This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json) Hash identifier: SS4CwwjDf6Mbd8nJLM1HlJTzpGEsqZRVJSTyv90bGbI= Subject key identifier: 99:91:15:EB:98:50:2D:2C:A2:57:0A:6A:C8:B3:1F:F7:89:A4:5F:C8 Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Certificate serial: 019B3FECBE79F2F4DED1BDAAAC4830D1EE86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft Manifest number: EF Signing time: Sun 21 Dec 2025 08:00:38 +0000 Manifest this update: Sun 21 Dec 2025 08:00:38 +0000 Manifest next update: Mon 22 Dec 2025 08:00:38 +0000 Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: i8Z+jo7qg3Rx6zILa8P41aWAwzjKFpyNzt+2LTdNB/4=) 2: 7oB3ar7GwFtb0clbtSqh_ldJanw.roa (hash: d421V6jyf/lL0flOYjT5So8TNIpbSRnpdeNItUDXdnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:be:79:f2:f4:de:d1:bd:aa:ac:48:30:d1:ee:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a Validity Not Before: Dec 21 08:00:38 2025 GMT Not After : Dec 22 08:00:38 2025 GMT Subject: CN=999115eb98502d2ca2570a6ac8b31ff789a45fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:17:45:0a:ec:f5:73:e7:69:6f:4e:51:9c: d5:dd:a7:c9:0e:ef:47:c4:cb:b5:9c:bf:eb:ba:dd: 92:94:af:d6:b8:d3:f2:4b:3f:4d:3c:c4:5f:75:92: 8f:5c:0c:96:e6:57:8f:71:38:40:83:0a:b8:c9:b4: af:92:d4:18:d5:fb:60:6a:88:a6:b0:4b:7e:5d:2e: 8a:63:81:07:de:d5:d6:96:17:0a:fd:0b:7f:dd:f1: e6:1f:79:c3:80:a6:7b:bc:cf:97:c5:52:65:d4:19: 11:92:6c:90:fc:b1:22:8c:0b:62:0c:00:e8:f8:86: fa:a6:6e:ed:bf:cc:3e:f2:90:ba:92:c9:b2:ec:f5: eb:2e:0c:ab:6d:d2:ac:ae:d2:49:e6:62:20:17:3b: dc:79:22:77:e4:ab:22:8f:81:93:f7:42:8d:2d:a8: fd:c6:b4:a9:4e:2c:c1:eb:82:c9:b1:ae:b5:83:e3: c3:3e:38:1e:6e:e8:c7:41:22:c4:c4:6f:f5:b0:51: 53:f7:82:59:1a:c8:ab:e2:45:1f:34:86:cf:e3:e1: c9:50:f9:5c:69:89:07:32:2d:bd:2b:6c:86:14:ff: ca:89:90:5b:cf:ae:c9:77:0b:c2:fd:5f:50:d2:07: be:c5:de:0f:3b:e3:b7:f0:a5:8f:87:a1:1d:20:53: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:15:EB:98:50:2D:2C:A2:57:0A:6A:C8:B3:1F:F7:89:A4:5F:C8 X509v3 Authority Key Identifier: keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9d:91:ba:0e:ec:9a:03:03:1f:6d:96:11:4e:85:c7:cf:71: a2:86:b9:a6:25:d6:09:b7:dc:da:28:91:4b:e4:e2:d6:c8:52: 64:9a:32:5a:44:fe:bc:b3:f9:67:7c:82:35:dc:ba:fa:97:0f: 92:1e:66:a1:24:c0:b7:9b:e2:7b:c8:9f:cf:2b:a2:62:20:c9: be:b3:d1:87:4a:b0:62:52:67:aa:15:4b:a0:1e:7e:c2:95:77: c6:9e:51:e5:85:ef:f0:99:99:de:fb:4d:d2:4b:a2:16:6a:fa: 05:fc:6e:b6:f2:f9:52:c9:e5:a6:57:1a:f3:b8:6d:d8:00:f5: 91:13:1d:17:6c:f2:c9:45:6d:50:bd:2b:78:d7:a2:d0:af:62: 14:b3:48:bb:50:22:85:34:b7:ac:18:17:35:1c:5d:e3:3f:ad: 53:b3:7b:5c:12:bd:f8:87:5f:fa:74:4b:cf:62:ac:ed:bd:b0: da:f4:2c:c2:2c:5c:0c:41:21:7f:7f:fa:12:48:77:55:5b:77: ae:21:21:ba:3b:1e:03:76:27:7a:5f:8c:f4:82:f3:74:65:8e: f5:ea:c0:06:e6:c5:d0:a4:71:58:ca:5b:62:57:29:40:46:6e: c7:b2:ff:d3:2a:14:63:65:b7:08:c9:85:d1:51:58:b9:8b:b3: 09:17:ab:78 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs/7L558vTe0b2qrEgw0e6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj MTVmNWEwHhcNMjUxMjIxMDgwMDM4WhcNMjUxMjIyMDgwMDM4WjAzMTEwLwYDVQQD Eyg5OTkxMTVlYjk4NTAyZDJjYTI1NzBhNmFjOGIzMWZmNzg5YTQ1ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjEXRQrs9XPnaW9OUZzV3afJDu9H xMu1nL/rut2SlK/WuNPySz9NPMRfdZKPXAyW5lePcThAgwq4ybSvktQY1ftgaoim sEt+XS6KY4EH3tXWlhcK/Qt/3fHmH3nDgKZ7vM+XxVJl1BkRkmyQ/LEijAtiDADo +Ib6pm7tv8w+8pC6ksmy7PXrLgyrbdKsrtJJ5mIgFzvceSJ35Ksij4GT90KNLaj9 xrSpTizB64LJsa61g+PDPjgebujHQSLExG/1sFFT94JZGsir4kUfNIbP4+HJUPlc aYkHMi29K2yGFP/KiZBbz67JdwvC/V9Q0ge+xd4PO+O38KWPh6EdIFNCaQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJmRFeuYUC0solcKasizH/eJpF/IMB8GA1UdIwQY MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0 LTkzMTQxNDEwMWEwMS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2Q1OTI0Ni05NTNlLTQyM2EtOTcwNC05MzE0MTQxMDFh MDEvMS8xLWxkVmRpMy1USEROZzdNS0U3ZUN4UF9CWDFvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp2R ug7smgMDH22WEU6Fx89xooa5piXWCbfc2iiRS+Ti1shSZJoyWkT+vLP5Z3yCNdy6 +pcPkh5moSTAt5vie8ifzyuiYiDJvrPRh0qwYlJnqhVLoB5+wpV3xp5R5YXv8JmZ 3vtN0kuiFmr6BfxutvL5Usnlplca87ht2AD1kRMdF2zyyUVtUL0reNei0K9iFLNI u1AihTS3rBgXNRxd4z+tU7N7XBK9+Idf+nRLz2Ks7b2w2vQswixcDEEhf3/6Ekh3 VVt3riEhujseA3Ynel+M9ILzdGWO9erABubF0KRxWMpbYlcpQEZux7L/0yoUY2W3 CMmF0VFYuYuzCRereA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:42:06 2025 by rpki-client