This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json) Hash identifier: HZNzb/BtmywlysPeayWJlRhXg8V1d5qOH2AVWpjI2O8= Subject key identifier: AF:92:1F:8A:3E:9D:84:99:89:EE:C6:A7:7F:84:90:CA:68:17:42:EB Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d Certificate serial: 019B3E6C3834CFA98EF9BE1622A3A61C4D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft Manifest number: 01E1 Signing time: Sun 21 Dec 2025 01:00:38 +0000 Manifest this update: Sun 21 Dec 2025 01:00:38 +0000 Manifest next update: Mon 22 Dec 2025 01:00:38 +0000 Files and hashes: 1: hdbgy59MRssZX30bGqV8gIYXM48.roa (hash: g1IyZ0aHYMFjjiI9SIYZwd4GtNo/PD9i0KvcrdPt5KQ=) 2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: xGc1HJsIuBWL2nzdhIgVTId64C21aU9/UfEYDuExZEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:38:34:cf:a9:8e:f9:be:16:22:a3:a6:1c:4d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d Validity Not Before: Dec 21 01:00:38 2025 GMT Not After : Dec 22 01:00:38 2025 GMT Subject: CN=af921f8a3e9d849989eec6a77f8490ca681742eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:ed:fb:65:0b:5b:fb:f1:fe:64:4b:ed:dc: 7d:b1:28:cf:15:60:8f:30:89:54:90:91:a5:52:9e: f5:f4:01:f6:c1:b2:22:56:d0:1d:ab:09:e4:34:46: 58:63:a4:ee:52:19:c8:0b:ff:00:f0:cd:0f:8a:08: 8c:43:62:41:5c:53:03:fe:d4:9a:5d:d9:9d:34:fa: e8:f5:87:bc:81:ce:ed:7a:de:89:9c:f2:86:1b:da: 48:96:22:03:ae:85:79:d9:38:b1:79:21:be:49:5e: ec:46:4e:3d:3f:61:d2:d7:93:c4:4e:20:42:62:6e: ff:0e:e1:c3:f4:c6:b7:68:73:3a:3e:21:d9:d2:2f: e5:51:f6:1e:6d:1d:db:cb:70:73:bb:c5:92:90:59: 7a:f3:02:71:c8:cb:df:8a:d3:92:34:89:4a:d0:7e: d6:9f:bd:7a:07:2c:bb:84:ee:6e:c2:af:e5:91:e0: 98:b6:02:fb:a3:8f:13:fa:a0:6b:84:d3:3c:67:11: 0a:c6:d0:0d:f3:5f:c0:d3:e4:0b:9a:83:39:11:86: 83:ee:ab:cf:77:f7:b6:6d:6d:aa:c0:9c:29:e5:5a: 0a:2b:fd:2c:27:93:2d:8a:c6:f7:72:86:4a:4c:f9: 9a:58:60:c9:62:a1:b1:36:21:8f:c4:17:fc:d3:52: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:92:1F:8A:3E:9D:84:99:89:EE:C6:A7:7F:84:90:CA:68:17:42:EB X509v3 Authority Key Identifier: keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1d:f4:a5:b8:dd:a1:5c:30:ac:42:bd:74:24:34:a4:16:a4: 3f:9f:a8:37:fa:66:ff:ef:1a:d9:62:16:3f:8a:87:cf:21:a4: bf:ca:3e:3b:a8:5b:39:92:80:1d:c1:6d:b4:b1:e6:d2:b8:9a: 43:b2:5a:b6:08:0f:f6:76:e6:b8:0c:25:67:64:89:fb:43:5f: b5:a9:b9:a3:ac:b0:fa:29:19:0d:52:9a:01:be:00:50:b3:25: d7:29:98:5f:75:49:2c:b4:75:53:5e:cf:88:6a:49:47:ba:1a: 8f:e9:65:ba:07:65:ea:80:8d:e4:76:e4:50:0d:00:18:e7:80: 23:24:97:c3:d5:d6:83:02:22:46:42:17:fa:59:e6:2c:88:a4: fa:f4:bc:f2:06:9f:df:ca:3f:3b:3b:26:40:2c:9b:64:ee:ef: 7b:d9:a3:13:b9:5c:78:1a:3d:21:15:e5:92:79:af:64:2c:7b: d0:0d:ed:f9:cc:0b:8d:1b:d0:fe:a1:45:b0:26:dc:b8:d5:08: b4:78:95:77:84:03:1a:7b:43:b3:75:59:8a:67:29:91:0f:a4: d5:c3:02:3c:65:fc:03:fa:21:8d:81:e2:9b:0e:de:1d:19:78: 75:70:bc:8c:21:50:df:a8:05:a8:5f:90:af:56:93:e7:87:66: 93:67:cf:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bDg0z6mO+b4WIqOmHE0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj YmE2MGQwHhcNMjUxMjIxMDEwMDM4WhcNMjUxMjIyMDEwMDM4WjAzMTEwLwYDVQQD EyhhZjkyMWY4YTNlOWQ4NDk5ODllZWM2YTc3Zjg0OTBjYTY4MTc0MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOHt+2ULW/vx/mRL7dx9sSjPFWCP MIlUkJGlUp719AH2wbIiVtAdqwnkNEZYY6TuUhnIC/8A8M0PigiMQ2JBXFMD/tSa XdmdNPro9Ye8gc7tet6JnPKGG9pIliIDroV52TixeSG+SV7sRk49P2HS15PETiBC Ym7/DuHD9Ma3aHM6PiHZ0i/lUfYebR3by3Bzu8WSkFl68wJxyMvfitOSNIlK0H7W n716Byy7hO5uwq/lkeCYtgL7o48T+qBrhNM8ZxEKxtAN81/A0+QLmoM5EYaD7qvP d/e2bW2qwJwp5VoKK/0sJ5Mtisb3coZKTPmaWGDJYqGxNiGPxBf801LA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+SH4o+nYSZie7Gp3+EkMpoF0LrMB8GA1UdIwQY MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR30pbjd oVwwrEK9dCQ0pBakP5+oN/pm/+8a2WIWP4qHzyGkv8o+O6hbOZKAHcFttLHm0ria Q7JatggP9nbmuAwlZ2SJ+0Nftam5o6yw+ikZDVKaAb4AULMl1ymYX3VJLLR1U17P iGpJR7oaj+llugdl6oCN5HbkUA0AGOeAIySXw9XWgwIiRkIX+lnmLIik+vS88gaf 38o/OzsmQCybZO7ve9mjE7lceBo9IRXlknmvZCx70A3t+cwLjRvQ/qFFsCbcuNUI tHiVd4QDGntDs3VZimcpkQ+k1cMCPGX8A/ohjYHimw7eHRl4dXC8jCFQ36gFqF+Q r1aT54dmk2fPPw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:19 2025 by rpki-client