This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json) Hash identifier: HsYKV0XpB5nI4PwiUsfhsbNonwhyZ+m8stXR9HBilP8= Subject key identifier: 32:7D:CA:9B:28:46:F5:6C:F0:4B:DA:1D:4E:C3:93:7D:25:8A:E6:7E Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Certificate serial: 019B40C90F1881E698556A226B4C053C8168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 12:01:17 +0000 Manifest this update: Sun 21 Dec 2025 12:01:17 +0000 Manifest next update: Mon 22 Dec 2025 12:01:17 +0000 Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=) 2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: IPxg27VAJAU3cZTWGb/J/4q8lODhrexf4hz8bM0UMs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:0f:18:81:e6:98:55:6a:22:6b:4c:05:3c:81:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Validity Not Before: Dec 21 12:01:17 2025 GMT Not After : Dec 22 12:01:17 2025 GMT Subject: CN=327dca9b2846f56cf04bda1d4ec3937d258ae67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:24:62:af:14:22:47:67:37:cf:66:fe:50: a1:67:04:3d:f3:a2:18:5f:6d:ae:a5:0a:94:fd:68: 54:d2:73:d1:f5:43:fb:4d:aa:41:c4:ce:c1:3a:c9: 82:81:db:4d:1d:33:2c:99:b2:6b:30:93:fa:d6:7e: 5f:f1:3a:de:ea:dc:c3:90:03:d4:85:0a:69:e3:b2: 7a:f8:98:93:fc:23:25:9c:f7:6c:2b:b0:be:22:32: 82:4c:a9:07:85:0f:f4:c9:19:63:6f:d8:5f:d6:74: 28:8d:2e:00:d5:37:2f:a7:80:69:d9:93:88:09:90: c5:c8:a0:d6:a1:72:aa:17:8b:2a:41:bd:8e:82:50: 6c:17:66:6a:de:45:03:34:23:1a:d5:ec:38:ec:e7: 16:03:0d:b3:94:79:5d:b1:85:99:bb:a2:ea:ad:ea: 3a:b2:9d:91:0e:4f:3d:06:c5:ab:27:0e:03:2d:63: e0:58:65:b8:c7:14:ce:07:ed:a1:0f:56:2a:10:c5: ba:a2:7d:77:e4:d2:9f:3b:d4:ba:8a:1f:56:9c:d5: 18:0a:31:be:c1:64:91:5d:fd:f0:8f:5b:63:4f:4e: ca:ad:eb:a4:99:01:f3:67:6f:9e:a0:5a:4a:1c:68: 64:86:14:70:84:cf:40:9a:d3:2d:93:9c:08:0e:1c: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:CA:9B:28:46:F5:6C:F0:4B:DA:1D:4E:C3:93:7D:25:8A:E6:7E X509v3 Authority Key Identifier: keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:19:e6:41:af:b8:ca:ad:1b:b6:6e:01:30:6b:e9:5d:24:53: b1:68:a7:35:00:59:0a:e5:95:41:26:9a:f1:86:45:34:b3:51: da:7f:d5:ea:af:2b:3a:a4:7b:fa:4e:54:9d:fe:66:f0:d7:ec: 7e:79:3b:72:f8:d4:8c:80:14:7b:15:7a:44:ff:2e:b0:66:35: bf:49:82:1f:fa:92:ca:08:77:43:9a:3c:e7:73:43:25:ff:29: 84:0c:98:c7:cc:d3:5c:24:e3:b6:be:f3:82:88:a2:60:14:01: ff:f3:cc:e0:cd:e6:54:ac:ac:30:58:54:24:42:72:86:3b:e2: 04:ee:9d:55:5d:31:42:6d:ee:5e:ae:0a:5a:99:69:26:fe:d7: ae:e6:3c:1d:21:7e:8d:6b:ed:fe:a4:10:10:65:c0:47:6b:b7: 86:5a:a9:3d:80:0b:06:56:f9:5e:e3:06:39:22:7d:a1:08:9d: 67:c7:89:79:0c:34:d9:1e:ac:34:54:19:8d:23:96:54:99:78: 09:a1:fb:61:35:18:70:a1:fb:e0:dd:6f:54:ff:18:78:47:06: 0a:d6:4e:51:bc:6d:97:dd:7d:1b:1e:2c:3a:0a:29:cc:04:5f: b6:8f:6c:ce:81:a6:c6:cd:a0:dd:20:79:cf:f2:f3:9a:16:fc: f1:dd:52:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyQ8YgeaYVWoia0wFPIFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZTEyMDNhY2Q5YjA3YTExZWEzN2U4MmY2YzI0MWZmODQw Mjk3NWEwHhcNMjUxMjIxMTIwMTE3WhcNMjUxMjIyMTIwMTE3WjAzMTEwLwYDVQQD EygzMjdkY2E5YjI4NDZmNTZjZjA0YmRhMWQ0ZWMzOTM3ZDI1OGFlNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhgkYq8UIkdnN89m/lChZwQ986IY X22upQqU/WhU0nPR9UP7TapBxM7BOsmCgdtNHTMsmbJrMJP61n5f8Tre6tzDkAPU hQpp47J6+JiT/CMlnPdsK7C+IjKCTKkHhQ/0yRljb9hf1nQojS4A1Tcvp4Bp2ZOI CZDFyKDWoXKqF4sqQb2OglBsF2Zq3kUDNCMa1ew47OcWAw2zlHldsYWZu6Lqreo6 sp2RDk89BsWrJw4DLWPgWGW4xxTOB+2hD1YqEMW6on135NKfO9S6ih9WnNUYCjG+ wWSRXf3wj1tjT07KreukmQHzZ2+eoFpKHGhkhhRwhM9AmtMtk5wIDhyreQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ9ypsoRvVs8EvaHU7Dk30liuZ+MB8GA1UdIwQY MBaAFC3hIDrNmwehHqN+gvbCQf+EApdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMt ZjI4Y2QyNzY0OTA0LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMtZjI4Y2QyNzY0OTA0 LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhnmQa+4 yq0btm4BMGvpXSRTsWinNQBZCuWVQSaa8YZFNLNR2n/V6q8rOqR7+k5Unf5m8Nfs fnk7cvjUjIAUexV6RP8usGY1v0mCH/qSygh3Q5o853NDJf8phAyYx8zTXCTjtr7z goiiYBQB//PM4M3mVKysMFhUJEJyhjviBO6dVV0xQm3uXq4KWplpJv7XruY8HSF+ jWvt/qQQEGXAR2u3hlqpPYALBlb5XuMGOSJ9oQidZ8eJeQw02R6sNFQZjSOWVJl4 CaH7YTUYcKH74N1vVP8YeEcGCtZOUbxtl919Gx4sOgopzARfto9szoGmxs2g3SB5 z/Lzmhb88d1SGA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:38:55 2025 by rpki-client