This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json) Hash identifier: Kk4kwXBGD429XrB2vqPsrZioXDvqEy++flX90gW6lIA= Subject key identifier: C7:60:2B:88:67:F1:95:1A:8E:D1:F9:08:41:AA:F3:45:15:23:71:E1 Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad Certificate serial: 019B43251141B49B5EB045DF72317AA0EC2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft Manifest number: 1346 Signing time: Sun 21 Dec 2025 23:01:01 +0000 Manifest this update: Sun 21 Dec 2025 23:01:01 +0000 Manifest next update: Mon 22 Dec 2025 23:01:01 +0000 Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=) 2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=) 3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: RoKgx7atNa0wZWBQucvTmITbxfdgzyCW0cMO4Srly/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:11:41:b4:9b:5e:b0:45:df:72:31:7a:a0:ec:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad Validity Not Before: Dec 21 23:01:01 2025 GMT Not After : Dec 22 23:01:01 2025 GMT Subject: CN=c7602b8867f1951a8ed1f90841aaf345152371e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:38:cd:a6:d4:0f:77:97:9b:b6:6e:17:79: 40:0e:4e:32:e6:98:45:38:66:71:ac:06:70:df:66: 9f:6c:df:8c:8e:01:d9:af:fe:ee:1f:eb:9f:9f:60: cc:78:b7:33:10:fc:43:f7:af:cf:98:ba:9f:d0:da: 39:06:d3:87:5a:ba:78:5e:81:5c:5d:b3:29:d3:b9: c0:d2:9f:e5:40:cc:33:31:ec:11:25:d7:a7:c1:43: 69:c5:94:70:83:6c:ff:9d:40:34:8c:ec:6a:db:34: 0f:a8:2d:d9:40:96:57:b2:2d:49:89:58:fc:12:72: 07:94:16:20:ff:bb:c2:73:9a:39:85:26:a4:5c:a7: 34:c8:ef:5c:8b:3c:22:52:16:4c:fa:65:a9:61:2f: 17:75:f5:c8:70:5a:27:03:45:a0:4a:22:9a:a7:89: 71:3c:8f:68:7e:a1:79:fb:01:a9:d3:b8:73:e9:a8: 22:54:88:e9:36:1e:86:3e:35:97:20:f2:2d:00:6c: 23:e9:8d:a2:df:4c:d3:e2:dc:7f:a1:4e:06:04:f9: 03:ef:f4:6f:f2:37:25:6e:99:8c:4c:60:04:50:6e: a9:0f:a4:c8:f3:07:c7:04:61:c9:96:87:d2:c4:1f: 63:c2:1d:97:78:65:71:05:29:c9:17:03:21:d4:cf: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:60:2B:88:67:F1:95:1A:8E:D1:F9:08:41:AA:F3:45:15:23:71:E1 X509v3 Authority Key Identifier: keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:c0:c7:63:de:0b:5b:1f:df:53:b8:fb:cf:27:92:2f:af: b5:85:0b:a3:81:db:5f:32:8c:ff:38:0b:a8:f3:cd:7b:5d:a5: eb:86:e9:82:00:12:96:c5:78:97:2d:af:db:fe:fe:db:50:11: aa:17:5e:a1:12:78:0c:f3:f1:38:ba:78:f4:c4:47:6f:a1:e8: 9c:9e:03:df:0f:27:81:79:a4:a9:31:ed:20:7e:b5:bc:35:a1: 33:e7:44:92:e2:1a:be:d0:d6:fc:dd:10:b2:a0:42:c9:c3:48: 01:54:a4:91:41:96:62:c0:e1:c2:da:96:1e:9c:ca:be:6a:bf: 22:b4:1c:a7:c0:00:83:60:10:67:7e:be:55:2c:42:a5:15:b2: 0e:96:4a:02:d6:82:4a:c2:27:75:d5:6b:61:20:92:3f:b0:20: b8:00:2f:59:3c:56:94:02:14:47:d0:ea:c1:08:09:29:04:18: d0:cd:3d:7d:32:66:f2:3c:82:55:b7:77:3c:47:ff:db:bb:99: ad:b1:e7:d7:e8:13:45:72:b1:91:94:71:df:a5:3e:70:f2:d4: 2a:21:b6:1f:38:85:09:b6:a9:db:ab:3f:06:04:28:1c:78:6a: 73:43:34:45:e3:e9:71:39:44:b9:c9:c0:fa:3e:73:85:5e:3b: 0c:39:93:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRFBtJtesEXfcjF6oOwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5 MGExYWQwHhcNMjUxMjIxMjMwMTAxWhcNMjUxMjIyMjMwMTAxWjAzMTEwLwYDVQQD EyhjNzYwMmI4ODY3ZjE5NTFhOGVkMWY5MDg0MWFhZjM0NTE1MjM3MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxM4zabUD3eXm7ZuF3lADk4y5phF OGZxrAZw32afbN+MjgHZr/7uH+ufn2DMeLczEPxD96/PmLqf0No5BtOHWrp4XoFc XbMp07nA0p/lQMwzMewRJdenwUNpxZRwg2z/nUA0jOxq2zQPqC3ZQJZXsi1JiVj8 EnIHlBYg/7vCc5o5hSakXKc0yO9cizwiUhZM+mWpYS8XdfXIcFonA0WgSiKap4lx PI9ofqF5+wGp07hz6agiVIjpNh6GPjWXIPItAGwj6Y2i30zT4tx/oU4GBPkD7/Rv 8jclbpmMTGAEUG6pD6TI8wfHBGHJlofSxB9jwh2XeGVxBSnJFwMh1M8CkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdgK4hn8ZUajtH5CEGq80UVI3HhMB8GA1UdIwQY MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLvAx2Pe C1sf31O4+88nki+vtYULo4HbXzKM/zgLqPPNe12l64bpggASlsV4ly2v2/7+21AR qhdeoRJ4DPPxOLp49MRHb6HonJ4D3w8ngXmkqTHtIH61vDWhM+dEkuIavtDW/N0Q sqBCycNIAVSkkUGWYsDhwtqWHpzKvmq/IrQcp8AAg2AQZ36+VSxCpRWyDpZKAtaC SsInddVrYSCSP7AguAAvWTxWlAIUR9DqwQgJKQQY0M09fTJm8jyCVbd3PEf/27uZ rbHn1+gTRXKxkZRx36U+cPLUKiG2HziFCbap26s/BgQoHHhqc0M0RePpcTlEucnA +j5zhV47DDmTpg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:42 2025 by rpki-client