This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json) Hash identifier: Km4y/t9VqpxZM2owL3/YAbQ1IidEinQuH9wtb3QBVwc= Subject key identifier: E1:D7:0E:23:AD:DF:FB:D3:52:E5:69:8F:65:EB:67:B3:76:05:E3:70 Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Certificate serial: 019B390FAD23F98EB6A0CBA1B97F7B36E74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft Manifest number: 1727 Signing time: Sat 20 Dec 2025 00:01:27 +0000 Manifest this update: Sat 20 Dec 2025 00:01:27 +0000 Manifest next update: Sun 21 Dec 2025 00:01:27 +0000 Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: GpDZsoVWCd/SnpvfWBmGtXqeP1d4B7JTuGIABrr6V10=) 2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:ad:23:f9:8e:b6:a0:cb:a1:b9:7f:7b:36:e7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Validity Not Before: Dec 20 00:01:27 2025 GMT Not After : Dec 21 00:01:27 2025 GMT Subject: CN=e1d70e23addffbd352e5698f65eb67b37605e370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:3a:07:68:78:b9:6e:a4:06:36:c8:5c:b7: 0f:9b:23:a0:c2:b5:37:6b:32:04:c7:88:af:40:1b: af:84:19:b5:08:e4:17:a7:3d:be:9b:e4:8c:7d:b5: 8b:5b:b0:b7:0f:23:b2:1a:b0:fa:72:a9:45:bd:67: d0:db:43:40:ef:f5:56:d7:50:5c:96:c1:f4:6a:45: f2:64:2f:00:71:fe:92:32:e3:d0:dc:e0:4c:98:ed: 51:51:b4:1f:fe:54:21:15:b0:e2:a5:86:2c:b4:9c: af:b2:48:ed:ff:2d:0d:5c:55:20:c1:99:0d:67:1a: 6f:bb:e0:2f:67:16:ba:7b:96:f8:e1:6f:2c:77:1e: 8f:ee:b2:32:51:56:fb:f9:9d:64:06:87:12:eb:76: 91:11:4b:f4:16:21:c6:ec:68:4f:cb:2c:45:c5:32: 4e:da:3f:27:ab:fe:bb:d3:6b:35:e8:58:1a:8b:0b: cf:be:cf:e7:44:37:fc:02:12:fd:1b:59:46:93:ab: 1e:14:46:87:f4:20:57:7a:b7:73:67:16:13:f7:b6: e2:a5:f8:0d:32:cd:0e:eb:5d:d9:fa:1b:96:fe:69: 08:98:68:4d:91:b9:5b:21:77:61:64:d1:a5:fb:1f: 1b:44:30:5d:7b:2b:c1:9a:44:e8:1a:98:27:94:8e: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D7:0E:23:AD:DF:FB:D3:52:E5:69:8F:65:EB:67:B3:76:05:E3:70 X509v3 Authority Key Identifier: keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:16:32:22:88:e5:f2:b9:68:a6:93:a6:30:06:9f:fe:ae:79: e4:c9:9e:50:ba:64:6f:0f:10:1b:8a:9d:b4:0b:a0:16:4c:68: f8:d8:73:b7:8a:df:bb:26:09:24:63:15:52:b1:86:4a:f7:26: 4e:05:dd:98:01:46:ad:8a:f0:d3:3e:53:07:8b:9c:48:20:46: 78:df:ed:49:15:2d:33:38:9a:a5:a6:ce:cd:40:f2:64:0a:3f: 4e:cc:2e:d8:18:bc:40:31:6c:f1:1e:93:b9:67:92:39:50:de: 8f:4a:39:ff:71:be:6e:ad:70:b3:1f:06:9e:5e:d8:91:96:ae: 3b:fd:b0:41:26:90:51:81:6c:e8:a5:cf:b7:66:77:ee:1c:43: 2a:85:2d:00:a1:da:e6:71:7b:9b:7a:46:f4:6a:a1:3c:06:8a: 5a:b1:7f:bf:5b:fc:f5:43:5e:37:fd:38:18:89:7f:a6:bc:a1: cc:c4:1d:54:3f:3d:3f:74:0f:2e:4b:40:ba:d0:86:bc:f2:6e: aa:22:ed:bc:1f:a1:39:94:21:c1:69:84:8b:4b:be:c6:3a:bc: 67:26:2d:ed:d7:e3:09:3c:09:4f:b5:93:93:9d:30:c2:35:6a: 16:f2:8a:78:71:ab:44:71:15:54:10:77:57:4f:ec:bb:96:2b: cb:8e:71:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D60j+Y62oMuhuX97NudPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy Nzg1MjEwHhcNMjUxMjIwMDAwMTI3WhcNMjUxMjIxMDAwMTI3WjAzMTEwLwYDVQQD EyhlMWQ3MGUyM2FkZGZmYmQzNTJlNTY5OGY2NWViNjdiMzc2MDVlMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GE6B2h4uW6kBjbIXLcPmyOgwrU3 azIEx4ivQBuvhBm1COQXpz2+m+SMfbWLW7C3DyOyGrD6cqlFvWfQ20NA7/VW11Bc lsH0akXyZC8Acf6SMuPQ3OBMmO1RUbQf/lQhFbDipYYstJyvskjt/y0NXFUgwZkN Zxpvu+AvZxa6e5b44W8sdx6P7rIyUVb7+Z1kBocS63aREUv0FiHG7GhPyyxFxTJO 2j8nq/6702s16FgaiwvPvs/nRDf8AhL9G1lGk6seFEaH9CBXerdzZxYT97bipfgN Ms0O613Z+huW/mkImGhNkblbIXdhZNGl+x8bRDBdeyvBmkToGpgnlI71yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHXDiOt3/vTUuVpj2XrZ7N2BeNwMB8GA1UdIwQY MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3 LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBYyIojl 8rloppOmMAaf/q555MmeULpkbw8QG4qdtAugFkxo+Nhzt4rfuyYJJGMVUrGGSvcm TgXdmAFGrYrw0z5TB4ucSCBGeN/tSRUtMziapabOzUDyZAo/Tswu2Bi8QDFs8R6T uWeSOVDej0o5/3G+bq1wsx8Gnl7YkZauO/2wQSaQUYFs6KXPt2Z37hxDKoUtAKHa 5nF7m3pG9GqhPAaKWrF/v1v89UNeN/04GIl/pryhzMQdVD89P3QPLktAutCGvPJu qiLtvB+hOZQhwWmEi0u+xjq8ZyYt7dfjCTwJT7WTk50wwjVqFvKKeHGrRHEVVBB3 V0/su5Yry45xWg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:09:13 2025 by rpki-client