This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json) Hash identifier: 8nFBF/qipHkEBeYWeSnWrNxUUCW0s+lxoMWH7BwEgcs= Subject key identifier: 13:B2:41:8D:FB:D3:2C:5C:F3:B9:EC:32:43:D1:B6:CD:5A:9F:CD:EE Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88 Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88 Certificate serial: 019B3E6CE24973AFD258A2E6EBD968E6EE0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:21 +0000 Manifest this update: Sun 21 Dec 2025 01:01:21 +0000 Manifest next update: Mon 22 Dec 2025 01:01:21 +0000 Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=) 2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: ZAMmQsxmujCZQPXEgFsuDS6GhFHwvijJ4KRyeOsuEZQ=) 3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e2:49:73:af:d2:58:a2:e6:eb:d9:68:e6:ee:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88 Validity Not Before: Dec 21 01:01:21 2025 GMT Not After : Dec 22 01:01:21 2025 GMT Subject: CN=13b2418dfbd32c5cf3b9ec3243d1b6cd5a9fcdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:97:c5:8f:e1:74:1e:9f:79:80:fa:75:10: 0a:86:c9:c8:3c:01:0e:b1:60:3e:5e:01:54:37:27: 84:04:5d:3d:5a:4b:5d:c2:10:82:6e:a1:d2:e1:a9: 94:81:5c:15:91:90:84:68:47:ec:50:be:41:38:d0: 95:0b:d0:8c:98:49:cb:1a:64:5c:09:43:f9:43:ee: c7:59:67:be:38:20:20:62:ce:42:48:9b:db:1a:3a: 4f:e1:8b:41:72:3f:03:1a:0f:65:23:7f:f1:cc:81: ec:dc:dd:86:6b:0a:38:a0:da:9c:3e:76:5c:2e:74: f3:4d:00:2f:22:38:19:48:91:6c:9a:9e:bf:2f:f1: 67:d4:53:06:f3:27:e9:85:96:21:73:5f:50:a0:e8: ea:2e:fe:c8:05:f4:47:a4:a7:d2:73:03:76:88:33: a8:d2:90:b1:9e:17:42:9e:8e:6c:1b:ae:bc:cc:c0: d3:be:58:60:d7:9e:fc:ef:7c:4d:ea:5c:c8:a5:6f: 72:7d:0e:ee:8c:cb:85:ea:94:43:bc:6a:b2:ff:01: a4:16:1f:10:77:8c:5a:70:20:3b:d2:9a:38:a7:63: ad:07:b7:a5:db:f0:d6:c1:e9:ab:0b:89:d9:1a:b4: 4e:1b:cf:d2:aa:33:bb:53:37:27:1d:84:f9:38:02: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B2:41:8D:FB:D3:2C:5C:F3:B9:EC:32:43:D1:B6:CD:5A:9F:CD:EE X509v3 Authority Key Identifier: keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c1:05:22:cc:8f:4e:e9:6b:58:77:69:9c:d5:5e:da:c4:83: cc:5b:8d:c4:ff:ae:b2:27:28:4e:14:0d:14:af:2f:5c:3f:4f: ac:77:4f:a6:c8:44:81:b6:f0:44:b6:2f:7e:f7:40:1a:fa:25: 4a:30:88:9f:77:0c:f7:1d:2e:97:02:51:d2:87:91:80:ec:50: 3b:d4:6c:3f:c3:e9:d9:a4:2b:70:5d:0b:00:a3:a3:81:e7:0a: 3c:02:0f:18:e6:3c:d5:d7:85:32:26:48:94:3c:5c:19:30:13: 39:27:0d:d2:97:08:38:35:76:d6:09:05:eb:8f:14:af:1e:13: 3a:73:69:fe:ee:f2:b0:f1:f7:8d:02:2e:0c:e7:57:c0:eb:1d: 66:2b:30:7a:54:97:3d:47:2b:1d:a8:cd:84:86:98:ea:02:94: 66:4e:7a:b0:d8:5d:7e:2c:36:fd:9e:6f:39:30:74:74:77:07: 43:85:b4:49:69:07:45:29:93:4e:9c:45:bc:4b:9e:87:c5:a9: ce:b2:d5:b6:a4:ea:d3:b8:85:99:26:2f:a0:af:f8:48:bb:9f: 71:6c:a9:1a:04:3e:a2:73:cc:f4:a9:e3:3b:a1:55:01:be:cf: 08:67:43:2d:07:fb:1b:9a:43:94:18:3b:bd:a2:e7:2f:65:2b: 71:29:92:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOJJc6/SWKLm69lo5u4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3 NzViODgwHhcNMjUxMjIxMDEwMTIxWhcNMjUxMjIyMDEwMTIxWjAzMTEwLwYDVQQD EygxM2IyNDE4ZGZiZDMyYzVjZjNiOWVjMzI0M2QxYjZjZDVhOWZjZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2uXxY/hdB6feYD6dRAKhsnIPAEO sWA+XgFUNyeEBF09WktdwhCCbqHS4amUgVwVkZCEaEfsUL5BONCVC9CMmEnLGmRc CUP5Q+7HWWe+OCAgYs5CSJvbGjpP4YtBcj8DGg9lI3/xzIHs3N2Gawo4oNqcPnZc LnTzTQAvIjgZSJFsmp6/L/Fn1FMG8yfphZYhc19QoOjqLv7IBfRHpKfScwN2iDOo 0pCxnhdCno5sG668zMDTvlhg157873xN6lzIpW9yfQ7ujMuF6pRDvGqy/wGkFh8Q d4xacCA70po4p2OtB7el2/DWwemrC4nZGrROG8/SqjO7UzcnHYT5OALlOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOyQY370yxc87nsMkPRts1an83uMB8GA1UdIwQY MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt YWE2MjI5Njk4NDYxLzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssEFIsyP TulrWHdpnNVe2sSDzFuNxP+usicoThQNFK8vXD9PrHdPpshEgbbwRLYvfvdAGvol SjCIn3cM9x0ulwJR0oeRgOxQO9RsP8Pp2aQrcF0LAKOjgecKPAIPGOY81deFMiZI lDxcGTATOScN0pcIODV21gkF648Urx4TOnNp/u7ysPH3jQIuDOdXwOsdZiswelSX PUcrHajNhIaY6gKUZk56sNhdfiw2/Z5vOTB0dHcHQ4W0SWkHRSmTTpxFvEueh8Wp zrLVtqTq07iFmSYvoK/4SLufcWypGgQ+onPM9KnjO6FVAb7PCGdDLQf7G5pDlBg7 vaLnL2UrcSmSug== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:48 2025 by rpki-client