This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json) Hash identifier: 6OAhydyKd/18HiOhIRN7UtQcWhHM4+yaVfs7Ao9zVDA= Subject key identifier: 79:B0:0C:6F:4C:C7:F0:AE:52:E4:EE:3B:D6:C7:80:08:FF:7B:18:2B Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7 Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7 Certificate serial: 019B5787FDD89E94C68258E0225C2D83742A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft Manifest number: 12F8 Signing time: Thu 25 Dec 2025 22:01:28 +0000 Manifest this update: Thu 25 Dec 2025 22:01:28 +0000 Manifest next update: Fri 26 Dec 2025 22:01:28 +0000 Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=) 2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: TPLXYzG+bUxY8KI7+OIQQBe07T9NyaRw/tn6pkt2wsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:fd:d8:9e:94:c6:82:58:e0:22:5c:2d:83:74:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7 Validity Not Before: Dec 25 22:01:28 2025 GMT Not After : Dec 26 22:01:28 2025 GMT Subject: CN=79b00c6f4cc7f0ae52e4ee3bd6c78008ff7b182b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:d5:32:a2:be:79:1a:a0:65:79:80:d2:36: 4f:60:d0:02:1b:23:c0:12:93:b6:04:6b:e0:09:ce: c1:2a:b9:b4:f8:44:23:d6:c0:d3:3b:d1:c0:9d:56: 81:97:e3:80:f6:01:dd:91:46:a3:e1:3f:ed:88:c7: f4:ae:14:90:99:01:b0:39:93:c5:de:60:5a:d4:92: ea:66:44:6b:4d:06:f0:ba:9a:f3:de:f6:01:07:61: e7:f5:65:64:e4:a8:43:6a:3c:ce:da:e2:81:8a:d9: 04:b2:63:3f:39:11:14:35:dc:4c:0b:d8:09:07:bf: 15:c7:d3:12:ba:5f:d4:f8:42:d7:a9:b0:cf:97:76: b1:27:5a:e9:2f:d1:ab:f9:f6:59:e9:29:be:e4:45: c8:7f:5a:57:0d:fa:7e:71:b1:9b:95:f4:ec:80:a5: 88:1e:9e:3b:db:c4:3f:e8:ec:84:5c:3f:92:cf:c1: 98:1b:4e:ca:3d:b2:3c:e2:b7:a0:0b:44:54:02:56: 44:5c:8d:d0:a1:f3:23:6f:a2:63:5d:c7:cd:bd:80: c8:57:9d:d7:60:3c:08:4f:5c:79:6b:4a:db:13:64: 55:4c:10:d9:61:26:06:f3:d7:a6:22:7a:6f:65:71: 41:12:99:6f:39:00:d8:f3:fd:ff:8b:d4:7e:79:14: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B0:0C:6F:4C:C7:F0:AE:52:E4:EE:3B:D6:C7:80:08:FF:7B:18:2B X509v3 Authority Key Identifier: keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d3:89:e9:9a:68:99:d0:17:29:68:c6:f1:f8:6e:2e:b0:63: b9:71:50:dd:6a:e8:8e:b9:7c:84:df:01:2b:97:fd:38:2f:2a: ce:17:d3:f6:2b:6a:c3:25:61:dc:2f:31:22:6f:bf:6e:9c:eb: 9c:ed:13:c3:15:5d:bd:03:79:eb:6b:89:86:33:b4:9d:98:54: 9f:7a:c6:e4:c0:41:39:aa:ce:da:5b:f4:8f:eb:03:11:80:f2: 96:90:3c:ce:c7:4a:b5:82:2c:f4:80:06:d8:b4:e0:58:4e:37: e6:7c:86:0d:da:f3:4f:17:da:5b:5a:d5:38:e7:d3:fc:31:9e: d4:9f:37:9d:bd:22:2c:d6:06:24:bf:70:81:86:96:59:d8:76: 6d:5a:c4:11:a7:02:e8:e6:86:18:39:a7:82:b1:e3:2b:20:21: 54:21:b3:07:89:f3:58:85:b0:e8:e5:3e:f3:bd:01:4b:57:d6: 8f:3c:14:a1:6b:54:d4:4d:3f:56:e9:7d:f9:07:07:7b:ad:18: 95:e4:c9:1c:3e:a7:1d:70:59:6a:9c:fb:78:b0:18:a3:bd:a2: 1c:d0:d7:0e:20:60:7b:f9:ec:03:ba:b6:4c:ea:47:24:c5:f0: 68:26:03:24:08:2d:2e:2f:3c:65:23:36:d4:90:9c:08:b3:7f: 13:72:39:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh/3YnpTGgljgIlwtg3QqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1 YjBkZjcwHhcNMjUxMjI1MjIwMTI4WhcNMjUxMjI2MjIwMTI4WjAzMTEwLwYDVQQD Eyg3OWIwMGM2ZjRjYzdmMGFlNTJlNGVlM2JkNmM3ODAwOGZmN2IxODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JDVMqK+eRqgZXmA0jZPYNACGyPA EpO2BGvgCc7BKrm0+EQj1sDTO9HAnVaBl+OA9gHdkUaj4T/tiMf0rhSQmQGwOZPF 3mBa1JLqZkRrTQbwuprz3vYBB2Hn9WVk5KhDajzO2uKBitkEsmM/OREUNdxMC9gJ B78Vx9MSul/U+ELXqbDPl3axJ1rpL9Gr+fZZ6Sm+5EXIf1pXDfp+cbGblfTsgKWI Hp4728Q/6OyEXD+Sz8GYG07KPbI84regC0RUAlZEXI3QofMjb6JjXcfNvYDIV53X YDwIT1x5a0rbE2RVTBDZYSYG89emInpvZXFBEplvOQDY8/3/i9R+eRTQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmwDG9Mx/CuUuTuO9bHgAj/exgrMB8GA1UdIwQY MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt NzM0ZmFiNmZlYzZmLzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdOJ6Zpo mdAXKWjG8fhuLrBjuXFQ3Wrojrl8hN8BK5f9OC8qzhfT9itqwyVh3C8xIm+/bpzr nO0TwxVdvQN562uJhjO0nZhUn3rG5MBBOarO2lv0j+sDEYDylpA8zsdKtYIs9IAG 2LTgWE435nyGDdrzTxfaW1rVOOfT/DGe1J83nb0iLNYGJL9wgYaWWdh2bVrEEacC 6OaGGDmngrHjKyAhVCGzB4nzWIWw6OU+870BS1fWjzwUoWtU1E0/Vul9+QcHe60Y leTJHD6nHXBZapz7eLAYo72iHNDXDiBge/nsA7q2TOpHJMXwaCYDJAgtLi88ZSM2 1JCcCLN/E3I5xw== -----END CERTIFICATE-----Generated at Fri Dec 26 00:48:40 2025 by rpki-client