This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json) Hash identifier: 3Y9IUQSLZXt38xvamcEoGV6SMHxp0MS3zxO2Q6dhIh4= Subject key identifier: AB:12:72:7D:5A:93:9F:D0:40:B6:1E:30:75:69:99:20:77:21:EB:4E Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Certificate serial: 019B3CEC39BA4B8DD6C8294243641D7300C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft Manifest number: B9 Signing time: Sat 20 Dec 2025 18:01:12 +0000 Manifest this update: Sat 20 Dec 2025 18:01:12 +0000 Manifest next update: Sun 21 Dec 2025 18:01:12 +0000 Files and hashes: 1: 8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa (hash: dTWrB7/Bcq7TMpdoMtRKk5plCZVXL7i81JXpAEWqK4g=) 2: 9WhKoBtA9w1RuKedqOS6XFmsO3I.roa (hash: CbHe2gPopFpWls+9aZrP72edEhK5Goer7R+Ctk2HNZY=) 3: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: LIrXbKpjESz+U4NhhJmLyd34Dkbmx9yDd46IbZLbcfk=) 4: TleCnyfGdZ_mECH_iBY0pup0z6g.roa (hash: HrmWALEujgW08ieMDEygOWdRlqfGF9a1VyxcNiVM0Vg=) 5: cs2tcig_htwGIdVMlsEbECr1KUs.roa (hash: Ltjte90H2AR0ZhY5ZboX1HAAoGLfM6x2vjLJ6VTAc2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:39:ba:4b:8d:d6:c8:29:42:43:64:1d:73:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Validity Not Before: Dec 20 18:01:12 2025 GMT Not After : Dec 21 18:01:12 2025 GMT Subject: CN=ab12727d5a939fd040b61e30756999207721eb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:45:54:38:b8:95:89:91:aa:cb:ec:19:32: fe:17:48:9f:35:8d:fa:d7:bf:65:17:d1:78:29:b4: d3:79:65:a2:a0:f7:9f:f3:96:f3:aa:ef:86:00:76: cc:cf:b2:f9:f4:4a:6a:62:c6:2c:74:0e:c3:e1:fe: c0:8b:c9:e1:ee:ba:19:51:3e:5e:14:aa:dd:0e:fe: 5f:d7:a6:27:dd:03:a8:b7:ca:4a:b4:5d:8f:3e:10: e4:43:46:bc:ba:73:1e:ff:84:9a:54:27:66:a1:1b: c3:37:40:dd:38:d8:da:51:1c:f2:e0:47:9a:74:c1: cc:c9:e6:99:04:df:64:9d:5d:cd:04:d7:fa:23:32: 92:4a:18:15:63:f2:e1:0e:5c:e0:93:cf:64:2a:14: 03:56:6e:d2:d0:1c:78:67:8d:4f:ab:4b:2f:7b:76: 47:64:2d:9c:99:86:8e:e8:16:d9:2c:35:d2:f0:b2: ba:22:64:8a:73:16:ed:11:ec:45:c5:d4:a2:8c:1f: 41:f0:61:40:06:17:80:fd:d9:a3:f1:67:83:2d:8e: 2d:75:35:8b:b7:45:f0:f2:e6:7b:75:3d:3f:86:be: 1a:c0:81:ca:0a:f8:6b:d5:ec:b7:13:fc:44:c9:0a: 45:e6:25:f2:10:d3:ed:f1:60:c8:83:91:d7:06:a8: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:72:7D:5A:93:9F:D0:40:B6:1E:30:75:69:99:20:77:21:EB:4E X509v3 Authority Key Identifier: keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:12:7c:e0:b9:5b:07:f7:cc:3e:e7:cd:3d:2a:5d:71:5d:79: bf:2e:d3:d8:70:87:d1:40:d7:03:4a:36:a1:13:5c:e4:69:f0: 85:81:4e:5b:af:4b:7a:b3:32:8f:bd:c4:9b:ca:a3:5f:5f:b9: 70:89:41:56:15:24:6d:d3:40:b0:75:d3:3c:7d:45:7c:92:00: 61:99:e2:37:51:43:9f:63:f8:fe:cc:49:fa:64:fa:77:5b:e1: 41:74:e4:50:5e:38:b8:22:d8:f8:be:f8:3b:94:47:17:6c:cf: 62:a0:d5:f8:9b:b9:fa:7e:8c:90:fd:59:6c:96:c5:eb:1d:c5: e4:82:76:8a:93:7f:91:1e:cc:96:83:6e:26:9e:17:b1:96:1e: c7:71:5f:00:81:95:94:27:ce:27:8e:ae:2e:55:ea:f9:7a:4f: 5c:77:07:c0:a6:93:26:e8:4e:f3:c0:36:9c:31:96:26:70:b9: cf:6a:e3:52:5a:d9:c6:00:bd:4a:fb:c4:f9:39:fd:f0:c5:a3: b9:98:b0:61:c5:d1:13:c8:01:b3:7b:81:ea:3a:02:ff:cd:32: 3e:5e:42:b4:c3:c9:be:7a:ff:f4:00:1f:8f:80:25:36:e6:7b: 73:4a:03:75:ef:a6:12:1c:a5:21:9c:30:a6:a8:4c:15:52:0b: b1:55:42:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Dm6S43WyClCQ2QdcwDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl ZDBlMDEwHhcNMjUxMjIwMTgwMTEyWhcNMjUxMjIxMTgwMTEyWjAzMTEwLwYDVQQD EyhhYjEyNzI3ZDVhOTM5ZmQwNDBiNjFlMzA3NTY5OTkyMDc3MjFlYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ptFVDi4lYmRqsvsGTL+F0ifNY36 179lF9F4KbTTeWWioPef85bzqu+GAHbMz7L59EpqYsYsdA7D4f7Ai8nh7roZUT5e FKrdDv5f16Yn3QOot8pKtF2PPhDkQ0a8unMe/4SaVCdmoRvDN0DdONjaURzy4Eea dMHMyeaZBN9knV3NBNf6IzKSShgVY/LhDlzgk89kKhQDVm7S0Bx4Z41Pq0sve3ZH ZC2cmYaO6BbZLDXS8LK6ImSKcxbtEexFxdSijB9B8GFABheA/dmj8WeDLY4tdTWL t0Xw8uZ7dT0/hr4awIHKCvhr1ey3E/xEyQpF5iXyENPt8WDIg5HXBqjjVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsScn1ak5/QQLYeMHVpmSB3IetOMB8GA1UdIwQY MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut M2E2ZGU5OWVkZTQ3LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3 LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhJ84Llb B/fMPufNPSpdcV15vy7T2HCH0UDXA0o2oRNc5GnwhYFOW69LerMyj73Em8qjX1+5 cIlBVhUkbdNAsHXTPH1FfJIAYZniN1FDn2P4/sxJ+mT6d1vhQXTkUF44uCLY+L74 O5RHF2zPYqDV+Ju5+n6MkP1ZbJbF6x3F5IJ2ipN/kR7MloNuJp4XsZYex3FfAIGV lCfOJ46uLlXq+XpPXHcHwKaTJuhO88A2nDGWJnC5z2rjUlrZxgC9SvvE+Tn98MWj uZiwYcXRE8gBs3uB6joC/80yPl5CtMPJvnr/9AAfj4AlNuZ7c0oDde+mEhylIZww pqhMFVILsVVCrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:54:28 2025 by rpki-client