This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json) Hash identifier: o9nogI/9SytiiG6dUfbgDflseOM6uETmP5WD/+eHTrE= Subject key identifier: 46:C6:79:92:EC:97:38:D1:54:B9:21:5E:BF:37:40:84:34:89:D8:49 Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d Certificate serial: 019AF2AD66D4C27D7445330EC438FCD4D806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: B2Vt5L+1RPYCgsJiV9Lzk2Q+Wr1sB7mm/SP6PTmUe4U=) 2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:66:d4:c2:7d:74:45:33:0e:c4:38:fc:d4:d8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=46c67992ec9738d154b9215ebf3740843489d849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:de:cc:53:92:6f:34:d0:8a:26:5a:56:67: 63:07:30:4b:de:0b:2a:40:ec:50:58:88:9a:11:ef: cb:6c:ad:d5:2c:d2:7b:5d:9d:27:99:d9:e1:d3:3e: 72:53:13:c7:61:be:3f:fb:aa:be:ce:80:1a:c4:c4: c8:d0:79:b9:55:f6:fa:9e:31:ac:c2:f4:52:69:38: 39:c1:31:7a:15:6a:b0:d8:8e:6e:0d:e3:0e:b1:cc: 7d:18:0f:bb:92:12:6d:f9:92:38:dc:05:06:e5:7d: b7:60:d3:6d:3d:93:17:88:05:d2:21:53:49:a1:b5: 2e:2f:ec:63:dc:a3:84:e7:15:93:fe:1c:05:47:bd: 1d:d5:57:8d:5d:4b:13:ea:6b:c3:58:89:78:47:a9: f0:8c:39:ae:53:1f:12:3a:79:7b:2c:0f:2e:e5:df: 6c:76:d9:88:09:ec:2d:32:22:f4:83:09:63:5e:8d: 48:7f:2d:75:0f:fa:be:96:57:82:fa:09:5e:13:ac: 15:4d:a3:ca:19:0d:ad:d5:f8:5c:3c:00:d0:af:20: 4e:88:56:1e:86:ca:d5:59:58:3b:cd:3a:dc:e7:45: 9e:10:15:06:e1:db:ad:40:ff:08:d7:36:31:01:8e: bb:95:9b:44:f1:d4:00:c5:04:75:f3:72:c0:22:ff: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:79:92:EC:97:38:D1:54:B9:21:5E:BF:37:40:84:34:89:D8:49 X509v3 Authority Key Identifier: keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:59:93:6e:0e:58:48:b8:86:96:d6:41:90:c2:d5:94:ac:dd: b9:af:e7:a7:02:ed:af:d1:30:7f:fb:ce:b1:92:6f:c7:a6:e0: b7:c2:dc:9f:8f:1b:63:d4:29:db:b5:74:52:59:13:a0:88:3e: 9a:23:24:6e:7e:f7:98:a3:99:1f:85:2a:35:4e:6a:d2:38:17: 2b:19:37:02:09:36:71:6a:90:8c:21:ae:d4:9d:a1:e3:3e:21: c8:30:88:89:fb:d9:82:f3:f0:a9:03:7a:da:40:f9:9d:6e:a9: bd:10:d1:88:a7:4a:a6:61:df:f3:84:01:20:65:4a:39:b0:30: 89:93:06:47:13:81:47:79:1a:ba:b0:96:8a:5d:b1:c2:b3:04: af:2a:4e:39:25:af:42:d5:ff:63:dd:bf:23:9d:8c:3d:cd:28: fb:cb:67:ab:99:c5:23:ee:89:13:24:ea:ca:82:c8:ce:70:b5: 09:df:3f:3f:fc:e2:1e:84:55:0e:0b:15:07:e5:6d:38:64:a0: cd:e0:5f:b9:69:d9:af:87:aa:bb:0c:4a:88:30:ba:bc:51:bb: 9e:df:34:be:72:c8:a0:4f:72:7e:73:0b:9d:a4:c0:5c:d2:30: 44:54:c2:4c:ab:17:6c:83:50:90:03:e3:e7:5e:c3:05:1c:5b: c1:e5:01:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWbUwn10RTMOxDj81NgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NWMxYjdkOWYwNGM3ZjA0MzI3ZTZjNDQ2NDE2ZTJmOGMz MWQ1N2QwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD Eyg0NmM2Nzk5MmVjOTczOGQxNTRiOTIxNWViZjM3NDA4NDM0ODlkODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgjezFOSbzTQiiZaVmdjBzBL3gsq QOxQWIiaEe/LbK3VLNJ7XZ0nmdnh0z5yUxPHYb4/+6q+zoAaxMTI0Hm5Vfb6njGs wvRSaTg5wTF6FWqw2I5uDeMOscx9GA+7khJt+ZI43AUG5X23YNNtPZMXiAXSIVNJ obUuL+xj3KOE5xWT/hwFR70d1VeNXUsT6mvDWIl4R6nwjDmuUx8SOnl7LA8u5d9s dtmICewtMiL0gwljXo1Ify11D/q+lleC+gleE6wVTaPKGQ2t1fhcPADQryBOiFYe hsrVWVg7zTrc50WeEBUG4dutQP8I1zYxAY67lZtE8dQAxQR183LAIv8gNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbGeZLslzjRVLkhXr83QIQ0idhJMB8GA1UdIwQY MBaAFNZcG32fBMfwQyfmxEZBbi+MMdV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYt MTEwZWE4NTg1MzU0LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYtMTEwZWE4NTg1MzU0 LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplmTbg5Y SLiGltZBkMLVlKzdua/npwLtr9Ewf/vOsZJvx6bgt8Lcn48bY9Qp27V0UlkToIg+ miMkbn73mKOZH4UqNU5q0jgXKxk3Agk2cWqQjCGu1J2h4z4hyDCIifvZgvPwqQN6 2kD5nW6pvRDRiKdKpmHf84QBIGVKObAwiZMGRxOBR3kaurCWil2xwrMErypOOSWv QtX/Y92/I52MPc0o+8tnq5nFI+6JEyTqyoLIznC1Cd8/P/ziHoRVDgsVB+VtOGSg zeBfuWnZr4equwxKiDC6vFG7nt80vnLIoE9yfnMLnaTAXNIwRFTCTKsXbINQkAPj 517DBRxbweUBDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:12 2025 by rpki-client