This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json) Hash identifier: TOKBN+MuKGoN34IB33D1F+mFodlMA1qUL662w96xyJc= Subject key identifier: D2:75:49:E7:6A:27:EF:A2:B4:31:7C:99:03:35:92:EB:D7:59:C1:F1 Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019B44390D69F4454274C4901BFC4CB98D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 04:02:28 +0000 Manifest this update: Mon 22 Dec 2025 04:02:28 +0000 Manifest next update: Tue 23 Dec 2025 04:02:28 +0000 Files and hashes: 1: 0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa (hash: s0nTtnQSHrND4DvUtBRsZ+0MomnwjVLtYm6521AA6YU=) 2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: 6ZSqfezfH/cerc0KoFpaaBb96h/UIbqJTplR56MvAws=) 3: MuuzFIyNpWZONMllHbmnXx8HRv0.roa (hash: U3fGXgKZfpms0csUXLU3nnmhzkgEcT4L/f6Vy+UF3Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:0d:69:f4:45:42:74:c4:90:1b:fc:4c:b9:8d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Dec 22 04:02:28 2025 GMT Not After : Dec 23 04:02:28 2025 GMT Subject: CN=d27549e76a27efa2b4317c99033592ebd759c1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:06:81:3b:9a:c5:b1:3e:92:1d:5f:da:0e: 25:5f:31:ac:55:bd:c5:41:4e:1f:04:fd:ed:c9:24: 36:fe:94:91:ac:02:42:19:12:fc:3b:80:ce:07:7e: 4c:83:30:a8:20:84:7c:e7:df:d3:8c:3d:eb:44:7e: 62:3b:15:5e:7b:12:dd:ec:d2:69:c9:cb:91:65:48: 52:8f:b5:8f:cc:21:6b:c1:08:14:8b:e3:3f:1f:96: 7c:5f:ad:8a:3c:46:f4:33:41:33:42:67:70:1a:e0: 9e:d0:fd:04:c0:15:90:9f:86:62:07:0f:84:65:fc: 41:f8:29:52:6e:12:73:eb:ea:8b:a0:2c:27:fe:7d: af:3c:72:dd:6d:cb:78:23:f3:03:0c:95:b9:76:6f: 29:39:eb:03:b2:81:74:39:ac:1d:c5:02:fa:22:84: 03:4c:47:8e:71:32:f1:2a:66:da:06:fc:20:f3:98: 81:a6:53:d7:22:3d:7f:09:9b:23:9c:9f:04:b4:f2: 07:61:47:3b:98:1e:0a:e9:cb:d5:9a:71:41:08:60: 6e:f0:da:8f:dd:a2:91:fa:f3:50:b3:f2:7d:f6:d6: 9f:0b:8a:f4:14:d3:2f:70:17:de:5d:98:32:42:83: ec:c2:d3:01:00:02:4f:20:19:59:a0:ab:f9:6d:05: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:49:E7:6A:27:EF:A2:B4:31:7C:99:03:35:92:EB:D7:59:C1:F1 X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:65:83:1b:de:67:b8:f2:24:73:39:68:ed:53:a3:cd:92:df: 33:7c:a4:68:f7:52:9e:bf:f9:04:63:f6:d3:3d:44:17:9a:45: f0:8b:88:e7:65:d5:80:b3:ea:17:70:24:61:cf:cb:ef:44:1c: ea:96:c9:45:aa:73:f5:1c:0c:06:ab:2e:64:57:17:26:2a:70: 02:8a:00:2f:84:35:31:f6:06:89:d9:fd:77:73:0e:17:39:f7: 5d:7a:75:ae:dd:8f:5b:e3:ef:01:21:e6:66:d4:92:9c:14:5c: ec:19:d7:c1:ec:1e:03:bc:2d:43:da:0d:2e:1d:2e:cc:fa:aa: 4d:ef:d0:f3:7a:44:ff:1b:c0:fc:9e:25:7f:c0:ae:c3:a9:36: 72:57:8b:2f:13:86:5b:9e:db:73:e3:0e:fa:a5:de:19:75:73: 43:4b:70:c8:a0:97:8f:84:dc:fd:65:e7:bf:71:0e:05:be:e7: 91:99:94:6b:3d:ce:02:1a:4f:6d:b5:07:6e:3d:cd:b4:53:83: df:eb:08:5e:58:00:45:f9:f2:1d:92:b5:94:c1:7c:8f:d6:7a: aa:fa:6e:8b:8b:5c:20:f7:cd:55:a9:6b:1a:c0:6f:ce:34:9f: 4c:1b:67:b6:93:59:1d:ee:2a:34:84:53:ee:08:05:b2:06:cc: 9d:00:0a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQ1p9EVCdMSQG/xMuY0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjUxMjIyMDQwMjI4WhcNMjUxMjIzMDQwMjI4WjAzMTEwLwYDVQQD EyhkMjc1NDllNzZhMjdlZmEyYjQzMTdjOTkwMzM1OTJlYmQ3NTljMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkygGgTuaxbE+kh1f2g4lXzGsVb3F QU4fBP3tySQ2/pSRrAJCGRL8O4DOB35MgzCoIIR859/TjD3rRH5iOxVeexLd7NJp ycuRZUhSj7WPzCFrwQgUi+M/H5Z8X62KPEb0M0EzQmdwGuCe0P0EwBWQn4ZiBw+E ZfxB+ClSbhJz6+qLoCwn/n2vPHLdbct4I/MDDJW5dm8pOesDsoF0OawdxQL6IoQD TEeOcTLxKmbaBvwg85iBplPXIj1/CZsjnJ8EtPIHYUc7mB4K6cvVmnFBCGBu8NqP 3aKR+vNQs/J99tafC4r0FNMvcBfeXZgyQoPswtMBAAJPIBlZoKv5bQUNswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ1SedqJ++itDF8mQM1kuvXWcHxMB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGWDG95n uPIkczlo7VOjzZLfM3ykaPdSnr/5BGP20z1EF5pF8IuI52XVgLPqF3AkYc/L70Qc 6pbJRapz9RwMBqsuZFcXJipwAooAL4Q1MfYGidn9d3MOFzn3XXp1rt2PW+PvASHm ZtSSnBRc7BnXweweA7wtQ9oNLh0uzPqqTe/Q83pE/xvA/J4lf8Cuw6k2cleLLxOG W57bc+MO+qXeGXVzQ0twyKCXj4Tc/WXnv3EOBb7nkZmUaz3OAhpPbbUHbj3NtFOD 3+sIXlgARfnyHZK1lMF8j9Z6qvpui4tcIPfNValrGsBvzjSfTBtntpNZHe4qNIRT 7ggFsgbMnQAKPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:13 2025 by rpki-client