This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json) Hash identifier: AHJz5aLYweZAxyrrHoG/HmIVEzGSgBK2BJxe6UmUa34= Subject key identifier: 11:57:9C:9B:2B:69:33:08:B8:6E:26:8B:2D:D1:CB:35:83:10:FE:39 Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Certificate serial: 019B42B72DA44F45485D18C784538E37A7EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 21:00:59 +0000 Manifest this update: Sun 21 Dec 2025 21:00:59 +0000 Manifest next update: Mon 22 Dec 2025 21:00:59 +0000 Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: DtZYH+62/zdMIgnE79BlfWENPgD7pVnVu+gVAxEQXD4=) 2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:2d:a4:4f:45:48:5d:18:c7:84:53:8e:37:a7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Validity Not Before: Dec 21 21:00:59 2025 GMT Not After : Dec 22 21:00:59 2025 GMT Subject: CN=11579c9b2b693308b86e268b2dd1cb358310fe39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:40:26:51:ca:07:dd:19:ba:b3:8d:f4:6a: 68:91:b3:b5:ad:2e:16:da:ee:c8:ac:1f:4c:1b:53: 53:df:48:18:6a:81:35:23:6e:be:8d:c2:26:f0:a0: 99:d7:b4:70:e6:32:b3:59:35:85:af:6b:a5:e5:b3: cc:07:f5:ed:35:08:fd:87:03:57:1f:14:78:b7:3b: 80:b9:fa:32:f2:ff:14:f4:73:9f:c1:8e:f9:2b:4b: 8a:b5:30:75:e6:d2:15:82:3e:7c:65:bb:75:76:bb: 4d:47:e9:93:ed:9e:96:aa:90:cc:2a:87:08:b7:33: e5:1d:47:79:00:fe:b4:4b:d8:4c:80:ba:7b:e9:4f: 51:de:01:6c:8e:bb:0d:d2:3b:0d:99:57:96:e8:8c: c9:c0:cd:da:74:88:14:ff:f0:da:82:58:b1:2d:f4: a9:ba:95:95:ee:cb:63:ce:ee:ba:5e:fe:3c:9d:79: 83:4b:6c:90:d4:ad:97:f5:92:20:2c:99:1c:4c:f4: f5:09:38:03:26:17:5c:cb:79:27:73:9f:d1:55:d9: c5:96:27:f9:5a:6b:5b:04:9c:1c:16:f0:03:60:7d: 99:09:1e:6a:8d:e5:3b:fb:08:3f:70:c9:24:74:b1: 46:fa:b2:33:6d:6f:06:5f:12:1b:02:45:24:7f:40: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:57:9C:9B:2B:69:33:08:B8:6E:26:8B:2D:D1:CB:35:83:10:FE:39 X509v3 Authority Key Identifier: keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3f:25:57:e0:ed:d1:7c:47:a0:ea:e8:3c:3b:ad:ba:38:e2: 86:49:04:10:11:55:b9:b5:7d:bf:a8:b8:3b:6c:a4:41:1c:66: eb:29:3f:2a:2a:d8:1a:a8:f4:db:7f:f1:69:f9:33:57:31:0e: d9:07:85:ba:ea:e8:9a:0d:ee:3a:09:7e:54:0a:96:2a:0b:83: 57:f6:0b:2f:6d:24:cb:8c:f9:ba:2e:31:01:04:0c:ae:8c:89: 30:ab:38:81:69:c8:e2:50:7d:b5:58:a8:be:88:2d:ee:e4:50: c0:44:89:3b:8b:20:7b:53:9c:84:8b:d2:a6:4e:a2:f3:76:8c: 2f:a9:49:a4:2b:9b:c3:27:45:9b:8d:97:39:e0:18:e7:dc:a2: 57:7d:11:8d:d7:62:63:57:ab:ba:2a:26:e5:39:6a:b0:53:fa: 7a:32:b5:ec:4e:3a:e9:eb:b2:52:1b:e1:73:14:8d:25:0f:25: 7c:f8:df:12:1f:2f:19:1c:20:5f:00:43:e3:03:c1:e8:a0:04: 51:d3:7a:fa:88:01:5f:b1:58:d7:81:e6:c1:cd:6d:4f:43:53: 28:fa:a5:03:5e:c9:88:97:a8:9b:59:f6:f2:d8:45:c7:14:41: ef:5f:c2:d2:31:fe:d3:f3:b8:a8:01:08:20:32:9f:80:84:0a: b1:9b:7c:a3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCty2kT0VIXRjHhFOON6fqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5 NzFmOTcwHhcNMjUxMjIxMjEwMDU5WhcNMjUxMjIyMjEwMDU5WjAzMTEwLwYDVQQD EygxMTU3OWM5YjJiNjkzMzA4Yjg2ZTI2OGIyZGQxY2IzNTgzMTBmZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeJAJlHKB90ZurON9GpokbO1rS4W 2u7IrB9MG1NT30gYaoE1I26+jcIm8KCZ17Rw5jKzWTWFr2ul5bPMB/XtNQj9hwNX HxR4tzuAufoy8v8U9HOfwY75K0uKtTB15tIVgj58Zbt1drtNR+mT7Z6WqpDMKocI tzPlHUd5AP60S9hMgLp76U9R3gFsjrsN0jsNmVeW6IzJwM3adIgU//DaglixLfSp upWV7stjzu66Xv48nXmDS2yQ1K2X9ZIgLJkcTPT1CTgDJhdcy3knc5/RVdnFlif5 WmtbBJwcFvADYH2ZCR5qjeU7+wg/cMkkdLFG+rIzbW8GXxIbAkUkf0DbxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBFXnJsraTMIuG4miy3RyzWDEP45MB8GA1UdIwQY MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4 LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT8l V+Dt0XxHoOroPDutujjihkkEEBFVubV9v6i4O2ykQRxm6yk/KirYGqj023/xafkz VzEO2QeFuuromg3uOgl+VAqWKguDV/YLL20ky4z5ui4xAQQMroyJMKs4gWnI4lB9 tViovogt7uRQwESJO4sge1OchIvSpk6i83aML6lJpCubwydFm42XOeAY59yiV30R jddiY1eruiom5TlqsFP6ejK17E466euyUhvhcxSNJQ8lfPjfEh8vGRwgXwBD4wPB 6KAEUdN6+ogBX7FY14Hmwc1tT0NTKPqlA17JiJeom1n28thFxxRB71/C0jH+0/O4 qAEIIDKfgIQKsZt8ow== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:04 2025 by rpki-client