This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json) Hash identifier: fyjLW/yhgzBp8k5L6Jvm0ZLUuDmaHKbK0QP9qdRPSVI= Subject key identifier: 58:05:F5:C5:20:55:85:C0:1D:59:14:2D:E4:95:AE:BC:2E:18:ED:FE Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Certificate serial: 019B533D2DBCAE49DB4D06972AAE032606A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft Manifest number: 0E7C Signing time: Thu 25 Dec 2025 02:01:16 +0000 Manifest this update: Thu 25 Dec 2025 02:01:16 +0000 Manifest next update: Fri 26 Dec 2025 02:01:16 +0000 Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: Lrz/ft+10neZQCgv0X9zqQP/XFxZs9vRlZfwdsUegzY=) 2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:2d:bc:ae:49:db:4d:06:97:2a:ae:03:26:06:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Validity Not Before: Dec 25 02:01:16 2025 GMT Not After : Dec 26 02:01:16 2025 GMT Subject: CN=5805f5c5205585c01d59142de495aebc2e18edfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:35:49:2e:8a:97:2f:19:54:0b:0a:7f:69: 52:b0:81:38:13:9a:95:af:cb:71:1d:ff:2b:8c:27: e5:32:56:6e:a6:89:19:88:91:e0:af:a5:28:17:67: 92:3f:78:0d:b6:08:b1:58:eb:5d:02:7d:e6:23:fc: 0f:2d:97:18:c1:c1:82:aa:c8:c9:98:29:57:c1:83: 1c:72:0f:4a:2c:ed:98:e3:a1:90:44:64:7f:6f:6c: e5:a5:97:5d:6d:9a:48:c8:b8:e6:a7:76:1e:c2:ce: 46:dd:81:b6:7e:2a:b1:0d:cb:da:c9:ec:12:ed:5b: 5d:a2:93:2f:8e:af:e2:58:45:41:50:a8:78:fa:80: 2c:5f:ca:88:3f:5f:b8:58:17:72:9d:b8:ad:8b:9d: cf:5d:8a:62:ce:2d:05:03:fb:b4:e9:71:7d:ac:71: 63:21:c0:ea:5b:17:96:ed:30:ee:49:ef:d9:69:ff: 4c:7a:f2:1d:21:ce:70:d4:13:30:a7:5c:56:c8:b5: 24:d6:5d:db:06:15:7b:33:ba:1f:55:4e:e7:61:c9: 6e:0f:c1:cf:70:dc:a8:56:56:44:77:e1:fd:b6:be: 6d:fe:03:ae:f2:15:5f:a5:b7:1f:5a:0a:2e:50:d5: 61:9c:4d:b0:7f:3b:0e:a2:4a:fa:85:b7:22:65:cf: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:05:F5:C5:20:55:85:C0:1D:59:14:2D:E4:95:AE:BC:2E:18:ED:FE X509v3 Authority Key Identifier: keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ef:84:8c:56:9f:38:5d:13:dd:a0:21:ca:68:f5:2c:bb:6d: 89:ac:92:bb:fa:1d:92:4d:8a:ad:29:ad:c8:93:0a:4c:bf:c8: 9a:10:0d:c9:a7:58:90:c5:a8:0e:59:97:0e:18:71:71:1e:3f: 9b:da:81:67:83:35:58:33:bd:43:10:7b:1c:69:12:99:c6:17: a1:34:04:89:ca:cf:cf:f3:1a:24:81:58:1d:de:28:4c:97:7b: 2c:81:35:ca:eb:e4:d0:7f:03:cd:9e:02:72:8a:65:1f:5b:90: 0a:e6:0e:7c:0e:4a:79:b7:fa:a5:1c:31:3e:94:00:73:25:96: 6c:83:54:5c:93:c5:db:ec:44:d2:81:6b:f5:13:4f:2a:30:4f: 23:8d:3b:b6:d6:5c:ce:52:37:06:f0:48:83:7d:c2:7b:78:c6: 0e:73:bf:b4:38:c2:a6:5f:49:9e:32:76:90:0d:ea:c1:4d:9f: 5f:5d:04:66:66:46:1f:3b:93:63:12:3b:aa:47:6a:ed:f9:47: 6c:11:8b:a7:2e:8a:59:1d:b6:c1:2b:65:e0:96:f3:75:92:d0: 96:99:37:90:2c:0c:49:1f:cb:82:fa:92:c1:6f:59:0e:19:74: 16:3c:f6:56:c1:fa:17:77:c9:8d:b9:a0:9f:e8:6d:34:c5:c4: c8:66:b8:24 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtTPS28rknbTQaXKq4DJgagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjE4Mjg1ZjQyZWQ2N2MxMWQ4ZjgzZGY0ODhiMTBmYzg3 ZjE3YmYwHhcNMjUxMjI1MDIwMTE2WhcNMjUxMjI2MDIwMTE2WjAzMTEwLwYDVQQD Eyg1ODA1ZjVjNTIwNTU4NWMwMWQ1OTE0MmRlNDk1YWViYzJlMThlZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp01SS6Kly8ZVAsKf2lSsIE4E5qV r8txHf8rjCflMlZupokZiJHgr6UoF2eSP3gNtgixWOtdAn3mI/wPLZcYwcGCqsjJ mClXwYMccg9KLO2Y46GQRGR/b2zlpZddbZpIyLjmp3Yews5G3YG2fiqxDcvayewS 7VtdopMvjq/iWEVBUKh4+oAsX8qIP1+4WBdynbiti53PXYpizi0FA/u06XF9rHFj IcDqWxeW7TDuSe/Zaf9MevIdIc5w1BMwp1xWyLUk1l3bBhV7M7ofVU7nYcluD8HP cNyoVlZEd+H9tr5t/gOu8hVfpbcfWgouUNVhnE2wfzsOokr6hbciZc/5eQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFgF9cUgVYXAHVkULeSVrrwuGO3+MB8GA1UdIwQY MBaAFPixgoX0LtZ8Edj4PfSIsQ/Ifxe/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MR0NoZlF1MW53UjJQZzk5SWl4RDhoX0Y3OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjMzMWNjLTZiNmQtNDY5My05MjY3 LWI0MjI3NzkxNjBiYi8xLzEtTEdDaGZRdTFud1IyUGc5OUlpeEQ4aF9GNzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EyL2IzMzFjYy02YjZkLTQ2OTMtOTI2Ny1iNDIyNzc5MTYw YmIvMS8xLUxHQ2hmUXUxbndSMlBnOTlJaXhEOGhfRjc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL++E jFafOF0T3aAhymj1LLttiaySu/odkk2KrSmtyJMKTL/ImhANyadYkMWoDlmXDhhx cR4/m9qBZ4M1WDO9QxB7HGkSmcYXoTQEicrPz/MaJIFYHd4oTJd7LIE1yuvk0H8D zZ4CcoplH1uQCuYOfA5Kebf6pRwxPpQAcyWWbINUXJPF2+xE0oFr9RNPKjBPI407 ttZczlI3BvBIg33Ce3jGDnO/tDjCpl9JnjJ2kA3qwU2fX10EZmZGHzuTYxI7qkdq 7flHbBGLpy6KWR22wStl4JbzdZLQlpk3kCwMSR/LgvqSwW9ZDhl0Fjz2VsH6F3fJ jbmgn+htNMXEyGa4JA== -----END CERTIFICATE-----Generated at Thu Dec 25 06:22:46 2025 by rpki-client