This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json) Hash identifier: M8pCJfqzqERuCZ2wpUfBJsog970xKU1H/gTwsaXBHtE= Subject key identifier: 14:F4:11:D2:13:8B:0A:8C:A0:8A:9B:3A:1D:44:67:21:D6:7D:AD:A1 Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Certificate serial: 019B3DC7B5FA43814D9AF2D0AF5C2D3C6435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft Manifest number: 04A9 Signing time: Sat 20 Dec 2025 22:00:56 +0000 Manifest this update: Sat 20 Dec 2025 22:00:56 +0000 Manifest next update: Sun 21 Dec 2025 22:00:56 +0000 Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=) 2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: qRj1nbj+srf7KGNYzFiuXEHPY5GGZA4kbMdb7e1q0Kw=) 3: mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa (hash: SRjDoFDtCZGIa81wKDyuCO8n9PzLXPSishWYuw7XCOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:b5:fa:43:81:4d:9a:f2:d0:af:5c:2d:3c:64:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Validity Not Before: Dec 20 22:00:56 2025 GMT Not After : Dec 21 22:00:56 2025 GMT Subject: CN=14f411d2138b0a8ca08a9b3a1d446721d67dada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:70:e2:1e:2c:2e:87:82:0f:17:7b:b4:b3: 68:c6:48:5c:7d:f3:ff:00:13:9a:1b:a4:88:fd:7f: f8:d8:c8:ee:84:be:a9:83:f5:f2:47:a4:d0:87:c8: 84:17:90:8b:74:f7:48:d7:fd:28:6e:4d:ac:8d:24: de:a2:e3:93:20:5c:c0:37:ef:2a:ef:2c:77:ad:36: 47:4b:ce:ae:6f:af:52:e3:42:cc:b6:0c:9f:83:32: b5:ec:62:fa:c0:7d:5c:36:ba:2a:0d:69:bd:47:90: ff:df:94:e5:59:7f:3a:ab:eb:75:ed:9e:df:7c:d0: 3a:b8:ca:a7:e7:7f:12:cd:fd:0e:26:46:bf:fe:68: 6b:ac:b9:54:cd:28:a7:9f:15:7b:1b:c2:2b:8f:cf: ff:a0:f7:65:86:9e:18:d0:ae:f4:da:6e:49:14:b0: 2a:41:42:94:ac:97:e9:d1:e1:21:2f:b2:ec:c4:e8: 8b:a7:d8:a3:86:6d:76:c4:3d:69:c2:6b:4f:1f:a6: 6a:b0:8a:f9:c1:d0:61:f8:31:70:0a:86:1a:1a:eb: 1b:9d:0a:cf:26:f8:1e:a7:63:44:97:10:e4:33:2e: 08:1e:3d:cb:32:81:e1:57:02:a3:b5:d8:8d:63:7e: d5:38:14:da:d6:4f:09:fa:d5:75:cc:2c:58:50:ed: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:11:D2:13:8B:0A:8C:A0:8A:9B:3A:1D:44:67:21:D6:7D:AD:A1 X509v3 Authority Key Identifier: keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:13:4b:a6:e9:f7:e3:09:9d:6c:ae:77:80:e1:4e:be:be:bc: 73:03:76:c6:b3:db:43:69:e8:d4:58:6e:79:f0:37:7f:35:37: 2e:50:fe:86:69:81:89:15:68:a4:e5:83:8b:7e:f6:d3:72:4d: 79:16:08:dd:cc:a7:9a:c5:f2:74:c4:69:d6:63:53:15:e2:9b: 22:f4:9c:1c:07:9f:08:27:86:94:72:9d:d2:16:d4:c5:96:cd: 5f:80:50:25:b0:77:30:05:9c:42:bb:dc:4d:0a:28:41:60:26: bf:4c:3a:cc:7e:94:d2:ab:06:d1:f5:27:6c:90:e9:8a:a6:6b: d3:ba:28:cb:09:33:63:f2:bb:f3:fd:b4:b3:20:aa:ce:be:c2: 9d:29:8c:6e:98:7b:bb:80:9a:0d:76:fe:67:3b:ac:3a:03:29: 7c:a9:f7:24:63:27:dc:0e:60:ae:1f:91:81:87:fc:43:80:53: 0c:b3:9d:6b:64:a7:08:f3:73:dc:8c:72:e8:4e:a3:d6:5d:29: ce:bf:91:c3:e3:00:cf:ca:62:8f:d7:7d:74:ab:a2:14:60:6e: c5:8b:a1:22:3a:35:2e:32:bb:17:12:41:78:e3:9a:e0:47:52: 8c:1d:32:ed:81:a2:01:bd:4b:7a:12:2b:73:a8:fd:e5:42:2b: db:35:f3:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7X6Q4FNmvLQr1wtPGQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4 OGExZTQwHhcNMjUxMjIwMjIwMDU2WhcNMjUxMjIxMjIwMDU2WjAzMTEwLwYDVQQD EygxNGY0MTFkMjEzOGIwYThjYTA4YTliM2ExZDQ0NjcyMWQ2N2RhZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Nw4h4sLoeCDxd7tLNoxkhcffP/ ABOaG6SI/X/42MjuhL6pg/XyR6TQh8iEF5CLdPdI1/0obk2sjSTeouOTIFzAN+8q 7yx3rTZHS86ub69S40LMtgyfgzK17GL6wH1cNroqDWm9R5D/35TlWX86q+t17Z7f fNA6uMqn538Szf0OJka//mhrrLlUzSinnxV7G8Irj8//oPdlhp4Y0K702m5JFLAq QUKUrJfp0eEhL7LsxOiLp9ijhm12xD1pwmtPH6ZqsIr5wdBh+DFwCoYaGusbnQrP Jvgep2NElxDkMy4IHj3LMoHhVwKjtdiNY37VOBTa1k8J+tV1zCxYUO3EQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT0EdITiwqMoIqbOh1EZyHWfa2hMB8GA1UdIwQY MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxNLpun3 4wmdbK53gOFOvr68cwN2xrPbQ2no1FhuefA3fzU3LlD+hmmBiRVopOWDi37203JN eRYI3cynmsXydMRp1mNTFeKbIvScHAefCCeGlHKd0hbUxZbNX4BQJbB3MAWcQrvc TQooQWAmv0w6zH6U0qsG0fUnbJDpiqZr07ooywkzY/K78/20syCqzr7CnSmMbph7 u4CaDXb+ZzusOgMpfKn3JGMn3A5grh+RgYf8Q4BTDLOda2SnCPNz3Ixy6E6j1l0p zr+Rw+MAz8pij9d9dKuiFGBuxYuhIjo1LjK7FxJBeOOa4EdSjB0y7YGiAb1LehIr c6j95UIr2zXzWw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:55 2025 by rpki-client