0iV60pFBNL6ptuBSy2YDCyo59LvvFxvfBJ 40UGMjIAWFNOCuEuzlaEtMrGt4ucmGm3yS+pmrNkkHD1qh3+PMRcjU2dZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJIvXZAMFj+J5AtbWkiXfq7MQlgUMB8GA1UdIwQY MBaAFPpaJZgve3RxErD/NY89JKViz8/sMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sb2xtQzk3ZEhFU3NQODFqejBrcFdMUHotdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNzZkN2FlLWRlNjctNGEwNS1hNzFi LWRlNzc0YjBlMzFkZi8xLzEtbG9sbUM5N2RIRVNzUDgxanowa3BXTFB6LXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E5Lzc2ZDdhZS1kZTY3LTRhMDUtYTcxYi1kZTc3NGIwZTMx ZGYvMS8xLWxvbG1DOTdkSEVTc1A4MWp6MGtwV0xQei13LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiudl 6+33RekVYaT6GqcTCcQALZiPMptU6v/2cQBtY6NIZHaT4apxHNLI4NOl9jJMfNHS eAs3GFbXg5uq7KrERkapi7+zm1fIccRVu4BJZWNdw5tVW6SSM55VWdg+pok9VsmG ChzB/ZIlZog0t0h8HiNPA2g1kYeooZ0beGvQY2jRIZaOlJhGe6K458iBtoUMdlds nWNgNeDK5BUnBHmJFYEEus0Sy+iLfl8uU9Ou5uZOoONoZk4ZfXrB0jnIWRAJqj0p fAp4R8w4X40auLFSTT/UDTaosK7Q4oRj24kmi+c0LRU3PAdEHLgdaG4wgWfmamlt QaZgPdn90SqYJK/8zA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:44 2025 by rpki-client