This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json) Hash identifier: jWhZB223N1J6jbFavIqWFWWLiwTKwRtH5hjnOzmj7No= Subject key identifier: 2C:40:5D:BE:AF:0C:ED:84:CE:1B:2A:BD:33:71:7F:65:7B:19:0A:3F Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Certificate serial: 019B39B44AF7AE5D2946B6856970F7CCE5B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft Manifest number: 1540 Signing time: Sat 20 Dec 2025 03:01:15 +0000 Manifest this update: Sat 20 Dec 2025 03:01:15 +0000 Manifest next update: Sun 21 Dec 2025 03:01:15 +0000 Files and hashes: 1: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=) 2: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=) 3: _c0pJJZ7zU5EHB0txGdfoaZUuHE.roa (hash: JBEJnTbk0DUkFdoYHdzISJaKoNBjc9m3vJ4DFADUl0E=) 4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: 69o4eZsT8T8ZX3wY2r8AjMuRBkmATuAAo9KhblmxM1U=) 5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:4a:f7:ae:5d:29:46:b6:85:69:70:f7:cc:e5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Validity Not Before: Dec 20 03:01:15 2025 GMT Not After : Dec 21 03:01:15 2025 GMT Subject: CN=2c405dbeaf0ced84ce1b2abd33717f657b190a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:94:a3:e2:7e:08:79:d3:ad:e2:bf:3a:6a: 1b:df:37:1c:60:b0:2e:83:a7:f3:2a:48:cf:3a:4c: e6:ad:70:56:05:4b:a3:b7:5f:43:5e:59:c7:bb:1f: e8:0c:1c:0c:b5:cb:d0:e4:cd:9a:86:80:01:19:14: c1:ef:83:1e:d8:47:f4:f7:e2:94:f8:c9:07:a7:1f: be:d3:e4:2f:9d:41:48:31:04:ff:51:8e:89:be:75: fd:b7:c6:f3:0b:40:da:15:25:d6:b4:e3:e2:3b:24: a2:6e:18:9d:9f:7a:1e:df:11:59:c2:1a:ed:b4:30: ae:42:7b:54:e3:a7:e6:fc:3e:ee:39:a2:2d:dd:e1: 1f:f9:1e:af:ca:4a:bb:2d:cd:3b:cc:a2:a8:5c:0c: af:c6:7b:81:90:db:cf:1c:5d:22:aa:1f:99:3b:7e: 7e:a9:ae:91:c8:f0:93:4e:70:30:80:67:25:1e:f2: 15:c5:c6:fe:8b:ed:fc:5a:f8:38:6a:25:9a:f7:f3: e7:41:76:52:6a:bd:1a:76:7c:e7:01:ca:7f:a5:0b: 59:2c:33:a1:70:cc:76:02:2c:9f:45:27:80:23:b9: 98:31:2b:4d:c7:a0:b9:8e:bb:fd:55:ed:cf:46:80: 33:49:68:60:d4:c8:ce:30:e8:3a:b6:d9:da:7e:71: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:40:5D:BE:AF:0C:ED:84:CE:1B:2A:BD:33:71:7F:65:7B:19:0A:3F X509v3 Authority Key Identifier: keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f5:df:0a:d0:e6:d5:c1:0c:71:1c:ee:e6:89:86:32:0b:36: 4a:77:fd:d6:63:38:10:c3:1e:4d:f8:c3:22:8d:44:27:55:42: 2d:3f:f0:fa:03:db:ee:9b:f6:9e:46:dd:45:b6:27:6e:27:2c: 0a:38:32:4b:15:63:1d:8d:cb:65:1f:44:bd:80:21:47:68:78: 3d:55:5b:da:b9:75:cf:d4:b3:e4:2d:ab:cb:60:3f:74:14:cc: 1c:6a:d9:6c:91:7f:4d:ca:bc:73:43:b9:2b:4d:1f:d9:dc:83: ce:52:2c:8c:7c:c3:3f:30:79:13:c8:15:fc:38:2c:d5:ee:f1: 1c:84:43:bd:7c:e5:69:00:9c:fe:45:f0:e6:19:80:bc:2c:90: 3e:74:b2:b4:78:50:c0:34:1c:5c:4a:41:12:44:5e:81:46:aa: 75:0e:94:7b:69:0f:bf:66:61:4e:37:65:94:bd:e8:ab:53:16: a2:38:a9:cf:8c:e5:ff:26:e6:96:40:ec:46:81:02:0e:7d:f0: 6c:c9:c0:ca:3b:78:f2:c1:f7:82:b5:f1:f0:c8:1b:eb:62:89: ce:38:1b:9f:e8:fd:ec:7a:db:ba:56:c6:01:2d:b1:73:1a:cd: ac:7c:e8:8f:12:27:1c:e6:3e:d9:e5:f0:44:4e:72:97:28:0e: fc:85:04:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tEr3rl0pRraFaXD3zOWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh NGFlNDEwHhcNMjUxMjIwMDMwMTE1WhcNMjUxMjIxMDMwMTE1WjAzMTEwLwYDVQQD EygyYzQwNWRiZWFmMGNlZDg0Y2UxYjJhYmQzMzcxN2Y2NTdiMTkwYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskKUo+J+CHnTreK/Omob3zccYLAu g6fzKkjPOkzmrXBWBUujt19DXlnHux/oDBwMtcvQ5M2ahoABGRTB74Me2Ef09+KU +MkHpx++0+QvnUFIMQT/UY6JvnX9t8bzC0DaFSXWtOPiOySibhidn3oe3xFZwhrt tDCuQntU46fm/D7uOaIt3eEf+R6vykq7Lc07zKKoXAyvxnuBkNvPHF0iqh+ZO35+ qa6RyPCTTnAwgGclHvIVxcb+i+38Wvg4aiWa9/PnQXZSar0adnznAcp/pQtZLDOh cMx2AiyfRSeAI7mYMStNx6C5jrv9Ve3PRoAzSWhg1MjOMOg6ttnafnEOjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxAXb6vDO2EzhsqvTNxf2V7GQo/MB8GA1UdIwQY MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvXfCtDm 1cEMcRzu5omGMgs2Snf91mM4EMMeTfjDIo1EJ1VCLT/w+gPb7pv2nkbdRbYnbics CjgySxVjHY3LZR9EvYAhR2h4PVVb2rl1z9Sz5C2ry2A/dBTMHGrZbJF/Tcq8c0O5 K00f2dyDzlIsjHzDPzB5E8gV/Dgs1e7xHIRDvXzlaQCc/kXw5hmAvCyQPnSytHhQ wDQcXEpBEkRegUaqdQ6Ue2kPv2ZhTjdllL3oq1MWojipz4zl/ybmlkDsRoECDn3w bMnAyjt48sH3grXx8Mgb62KJzjgbn+j97HrbulbGAS2xcxrNrHzojxInHOY+2eXw RE5ylygO/IUEtw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:38 2025 by rpki-client