This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json) Hash identifier: S6jdj8Pgq/HP64yYAgdIqksiuJWzk7Vr2eznkruIMZo= Subject key identifier: E8:68:DB:E1:D5:D7:A9:4A:23:53:61:70:FF:FC:98:1F:42:FE:AE:58 Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c Certificate serial: 019B4136DC9A8BA5FD69FB80C89A3FC2A532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft Manifest number: 1631 Signing time: Sun 21 Dec 2025 14:01:12 +0000 Manifest this update: Sun 21 Dec 2025 14:01:12 +0000 Manifest next update: Mon 22 Dec 2025 14:01:12 +0000 Files and hashes: 1: 4KUpBqgP7CqsqYjihpL6JW1__PY.roa (hash: y1mWBKsuw1JHXNozTzV9PXz9oElVltZjJ6RCCGIn+Eg=) 2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: 05ltDSWlKPtx0Bd+CTcp5TC0Q+Q1+V+b9/vicHYN4kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:dc:9a:8b:a5:fd:69:fb:80:c8:9a:3f:c2:a5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c Validity Not Before: Dec 21 14:01:12 2025 GMT Not After : Dec 22 14:01:12 2025 GMT Subject: CN=e868dbe1d5d7a94a23536170fffc981f42feae58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:57:eb:92:6b:44:0c:b4:e6:e7:f3:c1:c9: 5a:64:22:f6:5b:72:e6:12:89:6d:31:62:a8:95:94: 37:eb:43:fa:5c:38:7e:02:5c:e0:bf:dc:8d:ff:88: e5:e9:0f:d2:54:a3:10:8c:22:53:39:eb:d3:4c:36: f2:7f:47:c5:72:3d:3e:bb:8a:39:bf:bc:c1:43:24: 32:ff:29:4b:a6:b7:6a:3c:66:b3:51:5d:1e:6e:58: 12:8f:e4:aa:9f:b4:3d:db:61:c8:6a:2a:73:fa:24: c2:22:27:17:b4:cb:ac:73:20:53:45:94:44:a6:69: be:ad:95:d8:1d:1f:e3:88:31:36:86:d8:79:7e:5e: 2b:db:ed:69:11:31:79:07:2c:b9:fe:48:04:0d:d4: 8e:fa:83:36:08:6e:34:c2:68:e4:56:4b:63:82:44: 6c:6f:6a:a1:ec:0d:45:c9:4a:ef:6f:da:94:78:13: 9e:20:95:98:da:06:43:1f:0f:37:d1:d3:91:34:13: 15:9e:9f:58:94:e2:3c:02:a9:2c:3b:d9:79:b6:9a: 17:5c:38:b6:32:c8:da:fe:56:79:82:cf:06:c4:13: 00:d0:fb:12:85:24:26:f3:26:6a:15:0a:7f:55:a4: 3c:de:a0:9a:5f:5f:5a:05:5e:bf:0e:b7:94:b7:b4: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:DB:E1:D5:D7:A9:4A:23:53:61:70:FF:FC:98:1F:42:FE:AE:58 X509v3 Authority Key Identifier: keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:51:2b:d2:d6:da:94:c5:5d:42:8d:26:68:1b:65:8b:73:62: ad:be:d4:2a:3d:28:dc:7a:c1:40:51:26:3d:c1:87:b8:5d:13: ad:60:bf:46:15:45:26:bf:f8:3a:7c:a9:58:c9:4a:01:d6:30: 77:7d:c9:bf:c1:f1:c7:fa:c5:4e:4f:cc:eb:ed:75:fd:b9:83: 10:c7:0a:34:28:3c:45:f4:62:d7:25:ff:c2:3c:67:a6:13:27: 04:87:5f:a4:f4:bd:17:00:3a:bd:be:fb:69:f7:e4:e7:c4:bc: 79:5b:41:4f:f7:7a:de:20:ff:6f:a6:5b:5e:fc:8a:35:2a:a0: 5d:ce:87:1a:32:56:9e:8e:66:60:1a:df:5b:24:66:05:b8:d8: 7a:f7:77:cc:20:e7:87:55:d6:a6:fa:63:87:4d:c7:06:87:d6: 94:4a:fc:7e:e1:ca:d6:1c:d5:8f:d3:b1:69:bf:a1:4f:e3:1e: ae:2d:6c:2b:ac:a7:de:63:34:2d:5a:c7:74:b9:b0:c9:39:98: 5f:ba:75:91:6a:34:83:bc:38:c2:d0:fd:d0:e5:24:e9:00:7d: 09:85:ab:96:a1:e4:df:bb:19:01:7e:80:db:17:93:64:d5:37: 23:3a:f6:5a:fe:63:85:d8:b9:d0:e7:85:3b:e6:63:32:55:ce: c9:41:20:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtyai6X9afuAyJo/wqUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy ODQyOGMwHhcNMjUxMjIxMTQwMTEyWhcNMjUxMjIyMTQwMTEyWjAzMTEwLwYDVQQD EyhlODY4ZGJlMWQ1ZDdhOTRhMjM1MzYxNzBmZmZjOTgxZjQyZmVhZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulVX65JrRAy05ufzwclaZCL2W3Lm EoltMWKolZQ360P6XDh+Alzgv9yN/4jl6Q/SVKMQjCJTOevTTDbyf0fFcj0+u4o5 v7zBQyQy/ylLprdqPGazUV0eblgSj+Sqn7Q922HIaipz+iTCIicXtMuscyBTRZRE pmm+rZXYHR/jiDE2hth5fl4r2+1pETF5Byy5/kgEDdSO+oM2CG40wmjkVktjgkRs b2qh7A1FyUrvb9qUeBOeIJWY2gZDHw830dORNBMVnp9YlOI8AqksO9l5tpoXXDi2 Msja/lZ5gs8GxBMA0PsShSQm8yZqFQp/VaQ83qCaX19aBV6/DreUt7TUpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOho2+HV16lKI1NhcP/8mB9C/q5YMB8GA1UdIwQY MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1Er0tba lMVdQo0maBtli3Nirb7UKj0o3HrBQFEmPcGHuF0TrWC/RhVFJr/4OnypWMlKAdYw d33Jv8Hxx/rFTk/M6+11/bmDEMcKNCg8RfRi1yX/wjxnphMnBIdfpPS9FwA6vb77 affk58S8eVtBT/d63iD/b6ZbXvyKNSqgXc6HGjJWno5mYBrfWyRmBbjYevd3zCDn h1XWpvpjh03HBofWlEr8fuHK1hzVj9Oxab+hT+Meri1sK6yn3mM0LVrHdLmwyTmY X7p1kWo0g7w4wtD90OUk6QB9CYWrlqHk37sZAX6A2xeTZNU3Izr2Wv5jhdi50OeF O+ZjMlXOyUEgzw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:14:27 2025 by rpki-client