This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json) Hash identifier: NJ/bx1NMf3Yq5B8VFEymPa+fCIXdWzPXDwg7fLtSSp8= Subject key identifier: BD:07:C6:10:4F:FF:6C:61:23:01:BE:30:64:87:61:94:5B:28:5B:9B Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31 Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731 Certificate serial: 019B273FF38FD4B6BA5E45145CDE683B490A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft Manifest number: 173F Signing time: Tue 16 Dec 2025 13:01:01 +0000 Manifest this update: Tue 16 Dec 2025 13:01:01 +0000 Manifest next update: Wed 17 Dec 2025 13:01:01 +0000 Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: kKy1cj3Z4QSQq8HfKN19r7mBKVuElyKpPnv9/IzkODk=) 2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:f3:8f:d4:b6:ba:5e:45:14:5c:de:68:3b:49:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731 Validity Not Before: Dec 16 13:01:01 2025 GMT Not After : Dec 17 13:01:01 2025 GMT Subject: CN=bd07c6104fff6c612301be30648761945b285b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:cc:b3:44:32:08:a3:e3:a1:67:6f:1a:59: ad:5b:ed:a8:4c:08:90:99:cd:18:56:ba:ca:97:34: c6:20:d1:2a:28:7d:af:2c:f6:12:54:81:14:35:20: 2d:51:fa:98:ee:49:7a:5c:37:90:ec:e4:91:ed:4f: 37:d6:b5:02:9d:f3:9b:fb:3f:42:48:65:d2:2f:f6: e5:f4:b9:dd:e5:0b:3e:f5:8a:6a:44:d8:19:75:de: 45:11:df:b3:8d:bc:5a:be:37:5b:88:84:b1:1a:50: 47:6b:a2:80:5b:81:8f:43:8c:f8:1c:b2:49:f0:6c: e5:50:29:33:b8:20:1d:f7:b2:72:47:13:11:75:34: c9:d0:b1:ef:ec:77:26:c3:d1:9a:71:ea:6c:a3:29: 3c:27:7c:e0:41:ff:6c:ea:71:e5:83:51:97:f0:5c: 89:8e:8b:0a:10:74:0d:24:10:88:eb:fd:5d:0d:f8: 27:81:c5:c9:cd:47:a2:97:09:b1:8c:d7:64:55:7b: 9e:00:d5:16:52:c1:6c:e6:b9:d1:26:21:4c:f7:50: e3:43:7c:00:df:39:2f:7e:e4:56:8e:55:49:22:37: 41:08:68:f6:4d:1b:9c:b9:9b:1d:f0:bb:98:a6:15: 34:16:9f:7c:ac:fd:c2:76:03:12:00:93:25:14:ef: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:C6:10:4F:FF:6C:61:23:01:BE:30:64:87:61:94:5B:28:5B:9B X509v3 Authority Key Identifier: keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0c:97:ff:19:34:20:0e:b0:88:a6:37:cf:67:c4:67:23:b6: 25:03:d4:cc:17:a5:53:a3:9c:ee:26:cf:6c:9a:a3:fd:82:70: 14:b3:7a:2c:f2:8f:40:35:00:29:fc:65:d9:c1:e6:f7:36:d9: 9e:0c:8f:8c:95:10:a3:0e:59:2b:86:7f:6c:22:0f:99:65:28: 0b:9c:74:2f:43:97:08:bf:75:78:5c:52:95:9c:14:b2:56:e9: 1f:26:12:3a:b9:57:dc:35:ab:65:8a:66:c0:42:da:86:dd:6b: ce:16:2f:8b:ee:cd:03:ac:f6:66:8a:39:c9:0f:22:be:da:ca: 2c:7d:a8:4e:5c:47:38:3e:0e:b6:9a:75:d4:fa:4a:98:3f:0f: 7b:61:c2:9d:1a:73:72:18:1d:47:8a:f4:cd:bd:f4:f6:f1:ba: b0:9d:fb:d1:5c:9e:53:5a:ad:4c:58:79:6c:87:e3:8d:ed:db: 90:a8:88:38:e3:26:5a:98:e9:e9:07:61:71:3b:24:58:f3:f2: 4b:21:b3:8b:cc:43:7e:b3:cf:87:07:bf:0c:1f:5b:3a:0d:61: 91:47:65:99:dd:0d:ee:c2:eb:c2:1f:af:51:4b:8b:cd:1d:21: 42:54:2a:ff:32:6c:0a:b9:84:30:5f:0d:b3:39:3b:2a:0f:3e: 17:08:7d:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP/OP1La6XkUUXN5oO0kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGUzMzhkNzNlNzU4NDY4NDU2NjMyZjViY2FhZTA3YWYw ZDg3MzEwHhcNMjUxMjE2MTMwMTAxWhcNMjUxMjE3MTMwMTAxWjAzMTEwLwYDVQQD EyhiZDA3YzYxMDRmZmY2YzYxMjMwMWJlMzA2NDg3NjE5NDViMjg1YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXPMs0QyCKPjoWdvGlmtW+2oTAiQ mc0YVrrKlzTGINEqKH2vLPYSVIEUNSAtUfqY7kl6XDeQ7OSR7U831rUCnfOb+z9C SGXSL/bl9Lnd5Qs+9YpqRNgZdd5FEd+zjbxavjdbiISxGlBHa6KAW4GPQ4z4HLJJ 8GzlUCkzuCAd97JyRxMRdTTJ0LHv7Hcmw9Gacepsoyk8J3zgQf9s6nHlg1GX8FyJ josKEHQNJBCI6/1dDfgngcXJzUeilwmxjNdkVXueANUWUsFs5rnRJiFM91DjQ3wA 3zkvfuRWjlVJIjdBCGj2TRucuZsd8LuYphU0Fp98rP3CdgMSAJMlFO+ykQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0HxhBP/2xhIwG+MGSHYZRbKFubMB8GA1UdIwQY MBaAFC4OM41z51hGhFZjL1vKrgevDYcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGIt YTViNzgzMWE4Y2UxLzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGItYTViNzgzMWE4Y2Ux LzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAyX/xk0 IA6wiKY3z2fEZyO2JQPUzBelU6Oc7ibPbJqj/YJwFLN6LPKPQDUAKfxl2cHm9zbZ ngyPjJUQow5ZK4Z/bCIPmWUoC5x0L0OXCL91eFxSlZwUslbpHyYSOrlX3DWrZYpm wELaht1rzhYvi+7NA6z2Zoo5yQ8ivtrKLH2oTlxHOD4Otpp11PpKmD8Pe2HCnRpz chgdR4r0zb309vG6sJ370VyeU1qtTFh5bIfjje3bkKiIOOMmWpjp6QdhcTskWPPy SyGzi8xDfrPPhwe/DB9bOg1hkUdlmd0N7sLrwh+vUUuLzR0hQlQq/zJsCrmEMF8N szk7Kg8+Fwh9qQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:17:20 2025 by rpki-client