This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json) Hash identifier: jmiUSArRrUqJ6qKrqJ84azWTCNWuM+C0WwEWNF2gApg= Subject key identifier: 80:64:3C:DF:A0:82:7B:FD:E8:DE:DF:10:CE:E0:A1:C8:BB:1A:A1:67 Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55 Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55 Certificate serial: 019B2BF9093B0CFE5A3A9324C6E72AA7B2A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft Manifest number: 0CBB Signing time: Wed 17 Dec 2025 11:01:39 +0000 Manifest this update: Wed 17 Dec 2025 11:01:39 +0000 Manifest next update: Thu 18 Dec 2025 11:01:39 +0000 Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=) 2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: DipFJZAdxs+I+7WxTueMLZQFIW7kBZCy0Y53Kpoo+EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:09:3b:0c:fe:5a:3a:93:24:c6:e7:2a:a7:b2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55 Validity Not Before: Dec 17 11:01:39 2025 GMT Not After : Dec 18 11:01:39 2025 GMT Subject: CN=80643cdfa0827bfde8dedf10cee0a1c8bb1aa167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:05:65:2b:b3:e5:a8:0e:e5:d1:49:97:c0: b9:73:97:bd:b6:68:38:e9:d6:ef:ad:47:16:e1:9b: 26:d8:71:6f:a7:24:05:4c:8e:3c:4c:33:25:18:da: e4:d9:0c:fb:c2:d0:81:6e:c0:c2:e3:ad:e9:df:e6: e4:a4:18:20:82:f6:e9:e2:b3:5b:af:bb:24:7e:82: 33:a5:76:ba:8d:8d:4b:6e:5b:03:c5:eb:c2:aa:3a: a8:70:9b:1e:57:47:27:bc:5b:d9:09:db:2e:e3:e3: 77:c0:64:08:f8:7b:f0:e4:d3:8a:09:fe:7e:40:6e: 3d:cc:66:8b:21:c4:18:2e:92:b8:7b:06:5a:7b:69: 85:3a:a8:3b:c5:72:d8:c8:84:8e:43:ac:76:99:c0: 29:40:d5:da:0b:7c:8a:a3:f3:fd:58:9b:1b:4b:de: 43:fd:93:f2:f6:6c:75:d9:11:de:a3:4d:28:d5:a2: 8b:02:da:f8:1f:ee:72:ff:27:c6:b0:6d:6b:03:69: 10:b5:22:5f:9f:a8:af:1f:c5:b3:f4:e0:f3:36:3b: 23:bb:46:b1:f1:49:95:98:db:50:0e:b7:7c:6d:35: fd:9d:13:5e:2f:d5:ec:3f:4a:16:3e:18:dd:32:9f: f0:26:ac:23:f7:f5:57:7c:13:72:16:1c:88:ff:d2: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:64:3C:DF:A0:82:7B:FD:E8:DE:DF:10:CE:E0:A1:C8:BB:1A:A1:67 X509v3 Authority Key Identifier: keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8d:f6:77:23:c9:aa:d0:90:46:ea:59:cf:97:f0:a8:a1:8f: e0:19:c7:86:3b:3c:5c:68:32:30:5b:b3:9f:4a:5a:3a:32:1b: 8e:75:ca:95:44:3d:4d:55:21:0e:25:e8:82:80:2f:9d:e1:7f: 18:70:da:10:e8:f5:66:83:ea:76:2c:c5:23:f6:2d:f8:86:6b: 12:22:73:fd:b5:71:de:9f:6b:02:45:4c:92:fb:1a:20:b5:79: b0:50:30:92:6a:cb:3f:24:56:80:4e:e7:1f:48:b3:56:e0:2e: dd:2a:45:40:b9:99:52:f3:fe:e4:c7:50:58:be:11:71:2e:6e: c8:41:5c:08:f6:26:32:b0:bd:53:3a:1d:c9:ae:94:3b:ba:2c: 11:3a:db:96:a9:2a:d7:3f:4b:b5:0f:39:2f:95:d1:10:ce:3a: b7:a5:a3:39:79:dc:34:34:f9:9a:35:56:c6:36:f9:5d:82:63: 5b:54:a9:9e:4e:7b:d7:95:ec:99:48:03:30:63:6b:cb:d3:eb: b9:d3:17:f5:fc:a2:98:39:2b:a7:8f:79:50:ba:55:9b:52:a0: ce:39:65:83:26:6d:b5:97:07:6c:aa:97:a9:39:02:1c:ba:67: 67:0a:37:23:c3:d2:2c:cb:c6:c8:97:75:b6:01:52:f9:83:63: e6:d3:10:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Qk7DP5aOpMkxucqp7KhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzQ0NDAwMzk2ZDBhZjRjYjc5ZTNjOTQ2NjY2NzFiN2Iz OTFmNTUwHhcNMjUxMjE3MTEwMTM5WhcNMjUxMjE4MTEwMTM5WjAzMTEwLwYDVQQD Eyg4MDY0M2NkZmEwODI3YmZkZThkZWRmMTBjZWUwYTFjOGJiMWFhMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZgFZSuz5agO5dFJl8C5c5e9tmg4 6dbvrUcW4Zsm2HFvpyQFTI48TDMlGNrk2Qz7wtCBbsDC463p3+bkpBgggvbp4rNb r7skfoIzpXa6jY1LblsDxevCqjqocJseV0cnvFvZCdsu4+N3wGQI+Hvw5NOKCf5+ QG49zGaLIcQYLpK4ewZae2mFOqg7xXLYyISOQ6x2mcApQNXaC3yKo/P9WJsbS95D /ZPy9mx12RHeo00o1aKLAtr4H+5y/yfGsG1rA2kQtSJfn6ivH8Wz9ODzNjsju0ax 8UmVmNtQDrd8bTX9nRNeL9XsP0oWPhjdMp/wJqwj9/VXfBNyFhyI/9KO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBkPN+ggnv96N7fEM7goci7GqFnMB8GA1UdIwQY MBaAFJY0RAA5bQr0y3njyUZmZxt7OR9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wMmU5NjItOGZmOC00MTZlLWIxYmEt YTEyMDFjYzZlMDFiLzEvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wMmU5NjItOGZmOC00MTZlLWIxYmEtYTEyMDFjYzZlMDFi LzEvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI32dyPJ qtCQRupZz5fwqKGP4BnHhjs8XGgyMFuzn0paOjIbjnXKlUQ9TVUhDiXogoAvneF/ GHDaEOj1ZoPqdizFI/Yt+IZrEiJz/bVx3p9rAkVMkvsaILV5sFAwkmrLPyRWgE7n H0izVuAu3SpFQLmZUvP+5MdQWL4RcS5uyEFcCPYmMrC9Uzodya6UO7osETrblqkq 1z9LtQ85L5XREM46t6WjOXncNDT5mjVWxjb5XYJjW1Spnk5715XsmUgDMGNry9Pr udMX9fyimDkrp495ULpVm1KgzjllgyZttZcHbKqXqTkCHLpnZwo3I8PSLMvGyJd1 tgFS+YNj5tMQAg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:43 2025 by rpki-client