This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json) Hash identifier: nmvT4uVzx9Ut4yW9lSZnjfWEuTAcab4/JxpTpp7R3Kc= Subject key identifier: 3A:6F:C2:08:DD:85:EC:68:7B:6B:EA:5A:65:7A:B3:61:18:3A:DA:11 Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d Certificate serial: 019B3079B9192120CC33FC91F8DB67679E8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 08:00:42 +0000 Manifest this update: Thu 18 Dec 2025 08:00:42 +0000 Manifest next update: Fri 19 Dec 2025 08:00:42 +0000 Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: 0ifdWpD/irDXqAInp+WMjPNWlrBnL8Tw+i0/gHmXUg4=) 2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:b9:19:21:20:cc:33:fc:91:f8:db:67:67:9e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d Validity Not Before: Dec 18 08:00:42 2025 GMT Not After : Dec 19 08:00:42 2025 GMT Subject: CN=3a6fc208dd85ec687b6bea5a657ab361183ada11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:96:85:14:93:08:be:40:07:8f:51:66:4a: 09:79:e1:34:e0:d2:bf:57:e3:f3:79:09:7b:1e:09: 05:80:45:ec:d6:f6:21:3a:a6:38:ad:52:a6:71:6a: ac:24:23:d6:4c:c1:a7:c2:e2:61:b6:26:dc:cc:0b: ec:aa:89:14:be:0d:9a:d7:2c:ea:1a:41:ba:ab:68: c5:ad:4c:0d:3e:76:86:f0:58:92:f8:9a:b6:61:6d: e9:20:e0:25:46:de:3d:8c:9b:61:13:56:b8:95:b2: a3:79:a7:cf:f3:41:87:d4:ee:10:a2:9b:96:52:6b: 2a:f8:a2:dd:b4:a6:ea:0b:1e:ce:07:88:43:0e:98: db:52:60:00:72:6e:ee:f4:fd:da:f8:74:aa:2f:17: b6:bf:13:f5:7a:ee:33:e8:1a:6c:63:e7:30:39:a2: 54:77:df:48:1e:d4:4b:09:dc:c0:ef:61:c1:2d:fc: fa:3c:b3:ec:4e:e4:a4:7e:1c:c6:09:95:87:cb:1f: 32:0e:30:ac:a9:c8:e0:68:53:e5:6a:1b:6b:9d:a8: 06:e9:e5:bf:5e:80:55:f8:cd:ab:d4:b0:89:8b:66: 6b:cb:32:dd:58:0c:f4:21:71:5e:f8:b7:0b:2e:dc: bf:ec:1d:29:c6:1a:b2:8d:bb:0c:76:b9:6f:99:ac: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:C2:08:DD:85:EC:68:7B:6B:EA:5A:65:7A:B3:61:18:3A:DA:11 X509v3 Authority Key Identifier: keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:97:aa:f7:52:ad:17:1d:f8:ad:54:c8:5c:e2:40:33:41:1c: db:7d:22:18:a7:0f:e6:2e:65:29:a1:c3:a1:b2:09:7b:8d:75: de:c2:e1:5a:ba:13:c2:67:f3:98:b6:83:ce:e9:c7:c2:db:55: 4f:e4:77:19:92:da:a5:df:89:48:ea:d1:00:3c:dc:8f:d6:cb: 20:95:23:70:fe:2b:48:42:4e:88:11:c2:3c:11:e7:2c:32:8c: 4f:99:30:fb:8a:8d:31:42:02:49:28:15:a9:4c:e6:c0:47:fb: dc:77:75:d0:64:fa:41:ea:50:d5:a5:e4:95:7a:0a:f7:aa:fc: 9e:4d:ab:d7:de:53:14:f8:60:21:66:67:a0:bb:c6:4c:b5:ea: fb:14:ee:9a:15:bf:1f:7c:d1:59:0c:ee:e2:4b:b7:d6:95:97: 5f:5a:06:78:89:24:17:7b:90:69:5f:9f:52:07:e3:2f:92:24: 4e:15:17:72:31:ee:7d:d7:13:41:23:2e:22:54:6e:d6:75:d9: 1a:c1:34:3c:74:ac:bd:ba:ff:06:df:bb:4c:32:82:25:1b:95: 79:fb:4c:4a:22:ff:ec:80:18:6c:ee:b3:e2:2a:40:ba:53:5d: 64:ca:b4:75:1a:89:57:c4:05:3a:d0:ba:53:71:96:f9:fc:a8: b4:03:5c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswebkZISDMM/yR+NtnZ56OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NWMxYjdkOWYwNGM3ZjA0MzI3ZTZjNDQ2NDE2ZTJmOGMz MWQ1N2QwHhcNMjUxMjE4MDgwMDQyWhcNMjUxMjE5MDgwMDQyWjAzMTEwLwYDVQQD EygzYTZmYzIwOGRkODVlYzY4N2I2YmVhNWE2NTdhYjM2MTE4M2FkYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p+WhRSTCL5AB49RZkoJeeE04NK/ V+PzeQl7HgkFgEXs1vYhOqY4rVKmcWqsJCPWTMGnwuJhtibczAvsqokUvg2a1yzq GkG6q2jFrUwNPnaG8FiS+Jq2YW3pIOAlRt49jJthE1a4lbKjeafP80GH1O4QopuW Umsq+KLdtKbqCx7OB4hDDpjbUmAAcm7u9P3a+HSqLxe2vxP1eu4z6BpsY+cwOaJU d99IHtRLCdzA72HBLfz6PLPsTuSkfhzGCZWHyx8yDjCsqcjgaFPlahtrnagG6eW/ XoBV+M2r1LCJi2ZryzLdWAz0IXFe+LcLLty/7B0pxhqyjbsMdrlvmawqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpvwgjdhexoe2vqWmV6s2EYOtoRMB8GA1UdIwQY MBaAFNZcG32fBMfwQyfmxEZBbi+MMdV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYt MTEwZWE4NTg1MzU0LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYtMTEwZWE4NTg1MzU0 LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJeq91Kt Fx34rVTIXOJAM0Ec230iGKcP5i5lKaHDobIJe4113sLhWroTwmfzmLaDzunHwttV T+R3GZLapd+JSOrRADzcj9bLIJUjcP4rSEJOiBHCPBHnLDKMT5kw+4qNMUICSSgV qUzmwEf73Hd10GT6QepQ1aXklXoK96r8nk2r195TFPhgIWZnoLvGTLXq+xTumhW/ H3zRWQzu4ku31pWXX1oGeIkkF3uQaV+fUgfjL5IkThUXcjHufdcTQSMuIlRu1nXZ GsE0PHSsvbr/Bt+7TDKCJRuVeftMSiL/7IAYbO6z4ipAulNdZMq0dRqJV8QFOtC6 U3GW+fyotANcgA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:56 2025 by rpki-client