This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft File: lfdgXoUMnb8X2vC6OONvzGPCy_o.mft (raw, json) Hash identifier: Ayv8BwZmqWjWiizgbfND5LYbJPCU/hyESK5o8dL9Z3A= Subject key identifier: 73:64:57:8F:56:66:81:A5:9A:06:F6:3B:9E:EE:E7:2A:43:59:FF:10 Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa Certificate serial: 019B6DA140D7497DDD2D0AF1E2E11C629ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 05:00:43 +0000 Manifest this update: Tue 30 Dec 2025 05:00:43 +0000 Manifest next update: Wed 31 Dec 2025 05:00:43 +0000 Files and hashes: 1: 5-Dy59i1_U0ZRMyz_6apK6err6E.roa (hash: HTKVf7q+nYn6Qr/j/qsCTy9hUzuLpJ7dJx3pfn4b6GM=) 2: lfdgXoUMnb8X2vC6OONvzGPCy_o.crl (hash: Xm10Ek+DZ3mp2l1dC98Xcjr9BolTTJF+wV0Yg9D0pM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:40:d7:49:7d:dd:2d:0a:f1:e2:e1:1c:62:9a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa Validity Not Before: Dec 30 05:00:43 2025 GMT Not After : Dec 31 05:00:43 2025 GMT Subject: CN=7364578f566681a59a06f63b9eeee72a4359ff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:62:44:f1:33:4a:03:04:39:dd:31:98:8b: 51:d5:a7:64:73:4b:4d:6e:96:12:52:70:73:10:4c: 14:47:3d:a4:f5:47:f6:80:94:ac:19:94:06:81:a6: 9e:9c:c8:44:51:20:e0:74:37:ac:5b:cc:09:8e:82: 3f:ce:34:62:18:ca:a3:ac:91:ad:c2:d7:27:9f:46: 4f:3a:c0:69:69:a3:95:fb:c5:fc:d6:0a:69:ec:a7: 92:5c:f5:7d:29:02:b3:bc:26:c9:87:e1:fe:2d:a8: 99:c1:f5:8d:2a:b6:d0:a0:51:df:94:62:83:00:15: 76:94:ff:72:2b:17:01:2c:4d:20:92:57:d9:4f:fd: c8:e1:be:f5:cd:d5:12:00:63:38:20:1c:cb:df:de: 5c:36:f5:c3:3b:85:d0:b7:be:a0:82:1e:3c:ce:dc: ea:30:df:06:05:3c:da:d6:da:d1:b8:67:42:17:21: 1f:7b:d5:b1:65:0d:5a:57:0c:bb:31:5a:31:4a:dd: 9b:11:b4:02:f5:96:59:1b:50:bf:5a:d7:f5:5c:f1: 12:24:51:c5:cd:85:a9:8d:aa:50:c9:a7:ed:d5:d3: 46:75:eb:73:d4:f4:15:9d:97:8e:0d:48:51:26:db: c3:00:6a:d6:b9:e2:88:71:ae:91:43:d5:6d:6f:2b: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:64:57:8F:56:66:81:A5:9A:06:F6:3B:9E:EE:E7:2A:43:59:FF:10 X509v3 Authority Key Identifier: keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1e:cf:77:e7:b1:39:90:28:56:6c:25:8f:33:a8:8f:97:86: 5f:f5:f8:e4:84:ab:d5:d8:60:cf:c4:b9:5b:3e:ba:72:f4:0f: 89:79:d5:af:81:9f:b3:2c:a2:9c:e9:45:4a:5c:b2:9f:9c:05: d4:4b:c9:dd:39:e2:ca:28:50:05:27:75:a4:ee:85:c5:27:74: b2:33:fd:00:3d:a8:d2:6b:7f:69:78:45:d1:4e:e7:df:af:7b: fe:11:23:b3:40:eb:ce:4e:7f:87:02:f6:d5:c6:1c:58:ce:0b: 6e:19:d4:7c:37:c8:ac:91:1f:22:23:bd:02:59:39:0f:9d:38: 81:5a:ba:bb:09:8a:de:ad:c6:64:40:67:b6:e7:b5:48:ac:0b: 55:86:3b:60:db:b8:6b:37:0b:f9:44:72:2c:11:32:2b:cf:f5: 38:14:17:99:1c:af:b5:00:a1:86:28:74:e4:67:71:38:1d:b7: 45:73:63:37:44:c0:35:8a:01:e9:34:67:4e:95:43:c3:8e:b3: 6b:f5:85:3c:0f:1a:0d:59:28:1d:8f:c0:3c:c9:ab:df:7b:c8: 85:83:b7:46:d7:89:67:30:c6:90:d0:7f:33:c9:d6:a7:5f:78: bd:f1:20:e3:1f:4a:b6:e1:f1:46:7d:57:56:15:ff:de:6e:ba: 01:dd:33:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoUDXSX3dLQrx4uEcYprcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Zjc2MDVlODUwYzlkYmYxN2RhZjBiYTM4ZTM2ZmNjNjNj MmNiZmEwHhcNMjUxMjMwMDUwMDQzWhcNMjUxMjMxMDUwMDQzWjAzMTEwLwYDVQQD Eyg3MzY0NTc4ZjU2NjY4MWE1OWEwNmY2M2I5ZWVlZTcyYTQzNTlmZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubdiRPEzSgMEOd0xmItR1adkc0tN bpYSUnBzEEwURz2k9Uf2gJSsGZQGgaaenMhEUSDgdDesW8wJjoI/zjRiGMqjrJGt wtcnn0ZPOsBpaaOV+8X81gpp7KeSXPV9KQKzvCbJh+H+LaiZwfWNKrbQoFHflGKD ABV2lP9yKxcBLE0gklfZT/3I4b71zdUSAGM4IBzL395cNvXDO4XQt76ggh48ztzq MN8GBTza1trRuGdCFyEfe9WxZQ1aVwy7MVoxSt2bEbQC9ZZZG1C/Wtf1XPESJFHF zYWpjapQyaft1dNGdetz1PQVnZeODUhRJtvDAGrWueKIca6RQ9VtbysvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNkV49WZoGlmgb2O57u5ypDWf8QMB8GA1UdIwQY MBaAFJX3YF6FDJ2/F9rwujjjb8xjwsv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZjNiZmEtZWYzYi00MzYxLWIzMTEt NjcwNWRjMmUzYWFhLzEvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZjNiZmEtZWYzYi00MzYxLWIzMTEtNjcwNWRjMmUzYWFh LzEvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax7Pd+ex OZAoVmwljzOoj5eGX/X45ISr1dhgz8S5Wz66cvQPiXnVr4GfsyyinOlFSlyyn5wF 1EvJ3TniyihQBSd1pO6FxSd0sjP9AD2o0mt/aXhF0U7n3697/hEjs0Drzk5/hwL2 1cYcWM4LbhnUfDfIrJEfIiO9Alk5D504gVq6uwmK3q3GZEBntue1SKwLVYY7YNu4 azcL+URyLBEyK8/1OBQXmRyvtQChhih05GdxOB23RXNjN0TANYoB6TRnTpVDw46z a/WFPA8aDVkoHY/APMmr33vIhYO3RteJZzDGkNB/M8nWp194vfEg4x9KtuHxRn1X VhX/3m66Ad0zpQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:41 2025 by rpki-client