This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json) Hash identifier: eR64PQxBoZrrGfiLuaE5RXjBP0ZcQAzgf7ndif7NeTA= Subject key identifier: 9D:80:C9:33:77:BF:E4:E3:B0:E8:D4:9D:2D:25:B8:95:07:B1:01:AC Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92 Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92 Certificate serial: 019B39B44C1BDB63047A45546E8D37FB256C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft Manifest number: 1419 Signing time: Sat 20 Dec 2025 03:01:15 +0000 Manifest this update: Sat 20 Dec 2025 03:01:15 +0000 Manifest next update: Sun 21 Dec 2025 03:01:15 +0000 Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: aXq40N3780KD9zL5D46RSUTVTqlx1j0te2J6imvMcyM=) 2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=) 3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:4c:1b:db:63:04:7a:45:54:6e:8d:37:fb:25:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92 Validity Not Before: Dec 20 03:01:15 2025 GMT Not After : Dec 21 03:01:15 2025 GMT Subject: CN=9d80c93377bfe4e3b0e8d49d2d25b89507b101ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:b6:69:96:eb:74:0b:ec:1d:58:7e:e8:66: 37:88:9d:b0:e1:73:5b:86:ec:ca:4c:de:72:91:b2: 18:97:d5:9c:ef:a0:76:0f:02:cc:27:ae:96:15:e6: 09:3d:c3:3e:46:cc:10:bd:14:08:71:68:4a:61:fd: 97:e3:5f:d0:2b:7b:7c:d5:1a:de:67:3e:e8:08:cc: 55:73:4d:99:30:33:ba:c9:f1:e7:20:bc:d2:e5:64: 2e:98:b9:c4:52:7b:20:23:1e:99:4b:09:b1:82:47: 41:64:70:75:97:7d:8f:91:07:8a:b4:28:d6:e9:08: 21:b9:59:4d:ab:04:ce:b0:65:25:b7:f3:ba:84:fd: bd:fb:c5:a2:4f:cb:86:02:9f:c3:2c:b7:ba:78:f7: fd:3b:fe:79:c4:e4:52:52:eb:af:62:34:bd:77:d1: 81:f6:a1:b3:80:89:09:b4:3a:07:ea:36:9e:58:31: 11:9b:4f:59:08:e8:52:e7:75:37:f7:db:66:f2:aa: e6:87:55:e5:0b:49:20:f3:6b:35:14:94:c9:4f:b4: fd:31:d9:24:e6:48:e6:ba:08:dd:49:c1:a2:81:e5: 8b:88:68:c6:06:15:3d:4c:c6:c9:99:31:6f:fe:f6: d7:1e:b2:02:da:7f:d6:24:49:75:7f:4c:95:da:a8: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:80:C9:33:77:BF:E4:E3:B0:E8:D4:9D:2D:25:B8:95:07:B1:01:AC X509v3 Authority Key Identifier: keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:1c:ec:38:3d:24:9c:93:29:f2:c2:5b:f9:89:30:c5:04:11: 74:99:9c:af:69:bf:0b:33:1d:d0:26:59:12:d6:c0:ab:e2:53: 65:08:9e:c9:d3:63:bb:5f:0a:45:31:09:bd:9f:eb:ef:a1:c0: b6:2a:f5:2c:54:af:37:2c:aa:db:7f:eb:38:64:7e:b4:48:ac: c4:4f:a4:4d:eb:d0:ab:e6:0c:92:ec:9a:c4:a4:99:46:94:e9: 49:03:f5:21:90:fb:8c:0a:38:24:06:82:2b:43:c0:a2:d4:5f: 66:4d:02:18:b2:4a:78:2d:1f:db:0f:02:f5:f4:aa:24:ba:76: 56:4a:3c:40:57:60:79:e5:4b:ab:9a:bc:a1:fa:a3:fe:14:93: f3:52:f6:ea:5c:d1:80:1a:5c:4a:1f:cf:b6:0e:62:03:43:62: e1:01:80:00:f8:96:bf:95:43:cf:d0:7e:6a:af:55:67:91:bb: 38:69:32:5f:54:13:24:9c:24:a5:7f:01:b4:4f:c5:79:24:43: 5e:ac:44:5d:6f:05:c7:c0:ce:84:8d:d1:e6:b4:82:a8:19:b3: 58:02:76:ae:b4:3f:55:7c:97:2f:29:b9:fa:c5:64:f9:2a:9d: b2:cc:02:d2:af:4f:f5:46:a3:50:eb:05:1a:fc:67:be:22:2c: 25:b5:f4:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tEwb22MEekVUbo03+yVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3 ZmFlOTIwHhcNMjUxMjIwMDMwMTE1WhcNMjUxMjIxMDMwMTE1WjAzMTEwLwYDVQQD Eyg5ZDgwYzkzMzc3YmZlNGUzYjBlOGQ0OWQyZDI1Yjg5NTA3YjEwMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bu2aZbrdAvsHVh+6GY3iJ2w4XNb huzKTN5ykbIYl9Wc76B2DwLMJ66WFeYJPcM+RswQvRQIcWhKYf2X41/QK3t81Rre Zz7oCMxVc02ZMDO6yfHnILzS5WQumLnEUnsgIx6ZSwmxgkdBZHB1l32PkQeKtCjW 6QghuVlNqwTOsGUlt/O6hP29+8WiT8uGAp/DLLe6ePf9O/55xORSUuuvYjS9d9GB 9qGzgIkJtDoH6jaeWDERm09ZCOhS53U399tm8qrmh1XlC0kg82s1FJTJT7T9Mdkk 5kjmugjdScGigeWLiGjGBhU9TMbJmTFv/vbXHrIC2n/WJEl1f0yV2qjkOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2AyTN3v+TjsOjUnS0luJUHsQGsMB8GA1UdIwQY MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt YTIzNTFmNGU4OTE1LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1 LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhzsOD0k nJMp8sJb+YkwxQQRdJmcr2m/CzMd0CZZEtbAq+JTZQieydNju18KRTEJvZ/r76HA tir1LFSvNyyq23/rOGR+tEisxE+kTevQq+YMkuyaxKSZRpTpSQP1IZD7jAo4JAaC K0PAotRfZk0CGLJKeC0f2w8C9fSqJLp2Vko8QFdgeeVLq5q8ofqj/hST81L26lzR gBpcSh/Ptg5iA0Ni4QGAAPiWv5VDz9B+aq9VZ5G7OGkyX1QTJJwkpX8BtE/FeSRD XqxEXW8Fx8DOhI3R5rSCqBmzWAJ2rrQ/VXyXLym5+sVk+SqdsswC0q9P9UajUOsF GvxnviIsJbX0lg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:58 2025 by rpki-client