This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json) Hash identifier: FXgip6RQ7W87HrYDu12F/OWykwNIPBgO+Nv/gZwhw4c= Subject key identifier: B5:75:B7:71:09:AD:60:8D:A1:A2:E4:A9:32:BC:BC:ED:A0:FB:B8:B3 Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019B53AC61EC42096A883BF9936D0909F1D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 04:02:44 +0000 Manifest this update: Thu 25 Dec 2025 04:02:44 +0000 Manifest next update: Fri 26 Dec 2025 04:02:44 +0000 Files and hashes: 1: 0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa (hash: s0nTtnQSHrND4DvUtBRsZ+0MomnwjVLtYm6521AA6YU=) 2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: 9uBPf/FatrfTTC8E+2qpSwX83/gHyNNcy4dgbQ/buDs=) 3: MuuzFIyNpWZONMllHbmnXx8HRv0.roa (hash: U3fGXgKZfpms0csUXLU3nnmhzkgEcT4L/f6Vy+UF3Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:61:ec:42:09:6a:88:3b:f9:93:6d:09:09:f1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Dec 25 04:02:44 2025 GMT Not After : Dec 26 04:02:44 2025 GMT Subject: CN=b575b77109ad608da1a2e4a932bcbceda0fbb8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:be:df:f4:a1:25:b7:c3:81:ec:59:e4:fd: 56:37:bc:07:54:ea:81:36:c4:5f:e6:da:c3:54:90: dc:59:97:3a:6f:f8:e7:9e:6a:f4:38:71:32:d8:e1: 0b:50:9a:c4:fd:9f:59:88:88:da:8a:3b:df:fb:5f: 05:ad:bd:37:2e:d9:fc:1a:24:df:6f:81:2e:1f:65: dd:68:51:25:33:48:3f:32:9f:cf:d8:61:ad:54:b3: be:b1:d2:31:bf:c9:71:1d:be:ae:77:8c:d4:e0:63: c9:52:6e:7b:08:28:a3:17:04:22:e3:2e:f4:9c:bb: 95:f9:cf:57:0b:ee:b3:fa:29:ea:b3:91:7c:2d:a3: 74:8b:dc:f3:8d:c0:d2:74:23:3c:4a:03:37:1b:de: d3:24:11:dc:7b:e9:63:d7:db:db:79:c4:53:62:b8: 54:9b:10:e6:a9:17:1f:27:0e:35:a8:b5:fe:63:be: c1:85:d6:f2:b6:bd:78:c7:66:3f:4a:dc:02:b9:09: c5:1d:cc:b1:4f:2c:e8:a1:70:30:f5:3a:56:aa:02: 68:3c:86:0d:2a:fe:fa:d9:20:1a:28:7c:f1:cd:f2: 3a:12:a9:14:bf:57:2e:d3:67:23:06:35:7d:4b:0e: 0b:a0:94:1a:22:e8:b8:b1:ab:5a:5e:88:26:cf:bf: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:75:B7:71:09:AD:60:8D:A1:A2:E4:A9:32:BC:BC:ED:A0:FB:B8:B3 X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:45:49:44:9f:99:4d:3f:fe:c0:3b:e3:43:03:cd:63:8c:a5: e9:7f:da:a7:e1:a3:a9:4f:fd:a3:82:95:84:e3:76:3b:f5:9a: ae:99:90:c3:18:b7:00:00:9b:56:88:33:99:5c:a7:2c:25:6e: 57:39:12:c0:10:a1:34:ba:8d:a2:39:9b:8a:b5:a9:c3:7b:00: 2b:42:94:47:8d:f1:8f:9d:39:18:ce:d8:41:6a:26:f2:f4:da: 97:f5:c8:5a:e8:67:d7:b0:5c:e6:44:c6:8f:a1:64:d4:44:c5: 43:e7:35:7d:9b:6e:27:14:f9:a5:9c:07:c4:17:b1:91:74:62: f8:bf:87:6d:d4:b0:e6:0b:18:08:59:1f:ed:d8:cf:d8:11:8d: 7e:3b:f1:d8:62:79:d0:c9:da:88:ab:a7:1a:2e:88:9c:25:08: 18:cd:8c:12:57:fd:e9:c9:e2:0f:e3:66:b6:12:e4:b2:98:af: 38:9f:98:21:99:d5:58:dd:a5:62:d0:4f:48:c5:bf:ec:c8:fd: 61:2d:1f:cb:95:48:81:10:95:80:ab:15:ea:af:e4:08:3e:07: 37:21:c6:e3:db:b1:64:36:4b:78:e6:5d:56:2c:a2:66:37:48: 78:f5:e4:d7:46:55:58:a5:78:20:36:71:fa:d8:7b:1a:a1:ff: 33:e7:b9:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrGHsQglqiDv5k20JCfHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjUxMjI1MDQwMjQ0WhcNMjUxMjI2MDQwMjQ0WjAzMTEwLwYDVQQD EyhiNTc1Yjc3MTA5YWQ2MDhkYTFhMmU0YTkzMmJjYmNlZGEwZmJiOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Oq+3/ShJbfDgexZ5P1WN7wHVOqB NsRf5trDVJDcWZc6b/jnnmr0OHEy2OELUJrE/Z9ZiIjaijvf+18Frb03Ltn8GiTf b4EuH2XdaFElM0g/Mp/P2GGtVLO+sdIxv8lxHb6ud4zU4GPJUm57CCijFwQi4y70 nLuV+c9XC+6z+inqs5F8LaN0i9zzjcDSdCM8SgM3G97TJBHce+lj19vbecRTYrhU mxDmqRcfJw41qLX+Y77Bhdbytr14x2Y/StwCuQnFHcyxTyzooXAw9TpWqgJoPIYN Kv762SAaKHzxzfI6EqkUv1cu02cjBjV9Sw4LoJQaIui4sataXogmz7/qtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLV1t3EJrWCNoaLkqTK8vO2g+7izMB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEVJRJ+Z TT/+wDvjQwPNY4yl6X/ap+GjqU/9o4KVhON2O/WarpmQwxi3AACbVogzmVynLCVu VzkSwBChNLqNojmbirWpw3sAK0KUR43xj505GM7YQWom8vTal/XIWuhn17Bc5kTG j6Fk1ETFQ+c1fZtuJxT5pZwHxBexkXRi+L+HbdSw5gsYCFkf7djP2BGNfjvx2GJ5 0MnaiKunGi6InCUIGM2MElf96cniD+NmthLkspivOJ+YIZnVWN2lYtBPSMW/7Mj9 YS0fy5VIgRCVgKsV6q/kCD4HNyHG49uxZDZLeOZdViyiZjdIePXk10ZVWKV4IDZx +th7GqH/M+e5/g== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:13 2025 by rpki-client