This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json) Hash identifier: KELvwksz1P68clSsdppe1bRxSJM/NQJ4gkBs21Lvky4= Subject key identifier: 5A:16:76:F3:05:43:87:13:3F:6D:35:CA:2F:CF:59:63:BD:AA:89:A6 Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Certificate serial: 019B6EEB1B6864C8050A7AD08EBEE15B8C71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft Manifest number: 075B Signing time: Tue 30 Dec 2025 11:01:00 +0000 Manifest this update: Tue 30 Dec 2025 11:01:00 +0000 Manifest next update: Wed 31 Dec 2025 11:01:00 +0000 Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=) 2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: NYtzQL5elTWpT6/Q1al4tyZKE6k2++fv9c92jSFb6hg=) 3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=) 4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:eb:1b:68:64:c8:05:0a:7a:d0:8e:be:e1:5b:8c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Validity Not Before: Dec 30 11:01:00 2025 GMT Not After : Dec 31 11:01:00 2025 GMT Subject: CN=5a1676f3054387133f6d35ca2fcf5963bdaa89a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:f0:45:2d:2f:98:b7:7c:0f:12:85:75:da: 1e:8d:13:72:d2:fe:0b:b9:2c:0c:b9:65:ca:1e:86: 25:d4:48:b1:f7:49:95:11:96:d1:e0:df:26:35:41: 30:1b:87:4c:ba:d2:59:bf:48:1c:84:ad:ba:7d:d6: 22:34:58:97:e0:dc:fb:4d:9d:0f:d8:2c:60:6d:39: a9:de:ed:89:0c:4f:2f:3c:66:61:1f:63:ec:aa:b7: ea:db:8c:3c:ad:3a:70:41:b1:c3:e8:f7:41:c8:51: f6:11:01:89:d0:fc:19:99:bc:4e:53:64:6a:bc:4b: db:86:2e:da:bb:96:3e:2f:34:73:40:4a:c9:4f:54: 05:c0:ca:49:37:9d:98:b3:c9:47:ae:ee:90:cc:5c: 48:97:72:72:02:ec:ed:e2:d3:2d:f6:33:ef:94:16: 7e:77:0d:ac:ec:af:08:d3:b1:fc:6b:3d:d4:dc:81: 18:ca:0a:c6:6d:47:ff:4c:bc:c0:c9:4e:8a:fd:d3: d6:7b:58:6d:b4:d1:82:63:b6:ca:00:96:6c:d6:7b: 6b:a7:37:b2:8c:32:e2:aa:e5:e4:4e:35:26:b9:d6: e9:b8:95:44:e4:5d:79:3f:1d:a8:4e:73:7b:ac:f1: 2f:3c:30:31:15:d6:a3:f8:ef:78:5b:53:e7:62:17: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:76:F3:05:43:87:13:3F:6D:35:CA:2F:CF:59:63:BD:AA:89:A6 X509v3 Authority Key Identifier: keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:07:f9:e5:1f:60:1a:46:0b:3f:cf:e8:0c:64:58:99:16:8d: 33:2f:19:7e:be:57:ff:91:08:45:ed:43:c4:1a:ea:39:bc:dc: 5d:41:52:db:30:3b:0a:5d:f7:ed:6d:e2:f1:f9:3e:94:dd:47: 5d:a6:8d:0b:42:13:7d:fa:12:de:a4:09:5d:d0:a9:39:0f:d2: c4:3f:af:09:74:1b:95:66:13:55:7c:94:ab:92:c5:2b:39:43: dd:37:38:96:d3:1e:d7:5a:f0:bb:f3:3a:0a:41:26:0a:bf:40: ef:a1:64:f4:71:79:37:6a:4d:70:ed:05:cf:0e:26:47:e1:87: fb:d5:f6:ff:2e:1c:c7:3e:b5:fa:fa:19:0c:68:52:42:94:d7: 87:56:7b:00:1f:8e:e5:e5:e6:c5:4e:a5:3c:00:29:01:bb:15: f5:45:4b:79:9a:34:82:3e:bf:26:0e:48:6f:4d:0d:64:cb:d7: 70:bd:fb:e9:78:9a:6c:05:4a:40:39:e7:dc:4d:11:4e:9a:9d: 10:27:d1:49:0e:ac:f4:d9:18:4a:be:a9:af:e7:ca:00:2a:32: 82:4e:06:6a:ca:74:19:c6:54:17:5c:1e:47:25:0a:69:ae:7a: aa:a0:5e:a4:ff:fd:ab:8e:68:b6:f3:fa:30:ce:15:c8:b8:23: 60:a2:4a:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6xtoZMgFCnrQjr7hW4xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5 NTZjYWEwHhcNMjUxMjMwMTEwMTAwWhcNMjUxMjMxMTEwMTAwWjAzMTEwLwYDVQQD Eyg1YTE2NzZmMzA1NDM4NzEzM2Y2ZDM1Y2EyZmNmNTk2M2JkYWE4OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsevwRS0vmLd8DxKFddoejRNy0v4L uSwMuWXKHoYl1Eix90mVEZbR4N8mNUEwG4dMutJZv0gchK26fdYiNFiX4Nz7TZ0P 2CxgbTmp3u2JDE8vPGZhH2Psqrfq24w8rTpwQbHD6PdByFH2EQGJ0PwZmbxOU2Rq vEvbhi7au5Y+LzRzQErJT1QFwMpJN52Ys8lHru6QzFxIl3JyAuzt4tMt9jPvlBZ+ dw2s7K8I07H8az3U3IEYygrGbUf/TLzAyU6K/dPWe1httNGCY7bKAJZs1ntrpzey jDLiquXkTjUmudbpuJVE5F15Px2oTnN7rPEvPDAxFdaj+O94W1PnYheMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoWdvMFQ4cTP201yi/PWWO9qommMB8GA1UdIwQY MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQf55R9g GkYLP8/oDGRYmRaNMy8Zfr5X/5EIRe1DxBrqObzcXUFS2zA7Cl337W3i8fk+lN1H XaaNC0ITffoS3qQJXdCpOQ/SxD+vCXQblWYTVXyUq5LFKzlD3Tc4ltMe11rwu/M6 CkEmCr9A76Fk9HF5N2pNcO0Fzw4mR+GH+9X2/y4cxz61+voZDGhSQpTXh1Z7AB+O 5eXmxU6lPAApAbsV9UVLeZo0gj6/Jg5Ib00NZMvXcL376XiabAVKQDnn3E0RTpqd ECfRSQ6s9NkYSr6pr+fKACoygk4Gasp0GcZUF1weRyUKaa56qqBepP/9q45otvP6 MM4VyLgjYKJKpA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:44:03 2025 by rpki-client