This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json) Hash identifier: YW3HasaMYArP/JeDW/s/F8v38CAhGXFIPwNwtlJBHys= Subject key identifier: F5:48:83:CB:BF:BF:C9:0B:A0:10:03:FD:27:62:A1:A6:00:55:7F:E0 Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Certificate serial: 019B2B8AC6BECD8C657B7DF5F397BAFBAB86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft Manifest number: 0488 Signing time: Wed 17 Dec 2025 09:01:13 +0000 Manifest this update: Wed 17 Dec 2025 09:01:13 +0000 Manifest next update: Thu 18 Dec 2025 09:01:13 +0000 Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=) 2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: IfL9tniXeeAT1k/xXdBCKut/ZIijtTN8klbcovBxjBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:c6:be:cd:8c:65:7b:7d:f5:f3:97:ba:fb:ab:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Validity Not Before: Dec 17 09:01:13 2025 GMT Not After : Dec 18 09:01:13 2025 GMT Subject: CN=f54883cbbfbfc90ba01003fd2762a1a600557fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:b2:68:c5:10:b4:6d:82:a2:2b:d4:38:46: d8:68:7d:55:f8:4c:8f:68:23:49:43:ad:e0:6a:17: ac:68:7a:bd:a0:b2:76:d2:84:8a:0e:fa:14:f6:24: c2:e5:f8:a3:03:0f:ae:6a:9c:f4:8b:4c:40:1a:c1: 02:e7:37:95:7b:59:08:d0:0d:10:36:89:51:7e:7c: 31:c2:53:cd:3c:6f:1b:02:c0:54:17:92:7a:4e:f0: 38:ca:f6:0d:17:96:c1:b1:6d:14:09:c7:62:9a:b8: bd:bd:b8:d3:2c:14:c1:b3:13:e6:54:c5:5a:6b:aa: 54:69:b1:64:b1:4f:3f:86:20:dc:b6:0a:2b:a2:d2: 78:10:5b:80:ec:56:54:3f:7d:96:2d:8d:69:9e:a7: 68:47:44:14:ed:8c:88:1e:a1:39:6c:1a:92:2e:90: b5:7b:6a:a9:7b:a4:62:a6:9f:da:6c:16:15:fc:30: f1:f4:22:d7:61:4f:89:d7:5f:99:1d:9b:e2:4f:30: 52:31:cd:84:aa:82:c2:43:0b:a4:c1:40:03:36:00: 53:31:e6:50:b7:2c:0f:de:78:08:eb:7a:d0:9b:94: 7c:37:07:de:d7:29:e3:66:c3:e6:39:d2:2e:50:04: c8:fa:52:4e:00:6a:57:a5:44:74:16:32:34:73:9d: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:48:83:CB:BF:BF:C9:0B:A0:10:03:FD:27:62:A1:A6:00:55:7F:E0 X509v3 Authority Key Identifier: keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8c:8c:c3:a9:9f:4f:44:4b:32:ca:58:ec:77:ab:b6:02:2e: 26:0a:80:a6:11:04:78:14:02:b5:c2:06:7a:2f:6b:78:a1:7f: 66:c8:44:c2:92:46:bf:65:7f:dc:d6:05:29:34:07:17:8c:4f: 04:5e:c1:cf:ee:fc:73:23:10:2c:2b:da:75:bb:31:7c:18:97: d9:6e:1d:8d:c0:da:d2:99:26:18:d4:cd:f7:85:49:71:2f:46: 9f:41:44:3f:ba:c2:e2:3b:bd:6b:28:d5:41:1c:bf:f5:15:6b: bf:80:2d:3d:0d:b6:87:d4:5d:8d:6f:22:5a:3d:2d:b9:d6:21: d9:e0:59:43:9c:fb:42:45:1f:44:0c:b2:ca:19:97:94:4b:46: ef:fd:d0:ad:45:98:a5:2e:09:d5:18:ec:9a:f3:1a:b7:56:6f: de:65:08:28:ea:e7:d7:69:13:a1:87:5b:6e:83:68:7a:fa:94: 19:76:d4:2c:11:8f:53:b3:a4:bd:f9:45:ac:d8:a9:d4:24:6e: fc:7c:b3:06:fa:75:ed:2b:93:dd:4e:2b:45:62:f8:08:5e:72: 36:ed:79:16:07:5b:d2:b0:b2:95:18:9b:f1:c8:ff:8e:3f:6a: dd:8e:e7:f9:a2:dd:88:f8:cd:93:06:e9:d8:34:35:d9:c4:2a: d1:dd:b4:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrisa+zYxle33185e6+6uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzk1NWY0YzJjNzE1N2FiYmRiZmU4MDljZjE5NTYwNTk0 OWE2OTgwHhcNMjUxMjE3MDkwMTEzWhcNMjUxMjE4MDkwMTEzWjAzMTEwLwYDVQQD EyhmNTQ4ODNjYmJmYmZjOTBiYTAxMDAzZmQyNzYyYTFhNjAwNTU3ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCWyaMUQtG2CoivUOEbYaH1V+EyP aCNJQ63gahesaHq9oLJ20oSKDvoU9iTC5fijAw+uapz0i0xAGsEC5zeVe1kI0A0Q NolRfnwxwlPNPG8bAsBUF5J6TvA4yvYNF5bBsW0UCcdimri9vbjTLBTBsxPmVMVa a6pUabFksU8/hiDctgorotJ4EFuA7FZUP32WLY1pnqdoR0QU7YyIHqE5bBqSLpC1 e2qpe6Ripp/abBYV/DDx9CLXYU+J11+ZHZviTzBSMc2EqoLCQwukwUADNgBTMeZQ tywP3ngI63rQm5R8Nwfe1ynjZsPmOdIuUATI+lJOAGpXpUR0FjI0c52KbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVIg8u/v8kLoBAD/SdioaYAVX/gMB8GA1UdIwQY MBaAFC3JVfTCxxV6u9v+gJzxlWBZSaaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEt MTE5ODIwYjUyMmFkLzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEtMTE5ODIwYjUyMmFk LzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4yMw6mf T0RLMspY7HertgIuJgqAphEEeBQCtcIGei9reKF/ZshEwpJGv2V/3NYFKTQHF4xP BF7Bz+78cyMQLCvadbsxfBiX2W4djcDa0pkmGNTN94VJcS9Gn0FEP7rC4ju9ayjV QRy/9RVrv4AtPQ22h9RdjW8iWj0tudYh2eBZQ5z7QkUfRAyyyhmXlEtG7/3QrUWY pS4J1RjsmvMat1Zv3mUIKOrn12kToYdbboNoevqUGXbULBGPU7OkvflFrNip1CRu /HyzBvp17SuT3U4rRWL4CF5yNu15Fgdb0rCylRib8cj/jj9q3Y7n+aLdiPjNkwbp 2DQ12cQq0d209g== -----END CERTIFICATE-----Generated at Wed Dec 17 16:17:01 2025 by rpki-client