This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json) Hash identifier: GMqLUDhBb8G128r/ryB6gYQ1LH0QvFsHnnjn5nSuZ1o= Subject key identifier: C8:0D:B6:88:80:3B:36:BA:E0:75:D9:C3:E8:9F:9C:F3:DB:96:49:E8 Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Certificate serial: 019B6CFC6F2E64FE9BA23D84A1B732660307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft Manifest number: 0410 Signing time: Tue 30 Dec 2025 02:00:41 +0000 Manifest this update: Tue 30 Dec 2025 02:00:41 +0000 Manifest next update: Wed 31 Dec 2025 02:00:41 +0000 Files and hashes: 1: 32WtKH3EfM7-S6v7tTmyQcU-a9s.roa (hash: Fn/80HetfWjEwrwQy2saw9cqkA9VjrY/6O3eDGyjCbw=) 2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: uXPNf5MMYZudURWnyE/n4P8BnqHHZQNUUEL4FjDmoGY=) 3: ef1K6dC6_lGn3rxGTHxMT8fcB0w.roa (hash: KYKxli5ZRinkaBImEiWWBBcr8lpZPoWAqbzOeddaU7I=) 4: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (hash: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=) 5: yTZK16Petp2vOn3txInnKgFuPZA.roa (hash: f4X49bz3pXDeDuy49E2fyjRi845LCJEWL2iDzuqzg38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:6f:2e:64:fe:9b:a2:3d:84:a1:b7:32:66:03:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Validity Not Before: Dec 30 02:00:41 2025 GMT Not After : Dec 31 02:00:41 2025 GMT Subject: CN=c80db688803b36bae075d9c3e89f9cf3db9649e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:bb:f5:49:f7:0e:ac:77:e9:b0:92:d6:49: 5b:90:81:03:5f:99:d6:98:32:8e:92:22:da:c7:c2: f5:f2:35:2c:7c:9a:01:05:21:98:ea:59:e1:d1:80: ff:08:99:39:13:48:96:e1:ef:c2:c7:f8:ce:f6:e1: 9d:3f:f3:11:13:5f:9f:d8:03:6f:a2:52:33:1b:f2: c5:85:68:5b:44:de:28:4d:db:de:19:1f:9c:19:c7: 33:18:f1:93:cf:38:2d:f5:3b:02:03:cf:9b:c9:5b: 23:dc:55:14:3e:83:06:8a:54:65:c1:ef:a8:2d:df: 41:b4:73:e3:60:3b:ef:bf:fd:88:66:90:38:6b:e0: ce:a9:90:3f:69:aa:8d:b6:1a:c6:1c:62:cd:0d:f8: 19:44:12:2e:02:ff:5d:6b:bb:fd:c7:3c:c7:68:ea: c4:e9:2b:9e:e7:a5:4e:7b:2d:ba:d5:46:f4:64:06: 42:61:d5:e9:19:d2:6d:03:d3:66:68:cf:ac:01:6c: 23:89:0e:11:88:bc:20:71:27:dc:fa:f6:64:dd:d3: 78:ed:3b:3b:4b:13:72:fe:ea:57:8d:cd:8e:10:ad: dd:27:ca:f9:ba:fa:f8:c4:35:71:ab:fb:b4:d5:de: a5:48:56:17:61:93:8f:04:7d:17:e1:71:90:c6:1e: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0D:B6:88:80:3B:36:BA:E0:75:D9:C3:E8:9F:9C:F3:DB:96:49:E8 X509v3 Authority Key Identifier: keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0a:44:b5:0e:58:b5:a6:13:b7:44:b5:6e:c0:03:b5:ba:ad: 4c:58:ea:7e:89:a3:de:e4:f6:cb:ce:b9:ef:71:df:32:44:3e: d8:28:1d:2d:d8:6e:e7:d2:90:8c:1a:ae:99:c6:02:82:49:84: ce:47:0e:e8:9d:8f:ac:b7:38:27:a9:64:ac:77:38:b4:4e:81: ab:ba:0d:61:a4:3f:b1:68:7a:ab:a4:ee:89:ce:ed:40:be:76: e5:24:d5:4a:00:7c:0f:f5:da:95:66:af:1b:69:39:1a:ae:72: 5a:36:73:5d:f5:4a:25:94:5a:32:47:26:11:16:8d:33:3b:b1: 74:3f:be:77:c4:08:82:6b:70:d0:d3:65:aa:bb:eb:b3:79:b3: 8a:50:4a:41:1a:ca:6f:bd:19:a4:c6:26:30:e6:d5:50:12:be: c8:e0:24:24:6a:6e:45:aa:63:af:c8:7c:a8:25:c3:c2:e1:d9: 15:f5:df:70:6c:cd:2a:36:4e:a5:c1:11:a2:9d:cd:ea:93:03: a5:e8:7b:ec:44:81:bf:32:e9:06:41:62:a9:f7:0e:a2:2f:56: 84:27:9f:50:65:a0:ba:6b:8e:13:e9:56:97:45:0f:a6:50:57: 5d:60:9f:f8:da:c3:7e:74:fd:9f:ac:19:8c:b9:d1:7e:4d:10: 42:f6:89:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/G8uZP6boj2EobcyZgMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw M2UxMTEwHhcNMjUxMjMwMDIwMDQxWhcNMjUxMjMxMDIwMDQxWjAzMTEwLwYDVQQD EyhjODBkYjY4ODgwM2IzNmJhZTA3NWQ5YzNlODlmOWNmM2RiOTY0OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhm79Un3Dqx36bCS1klbkIEDX5nW mDKOkiLax8L18jUsfJoBBSGY6lnh0YD/CJk5E0iW4e/Cx/jO9uGdP/MRE1+f2ANv olIzG/LFhWhbRN4oTdveGR+cGcczGPGTzzgt9TsCA8+byVsj3FUUPoMGilRlwe+o Ld9BtHPjYDvvv/2IZpA4a+DOqZA/aaqNthrGHGLNDfgZRBIuAv9da7v9xzzHaOrE 6Sue56VOey261Ub0ZAZCYdXpGdJtA9NmaM+sAWwjiQ4RiLwgcSfc+vZk3dN47Ts7 SxNy/upXjc2OEK3dJ8r5uvr4xDVxq/u01d6lSFYXYZOPBH0X4XGQxh57QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgNtoiAOza64HXZw+ifnPPblknoMB8GA1UdIwQY MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQpEtQ5Y taYTt0S1bsADtbqtTFjqfomj3uT2y86573HfMkQ+2CgdLdhu59KQjBqumcYCgkmE zkcO6J2PrLc4J6lkrHc4tE6Bq7oNYaQ/sWh6q6Tuic7tQL525STVSgB8D/XalWav G2k5Gq5yWjZzXfVKJZRaMkcmERaNMzuxdD++d8QIgmtw0NNlqrvrs3mzilBKQRrK b70ZpMYmMObVUBK+yOAkJGpuRapjr8h8qCXDwuHZFfXfcGzNKjZOpcERop3N6pMD peh77ESBvzLpBkFiqfcOoi9WhCefUGWgumuOE+lWl0UPplBXXWCf+NrDfnT9n6wZ jLnRfk0QQvaJyg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:04:33 2025 by rpki-client