This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json) Hash identifier: CxakObND2k2fVDZFuzCbcUIFJTVleM7Ut4qxh3YmjnY= Subject key identifier: E1:DD:C6:EF:F3:1B:7C:EB:D2:74:2D:E2:3D:AE:BC:98:D4:FB:A0:1A Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Certificate serial: 019B2C66DD62C40E98024CB72A859823BAA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 13:01:37 +0000 Manifest this update: Wed 17 Dec 2025 13:01:37 +0000 Manifest next update: Thu 18 Dec 2025 13:01:37 +0000 Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: UZSrpFcn+9RmQ2KjcLjHzXX6u9a+68r7n50QbR2ZHHQ=) 2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:dd:62:c4:0e:98:02:4c:b7:2a:85:98:23:ba:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Validity Not Before: Dec 17 13:01:37 2025 GMT Not After : Dec 18 13:01:37 2025 GMT Subject: CN=e1ddc6eff31b7cebd2742de23daebc98d4fba01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:fa:ae:70:c7:63:33:1e:36:14:69:3e:5f: 89:d7:c2:1c:69:76:50:1e:f0:cd:e7:5f:7f:e6:66: 11:07:61:be:90:3a:a1:68:35:74:c5:68:a4:2d:64: a8:9e:22:8f:87:b3:8f:71:22:f2:5f:f8:8c:22:f9: 36:0d:5c:44:67:5e:b6:68:54:88:45:e4:e1:87:fe: c6:1c:a3:26:b9:ae:85:49:40:d1:3e:47:76:73:d4: c5:3e:6b:7d:97:28:ef:ab:d9:8c:00:3b:7d:c5:0b: f9:9f:a4:86:e5:60:65:d6:bb:7e:53:e4:62:03:76: 22:8b:98:e2:96:73:1e:23:c3:3e:53:82:e3:c9:cb: 0d:e7:14:a7:05:e3:f6:fa:af:40:88:d4:7c:bb:f7: a6:f0:04:53:60:de:49:b5:38:96:30:65:a7:dd:fb: e5:36:66:0c:fe:ac:43:0c:9a:fa:7f:09:1d:ee:8b: fc:3c:5a:05:8c:cf:96:44:a1:63:10:4e:54:d9:5a: b6:1a:d3:11:e9:f8:e1:eb:ff:8f:df:5e:b9:95:0f: f5:c4:92:fc:bd:44:81:c3:0b:29:af:24:d4:b8:ee: 51:3e:a5:ce:9c:ea:3c:d6:d9:39:cd:51:d7:1f:84: 71:63:70:3a:aa:c1:da:c2:6e:a8:08:cf:64:2d:35: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DD:C6:EF:F3:1B:7C:EB:D2:74:2D:E2:3D:AE:BC:98:D4:FB:A0:1A X509v3 Authority Key Identifier: keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c1:31:e8:24:98:49:59:79:26:50:bd:c0:63:b4:27:56:76: b2:83:21:82:dd:02:6b:c3:ff:fe:51:04:7e:b8:02:72:d3:ca: 88:69:f6:55:6f:a5:fe:d8:6a:a8:62:ca:6e:dd:6a:d4:c5:e6: 22:da:a4:ee:28:53:f9:4c:d0:6f:a0:e9:e9:a2:23:4e:ad:49: f5:07:36:ce:61:3b:d2:d0:01:51:80:48:71:4c:f0:f2:97:a8: bc:57:7b:a1:dd:46:af:6a:0b:d7:27:25:cd:59:88:70:0a:b2: 58:0b:17:d8:2e:e7:65:fc:06:93:df:fe:00:32:b1:de:f2:b6: 28:b3:db:3f:d6:67:ab:13:78:30:ea:c0:12:23:6c:5e:5d:31: c0:58:9e:44:97:1e:6e:9a:a7:d2:ef:70:ce:ba:dd:29:b2:05: 73:15:46:90:41:4f:bd:f8:e1:57:a6:39:50:d2:cf:00:16:1b: c8:03:81:17:39:56:af:cc:f2:6f:67:b0:dd:cd:5f:bf:f3:08: b2:59:eb:3a:a0:b4:b5:be:0d:31:30:58:1e:58:55:d6:e5:d6: 35:96:39:35:79:d2:8a:75:5f:2a:c8:f5:0b:55:62:e8:fc:86: bf:5e:5d:fc:01:12:8a:7b:52:73:5e:bb:a8:68:14:ca:b0:a2: 1b:ef:f0:8e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZssZt1ixA6YAky3KoWYI7qoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk YjU5OGMwHhcNMjUxMjE3MTMwMTM3WhcNMjUxMjE4MTMwMTM3WjAzMTEwLwYDVQQD EyhlMWRkYzZlZmYzMWI3Y2ViZDI3NDJkZTIzZGFlYmM5OGQ0ZmJhMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/b6rnDHYzMeNhRpPl+J18IcaXZQ HvDN519/5mYRB2G+kDqhaDV0xWikLWSoniKPh7OPcSLyX/iMIvk2DVxEZ162aFSI ReThh/7GHKMmua6FSUDRPkd2c9TFPmt9lyjvq9mMADt9xQv5n6SG5WBl1rt+U+Ri A3Yii5jilnMeI8M+U4LjycsN5xSnBeP2+q9AiNR8u/em8ARTYN5JtTiWMGWn3fvl NmYM/qxDDJr6fwkd7ov8PFoFjM+WRKFjEE5U2Vq2GtMR6fjh6/+P3165lQ/1xJL8 vUSBwwspryTUuO5RPqXOnOo81tk5zVHXH4RxY3A6qsHawm6oCM9kLTUIZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOHdxu/zG3zr0nQt4j2uvJjU+6AaMB8GA1UdIwQY MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8Ex 6CSYSVl5JlC9wGO0J1Z2soMhgt0Ca8P//lEEfrgCctPKiGn2VW+l/thqqGLKbt1q 1MXmItqk7ihT+UzQb6Dp6aIjTq1J9Qc2zmE70tABUYBIcUzw8peovFd7od1Gr2oL 1yclzVmIcAqyWAsX2C7nZfwGk9/+ADKx3vK2KLPbP9ZnqxN4MOrAEiNsXl0xwFie RJcebpqn0u9wzrrdKbIFcxVGkEFPvfjhV6Y5UNLPABYbyAOBFzlWr8zyb2ew3c1f v/MIslnrOqC0tb4NMTBYHlhV1uXWNZY5NXnSinVfKsj1C1Vi6PyGv15d/AESintS c167qGgUyrCiG+/wjg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:24 2025 by rpki-client