This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json) Hash identifier: gphJOJOYLcPUxuGux4M8t+pHMJjN8+8llL30JpNwux8= Subject key identifier: DC:43:FE:55:E8:02:DC:55:6F:C8:F6:FE:15:41:92:78:BC:52:16:62 Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b Certificate serial: 019B4438CB5300081B5BD4F9E6F74FB8B85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft Manifest number: 066A Signing time: Mon 22 Dec 2025 04:02:11 +0000 Manifest this update: Mon 22 Dec 2025 04:02:11 +0000 Manifest next update: Tue 23 Dec 2025 04:02:11 +0000 Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: 6ab2GvdTr0bV7nBUDrV7JR4jXYInoJLdFknyQ9GPuCU=) 2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:cb:53:00:08:1b:5b:d4:f9:e6:f7:4f:b8:b8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b Validity Not Before: Dec 22 04:02:11 2025 GMT Not After : Dec 23 04:02:11 2025 GMT Subject: CN=dc43fe55e802dc556fc8f6fe15419278bc521662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:4d:ca:e7:1f:03:31:62:ff:e7:0d:04:48: 92:aa:18:ce:1d:27:5c:c1:82:ba:b2:3d:5e:3d:97: 80:38:7f:a6:95:21:db:14:83:7f:82:a0:81:4e:bc: 3e:53:de:8b:5c:85:4e:a8:04:13:7e:6c:eb:ca:46: 6e:ee:ec:3d:2c:e7:43:c8:18:b3:8b:da:40:ed:a0: d8:d4:c4:a7:54:f3:84:d1:5c:94:02:46:ad:d4:2a: 46:6f:09:ad:a6:cc:46:65:40:96:5f:db:dc:66:6d: fb:ae:3c:10:4a:68:28:15:d0:b8:05:15:3e:f5:89: 5d:01:c6:a1:ff:fb:e0:83:5d:3a:6f:6d:ec:27:0c: 28:7e:37:12:b0:87:58:f4:47:bf:43:e1:3a:3c:53: f4:8d:0f:42:c3:c1:ae:0c:55:2c:fb:50:0f:4a:c8: 61:28:d3:4e:10:57:52:b1:aa:35:42:56:11:63:37: 11:6c:c8:13:db:98:0b:cd:ab:53:9f:ad:48:df:c7: fa:8d:2e:12:bc:47:fb:88:e8:c1:c5:24:51:6d:34: 18:ca:fd:b0:8b:6f:89:2c:74:c8:ec:ab:75:2b:b9: 2f:fe:67:91:d9:ab:9b:38:a9:bb:c0:08:32:42:f3: 9a:60:d5:20:4d:a3:a3:ef:b2:92:ad:9c:34:10:6c: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:43:FE:55:E8:02:DC:55:6F:C8:F6:FE:15:41:92:78:BC:52:16:62 X509v3 Authority Key Identifier: keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:83:8d:33:78:3b:ba:c2:df:ff:eb:59:06:1a:0e:fe:60:d5: 1a:ee:fe:51:c5:7c:a5:e7:09:1f:0e:49:d5:b9:bf:40:99:56: 77:23:ca:73:2d:f6:b0:8d:9e:a3:31:8c:89:48:1a:72:f9:9a: e0:42:dc:11:41:64:2c:19:5f:ea:6f:1a:f1:1c:59:10:64:f7: 05:ae:12:96:e2:58:ae:a3:ac:9a:88:f4:40:34:b3:a5:4a:e4: 72:3d:f4:72:58:a7:e7:fb:ed:f8:0f:6a:59:2c:1d:47:35:e0: 55:02:bf:8e:8a:83:49:b2:ce:9c:c8:79:3f:2d:15:7e:b5:5f: 3b:03:0b:a8:c6:52:c4:78:13:6a:08:82:0a:f7:e0:75:2d:50: 96:56:a3:97:17:b0:33:20:10:57:13:1d:e0:72:02:7f:22:b7: f7:12:aa:90:cb:ba:32:32:a5:02:d1:8b:a2:ac:cd:bd:1d:39: e5:6d:b6:96:5a:bd:28:d2:47:e2:04:3f:73:43:d2:5b:ed:63: 2c:84:97:a3:a9:28:e5:5b:52:9e:80:19:2c:e2:b6:39:ce:59: 63:28:75:b7:a9:50:fb:ae:ae:55:df:16:6f:75:3e:62:3f:df: 1e:f0:83:0d:e8:f5:d5:44:ca:ac:37:1f:3b:9a:71:71:e2:85: a4:59:99:c5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEOMtTAAgbW9T55vdPuLhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjhkYTYwODEzN2Y4NGU0NTQ1MzIwYjRhM2JiMDQ5NjFk MmIxMmIwHhcNMjUxMjIyMDQwMjExWhcNMjUxMjIzMDQwMjExWjAzMTEwLwYDVQQD EyhkYzQzZmU1NWU4MDJkYzU1NmZjOGY2ZmUxNTQxOTI3OGJjNTIxNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmlNyucfAzFi/+cNBEiSqhjOHSdc wYK6sj1ePZeAOH+mlSHbFIN/gqCBTrw+U96LXIVOqAQTfmzrykZu7uw9LOdDyBiz i9pA7aDY1MSnVPOE0VyUAkat1CpGbwmtpsxGZUCWX9vcZm37rjwQSmgoFdC4BRU+ 9YldAcah//vgg106b23sJwwofjcSsIdY9Ee/Q+E6PFP0jQ9Cw8GuDFUs+1APSshh KNNOEFdSsao1QlYRYzcRbMgT25gLzatTn61I38f6jS4SvEf7iOjBxSRRbTQYyv2w i2+JLHTI7Kt1K7kv/meR2aubOKm7wAgyQvOaYNUgTaOj77KSrZw0EGzKIQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNxD/lXoAtxVb8j2/hVBkni8UhZiMB8GA1UdIwQY MBaAFPi42mCBN/hORUUyC0o7sElh0rErMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MamFZSUUzLUU1RlJUSUxTanV3U1dIU3NTcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvODA1NTMzLWRiYzUtNDJjMC1iYzc4 LTU3NWIwMzM0NGNiMS8xLzEtTGphWUlFMy1FNUZSVElMU2p1d1NXSFNzU3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI0LzgwNTUzMy1kYmM1LTQyYzAtYmM3OC01NzViMDMzNDRj YjEvMS8xLUxqYVlJRTMtRTVGUlRJTFNqdXdTV0hTc1NzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYON M3g7usLf/+tZBhoO/mDVGu7+UcV8pecJHw5J1bm/QJlWdyPKcy32sI2eozGMiUga cvma4ELcEUFkLBlf6m8a8RxZEGT3Ba4SluJYrqOsmoj0QDSzpUrkcj30clin5/vt +A9qWSwdRzXgVQK/joqDSbLOnMh5Py0VfrVfOwMLqMZSxHgTagiCCvfgdS1Qllaj lxewMyAQVxMd4HICfyK39xKqkMu6MjKlAtGLoqzNvR055W22llq9KNJH4gQ/c0PS W+1jLISXo6ko5VtSnoAZLOK2Oc5ZYyh1t6lQ+66uVd8Wb3U+Yj/fHvCDDej11UTK rDcfO5pxceKFpFmZxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:12 2025 by rpki-client