This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json) Hash identifier: sSYbKno3p02gM54lcRzmstNE2ztp0WkqeFGF2RLdS0g= Subject key identifier: A3:6A:E5:BD:72:91:3B:9B:9F:D3:FA:7F:AC:C7:DB:F7:A9:2A:7D:FC Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Certificate serial: 019AF1D1943FE761C71A5CAA36499FF509D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft Manifest number: C1 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: sDsYOXo1DPcbV2gxmVvgJvbDZAPc5or6xDPKcZfjwEk=) 2: Ito4OsKdOYk_0Vr5IgYqw7oQP_k.roa (hash: t2JFfBVsPDvYQ98nc/aNec9j3fYa1vwbxO3EDDVKTUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:94:3f:e7:61:c7:1a:5c:aa:36:49:9f:f5:09:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=a36ae5bd72913b9b9fd3fa7facc7dbf7a92a7dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:de:0d:0d:58:f8:c4:4f:63:ae:19:37:66: 38:71:32:26:81:42:cc:fe:6a:d4:b5:37:bb:45:2e: 7f:d4:2b:82:45:d2:f3:84:3d:13:0a:b7:65:67:c4: 7b:7d:b8:56:e3:fb:31:56:df:a7:6e:f3:83:2a:6b: b2:7e:37:06:82:0a:6b:c1:33:7e:c4:0d:3c:5e:63: 08:88:b8:65:8b:14:78:55:4a:2c:0b:7c:2b:32:94: d7:83:bc:52:a3:5b:4a:25:6b:ec:77:6e:fd:72:2a: 8b:18:8a:12:52:bb:5f:c7:76:1b:ad:f9:0e:84:bc: f3:7e:68:ac:0e:d0:1e:b6:3a:c0:20:09:9c:9e:18: b4:db:81:70:a1:83:fb:8c:16:cf:fa:df:2c:33:15: 67:f9:99:5b:4f:e2:cb:8c:04:af:e8:df:2d:cb:ae: 43:0d:09:4b:dd:30:12:e4:4e:20:dc:11:e9:81:e8: 1a:77:51:b8:14:14:d7:c2:c4:2f:07:5b:99:c7:13: a6:19:50:29:df:26:c6:26:d6:77:66:d0:c9:db:23: 6f:9a:78:17:88:07:83:fc:47:b2:35:1c:8e:48:6e: 0d:b8:10:63:b9:40:8f:1b:05:d8:20:3d:b1:ab:d0: 34:cd:17:c6:72:7c:ab:d0:08:4d:1d:fb:f7:6d:42: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6A:E5:BD:72:91:3B:9B:9F:D3:FA:7F:AC:C7:DB:F7:A9:2A:7D:FC X509v3 Authority Key Identifier: keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d5:fa:76:76:bc:a6:c5:40:6b:2f:fb:ab:56:06:04:1d:eb: a3:3f:fd:19:ce:09:3c:4d:b8:c7:ba:75:48:11:b4:5f:59:95: f6:44:3e:67:5a:23:35:03:9a:0f:3a:0c:c0:fc:93:6b:8b:9f: 87:3f:5d:9e:c6:db:c5:ed:2b:35:60:d3:67:eb:94:fe:c2:64: 85:0b:a5:4a:73:3c:fe:ea:87:81:59:06:05:fd:62:b3:6c:12: 62:45:6f:a9:f9:12:3c:8c:17:9f:9a:d9:a9:bc:05:57:44:c7: f7:17:94:ab:90:03:98:db:21:18:36:48:89:6e:cc:81:b4:d3: 9a:61:6e:56:d3:ad:62:98:4c:57:50:37:5b:32:8e:49:64:d1: d7:f2:3e:0c:c2:66:22:a2:1f:f6:f8:97:86:d6:6d:93:54:cf: 86:bc:31:87:9a:94:e8:b0:31:30:c8:e1:39:a6:44:5f:7a:96: bb:ee:f9:d1:7a:d5:f9:b6:de:b5:69:4f:c4:0b:ef:ad:1e:56: e7:d0:6f:2c:9d:07:39:6d:14:1d:b1:af:35:4d:c2:49:03:9d: 98:38:3b:b8:5c:aa:df:ea:b2:79:3b:95:ea:9f:d3:ae:40:ae: 7d:92:e4:2b:15:31:f6:45:e4:57:fd:f2:70:48:ba:a4:ca:c2: 42:02:ab:32 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0ZQ/52HHGlyqNkmf9QnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3 NDY5YWMwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EyhhMzZhZTViZDcyOTEzYjliOWZkM2ZhN2ZhY2M3ZGJmN2E5MmE3ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBLeDQ1Y+MRPY64ZN2Y4cTImgULM /mrUtTe7RS5/1CuCRdLzhD0TCrdlZ8R7fbhW4/sxVt+nbvODKmuyfjcGggprwTN+ xA08XmMIiLhlixR4VUosC3wrMpTXg7xSo1tKJWvsd279ciqLGIoSUrtfx3YbrfkO hLzzfmisDtAetjrAIAmcnhi024FwoYP7jBbP+t8sMxVn+ZlbT+LLjASv6N8ty65D DQlL3TAS5E4g3BHpgegad1G4FBTXwsQvB1uZxxOmGVAp3ybGJtZ3ZtDJ2yNvmngX iAeD/EeyNRyOSG4NuBBjuUCPGwXYID2xq9A0zRfGcnyr0AhNHfv3bUKVwwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKNq5b1ykTubn9P6f6zH2/epKn38MB8GA1UdIwQY MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2 LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M0LzgzZWU2Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5Zjgx ZGUvMS8xLUxwQnRxMXVZM2dPd19FaFlPZkU3UTkwYWF3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9X6 dna8psVAay/7q1YGBB3roz/9Gc4JPE24x7p1SBG0X1mV9kQ+Z1ojNQOaDzoMwPyT a4ufhz9dnsbbxe0rNWDTZ+uU/sJkhQulSnM8/uqHgVkGBf1is2wSYkVvqfkSPIwX n5rZqbwFV0TH9xeUq5ADmNshGDZIiW7MgbTTmmFuVtOtYphMV1A3WzKOSWTR1/I+ DMJmIqIf9viXhtZtk1TPhrwxh5qU6LAxMMjhOaZEX3qWu+750XrV+bbetWlPxAvv rR5W59BvLJ0HOW0UHbGvNU3CSQOdmDg7uFyq3+qyeTuV6p/TrkCufZLkKxUx9kXk V/3ycEi6pMrCQgKrMg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:26:31 2025 by rpki-client