This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json) Hash identifier: mSc9U7IxaJvH/mg+/zzZhaTIDWPNY6CArLZpXvsf8vM= Subject key identifier: F8:64:97:81:B3:C0:B1:5E:89:02:05:56:69:D3:3D:99:87:DA:32:82 Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d Certificate serial: 019B3DFE633109B83756A61330878824E723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 23:00:40 +0000 Manifest this update: Sat 20 Dec 2025 23:00:40 +0000 Manifest next update: Sun 21 Dec 2025 23:00:40 +0000 Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: JJRTyiSRDh2NxxcWiCpXSz7PYXpKCrvE/lFda+jQyyI=) 2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:63:31:09:b8:37:56:a6:13:30:87:88:24:e7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d Validity Not Before: Dec 20 23:00:40 2025 GMT Not After : Dec 21 23:00:40 2025 GMT Subject: CN=f8649781b3c0b15e8902055669d33d9987da3282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:ed:39:1f:b0:c2:40:ad:3c:e2:60:0d:13: c5:04:a2:32:6e:36:fc:74:98:0e:5d:79:2e:d3:ef: 32:5b:05:03:c0:f5:2c:64:95:0c:65:72:77:f6:2e: 56:fc:8b:cc:f7:05:16:c9:ae:c7:4e:9d:85:84:96: 13:b3:b4:6a:29:f0:29:a2:94:3f:2d:14:29:18:04: 19:b9:22:9e:2c:98:05:d2:21:21:19:e0:37:fd:d5: f4:52:bf:04:8e:5c:bd:85:ff:9b:20:76:ae:6a:d2: e3:9a:38:54:d7:47:81:dc:fc:bd:eb:77:9a:2d:fa: ab:5d:66:85:b9:e8:30:36:3c:c0:91:31:59:10:4b: 88:f6:26:2f:f5:c0:01:9c:e9:38:56:41:f2:92:0d: 20:71:79:89:5b:04:f5:23:71:ad:ad:9b:60:3a:b1: 4f:fd:b7:26:20:68:92:d4:62:94:14:d5:d8:98:10: bd:cb:1f:3e:3d:e8:c8:9c:cd:a6:0b:b9:b1:15:58: 15:73:ae:51:74:dd:b2:73:0e:e8:4e:33:69:7c:84: 30:fe:af:d1:ae:eb:45:b2:4f:57:dc:a1:b2:2e:05: 72:fe:db:8a:ba:71:49:f4:2e:f3:14:b6:67:0a:48: d4:8a:8a:fb:28:2c:48:8e:0d:96:67:18:db:39:3d: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:97:81:B3:C0:B1:5E:89:02:05:56:69:D3:3D:99:87:DA:32:82 X509v3 Authority Key Identifier: keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9e:54:62:86:c2:4b:84:18:fa:f7:a8:ec:c3:f3:ef:ac:96: 6f:e0:a3:bf:0b:80:fd:20:72:fe:8a:6e:1f:3b:84:27:68:29: fc:f1:38:f3:6b:80:e4:d7:6f:7b:6d:72:eb:84:b8:4f:29:2c: f4:16:ce:86:15:99:75:0c:8c:3a:c0:3f:1e:08:8a:b4:d8:e6: 65:96:3f:47:cd:be:6f:26:cd:d9:37:cb:03:5e:c3:9e:18:23: e5:c6:ce:ac:68:08:84:8d:85:04:24:5f:fb:34:bf:98:0d:01: fc:59:6f:7a:59:18:ba:0e:9c:8f:c6:2e:0a:9d:03:b4:f5:67: 3e:74:a0:4a:fd:0d:4d:9a:ab:1e:d7:73:b9:9b:72:ef:3e:c5: 32:ae:be:4f:64:16:cf:9e:e6:0a:95:3d:36:be:a1:55:3f:20: 0a:28:92:37:9b:8f:83:48:da:a3:38:04:6c:b1:53:88:0e:cf: b4:a7:51:5f:f8:79:01:31:20:9d:d2:bb:dd:88:6f:a3:a4:29: 5f:73:ee:6b:4e:c3:18:37:e9:72:0a:3d:17:30:1f:90:f9:24: 18:11:b9:68:ce:7a:f4:77:cd:0c:0d:83:c9:9d:0f:4f:5c:08: 6a:e2:7e:ec:5b:88:d7:03:95:b9:57:77:5e:d5:67:bf:73:68: 34:4a:b6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/mMxCbg3VqYTMIeIJOcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NWMxYjdkOWYwNGM3ZjA0MzI3ZTZjNDQ2NDE2ZTJmOGMz MWQ1N2QwHhcNMjUxMjIwMjMwMDQwWhcNMjUxMjIxMjMwMDQwWjAzMTEwLwYDVQQD EyhmODY0OTc4MWIzYzBiMTVlODkwMjA1NTY2OWQzM2Q5OTg3ZGEzMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCvtOR+wwkCtPOJgDRPFBKIybjb8 dJgOXXku0+8yWwUDwPUsZJUMZXJ39i5W/IvM9wUWya7HTp2FhJYTs7RqKfApopQ/ LRQpGAQZuSKeLJgF0iEhGeA3/dX0Ur8Ejly9hf+bIHauatLjmjhU10eB3Py963ea LfqrXWaFuegwNjzAkTFZEEuI9iYv9cABnOk4VkHykg0gcXmJWwT1I3GtrZtgOrFP /bcmIGiS1GKUFNXYmBC9yx8+PejInM2mC7mxFVgVc65RdN2ycw7oTjNpfIQw/q/R rutFsk9X3KGyLgVy/tuKunFJ9C7zFLZnCkjUior7KCxIjg2WZxjbOT2EDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhkl4GzwLFeiQIFVmnTPZmH2jKCMB8GA1UdIwQY MBaAFNZcG32fBMfwQyfmxEZBbi+MMdV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYt MTEwZWE4NTg1MzU0LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYtMTEwZWE4NTg1MzU0 LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY55UYobC S4QY+veo7MPz76yWb+CjvwuA/SBy/opuHzuEJ2gp/PE482uA5Ndve21y64S4Tyks 9BbOhhWZdQyMOsA/HgiKtNjmZZY/R82+bybN2TfLA17Dnhgj5cbOrGgIhI2FBCRf +zS/mA0B/FlvelkYug6cj8YuCp0DtPVnPnSgSv0NTZqrHtdzuZty7z7FMq6+T2QW z57mCpU9Nr6hVT8gCiiSN5uPg0jaozgEbLFTiA7PtKdRX/h5ATEgndK73Yhvo6Qp X3Pua07DGDfpcgo9FzAfkPkkGBG5aM569HfNDA2DyZ0PT1wIauJ+7FuI1wOVuVd3 XtVnv3NoNEq20g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:19:57 2025 by rpki-client