This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft File: leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json) Hash identifier: pAL9iZ5ObTLNwc+EmCrbLMhJwuX7aPiFJ582kDjP/x4= Subject key identifier: 82:98:ED:52:27:C4:E2:61:3E:E1:E9:A2:A2:38:52:F3:57:E1:8D:34 Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93 Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693 Certificate serial: 019B34C4E786514DE543E53ABC3F72A1601B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft Manifest number: 027A Signing time: Fri 19 Dec 2025 04:01:17 +0000 Manifest this update: Fri 19 Dec 2025 04:01:17 +0000 Manifest next update: Sat 20 Dec 2025 04:01:17 +0000 Files and hashes: 1: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (hash: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=) 2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: Y8vKlGJ8JgvD0srhzPnCW/voF2UP6sYOWgEjRam+Ock=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:e7:86:51:4d:e5:43:e5:3a:bc:3f:72:a1:60:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693 Validity Not Before: Dec 19 04:01:17 2025 GMT Not After : Dec 20 04:01:17 2025 GMT Subject: CN=8298ed5227c4e2613ee1e9a2a23852f357e18d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b4:f4:4d:0f:9b:42:a2:0e:69:c7:3c:93:20: cf:45:0c:10:bf:07:db:e8:bc:51:28:c6:2a:25:50: 36:0b:75:bf:a5:ca:5e:e8:69:21:ad:9b:e1:f4:22: 10:7f:5b:24:1c:de:6a:3f:55:dc:3a:b3:a4:9d:03: 40:ca:96:56:f9:83:97:88:e2:fe:00:df:72:49:02: 34:f5:c3:59:f1:ee:a4:7d:02:72:e8:18:08:71:56: a9:65:e2:e2:ec:46:bc:61:ea:f5:50:a2:38:d0:e8: 16:08:a3:8c:be:c3:d3:61:3a:5a:43:71:9e:c5:15: 80:1b:53:48:80:68:eb:3d:d3:cf:47:6b:a7:98:4f: db:aa:d7:d6:59:9a:ff:85:dd:77:31:55:f6:07:87: 8f:6b:43:de:a4:79:5d:dd:e6:e1:92:f4:98:ea:ad: b8:12:bf:23:46:81:7a:fc:5d:5d:c7:fe:dd:93:2e: ef:7d:f1:0d:c0:5c:cc:06:8f:78:8e:05:da:f5:3f: e9:61:7f:81:ad:72:a9:8b:48:74:14:e5:ef:5d:81: ec:3e:7a:58:a5:4a:b1:94:bb:7d:64:ed:e3:a8:0e: 4b:37:f4:8b:11:e2:a7:ad:24:d5:55:ed:f3:c3:88: 4b:f9:c0:38:b9:6e:e9:81:84:ce:ec:5d:e0:30:b4: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:98:ED:52:27:C4:E2:61:3E:E1:E9:A2:A2:38:52:F3:57:E1:8D:34 X509v3 Authority Key Identifier: keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d7:08:64:b1:50:6f:73:84:83:ad:f0:74:92:2d:46:e5:9c: a3:6d:2d:cd:69:91:fa:5a:d0:22:b4:dc:c4:11:17:5d:8e:44: e6:51:5f:19:53:6a:cd:be:41:47:f7:26:89:80:f4:e9:93:a8: 61:df:fa:1b:4b:1e:7d:eb:71:50:fd:de:e4:88:cf:57:92:b1: 6e:e9:2b:aa:56:4c:06:e4:9b:f6:0a:7b:13:34:ae:ff:66:59: 95:ba:7b:28:4a:57:94:3a:f9:8c:07:96:90:24:11:6f:c8:ec: e4:bc:a3:a7:76:ae:31:85:83:ab:4c:05:9f:b6:03:ca:86:b1: 5d:aa:bd:ab:53:82:c9:4b:93:c7:3b:1e:b9:f7:27:fa:12:e7: d6:40:fd:93:f3:45:aa:3d:e6:55:30:5f:68:af:f0:15:3b:ef: 4b:21:37:fa:f9:df:59:b9:e7:55:c7:d5:62:8e:6a:23:10:86: 2f:56:b2:2b:c9:fc:48:dd:f9:1c:29:85:9d:df:49:a7:e5:77: 92:02:6f:54:01:f8:46:62:40:da:38:4c:ea:98:b7:51:c3:70: 70:25:a8:8b:01:27:65:96:c9:17:ec:12:3a:01:87:d5:2d:45: bf:b1:af:de:0c:f0:4d:c1:44:ee:b0:85:d2:fb:e3:3a:b5:d0: e0:2d:f2:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xOeGUU3lQ+U6vD9yoWAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWEwNTUxNDZhMDEzNjcwNWNiNmE2ZGFlNGQ0MjQ5YzUx NGM2OTMwHhcNMjUxMjE5MDQwMTE3WhcNMjUxMjIwMDQwMTE3WjAzMTEwLwYDVQQD Eyg4Mjk4ZWQ1MjI3YzRlMjYxM2VlMWU5YTJhMjM4NTJmMzU3ZTE4ZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bT0TQ+bQqIOacc8kyDPRQwQvwfb 6LxRKMYqJVA2C3W/pcpe6GkhrZvh9CIQf1skHN5qP1XcOrOknQNAypZW+YOXiOL+ AN9ySQI09cNZ8e6kfQJy6BgIcVapZeLi7Ea8Yer1UKI40OgWCKOMvsPTYTpaQ3Ge xRWAG1NIgGjrPdPPR2unmE/bqtfWWZr/hd13MVX2B4ePa0PepHld3ebhkvSY6q24 Er8jRoF6/F1dx/7dky7vffENwFzMBo94jgXa9T/pYX+BrXKpi0h0FOXvXYHsPnpY pUqxlLt9ZO3jqA5LN/SLEeKnrSTVVe3zw4hL+cA4uW7pgYTO7F3gMLR8DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKY7VInxOJhPuHpoqI4UvNX4Y00MB8GA1UdIwQY MBaAFJXqBVFGoBNnBctqba5NQknFFMaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVvRlVVYWdFMmNGeTJwdHJrMUNTY1VVeHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNDcyYTItZWY3OC00MjRiLWJlM2Yt Njc4MjYyNWVmMmY5LzEvbGVvRlVVYWdFMmNGeTJwdHJrMUNTY1VVeHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNDcyYTItZWY3OC00MjRiLWJlM2YtNjc4MjYyNWVmMmY5 LzEvbGVvRlVVYWdFMmNGeTJwdHJrMUNTY1VVeHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktcIZLFQ b3OEg63wdJItRuWco20tzWmR+lrQIrTcxBEXXY5E5lFfGVNqzb5BR/cmiYD06ZOo Yd/6G0sefetxUP3e5IjPV5KxbukrqlZMBuSb9gp7EzSu/2ZZlbp7KEpXlDr5jAeW kCQRb8js5Lyjp3auMYWDq0wFn7YDyoaxXaq9q1OCyUuTxzseufcn+hLn1kD9k/NF qj3mVTBfaK/wFTvvSyE3+vnfWbnnVcfVYo5qIxCGL1ayK8n8SN35HCmFnd9Jp+V3 kgJvVAH4RmJA2jhM6pi3UcNwcCWoiwEnZZbJF+wSOgGH1S1Fv7Gv3gzwTcFE7rCF 0vvjOrXQ4C3y5A== -----END CERTIFICATE-----Generated at Fri Dec 19 05:31:01 2025 by rpki-client