This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json) Hash identifier: 4E4RPZTM46ty+2qsdjZ9DD+9PNpdrozEVVKNXkQNGZs= Subject key identifier: 04:E7:1A:51:D0:71:E2:C3:99:FE:1F:B9:82:51:C7:C2:9A:E5:CE:A0 Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Certificate serial: 019B4E4D7DBC2C651D06A89492E8CD3D039D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 03:00:59 +0000 Manifest this update: Wed 24 Dec 2025 03:00:59 +0000 Manifest next update: Thu 25 Dec 2025 03:00:59 +0000 Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: nQWTHSeA8AT+tw5JB6hAefuHEqPqy94sIcmnT2cXiNg=) 2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:7d:bc:2c:65:1d:06:a8:94:92:e8:cd:3d:03:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97 Validity Not Before: Dec 24 03:00:59 2025 GMT Not After : Dec 25 03:00:59 2025 GMT Subject: CN=04e71a51d071e2c399fe1fb98251c7c29ae5cea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:9b:7c:0d:c4:38:b9:8b:21:af:73:3f:5b: e0:fb:c4:00:2a:f8:cc:43:5b:b6:ef:10:71:a6:ea: 61:1b:52:3a:15:36:20:28:11:d8:b6:fc:9b:7d:b8: 88:df:de:a9:09:fe:e5:a8:43:43:12:57:f3:99:ed: c4:94:4a:ed:d4:79:1e:d8:12:23:35:f1:07:d3:a2: de:31:88:b7:b4:b4:59:39:bb:f2:5e:c3:ce:3b:89: 1f:53:66:a8:91:1b:0e:91:d8:47:97:6b:73:18:14: e6:b3:9e:89:12:14:04:92:5b:2a:46:d1:2b:4d:e4: 80:28:62:ec:9e:4c:9c:5c:c5:f2:35:a3:a2:23:46: 51:bd:0b:0f:ce:c3:52:af:83:37:9b:db:74:48:2d: 03:e7:5c:92:1a:52:d6:05:be:75:5a:fd:94:22:c3: fb:7f:eb:10:a6:c7:98:70:16:87:79:1b:b5:d3:67: f2:77:b8:19:8d:e5:05:55:3c:c8:68:1c:2b:4c:a9: b7:ac:20:6b:8b:4a:e4:5e:8d:10:36:ca:9a:ef:f2: 06:46:32:b8:5c:ce:84:a7:02:df:a2:9e:04:1a:38: ad:e7:c8:90:64:3b:17:8f:16:d8:09:9c:84:2e:9f: 93:a5:c8:52:fc:ef:8a:fc:a7:e3:9c:00:81:12:44: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E7:1A:51:D0:71:E2:C3:99:FE:1F:B9:82:51:C7:C2:9A:E5:CE:A0 X509v3 Authority Key Identifier: keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e9:15:b7:34:c9:e8:54:15:91:c4:99:2f:ad:94:01:d5:14: b7:16:40:cd:e2:10:1f:b2:0c:dd:c6:53:b8:2e:40:45:25:27: ef:16:23:d6:43:10:6d:42:23:78:ce:d8:58:e0:23:a3:17:a3: 90:a4:fb:dc:a7:bb:19:61:e8:71:95:0c:1b:06:06:7a:35:87: 97:2b:51:ea:29:de:04:38:93:82:76:4a:09:98:86:33:9a:5b: 4f:d0:d5:97:ea:75:30:27:5b:a4:ee:8b:ae:31:4d:f4:dd:5b: 2e:72:7a:a6:62:02:c7:68:05:a7:53:af:5b:2b:d3:68:2f:b7: 86:c9:b1:77:a5:d8:19:b5:fb:83:5d:53:0e:32:11:d9:16:8f: 12:c8:59:69:65:91:08:8f:a1:46:fc:22:1f:7d:d5:c0:a7:1e: 9a:a2:7a:e0:ab:9c:b8:92:38:f3:86:ef:40:d3:cf:5e:18:99: fc:9f:b5:4a:74:20:e8:bd:d3:69:4c:6f:4b:21:87:75:97:87: da:d6:89:33:a8:89:a4:04:99:22:05:b9:3f:1a:97:ea:28:a0: 6d:d2:50:55:47:fb:49:d2:34:71:84:83:b8:24:bd:50:b8:cd: 0d:c8:20:94:f6:84:bc:05:ee:76:40:a6:18:35:05:c6:ce:86: 85:fa:46:e9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtOTX28LGUdBqiUkujNPQOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5 NzFmOTcwHhcNMjUxMjI0MDMwMDU5WhcNMjUxMjI1MDMwMDU5WjAzMTEwLwYDVQQD EygwNGU3MWE1MWQwNzFlMmMzOTlmZTFmYjk4MjUxYzdjMjlhZTVjZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlibfA3EOLmLIa9zP1vg+8QAKvjM Q1u27xBxpuphG1I6FTYgKBHYtvybfbiI396pCf7lqENDElfzme3ElErt1Hke2BIj NfEH06LeMYi3tLRZObvyXsPOO4kfU2aokRsOkdhHl2tzGBTms56JEhQEklsqRtEr TeSAKGLsnkycXMXyNaOiI0ZRvQsPzsNSr4M3m9t0SC0D51ySGlLWBb51Wv2UIsP7 f+sQpseYcBaHeRu102fyd7gZjeUFVTzIaBwrTKm3rCBri0rkXo0QNsqa7/IGRjK4 XM6EpwLfop4EGjit58iQZDsXjxbYCZyELp+TpchS/O+K/KfjnACBEkS6mQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFATnGlHQceLDmf4fuYJRx8Ka5c6gMB8GA1UdIwQY MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4 LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmukV tzTJ6FQVkcSZL62UAdUUtxZAzeIQH7IM3cZTuC5ARSUn7xYj1kMQbUIjeM7YWOAj oxejkKT73Ke7GWHocZUMGwYGejWHlytR6ineBDiTgnZKCZiGM5pbT9DVl+p1MCdb pO6LrjFN9N1bLnJ6pmICx2gFp1OvWyvTaC+3hsmxd6XYGbX7g11TDjIR2RaPEshZ aWWRCI+hRvwiH33VwKcemqJ64KucuJI484bvQNPPXhiZ/J+1SnQg6L3TaUxvSyGH dZeH2taJM6iJpASZIgW5PxqX6iigbdJQVUf7SdI0cYSDuCS9ULjNDcgglPaEvAXu dkCmGDUFxs6GhfpG6Q== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:51 2025 by rpki-client