This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json) Hash identifier: 7xvL7hsTIVKs884AwyY084d3A0JmgszlWYn/N2jndvI= Subject key identifier: 67:88:BA:8D:1B:72:E5:60:78:B2:48:AF:7B:2A:D3:6B:26:32:40:E4 Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7 Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7 Certificate serial: 019B3C7E3747355745CC45B7B4CFBB64517B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:01:03 +0000 Manifest this update: Sat 20 Dec 2025 16:01:03 +0000 Manifest next update: Sun 21 Dec 2025 16:01:03 +0000 Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=) 2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=) 3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: kFaKeaAKNZzCsodkbYvz8Q0XXaSjCfkOElhwk8u5Uvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:37:47:35:57:45:cc:45:b7:b4:cf:bb:64:51:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7 Validity Not Before: Dec 20 16:01:03 2025 GMT Not After : Dec 21 16:01:03 2025 GMT Subject: CN=6788ba8d1b72e56078b248af7b2ad36b263240e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:57:4d:8e:1b:fc:0c:c6:94:95:52:b4:9f: 2d:01:d1:d0:62:8f:e9:b3:ce:09:27:2a:88:05:93: b8:75:e4:eb:8d:9c:b9:dd:82:d2:62:6e:b2:ef:7d: 4e:de:0d:cc:26:d5:e4:5f:e1:f8:ca:df:ef:72:db: ad:9d:f5:7f:8d:62:a4:61:6b:77:99:3e:b6:0a:07: 75:05:b5:3f:9f:93:4a:9c:a4:33:b5:1f:d4:59:95: d5:92:11:d9:e2:9b:ed:03:80:e3:3c:e7:19:20:0b: 64:21:45:28:7f:23:24:89:42:71:0d:36:1b:42:95: 43:14:1f:ee:69:ae:46:a6:fd:9d:5d:75:7b:16:6d: d9:86:fb:82:b8:1e:dc:4f:4b:b2:d2:ae:6c:dd:7f: 64:45:a5:c1:80:68:19:c1:03:f1:78:83:1d:11:0a: 46:91:29:24:77:71:8b:18:a6:48:78:37:08:f9:08: 28:d7:52:23:4d:a5:f0:d4:2a:64:18:41:2a:d5:47: ed:53:43:bc:b3:0e:bd:b9:03:38:4a:c1:a7:be:29: a3:81:73:9d:66:c1:23:94:1c:df:91:b1:fd:cd:cf: 3c:78:42:49:b1:ae:f0:b0:63:c7:2f:f5:0d:e3:04: 70:85:17:65:4c:e5:11:41:a8:14:88:03:0b:34:3d: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:BA:8D:1B:72:E5:60:78:B2:48:AF:7B:2A:D3:6B:26:32:40:E4 X509v3 Authority Key Identifier: keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e2:a5:a0:31:48:3c:32:09:2a:33:ad:29:31:c2:33:db:ce: 86:27:ca:68:33:db:20:e6:27:a4:11:e2:9e:a2:fd:5c:26:95: 7d:57:4a:38:89:6a:82:ed:64:a0:b7:5e:25:f2:67:da:56:ff: 36:c8:92:76:0b:de:c8:9c:bb:7d:29:43:81:38:74:f1:23:23: 1c:1e:a4:a6:1f:31:c0:b2:1b:8c:82:d3:bb:a4:d8:36:f7:23: 3a:3c:2b:df:df:73:b5:3e:8b:05:ee:05:14:23:7b:54:fa:b4: f0:50:8c:f1:3a:37:99:e9:12:1d:37:51:89:b9:87:2e:37:af: 3a:41:f7:39:a5:1b:86:45:7f:4a:c0:43:6f:b3:83:e4:a2:65: 5f:f5:66:13:ff:b5:16:7b:a5:27:42:72:54:78:72:13:93:bc: 38:88:8d:f7:c0:4f:76:90:b4:df:bf:a8:f9:fb:15:89:72:38: 98:67:8e:35:53:67:3b:62:84:a9:00:52:10:64:e9:7c:8f:0b: c7:21:ee:7d:0e:70:ee:77:7b:2a:cc:d1:0f:ed:34:ea:db:e9: df:44:e2:a3:92:98:d0:8d:d2:74:74:11:b8:04:7e:9d:0d:a5: 3e:04:3b:22:f1:fd:3a:f2:5f:32:d7:2b:a0:e3:75:72:b7:26: 1e:4c:fc:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fjdHNVdFzEW3tM+7ZFF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGI5ZTE4ZWViMDk0ZDkxMmRlYjU5NWRjN2FhYzg2NjFi MGQ2YzcwHhcNMjUxMjIwMTYwMTAzWhcNMjUxMjIxMTYwMTAzWjAzMTEwLwYDVQQD Eyg2Nzg4YmE4ZDFiNzJlNTYwNzhiMjQ4YWY3YjJhZDM2YjI2MzI0MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGZXTY4b/AzGlJVStJ8tAdHQYo/p s84JJyqIBZO4deTrjZy53YLSYm6y731O3g3MJtXkX+H4yt/vctutnfV/jWKkYWt3 mT62Cgd1BbU/n5NKnKQztR/UWZXVkhHZ4pvtA4DjPOcZIAtkIUUofyMkiUJxDTYb QpVDFB/uaa5Gpv2dXXV7Fm3ZhvuCuB7cT0uy0q5s3X9kRaXBgGgZwQPxeIMdEQpG kSkkd3GLGKZIeDcI+Qgo11IjTaXw1CpkGEEq1UftU0O8sw69uQM4SsGnvimjgXOd ZsEjlBzfkbH9zc88eEJJsa7wsGPHL/UN4wRwhRdlTOURQagUiAMLND0NKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeIuo0bcuVgeLJIr3sq02smMkDkMB8GA1UdIwQY MBaAFJQLnhjusJTZEt61ldx6rIZhsNbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgt NTY1OTZiZWVkMWM3LzEvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgtNTY1OTZiZWVkMWM3 LzEvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+KloDFI PDIJKjOtKTHCM9vOhifKaDPbIOYnpBHinqL9XCaVfVdKOIlqgu1koLdeJfJn2lb/ NsiSdgveyJy7fSlDgTh08SMjHB6kph8xwLIbjILTu6TYNvcjOjwr399ztT6LBe4F FCN7VPq08FCM8To3mekSHTdRibmHLjevOkH3OaUbhkV/SsBDb7OD5KJlX/VmE/+1 FnulJ0JyVHhyE5O8OIiN98BPdpC037+o+fsViXI4mGeONVNnO2KEqQBSEGTpfI8L xyHufQ5w7nd7KszRD+006tvp30Tio5KY0I3SdHQRuAR+nQ2lPgQ7IvH9OvJfMtcr oON1crcmHkz8Tw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:47:22 2025 by rpki-client