This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json) Hash identifier: 9xTj8PmfmaphCQmuJgWaAHaagY/J3vjk+G2ky4soH5A= Subject key identifier: 2A:4C:A9:FB:EA:E9:72:16:32:40:0C:BB:60:B0:60:B0:0F:61:3A:04 Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Certificate serial: 019B38D83E0DF6BACEAA4F90939C4302422A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft Manifest number: 03F5 Signing time: Fri 19 Dec 2025 23:00:54 +0000 Manifest this update: Fri 19 Dec 2025 23:00:54 +0000 Manifest next update: Sat 20 Dec 2025 23:00:54 +0000 Files and hashes: 1: 32WtKH3EfM7-S6v7tTmyQcU-a9s.roa (hash: Fn/80HetfWjEwrwQy2saw9cqkA9VjrY/6O3eDGyjCbw=) 2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: yyCwd1D7wYNpK5oK3dHAes3yMGlAh2/9D3XWpDmjSIs=) 3: ef1K6dC6_lGn3rxGTHxMT8fcB0w.roa (hash: KYKxli5ZRinkaBImEiWWBBcr8lpZPoWAqbzOeddaU7I=) 4: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (hash: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=) 5: yTZK16Petp2vOn3txInnKgFuPZA.roa (hash: f4X49bz3pXDeDuy49E2fyjRi845LCJEWL2iDzuqzg38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:3e:0d:f6:ba:ce:aa:4f:90:93:9c:43:02:42:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Validity Not Before: Dec 19 23:00:54 2025 GMT Not After : Dec 20 23:00:54 2025 GMT Subject: CN=2a4ca9fbeae9721632400cbb60b060b00f613a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:d3:3d:64:6a:58:83:77:72:a1:b8:d9:73: 7b:2f:81:f6:12:c3:e2:13:cb:3d:1b:4a:98:e6:ee: 2e:81:51:4e:29:63:01:f1:48:52:65:96:c6:08:cb: 26:00:7d:d8:19:a5:9f:9f:df:6a:f7:0a:6e:77:69: 9d:19:70:fd:0e:e2:97:6e:14:ab:12:24:8d:f8:49: 90:9d:5e:1b:7a:37:ea:8e:27:87:41:8f:29:4f:47: 63:dc:42:c0:c5:06:9c:aa:11:07:c5:0c:32:9d:a0: 6c:7f:06:f2:26:c8:0d:67:46:24:b5:19:c3:40:1d: f1:a1:5d:99:d4:1a:94:27:a9:1a:34:28:91:35:b3: 0f:9c:69:b1:ab:5b:a4:93:be:35:b1:84:ca:cd:22: 60:fe:ec:44:e0:b0:92:d1:c4:6b:23:28:b7:ff:a8: 33:9b:1f:70:6e:dc:3f:1a:41:e3:c9:26:f3:88:38: 07:05:26:ad:62:f4:49:bc:2e:c8:1e:48:70:b4:4d: 08:77:67:2a:98:72:ca:91:be:07:c8:b4:bb:80:4b: 3f:c9:1c:24:8c:ec:a2:ce:6e:22:70:eb:3a:c9:c7: d1:d3:8d:49:af:0f:93:4d:54:48:ec:6c:e6:b3:2d: 4d:c1:31:14:8a:22:2f:40:46:4d:fd:cb:1a:f1:c9: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:A9:FB:EA:E9:72:16:32:40:0C:BB:60:B0:60:B0:0F:61:3A:04 X509v3 Authority Key Identifier: keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:db:8d:d4:e3:67:1d:84:81:0a:5a:b3:e7:7d:7e:5a:34:61: 94:72:f4:3d:9f:fa:85:a4:91:a8:67:d2:54:34:4d:92:c4:aa: c2:cb:9c:47:7b:a5:21:e6:4f:d7:04:f9:96:77:6d:45:55:b3: 8f:df:15:30:35:b1:1a:e2:9b:fa:0e:41:c5:88:81:c1:de:cd: 33:02:b4:64:8f:5e:2d:d9:3d:4c:d4:ea:a9:50:6d:92:61:69: 58:37:cd:6b:0a:51:d0:bf:c4:8d:d8:97:be:19:49:25:ad:77: 3e:d9:fb:a8:f7:af:43:42:e2:5c:c6:a2:26:88:f6:56:e6:6b: 32:43:5e:62:6c:6c:85:03:90:f4:2b:88:4d:33:4a:ca:d5:24: fb:82:6f:27:da:ec:d4:f3:89:6d:72:9b:67:a7:4b:cf:f1:11: 35:e4:0d:0d:5c:ea:fc:b3:2c:27:4a:b3:61:ec:9c:8f:5a:73: b6:30:16:7a:2b:68:fb:b3:08:fc:88:70:69:c1:3d:b4:ab:be: 3c:52:60:9f:e6:64:db:18:85:61:27:d3:74:4b:e8:27:69:0d: 5b:32:c4:0c:e0:82:cc:1d:8b:31:4b:68:24:17:95:87:b4:97: 83:54:92:01:8a:f8:bd:4b:ed:92:c8:05:d6:cd:24:32:e8:bd: d1:b4:5d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42D4N9rrOqk+Qk5xDAkIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw M2UxMTEwHhcNMjUxMjE5MjMwMDU0WhcNMjUxMjIwMjMwMDU0WjAzMTEwLwYDVQQD EygyYTRjYTlmYmVhZTk3MjE2MzI0MDBjYmI2MGIwNjBiMDBmNjEzYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCzTPWRqWIN3cqG42XN7L4H2EsPi E8s9G0qY5u4ugVFOKWMB8UhSZZbGCMsmAH3YGaWfn99q9wpud2mdGXD9DuKXbhSr EiSN+EmQnV4bejfqjieHQY8pT0dj3ELAxQacqhEHxQwynaBsfwbyJsgNZ0YktRnD QB3xoV2Z1BqUJ6kaNCiRNbMPnGmxq1ukk741sYTKzSJg/uxE4LCS0cRrIyi3/6gz mx9wbtw/GkHjySbziDgHBSatYvRJvC7IHkhwtE0Id2cqmHLKkb4HyLS7gEs/yRwk jOyizm4icOs6ycfR041Jrw+TTVRI7Gzmsy1NwTEUiiIvQEZN/csa8cnvewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpMqfvq6XIWMkAMu2CwYLAPYToEMB8GA1UdIwQY MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtuN1ONn HYSBClqz531+WjRhlHL0PZ/6haSRqGfSVDRNksSqwsucR3ulIeZP1wT5lndtRVWz j98VMDWxGuKb+g5BxYiBwd7NMwK0ZI9eLdk9TNTqqVBtkmFpWDfNawpR0L/EjdiX vhlJJa13Ptn7qPevQ0LiXMaiJoj2VuZrMkNeYmxshQOQ9CuITTNKytUk+4JvJ9rs 1POJbXKbZ6dLz/ERNeQNDVzq/LMsJ0qzYeycj1pztjAWeito+7MI/IhwacE9tKu+ PFJgn+Zk2xiFYSfTdEvoJ2kNWzLEDOCCzB2LMUtoJBeVh7SXg1SSAYr4vUvtksgF 1s0kMui90bRdjA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:31:52 2025 by rpki-client