This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json) Hash identifier: ehJC2z7FFtBGh3KfJTqyCMtZBUWvx+F8GUnePYqHIMs= Subject key identifier: AD:39:88:D4:E2:B9:73:8C:42:53:64:DC:23:BB:A4:30:20:B8:DF:1F Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Certificate serial: 019B341F6A8A4EEB3A6B94479B02B43573AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 01:00:32 +0000 Manifest this update: Fri 19 Dec 2025 01:00:32 +0000 Manifest next update: Sat 20 Dec 2025 01:00:32 +0000 Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=) 2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: DllchJdSSkhKPExd4eFbQldhMVWbUOLIR6I6rO/PaeA=) 3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:6a:8a:4e:eb:3a:6b:94:47:9b:02:b4:35:73:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Validity Not Before: Dec 19 01:00:32 2025 GMT Not After : Dec 20 01:00:32 2025 GMT Subject: CN=ad3988d4e2b9738c425364dc23bba43020b8df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:a1:76:47:37:0b:a4:fe:e8:86:ee:e1:e1: 0f:af:3b:e3:ab:ef:ea:13:5a:1d:b6:6f:3f:0a:be: e1:4a:e5:3c:52:a6:c2:9f:2e:c1:92:e9:0f:5b:43: 3e:f2:c6:ee:26:ed:4d:59:44:4b:ea:ec:d3:44:5c: 54:ec:77:96:ef:da:57:2f:0e:39:f6:9b:31:25:4c: 39:40:95:9b:52:10:1e:58:61:58:d0:34:89:25:0a: 52:05:a4:52:b3:a8:b9:d0:63:96:49:e7:d2:f0:b4: 2b:3f:96:c9:fa:6d:72:5b:9b:df:7c:be:1f:94:99: d4:b1:51:9e:ea:7a:30:26:9f:ea:04:78:2b:7f:c8: 68:c0:c6:88:1f:a7:0d:d1:49:29:f9:47:6b:bf:14: 18:5f:f7:22:ce:81:f4:f3:b1:af:4f:26:58:05:42: 4d:70:1f:4b:61:e3:5d:33:bd:cf:c6:f7:5a:e6:99: f9:ab:a1:6b:dd:43:66:c0:e4:0b:15:eb:45:de:b0: bb:84:7a:61:18:61:72:ae:a2:59:24:db:24:66:5c: 57:30:81:60:8c:e7:ed:58:da:01:07:e8:56:03:36: 6d:44:db:fe:47:4f:73:4e:dc:54:bf:55:63:22:30: 85:62:1e:41:7a:f4:27:1f:5f:a4:52:16:78:94:77: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:88:D4:E2:B9:73:8C:42:53:64:DC:23:BB:A4:30:20:B8:DF:1F X509v3 Authority Key Identifier: keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:90:cb:e0:0d:cd:a2:40:47:63:15:c0:46:67:9c:ac:a2:ff: 74:a7:6a:e3:e5:32:78:e5:82:6f:77:65:85:8f:d0:f3:6d:d6: 5a:ea:a4:98:35:89:6c:67:ff:e4:f5:7e:d3:bf:1b:9a:e7:e9: b1:ed:da:d8:ed:1e:ef:95:9c:67:89:b5:9b:2e:b1:9c:0c:2b: 63:45:ed:77:98:3c:8e:fa:c0:e0:a5:c1:9a:63:5a:d9:2e:7c: b7:78:8e:ee:9b:53:3c:e8:03:68:aa:7b:b1:4e:be:17:e1:54: 34:74:f3:55:17:f2:91:67:86:3d:04:62:e0:e8:49:b6:b1:53: fd:73:76:87:96:d9:b9:10:21:8f:bd:6c:b5:60:6a:1d:4f:cd: 86:95:37:1e:c7:aa:3f:d5:02:49:5e:9c:8c:9d:83:b6:89:3c: fe:dc:eb:da:db:be:e1:fc:ca:eb:78:ab:a0:c8:36:4f:84:72: cf:34:ff:c2:96:7f:ce:b0:2e:b9:df:a0:cc:b7:e1:3d:ec:04: 7a:24:89:e2:5f:21:f1:b6:12:15:db:cf:44:46:f1:b8:12:5a: d3:49:1b:16:16:1b:9b:4d:e9:f8:75:93:cc:c3:7c:20:89:86: b6:53:df:ca:c3:46:9b:0a:e4:58:45:a3:bb:8e:f3:e9:79:ec: c1:4a:9a:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H2qKTus6a5RHmwK0NXOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj NTlkNDQwHhcNMjUxMjE5MDEwMDMyWhcNMjUxMjIwMDEwMDMyWjAzMTEwLwYDVQQD EyhhZDM5ODhkNGUyYjk3MzhjNDI1MzY0ZGMyM2JiYTQzMDIwYjhkZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysahdkc3C6T+6Ibu4eEPrzvjq+/q E1odtm8/Cr7hSuU8UqbCny7BkukPW0M+8sbuJu1NWURL6uzTRFxU7HeW79pXLw45 9psxJUw5QJWbUhAeWGFY0DSJJQpSBaRSs6i50GOWSefS8LQrP5bJ+m1yW5vffL4f lJnUsVGe6nowJp/qBHgrf8howMaIH6cN0Ukp+UdrvxQYX/cizoH087GvTyZYBUJN cB9LYeNdM73Pxvda5pn5q6Fr3UNmwOQLFetF3rC7hHphGGFyrqJZJNskZlxXMIFg jOftWNoBB+hWAzZtRNv+R09zTtxUv1VjIjCFYh5BevQnH1+kUhZ4lHcXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK05iNTiuXOMQlNk3CO7pDAguN8fMB8GA1UdIwQY MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt M2ZjMzk0ODc4MDdjLzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJDL4A3N okBHYxXARmecrKL/dKdq4+UyeOWCb3dlhY/Q823WWuqkmDWJbGf/5PV+078bmufp se3a2O0e75WcZ4m1my6xnAwrY0Xtd5g8jvrA4KXBmmNa2S58t3iO7ptTPOgDaKp7 sU6+F+FUNHTzVRfykWeGPQRi4OhJtrFT/XN2h5bZuRAhj71stWBqHU/NhpU3Hseq P9UCSV6cjJ2Dtok8/tzr2tu+4fzK63iroMg2T4RyzzT/wpZ/zrAuud+gzLfhPewE eiSJ4l8h8bYSFdvPREbxuBJa00kbFhYbm03p+HWTzMN8IImGtlPfysNGmwrkWEWj u47z6XnswUqaQg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:27 2025 by rpki-client