This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json) Hash identifier: aRzKE4J9/y7jTVzGbDoyviAya8iVpYrhDhNVdseeWfE= Subject key identifier: 69:86:47:BF:A9:27:E2:29:35:95:E6:35:FD:2A:0B:45:6F:33:EB:7C Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Certificate serial: 019B3AC6BFE708A6B1FEBC197913BF5B0BCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft Manifest number: 0210 Signing time: Sat 20 Dec 2025 08:01:02 +0000 Manifest this update: Sat 20 Dec 2025 08:01:02 +0000 Manifest next update: Sun 21 Dec 2025 08:01:02 +0000 Files and hashes: 1: aE6W_12we24MrX4UESfc-orZJK0.roa (hash: Tn+H21K97sLydc4eo5ghf77e2fc70nABLBDtYTFdsDQ=) 2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: w6GnkRzylUtTpigzh28EgR/0NDwlMDpLmswAuR+hfqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:bf:e7:08:a6:b1:fe:bc:19:79:13:bf:5b:0b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Validity Not Before: Dec 20 08:01:02 2025 GMT Not After : Dec 21 08:01:02 2025 GMT Subject: CN=698647bfa927e2293595e635fd2a0b456f33eb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:6b:ed:66:69:76:61:5c:d3:27:06:4e:9d: e5:f1:c3:be:e2:2e:f4:ff:46:18:ce:e8:93:55:0e: 0d:29:46:a7:99:18:70:cd:70:9a:cb:d2:8f:36:76: db:39:c1:05:50:79:4b:86:3f:1e:0a:9f:d8:52:50: 6a:07:d2:e1:b9:be:f9:7d:27:5c:f7:73:91:fa:b3: 9f:df:2c:05:40:21:26:af:42:50:a0:ad:7a:2f:ac: 2c:32:c6:11:f1:26:6d:20:bd:5c:38:71:c6:33:e2: 49:98:1a:c0:59:bd:4f:9a:bd:11:e1:3f:e7:f5:66: 55:0e:75:fb:d9:48:cf:92:dd:2b:8e:e9:39:47:4e: 10:25:56:c6:54:b2:6c:c9:75:18:77:55:da:ee:ec: 9b:5b:2b:ea:08:d7:6b:9b:1d:20:bf:4d:50:09:14: b6:0f:ef:16:49:61:8c:55:a2:a7:56:38:26:0a:44: 8f:52:58:00:2f:49:29:a7:4a:eb:cd:5f:8f:a1:fc: 7d:57:6d:40:7b:59:5c:2d:f1:43:18:8c:0a:22:15: 69:df:21:26:bb:37:73:6a:50:2f:1f:f5:6b:6b:0a: 7c:71:93:d1:0b:65:5e:6e:15:42:39:6e:bd:14:08: b9:b1:5f:59:05:a4:b7:ac:e9:24:fe:96:92:cc:e2: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:86:47:BF:A9:27:E2:29:35:95:E6:35:FD:2A:0B:45:6F:33:EB:7C X509v3 Authority Key Identifier: keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:38:a8:b8:4e:27:3b:a8:57:9c:96:aa:c3:82:78:ac:1d:eb: da:51:85:de:ff:29:00:f7:9c:f7:38:e4:b2:16:2c:dd:2e:cb: ac:db:c6:ee:2a:02:37:25:95:16:9d:c1:76:11:94:31:58:10: ec:ff:a8:13:5a:7a:f4:bc:4b:f1:5e:07:62:75:07:8a:20:82: 3d:26:34:36:de:b1:35:cf:45:c8:d4:44:b4:3d:19:94:45:a3: ab:81:56:ff:cc:c8:f8:2e:b9:65:e0:2c:f3:4b:a3:eb:c4:7a: 6a:34:b1:d6:bc:05:1e:1a:08:b7:c7:fd:eb:20:6f:c3:42:71: ce:94:11:54:fa:d3:af:7e:82:6d:41:13:48:11:a7:e1:0c:38: a2:1e:e8:0b:3f:4c:90:94:6b:60:12:ce:72:af:1b:3f:a7:ee: 06:bb:25:c9:e1:51:97:48:4c:16:78:db:3e:aa:00:af:34:0b: 91:1e:b2:74:42:53:7f:63:2f:94:73:5b:1c:34:3e:a1:fd:d1: 54:2c:d3:e0:60:a5:c5:4f:d3:6c:73:bc:21:94:18:2a:81:98: 21:2d:29:a3:c7:88:13:5a:e5:f7:79:7d:2e:99:70:db:4f:d7: 2d:6d:24:6a:b7:5d:c4:de:74:09:19:db:fc:00:43:66:fd:26: 71:38:67:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xr/nCKax/rwZeRO/WwvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj OGM1NTAwHhcNMjUxMjIwMDgwMTAyWhcNMjUxMjIxMDgwMTAyWjAzMTEwLwYDVQQD Eyg2OTg2NDdiZmE5MjdlMjI5MzU5NWU2MzVmZDJhMGI0NTZmMzNlYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIpr7WZpdmFc0ycGTp3l8cO+4i70 /0YYzuiTVQ4NKUanmRhwzXCay9KPNnbbOcEFUHlLhj8eCp/YUlBqB9Lhub75fSdc 93OR+rOf3ywFQCEmr0JQoK16L6wsMsYR8SZtIL1cOHHGM+JJmBrAWb1Pmr0R4T/n 9WZVDnX72UjPkt0rjuk5R04QJVbGVLJsyXUYd1Xa7uybWyvqCNdrmx0gv01QCRS2 D+8WSWGMVaKnVjgmCkSPUlgAL0kpp0rrzV+Pofx9V21Ae1lcLfFDGIwKIhVp3yEm uzdzalAvH/Vrawp8cZPRC2VebhVCOW69FAi5sV9ZBaS3rOkk/paSzOJQbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmGR7+pJ+IpNZXmNf0qC0VvM+t8MB8GA1UdIwQY MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt YjBlNjA1OGQ0ZGQ3LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3 LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUziouE4n O6hXnJaqw4J4rB3r2lGF3v8pAPec9zjkshYs3S7LrNvG7ioCNyWVFp3BdhGUMVgQ 7P+oE1p69LxL8V4HYnUHiiCCPSY0Nt6xNc9FyNREtD0ZlEWjq4FW/8zI+C65ZeAs 80uj68R6ajSx1rwFHhoIt8f96yBvw0JxzpQRVPrTr36CbUETSBGn4Qw4oh7oCz9M kJRrYBLOcq8bP6fuBrslyeFRl0hMFnjbPqoArzQLkR6ydEJTf2MvlHNbHDQ+of3R VCzT4GClxU/TbHO8IZQYKoGYIS0po8eIE1rl93l9Lplw20/XLW0karddxN50CRnb /ABDZv0mcThn/w== -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:58 2025 by rpki-client