This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json) Hash identifier: 2LgI465YRI8oNoUYCJy9mIEmMsMAmKpsnpJLb/ygS7Q= Subject key identifier: 80:8A:08:7F:B6:37:A9:E0:12:87:F8:BC:C0:39:F7:F9:B4:26:7A:1A Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2 Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2 Certificate serial: 019AF42E0C828427CC7681B827CDF26B7617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft Manifest number: 0558 Signing time: Sat 06 Dec 2025 15:00:49 +0000 Manifest this update: Sat 06 Dec 2025 15:00:49 +0000 Manifest next update: Sun 07 Dec 2025 15:00:49 +0000 Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: yjlVF70tCrqG1YiLlYRZjh2aJCxPmNq5dS0UPbOsLPE=) 2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0c:82:84:27:cc:76:81:b8:27:cd:f2:6b:76:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2 Validity Not Before: Dec 6 15:00:49 2025 GMT Not After : Dec 7 15:00:49 2025 GMT Subject: CN=808a087fb637a9e01287f8bcc039f7f9b4267a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:cb:ba:7d:50:e0:c9:1a:02:15:3e:29:fa: 9a:e7:5a:dc:52:55:54:66:aa:14:72:fc:4e:54:54: 98:e9:1c:d1:41:cf:88:e2:5d:aa:50:86:04:69:83: 66:9b:7a:8d:a1:9f:55:ed:06:39:b1:51:e8:41:7e: 30:e8:b5:e5:d8:19:2e:4b:df:8c:c8:ab:ff:63:67: d8:16:a6:cc:7e:81:03:19:62:ef:7b:e1:bd:e3:38: 86:5f:00:d9:31:2b:76:31:63:63:b3:de:74:80:5e: 8e:76:4b:d6:ba:49:0e:f7:48:00:29:9f:90:f8:be: 0e:16:58:87:7e:37:d7:fe:d6:08:42:83:9b:6b:77: 4a:fe:d0:14:cf:34:a1:61:23:cc:0d:cd:80:13:e5: fe:46:ea:65:ec:75:58:27:a6:b2:83:c4:29:3b:bd: be:38:c2:fd:af:cc:e9:27:94:26:d1:6c:09:c3:c8: 62:81:49:f6:92:67:c4:23:35:d0:88:20:9c:89:cf: 3a:29:bc:0a:83:ba:08:56:fe:02:9d:e2:e9:72:2d: c9:3a:63:70:64:34:bf:f6:a2:fb:9e:41:fc:01:f9: ee:dc:77:e1:4e:dc:45:e6:18:a4:2a:e3:20:8d:db: 8a:78:47:73:72:37:3c:87:d6:5b:8c:03:03:9a:eb: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8A:08:7F:B6:37:A9:E0:12:87:F8:BC:C0:39:F7:F9:B4:26:7A:1A X509v3 Authority Key Identifier: keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2c:3a:5e:ea:30:fa:a8:85:6c:58:44:84:d5:23:79:c7:22: 4d:1c:21:6d:56:33:9e:3b:a1:d6:0a:5a:7b:71:6d:9c:9c:80: b7:05:26:11:8e:30:8a:cd:d3:1b:a6:15:80:51:76:0b:e2:ee: a6:87:8f:bf:05:76:ce:b6:90:f4:6f:af:96:6a:0f:8a:9f:5c: c1:68:33:05:02:79:ff:46:71:28:2a:5c:0c:ec:71:e6:0d:f9: c5:81:e7:b2:5d:e0:2a:ab:e6:4f:db:22:9d:81:e2:18:96:b2: 41:02:53:5e:47:db:a2:fa:f7:1a:35:87:fc:bd:3f:9c:0b:6e: 42:4b:57:76:f6:8e:d2:56:a7:83:cc:5b:2a:b3:ee:de:32:58: ea:29:ed:31:ab:0e:ee:57:98:7d:5d:a8:ec:d1:8d:c6:a5:8d: b9:01:79:9c:d0:e0:f5:a5:ab:6b:cc:db:cb:2c:8d:f6:ef:f9: 5a:70:f9:24:2c:75:c5:68:b8:e7:c4:08:e8:14:af:18:0b:03: 61:bb:34:6e:aa:5d:8f:cd:5f:ec:42:8b:2d:3a:22:e4:b7:e5: fa:ec:56:83:bb:ef:0d:da:b9:39:c1:09:a8:8a:11:88:ee:6f: e5:53:df:c6:30:ca:ab:59:e4:c5:4a:ba:d1:91:ed:7f:ce:97: d9:0c:26:b4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0LgyChCfMdoG4J83ya3YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1 NTBkZjIwHhcNMjUxMjA2MTUwMDQ5WhcNMjUxMjA3MTUwMDQ5WjAzMTEwLwYDVQQD Eyg4MDhhMDg3ZmI2MzdhOWUwMTI4N2Y4YmNjMDM5ZjdmOWI0MjY3YTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP7Lun1Q4MkaAhU+Kfqa51rcUlVU ZqoUcvxOVFSY6RzRQc+I4l2qUIYEaYNmm3qNoZ9V7QY5sVHoQX4w6LXl2BkuS9+M yKv/Y2fYFqbMfoEDGWLve+G94ziGXwDZMSt2MWNjs950gF6OdkvWukkO90gAKZ+Q +L4OFliHfjfX/tYIQoOba3dK/tAUzzShYSPMDc2AE+X+Rupl7HVYJ6ayg8QpO72+ OML9r8zpJ5Qm0WwJw8higUn2kmfEIzXQiCCcic86KbwKg7oIVv4CneLpci3JOmNw ZDS/9qL7nkH8Afnu3HfhTtxF5hikKuMgjduKeEdzcjc8h9ZbjAMDmuvwZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFICKCH+2N6ngEof4vMA59/m0JnoaMB8GA1UdIwQY MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4 LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiw6 Xuow+qiFbFhEhNUjecciTRwhbVYznjuh1gpae3FtnJyAtwUmEY4wis3TG6YVgFF2 C+LupoePvwV2zraQ9G+vlmoPip9cwWgzBQJ5/0ZxKCpcDOxx5g35xYHnsl3gKqvm T9sinYHiGJayQQJTXkfbovr3GjWH/L0/nAtuQktXdvaO0lang8xbKrPu3jJY6int MasO7leYfV2o7NGNxqWNuQF5nNDg9aWra8zbyyyN9u/5WnD5JCx1xWi458QI6BSv GAsDYbs0bqpdj81f7EKLLToi5Lfl+uxWg7vvDdq5OcEJqIoRiO5v5VPfxjDKq1nk xUq60ZHtf86X2QwmtA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:32 2025 by rpki-client