This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json) Hash identifier: xhKPvRijQQ2c2iQQDPsKfGg+Exbn5/o1KL79LzF/MGs= Subject key identifier: 33:7E:6B:79:0C:52:FA:27:71:EA:A5:36:CC:9A:96:10:D2:97:B8:E7 Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1 Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1 Certificate serial: 019B3A90FED364C6FBB111D353840D8D298F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft Manifest number: 1394 Signing time: Sat 20 Dec 2025 07:02:19 +0000 Manifest this update: Sat 20 Dec 2025 07:02:19 +0000 Manifest next update: Sun 21 Dec 2025 07:02:19 +0000 Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=) 2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: +joRbEsaTCXnhUisWHaZ4EyFs9IsSaEvd3MH/Jbgz1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:fe:d3:64:c6:fb:b1:11:d3:53:84:0d:8d:29:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1 Validity Not Before: Dec 20 07:02:19 2025 GMT Not After : Dec 21 07:02:19 2025 GMT Subject: CN=337e6b790c52fa2771eaa536cc9a9610d297b8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:2a:77:99:a6:7f:b5:72:6a:da:7a:1d:22: 6d:16:f1:17:b7:97:57:21:57:01:4f:d0:75:93:d3: 37:c3:75:2a:9e:7f:a0:ca:38:12:bb:2d:85:7c:76: bb:86:05:74:1c:81:42:a9:21:01:04:66:33:dd:2a: 1f:54:45:64:77:3c:01:a4:07:90:0a:b2:03:5c:5a: 9a:75:0a:bd:04:e9:00:cc:fe:b4:0c:a9:58:e1:ec: 07:38:b9:f5:6e:1f:57:35:28:a5:e3:9c:90:1d:1b: 12:fd:c3:3b:09:df:31:23:b9:18:c7:71:22:d6:af: 1f:d2:06:ab:cb:a4:7b:00:b4:de:67:19:60:a7:1a: e1:e4:a2:1b:31:43:3a:c8:26:d3:27:08:31:c5:77: 68:99:1d:7b:08:18:37:41:34:03:bd:01:ee:ee:0c: 3f:38:98:7a:25:f0:63:61:29:62:50:02:ba:50:e4: 45:2d:a6:47:67:11:20:1a:b5:95:c4:be:d6:d3:a9: a5:7d:21:a3:74:62:19:8d:f0:b6:4f:1f:4a:9b:76: 44:05:b2:c2:87:7d:a3:23:e1:72:a6:83:6a:45:6e: 71:69:3a:11:e8:d0:8d:42:03:31:c5:14:cd:cc:df: b7:d4:61:37:ba:86:b1:58:84:64:7c:36:12:33:85: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7E:6B:79:0C:52:FA:27:71:EA:A5:36:CC:9A:96:10:D2:97:B8:E7 X509v3 Authority Key Identifier: keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:06:0d:e8:b8:0a:eb:ce:36:d5:e1:ee:8a:d5:d0:cb:df:17: b1:8d:60:ac:e2:79:22:5e:f0:2b:6f:b0:39:8c:f6:4d:b4:2d: 0a:b7:be:64:93:9b:0f:e2:43:c8:ea:8a:d4:e3:86:cc:17:23: 59:59:f9:03:ca:ee:c4:14:4e:3a:49:ad:80:8a:d0:9a:04:0e: 41:31:b0:ea:68:3a:24:fd:e7:52:92:4a:5a:c9:b5:fd:a3:71: 2e:72:24:23:da:6d:ff:5f:26:13:72:41:83:8a:1c:4d:8c:fb: 08:b4:5a:89:53:e9:a1:b0:74:d6:ac:12:d0:38:29:7a:2f:85: 3d:e2:64:f0:ef:e3:ad:dd:44:f6:1a:48:06:bf:74:12:05:97: e5:a5:22:09:dd:bc:09:c2:0d:b8:71:a4:af:bf:49:45:74:22: 2b:83:ad:e9:6d:eb:14:3c:8d:d1:0c:74:b1:6d:c2:fc:13:77: 3a:27:35:2c:f9:e4:d7:ba:e8:77:f3:fb:e7:71:22:30:c1:02: f9:3c:af:d7:cf:0e:2c:93:a7:27:95:06:5d:eb:08:a7:8f:ea: 2b:75:85:70:fe:19:67:78:9f:50:25:ec:c2:b3:5d:bd:d5:03: 75:f0:fc:c1:63:b5:81:da:6e:30:f8:a8:a2:12:77:b9:8b:64: b0:71:3f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kP7TZMb7sRHTU4QNjSmPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZmQwM2I1ZjM1YjMxN2I0ZDMyZmYxYTRiMmMxN2JiMzc2 YzIxZTEwHhcNMjUxMjIwMDcwMjE5WhcNMjUxMjIxMDcwMjE5WjAzMTEwLwYDVQQD EygzMzdlNmI3OTBjNTJmYTI3NzFlYWE1MzZjYzlhOTYxMGQyOTdiOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujkqd5mmf7Vyatp6HSJtFvEXt5dX IVcBT9B1k9M3w3Uqnn+gyjgSuy2FfHa7hgV0HIFCqSEBBGYz3SofVEVkdzwBpAeQ CrIDXFqadQq9BOkAzP60DKlY4ewHOLn1bh9XNSil45yQHRsS/cM7Cd8xI7kYx3Ei 1q8f0gary6R7ALTeZxlgpxrh5KIbMUM6yCbTJwgxxXdomR17CBg3QTQDvQHu7gw/ OJh6JfBjYSliUAK6UORFLaZHZxEgGrWVxL7W06mlfSGjdGIZjfC2Tx9Km3ZEBbLC h32jI+FypoNqRW5xaToR6NCNQgMxxRTNzN+31GE3uoaxWIRkfDYSM4UCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN+a3kMUvonceqlNsyalhDSl7jnMB8GA1UdIwQY MBaAFJX9A7XzWzF7TTL/GkssF7s3bCHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et ZDYwZjQ0YTkzNGIxLzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx LzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgYN6LgK 68421eHuitXQy98XsY1grOJ5Il7wK2+wOYz2TbQtCre+ZJObD+JDyOqK1OOGzBcj WVn5A8ruxBROOkmtgIrQmgQOQTGw6mg6JP3nUpJKWsm1/aNxLnIkI9pt/18mE3JB g4ocTYz7CLRaiVPpobB01qwS0Dgpei+FPeJk8O/jrd1E9hpIBr90EgWX5aUiCd28 CcINuHGkr79JRXQiK4Ot6W3rFDyN0Qx0sW3C/BN3Oic1LPnk17rod/P753EiMMEC +Tyv188OLJOnJ5UGXesIp4/qK3WFcP4ZZ3ifUCXswrNdvdUDdfD8wWO1gdpuMPio ohJ3uYtksHE/3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:44 2025 by rpki-client