This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json) Hash identifier: HniQTlALOk2WhjSc8oPsXJtpgO+RH9ZJY3MBZzfL9nk= Subject key identifier: 71:DF:24:1A:6F:90:9D:E1:D5:9A:A6:56:65:F7:60:E7:D6:CF:CF:87 Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Certificate serial: 019B51BC1680BBF87879160E12204A5D1299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft Manifest number: 1218 Signing time: Wed 24 Dec 2025 19:00:39 +0000 Manifest this update: Wed 24 Dec 2025 19:00:39 +0000 Manifest next update: Thu 25 Dec 2025 19:00:39 +0000 Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: BMjxzAuspzritRpb84ebeouKeZkK9PJyElmEnWBbLx8=) 2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:16:80:bb:f8:78:79:16:0e:12:20:4a:5d:12:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Validity Not Before: Dec 24 19:00:39 2025 GMT Not After : Dec 25 19:00:39 2025 GMT Subject: CN=71df241a6f909de1d59aa65665f760e7d6cfcf87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:77:0b:1e:db:57:24:93:16:a8:1f:f5:6f:90: 63:90:f6:3b:63:d6:33:15:18:66:9b:54:c7:f6:e0: 3a:30:e4:b7:8a:88:98:f2:ea:40:11:69:d3:c8:b0: f4:81:06:8b:ac:4d:a6:50:12:aa:1a:49:6d:5a:b9: bb:03:73:83:bd:b3:a0:89:ce:e8:ad:af:9b:a0:27: 0c:64:75:1e:71:78:c6:99:61:a8:c2:ed:f9:dc:18: ed:eb:b0:01:06:e4:c4:00:a6:4d:d4:28:f0:78:04: 5b:8d:f1:e9:2b:40:3b:a6:0f:a4:62:13:8a:72:aa: 25:df:2d:30:d0:1a:1e:d2:91:94:5d:c8:5c:d6:dd: 9e:45:22:cf:e6:64:da:6f:77:10:a3:43:43:82:97: 55:ce:d4:fe:8f:cf:2b:a4:df:1b:06:6b:b8:d2:28: a3:f1:72:62:b1:8c:cd:41:bf:e7:9d:15:bd:cf:55: cb:96:2d:51:e6:f0:ff:d3:d5:c6:3b:dc:41:77:98: d0:78:94:7e:ca:1a:41:46:51:47:58:29:e0:ea:a8: bf:4d:58:31:27:19:05:de:91:8c:14:d7:6f:fd:b9: 55:19:c0:2a:24:ad:a3:ab:a4:fa:f8:d1:1e:43:9e: 94:bf:b5:d3:72:2f:77:76:ec:11:3b:33:b8:47:5a: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:24:1A:6F:90:9D:E1:D5:9A:A6:56:65:F7:60:E7:D6:CF:CF:87 X509v3 Authority Key Identifier: keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:1b:b5:7d:ad:75:59:e2:2a:da:cd:b1:f1:91:59:bb:f4:2b: 75:01:bd:0e:9f:2b:2f:cd:62:57:74:01:f1:06:f6:00:66:d5: a8:0f:5a:be:95:e1:87:0a:f8:c7:14:a8:67:4b:e0:c8:6c:e4: 62:09:40:41:48:d6:4e:64:e6:56:0c:97:7e:d7:e7:73:a9:a9: 39:be:ff:69:b1:8d:f0:a2:e1:4a:01:eb:af:2d:1e:04:3c:08: b0:83:ca:bc:d7:50:f5:42:c4:63:63:00:6f:af:ce:03:9b:c0: 51:3c:45:6b:aa:fe:cd:22:a3:c4:d4:ff:1e:07:1f:42:5e:f8: ec:89:80:83:2b:d4:c7:af:a1:7d:17:57:87:89:97:41:59:86: 3f:01:2d:8e:f6:1d:88:50:c4:50:7b:0c:17:86:72:ed:b6:68: a4:6a:b4:d7:72:57:a3:6f:5d:35:59:23:83:7e:cb:89:5a:ff: c2:d4:0b:e7:48:be:ac:24:e7:e1:b2:f8:24:41:73:b1:f7:5c: 67:56:52:0c:92:93:d4:fb:25:67:b7:bd:01:96:99:c4:26:86: 9b:eb:9f:74:75:5f:06:57:a9:72:8e:e5:70:a6:91:d8:43:1d: 84:bc:09:f9:f2:7d:09:6e:39:01:90:4e:f7:0c:89:0a:f6:c0: 62:6d:75:ef -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtRvBaAu/h4eRYOEiBKXRKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjJhNWE1ZGY0ZDk1YWMwMTE1Y2FlZGFkMTk0YjYyNjg4 ZjJiYmEwHhcNMjUxMjI0MTkwMDM5WhcNMjUxMjI1MTkwMDM5WjAzMTEwLwYDVQQD Eyg3MWRmMjQxYTZmOTA5ZGUxZDU5YWE2NTY2NWY3NjBlN2Q2Y2ZjZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ncLHttXJJMWqB/1b5BjkPY7Y9Yz FRhmm1TH9uA6MOS3ioiY8upAEWnTyLD0gQaLrE2mUBKqGkltWrm7A3ODvbOgic7o ra+boCcMZHUecXjGmWGowu353Bjt67ABBuTEAKZN1CjweARbjfHpK0A7pg+kYhOK cqol3y0w0Boe0pGUXchc1t2eRSLP5mTab3cQo0NDgpdVztT+j88rpN8bBmu40iij 8XJisYzNQb/nnRW9z1XLli1R5vD/09XGO9xBd5jQeJR+yhpBRlFHWCng6qi/TVgx JxkF3pGMFNdv/blVGcAqJK2jq6T6+NEeQ56Uv7XTci93duwROzO4R1rA8wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHHfJBpvkJ3h1ZqmVmX3YOfWz8+HMB8GA1UdIwQY MBaAFPvypaXfTZWsARXK7a0ZS2Jojyu6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fS2xwZDlObGF3QkZjcnRyUmxMWW1pUEs3by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5 LWM5ZjdkMDJmOTBjMC8xLzEtX0tscGQ5Tmxhd0JGY3J0clJsTFltaVBLN28ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2NhLzBhNTBkMC01NjRmLTQwZTAtODU4OS1jOWY3ZDAyZjkw YzAvMS8xLV9LbHBkOU5sYXdCRmNydHJSbExZbWlQSzdvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxu1 fa11WeIq2s2x8ZFZu/QrdQG9Dp8rL81iV3QB8Qb2AGbVqA9avpXhhwr4xxSoZ0vg yGzkYglAQUjWTmTmVgyXftfnc6mpOb7/abGN8KLhSgHrry0eBDwIsIPKvNdQ9ULE Y2MAb6/OA5vAUTxFa6r+zSKjxNT/HgcfQl747ImAgyvUx6+hfRdXh4mXQVmGPwEt jvYdiFDEUHsMF4Zy7bZopGq013JXo29dNVkjg37LiVr/wtQL50i+rCTn4bL4JEFz sfdcZ1ZSDJKT1PslZ7e9AZaZxCaGm+ufdHVfBlepco7lcKaR2EMdhLwJ+fJ9CW45 AZBO9wyJCvbAYm117w== -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:17 2025 by rpki-client