This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json) Hash identifier: TgIaZM0PIHqRAIuTgJtjO/NkE8hfqHNWFUx6Ni8KLR4= Subject key identifier: 37:B9:D8:98:E6:D8:B7:A0:68:0B:E7:FC:70:6B:59:F5:A3:4B:75:15 Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Certificate serial: 019B38D88A94539AD6E96B67E8512433B4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft Manifest number: 073F Signing time: Fri 19 Dec 2025 23:01:13 +0000 Manifest this update: Fri 19 Dec 2025 23:01:13 +0000 Manifest next update: Sat 20 Dec 2025 23:01:13 +0000 Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=) 2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: T6b1y5HkHdkhBgv/blhVFh3SbKqKIYesS2SdsTSwOGg=) 3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=) 4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:8a:94:53:9a:d6:e9:6b:67:e8:51:24:33:b4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Validity Not Before: Dec 19 23:01:13 2025 GMT Not After : Dec 20 23:01:13 2025 GMT Subject: CN=37b9d898e6d8b7a0680be7fc706b59f5a34b7515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:30:99:a0:e2:4e:27:77:c1:72:cb:d5:62:f9: d4:6a:52:9c:ac:56:bc:21:2b:26:e3:58:c2:19:aa: b0:f2:c2:c7:99:3b:b7:ad:a1:13:10:47:d4:48:01: df:0e:04:47:67:d7:43:16:ba:18:db:c4:b5:0c:bc: 2d:0b:93:19:0e:85:0b:4f:d8:6d:e9:d1:ff:3e:8c: 7b:aa:a8:51:31:0e:9f:8d:04:2b:7e:5f:5a:b2:ee: d9:6d:de:5f:64:04:66:5f:c9:14:c3:b3:2f:9b:ab: 2d:5d:b6:5c:e7:2a:b1:4d:d2:02:19:17:0e:74:86: 3e:90:38:81:a8:73:81:b1:5b:8f:b1:4e:0a:8b:49: c2:cc:bd:e1:3c:69:b3:57:f1:1f:ae:ae:52:21:9d: 63:37:62:e7:be:e6:48:60:04:00:33:c6:78:46:4e: c6:6b:02:a8:0c:b4:bc:65:82:ba:bc:a5:e9:25:ef: 47:9a:ae:a0:8d:f5:2c:df:fb:de:7b:52:25:4c:88: 4e:06:9c:f8:dc:38:08:64:36:f0:04:89:50:16:0d: 42:0a:1b:7f:7e:50:2d:a5:4a:92:f8:cb:0d:13:ec: 57:e5:51:99:64:ea:9b:f6:5a:30:50:b0:95:89:65: c9:b2:c1:49:87:53:34:bd:24:e6:0d:44:b9:5a:49: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:D8:98:E6:D8:B7:A0:68:0B:E7:FC:70:6B:59:F5:A3:4B:75:15 X509v3 Authority Key Identifier: keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e9:01:ad:90:a0:1c:98:ac:16:98:d6:1c:40:d5:31:6f:5f: c1:19:fb:d1:87:78:4c:1b:56:df:59:4e:40:60:9a:6f:91:d6: 97:e8:ec:7b:e0:89:77:70:3f:f1:1d:4a:86:04:71:e1:94:b3: c7:b3:d6:72:1c:d1:1b:d8:d7:d3:d0:bf:40:46:80:d8:19:0c: f6:53:b6:06:56:3a:ad:d3:6e:1f:2c:93:fc:ea:19:e1:c8:67: aa:fb:16:0e:b8:67:f0:4a:f2:a0:cd:f0:f2:c4:b6:c5:c4:82: 28:88:22:c6:f6:9f:61:1c:a5:00:3f:6d:18:ad:ff:97:a1:1f: 5e:f8:67:da:2d:10:32:d5:99:50:a1:df:8d:3b:18:e5:12:a2: 3c:ac:ae:22:1f:b3:7b:a3:c0:e9:6e:cc:38:91:8f:c3:71:2a: ad:29:15:e9:58:1c:56:b2:2e:be:4a:ef:39:5a:d9:4c:62:59: c6:80:59:dc:5e:a8:79:9c:03:f7:4f:8b:4d:ff:13:7c:77:17: b2:8c:6f:70:9f:99:58:d8:2a:30:d5:0f:04:26:b7:3a:69:d5: f5:24:fd:70:2f:03:8c:28:4b:37:e7:f4:fb:f8:2c:6b:ca:27: 05:73:e5:26:8e:d5:20:e9:95:4c:c6:f7:f8:77:0e:8e:fb:23: 46:ed:e1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42IqUU5rW6Wtn6FEkM7SpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5 NTZjYWEwHhcNMjUxMjE5MjMwMTEzWhcNMjUxMjIwMjMwMTEzWjAzMTEwLwYDVQQD EygzN2I5ZDg5OGU2ZDhiN2EwNjgwYmU3ZmM3MDZiNTlmNWEzNGI3NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzCZoOJOJ3fBcsvVYvnUalKcrFa8 ISsm41jCGaqw8sLHmTu3raETEEfUSAHfDgRHZ9dDFroY28S1DLwtC5MZDoULT9ht 6dH/Pox7qqhRMQ6fjQQrfl9asu7Zbd5fZARmX8kUw7Mvm6stXbZc5yqxTdICGRcO dIY+kDiBqHOBsVuPsU4Ki0nCzL3hPGmzV/Efrq5SIZ1jN2LnvuZIYAQAM8Z4Rk7G awKoDLS8ZYK6vKXpJe9Hmq6gjfUs3/vee1IlTIhOBpz43DgIZDbwBIlQFg1CCht/ flAtpUqS+MsNE+xX5VGZZOqb9lowULCViWXJssFJh1M0vSTmDUS5WkkxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe52Jjm2LegaAvn/HBrWfWjS3UVMB8GA1UdIwQY MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABekBrZCg HJisFpjWHEDVMW9fwRn70Yd4TBtW31lOQGCab5HWl+jse+CJd3A/8R1KhgRx4ZSz x7PWchzRG9jX09C/QEaA2BkM9lO2BlY6rdNuHyyT/OoZ4chnqvsWDrhn8EryoM3w 8sS2xcSCKIgixvafYRylAD9tGK3/l6EfXvhn2i0QMtWZUKHfjTsY5RKiPKyuIh+z e6PA6W7MOJGPw3EqrSkV6VgcVrIuvkrvOVrZTGJZxoBZ3F6oeZwD90+LTf8TfHcX soxvcJ+ZWNgqMNUPBCa3OmnV9ST9cC8DjChLN+f0+/gsa8onBXPlJo7VIOmVTMb3 +HcOjvsjRu3hxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:36 2025 by rpki-client