This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json) Hash identifier: MT/dOlU5Tfhqa9yWwapX4alcMpPkln9nD+z6045FYwM= Subject key identifier: 18:D0:00:1C:A1:5D:2C:1E:8F:3E:6E:20:B6:8C:F6:15:2C:25:71:04 Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Certificate serial: 019B3DFEDF49806FD7D8190B2AD9AE87C5D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 23:01:12 +0000 Manifest this update: Sat 20 Dec 2025 23:01:12 +0000 Manifest next update: Sun 21 Dec 2025 23:01:12 +0000 Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: dVyj4wbCqP2UwfztnaJxjoSOr/r9xAIj1oc6cHOhEow=) 2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:df:49:80:6f:d7:d8:19:0b:2a:d9:ae:87:c5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0 Validity Not Before: Dec 20 23:01:12 2025 GMT Not After : Dec 21 23:01:12 2025 GMT Subject: CN=18d0001ca15d2c1e8f3e6e20b68cf6152c257104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:d5:3e:58:c7:ac:b8:4c:e1:53:01:60:0c: 7b:6f:4d:f9:6b:be:0e:e0:1f:ac:25:90:69:f3:21: ce:ad:75:c4:ee:30:85:25:c2:0b:bd:19:c7:dc:77: 3e:3b:52:a1:c2:57:31:d4:1c:34:ab:f1:6e:51:fd: 86:90:d7:4e:da:44:7a:74:4b:c1:92:5d:13:49:2b: 54:c2:ef:c3:b5:26:4a:cf:48:48:e0:f0:7c:09:cb: 3c:bb:ff:ca:39:cf:4f:8f:34:d2:90:ce:64:d2:c2: 96:9f:57:1d:b1:c5:ec:7d:71:45:60:9e:f2:9f:0f: 1a:71:18:88:cd:47:1a:b9:ba:ea:98:27:f0:36:43: 0e:1b:45:86:80:5c:e1:8a:bc:61:4e:d3:2f:12:11: a2:b4:3a:9b:bb:f4:f2:45:52:6a:87:6e:71:1b:cb: d2:fe:5a:fe:ea:3e:48:40:71:21:73:31:54:c7:5a: 18:06:0d:fb:6a:ae:86:c3:a6:10:cb:63:88:1c:69: 59:81:d0:70:62:fc:b1:6d:02:02:57:04:48:df:5e: 6a:84:4d:86:71:94:5e:fe:fe:b0:64:db:b1:5a:a9: 5e:be:3c:9e:bb:8a:b7:f7:4e:ab:e2:7e:c2:ca:14: 50:60:17:df:a7:c4:05:a4:01:40:ac:af:e1:0a:da: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:00:1C:A1:5D:2C:1E:8F:3E:6E:20:B6:8C:F6:15:2C:25:71:04 X509v3 Authority Key Identifier: keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d2:83:76:e4:bb:9d:ee:84:28:3a:20:0f:09:39:78:f7:58: cc:75:d3:51:df:c2:15:3a:3f:d6:f0:83:85:bb:39:49:eb:af: 2b:ec:7d:4e:df:5a:bb:2a:1a:45:5c:4a:26:78:f7:e5:07:37: 6c:23:7c:70:6e:1e:b1:c7:92:23:99:38:eb:a6:2d:f4:e0:85: 02:4a:81:48:ed:e7:50:32:f7:72:76:92:97:4e:b2:ad:5e:fa: eb:3e:86:19:27:a4:cf:ad:63:bf:ec:6f:ae:3b:f5:07:d4:d6: e4:ff:c3:e0:24:e5:89:f4:92:92:c8:e9:5b:d9:b0:97:90:8b: 1e:d9:3f:b8:b3:42:bd:22:6d:ec:af:48:92:9f:a8:aa:65:90: 75:29:5a:7a:26:41:40:25:b4:d8:5f:21:9b:ac:2e:6b:3c:c9: 83:47:6e:87:96:9a:ed:cd:26:e0:5c:2c:e2:20:c2:85:8f:ac: ed:4a:23:db:d9:92:57:70:6c:86:ce:06:34:85:e4:11:b2:f8: fd:d0:39:c3:50:af:9b:96:6e:b3:b8:03:55:b2:a8:3d:27:e3: 21:cc:62:c3:e9:1e:82:27:ad:11:85:bf:98:fa:f1:3e:0b:0e: a7:cd:82:14:10:8f:63:6b:ab:c2:ac:b4:10:42:e1:33:59:bf: a4:60:6f:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/t9JgG/X2BkLKtmuh8XQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4 NmRmZDAwHhcNMjUxMjIwMjMwMTEyWhcNMjUxMjIxMjMwMTEyWjAzMTEwLwYDVQQD EygxOGQwMDAxY2ExNWQyYzFlOGYzZTZlMjBiNjhjZjYxNTJjMjU3MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD7VPljHrLhM4VMBYAx7b035a74O 4B+sJZBp8yHOrXXE7jCFJcILvRnH3Hc+O1Khwlcx1Bw0q/FuUf2GkNdO2kR6dEvB kl0TSStUwu/DtSZKz0hI4PB8Ccs8u//KOc9PjzTSkM5k0sKWn1cdscXsfXFFYJ7y nw8acRiIzUcaubrqmCfwNkMOG0WGgFzhirxhTtMvEhGitDqbu/TyRVJqh25xG8vS /lr+6j5IQHEhczFUx1oYBg37aq6Gw6YQy2OIHGlZgdBwYvyxbQICVwRI315qhE2G cZRe/v6wZNuxWqlevjyeu4q3906r4n7CyhRQYBffp8QFpAFArK/hCto1HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjQAByhXSwejz5uILaM9hUsJXEEMB8GA1UdIwQY MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdKDduS7 ne6EKDogDwk5ePdYzHXTUd/CFTo/1vCDhbs5SeuvK+x9Tt9auyoaRVxKJnj35Qc3 bCN8cG4esceSI5k466Yt9OCFAkqBSO3nUDL3cnaSl06yrV766z6GGSekz61jv+xv rjv1B9TW5P/D4CTlifSSksjpW9mwl5CLHtk/uLNCvSJt7K9Ikp+oqmWQdSlaeiZB QCW02F8hm6wuazzJg0duh5aa7c0m4Fws4iDChY+s7Uoj29mSV3Bshs4GNIXkEbL4 /dA5w1Cvm5Zus7gDVbKoPSfjIcxiw+kegietEYW/mPrxPgsOp82CFBCPY2urwqy0 EELhM1m/pGBvPw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:35 2025 by rpki-client