This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json) Hash identifier: tixvee1iHW3th5HMgRC7UQVU6l60SYol/g8XvwK/DYw= Subject key identifier: 25:30:18:A1:9E:C3:1C:A5:3E:E8:7B:EB:82:FA:6B:4E:0C:94:13:C7 Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb Certificate serial: 019B72C7E01CE004210E27083CD3FC7655A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft Manifest number: 0F5C Signing time: Wed 31 Dec 2025 05:01:00 +0000 Manifest this update: Wed 31 Dec 2025 05:01:00 +0000 Manifest next update: Thu 01 Jan 2026 05:01:00 +0000 Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=) 2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: fTYYwKLr0w4pS+BPQgc3aggOpMhQiE0YBImfUWzllNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:e0:1c:e0:04:21:0e:27:08:3c:d3:fc:76:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb Validity Not Before: Dec 31 05:01:00 2025 GMT Not After : Jan 1 05:01:00 2026 GMT Subject: CN=253018a19ec31ca53ee87beb82fa6b4e0c9413c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:b0:03:ef:36:1a:53:fd:f8:ce:98:59:e5: d6:7c:0c:44:c0:49:52:91:5c:d9:f4:47:5a:09:ae: a1:aa:ce:2a:c3:7b:f4:1d:d5:c8:5f:5c:f9:b6:00: 79:94:ac:11:24:7d:1a:46:be:0b:6b:3d:b8:e2:b9: 1b:45:57:2b:a8:8a:b9:9e:d3:7e:62:0e:79:6a:d9: 49:99:ad:e7:79:0f:2d:db:5f:62:03:98:af:41:a8: 34:30:e3:15:65:2c:cf:19:3f:f3:33:2f:37:53:c9: 26:91:44:58:4d:d4:bd:33:14:58:f5:5f:10:0e:63: f5:21:90:65:81:3e:dc:a5:2a:d1:96:9f:94:62:98: b3:14:18:0a:fa:2f:04:ba:91:b7:42:71:94:6f:f4: 64:79:73:fe:ca:1e:31:28:c1:6e:22:ee:bd:03:e7: 7a:d7:44:1d:22:a2:7d:7a:57:8d:aa:df:99:66:3b: 01:54:7d:08:94:d5:6d:83:eb:a9:a5:68:07:af:bb: 78:37:2e:32:22:0d:c5:53:63:95:2a:0a:b2:d8:75: d9:62:37:0d:0c:51:ad:1b:8c:89:51:29:df:60:74: 02:a7:b8:d7:36:09:89:61:16:f8:45:3a:52:bb:4b: d9:93:37:44:37:8b:99:44:40:4e:78:a7:a5:9a:80: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:18:A1:9E:C3:1C:A5:3E:E8:7B:EB:82:FA:6B:4E:0C:94:13:C7 X509v3 Authority Key Identifier: keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:9d:f5:95:d4:c3:ce:b6:74:13:89:ce:52:c1:3b:c3:21: 8f:b4:5c:bd:5e:97:4e:52:74:62:69:dc:37:68:a1:e9:85:68: 6d:27:ec:e8:27:ce:7f:12:65:20:bc:08:52:1c:38:6b:82:48: a4:3f:1f:cc:7d:95:2c:8c:28:52:04:7e:50:d5:97:2a:38:31: e1:7d:bb:0d:05:68:11:23:9c:ff:d5:20:66:6a:7f:8c:8a:68: 38:aa:23:76:64:88:d7:bd:d4:b1:17:e3:0d:29:60:3d:14:92: 7c:bf:81:37:2e:c4:00:60:89:ed:86:55:2d:29:9d:8a:5f:60: 1e:45:62:e6:d0:15:e8:e9:38:24:97:f1:8d:b9:c2:3a:b6:11: e7:5e:4c:33:3b:27:14:e8:87:54:4b:18:e4:62:ff:07:a1:ae: 70:00:fe:32:29:36:48:95:e0:2d:71:89:3b:8d:04:90:e3:f7: 49:49:02:e8:e0:f8:09:55:b4:bd:be:5b:a6:ca:a5:04:0a:85: a0:fb:d6:53:2b:b3:f7:3f:0f:26:41:2b:f4:07:79:8b:cb:69: 71:32:6f:f8:8a:00:22:5f:c2:ec:e7:ba:74:1d:0d:6f:0b:a1: 71:6d:04:bd:78:21:1f:47:cf:d8:a6:12:a8:82:fe:7d:bd:a2: f7:b3:45:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx+Ac4AQhDicIPNP8dlWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzBjZTlmODdkOWQyNzVmNmNhZTRkYzljZGZiNWQ0NDM3 ZDhjZWIwHhcNMjUxMjMxMDUwMTAwWhcNMjYwMTAxMDUwMTAwWjAzMTEwLwYDVQQD EygyNTMwMThhMTllYzMxY2E1M2VlODdiZWI4MmZhNmI0ZTBjOTQxM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMiwA+82GlP9+M6YWeXWfAxEwElS kVzZ9EdaCa6hqs4qw3v0HdXIX1z5tgB5lKwRJH0aRr4Laz244rkbRVcrqIq5ntN+ Yg55atlJma3neQ8t219iA5ivQag0MOMVZSzPGT/zMy83U8kmkURYTdS9MxRY9V8Q DmP1IZBlgT7cpSrRlp+UYpizFBgK+i8EupG3QnGUb/RkeXP+yh4xKMFuIu69A+d6 10QdIqJ9eleNqt+ZZjsBVH0IlNVtg+uppWgHr7t4Ny4yIg3FU2OVKgqy2HXZYjcN DFGtG4yJUSnfYHQCp7jXNgmJYRb4RTpSu0vZkzdEN4uZREBOeKelmoDwXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUwGKGewxylPuh764L6a04MlBPHMB8GA1UdIwQY MBaAFJbAzp+H2dJ19srk3JzftdRDfYzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjkt NWU3N2ZhMDMzM2EzLzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjktNWU3N2ZhMDMzM2Ez LzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS2d9ZXU w862dBOJzlLBO8Mhj7RcvV6XTlJ0YmncN2ih6YVobSfs6CfOfxJlILwIUhw4a4JI pD8fzH2VLIwoUgR+UNWXKjgx4X27DQVoESOc/9UgZmp/jIpoOKojdmSI173UsRfj DSlgPRSSfL+BNy7EAGCJ7YZVLSmdil9gHkVi5tAV6Ok4JJfxjbnCOrYR515MMzsn FOiHVEsY5GL/B6GucAD+Mik2SJXgLXGJO40EkOP3SUkC6OD4CVW0vb5bpsqlBAqF oPvWUyuz9z8PJkEr9Ad5i8tpcTJv+IoAIl/C7Oe6dB0NbwuhcW0EvXghH0fP2KYS qIL+fb2i97NFMA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:59:34 2025 by rpki-client