This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json) Hash identifier: F/bDLxunV2Acz/snecJpOR4KQsGIvtUOyWDcSSGBFZ0= Subject key identifier: C9:7F:8F:C3:E9:4A:D0:9B:D0:AB:94:39:93:E5:2A:EE:C1:71:93:91 Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12 Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412 Certificate serial: 019AF12E326144EBAA16A95C9D0253545064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: b44u+uANo1Arstg89XDQSwB/XeLgDfOi/ORjnWmasmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:32:61:44:eb:aa:16:a9:5c:9d:02:53:54:50:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412 Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=c97f8fc3e94ad09bd0ab943993e52aeec1719391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:5c:e4:03:6b:7e:0b:b8:64:ba:f1:62:b7: 29:08:89:d8:7e:73:91:d2:13:df:21:30:6f:c3:b4: af:ba:33:84:d7:de:8b:37:d2:29:f1:f0:fd:49:9d: d6:e2:d3:db:f5:13:7d:f4:47:d4:ee:ba:87:d4:80: 14:0b:a1:64:fc:5c:94:3c:87:17:90:69:b5:6e:5a: 1f:d4:ab:38:ea:f3:f5:01:90:24:b9:76:cc:0d:5c: f1:f0:e9:13:1e:55:2e:27:e8:9e:59:96:11:25:fd: 46:2f:57:ec:9b:f3:e5:4b:64:0d:9e:df:19:c1:2c: 5e:6d:48:3b:ac:0b:32:b0:69:d9:1f:28:58:19:e0: 29:7e:03:87:a9:97:b6:a1:80:c6:0f:4e:e2:dc:fa: a7:e8:b1:09:25:85:bb:49:51:73:53:ff:f2:d4:55: bb:99:b7:32:7c:80:f6:d1:61:31:11:ba:67:b3:e3: ec:a8:e7:27:ed:c7:f4:5e:0b:58:4b:a1:73:c8:24: fd:9f:13:24:cc:2d:38:ea:a3:56:e0:0c:59:e2:77: 9b:1d:92:28:07:87:40:e5:e7:31:18:2e:39:fa:5e: 49:44:2f:8a:7a:2f:c6:96:97:47:1d:dc:38:f4:f0: b7:a9:18:ce:04:de:e6:bd:ba:07:13:06:cc:79:b3: 9f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7F:8F:C3:E9:4A:D0:9B:D0:AB:94:39:93:E5:2A:EE:C1:71:93:91 X509v3 Authority Key Identifier: keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:30:d5:9e:d7:20:b8:d0:4e:87:09:8c:b7:65:90:8c:6f:49: 0e:18:f5:cc:8d:75:20:c9:4e:80:9b:dd:25:c6:ff:5d:cf:0f: dc:48:c8:ea:df:34:1f:3b:f2:3d:cd:fa:53:3e:e0:1e:7c:62: 18:d1:23:a7:e5:9f:6d:2d:72:a8:38:22:f0:45:43:56:4b:7d: ad:ba:1b:b0:dc:b5:f0:7c:ca:5e:b7:8f:48:75:ee:15:d3:1b: 39:00:97:82:e9:64:16:18:06:83:9d:32:64:20:05:2e:60:f3: 24:d2:d1:a1:ad:33:01:e5:95:ff:44:71:9f:15:00:f6:15:6c: 51:62:2f:0f:db:22:b2:e9:26:81:01:6d:1d:cb:69:0e:db:f9: db:3c:93:cb:98:6c:8f:9b:97:72:f8:e7:ce:3a:04:94:a6:7d: fe:d1:31:28:b6:1f:78:77:3d:40:f8:a0:7b:a0:a7:c9:ea:ba: df:5e:88:c2:e3:21:b4:4d:71:65:38:26:f5:98:b8:51:d1:f2: 2d:00:f9:bf:78:88:8d:53:7f:a7:47:5b:ea:f6:e7:10:58:1c: d2:91:0d:aa:81:a8:47:43:6f:ec:45:48:b0:42:22:2c:e5:6e: a7:cc:43:9f:64:94:c7:6a:93:f1:bd:79:45:82:0d:22:1d:db: 4f:17:fd:d7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLjJhROuqFqlcnQJTVFBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm ZTY0MTIwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD EyhjOTdmOGZjM2U5NGFkMDliZDBhYjk0Mzk5M2U1MmFlZWMxNzE5MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkhc5ANrfgu4ZLrxYrcpCInYfnOR 0hPfITBvw7SvujOE196LN9Ip8fD9SZ3W4tPb9RN99EfU7rqH1IAUC6Fk/FyUPIcX kGm1blof1Ks46vP1AZAkuXbMDVzx8OkTHlUuJ+ieWZYRJf1GL1fsm/PlS2QNnt8Z wSxebUg7rAsysGnZHyhYGeApfgOHqZe2oYDGD07i3Pqn6LEJJYW7SVFzU//y1FW7 mbcyfID20WExEbpns+PsqOcn7cf0XgtYS6FzyCT9nxMkzC046qNW4AxZ4nebHZIo B4dA5ecxGC45+l5JRC+Kei/GlpdHHdw49PC3qRjOBN7mvboHEwbMebOfyQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMl/j8PpStCb0KuUOZPlKu7BcZORMB8GA1UdIwQY MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjDV ntcguNBOhwmMt2WQjG9JDhj1zI11IMlOgJvdJcb/Xc8P3EjI6t80HzvyPc36Uz7g HnxiGNEjp+WfbS1yqDgi8EVDVkt9rbobsNy18HzKXrePSHXuFdMbOQCXgulkFhgG g50yZCAFLmDzJNLRoa0zAeWV/0RxnxUA9hVsUWIvD9sisukmgQFtHctpDtv52zyT y5hsj5uXcvjnzjoElKZ9/tExKLYfeHc9QPige6Cnyeq6316IwuMhtE1xZTgm9Zi4 UdHyLQD5v3iIjVN/p0db6vbnEFgc0pENqoGoR0Nv7EVIsEIiLOVup8xDn2SUx2qT 8b15RYINIh3bTxf91w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:45 2025 by rpki-client