This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json) Hash identifier: Ar7vDxkB047b1KxfEDC2FEwTbuLFZXFX8lPMrM0to7I= Subject key identifier: FB:0F:28:16:93:53:97:61:DB:24:35:26:98:18:AE:E0:53:2D:D3:67 Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad Certificate serial: 019B6BB2DA08BADF485A9A552225186933AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft Manifest number: 135B Signing time: Mon 29 Dec 2025 20:00:41 +0000 Manifest this update: Mon 29 Dec 2025 20:00:41 +0000 Manifest next update: Tue 30 Dec 2025 20:00:41 +0000 Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=) 2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=) 3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: x+T9bwEONWHxyECwows7g721I8p9SZvA0xTtslbtDQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:da:08:ba:df:48:5a:9a:55:22:25:18:69:33:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad Validity Not Before: Dec 29 20:00:41 2025 GMT Not After : Dec 30 20:00:41 2025 GMT Subject: CN=fb0f281693539761db2435269818aee0532dd367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:e1:92:f7:b3:8f:4d:c5:24:9a:bd:c2:ce: 72:55:f0:f8:89:15:ea:de:6b:50:70:9f:70:36:42: d7:3a:81:9c:16:a5:c9:ea:44:8a:86:4d:e8:54:f8: df:bf:7e:49:28:ac:43:24:07:48:fb:d7:f0:7f:fd: 18:fa:9f:4b:d5:d2:64:29:b9:e8:b8:9d:63:47:fb: 00:af:10:60:c9:aa:74:4f:88:be:08:3a:03:0a:05: a7:63:11:72:39:75:0c:aa:05:06:49:25:46:e3:6f: 54:67:90:72:fb:e4:1b:ef:08:7c:32:18:cb:31:e3: cb:e0:04:7f:49:ec:d4:f5:2a:0d:22:07:47:77:6f: 87:8f:e8:1f:fc:fe:94:c6:0f:43:30:c1:2e:f3:54: cb:82:52:4e:8d:f8:c8:ca:69:e6:0a:a1:38:e1:c1: 3a:4c:a7:d5:61:86:d5:c8:c5:64:ed:b7:be:25:6b: b7:46:62:cb:e5:e5:f4:7c:82:26:4b:a3:ce:d9:50: 93:11:72:0f:57:ed:4b:f6:62:3f:50:50:4d:36:9d: c7:67:34:a8:a0:f7:82:a1:97:ef:79:98:3f:a0:b9: 9c:c6:57:a3:01:ce:bf:b2:6f:1c:ce:0d:38:af:ff: a9:5b:c9:c3:48:1f:bb:45:a6:bc:fb:c1:a5:08:4b: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:28:16:93:53:97:61:DB:24:35:26:98:18:AE:E0:53:2D:D3:67 X509v3 Authority Key Identifier: keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4a:e4:a1:5d:f4:7f:e7:43:97:b4:61:77:50:52:f1:11:92: e9:0c:db:0b:e4:49:0f:1c:cb:f8:9c:05:5b:9d:eb:51:00:bc: a6:8a:5c:26:7e:67:94:b4:73:c4:f9:cf:81:3e:f3:66:50:2f: 8b:d5:55:e2:80:71:ad:42:e9:41:40:5e:c3:42:04:40:77:04: 1e:05:ab:53:e2:03:30:86:a1:f9:cf:a5:75:e4:a2:ff:72:74: 67:d6:91:67:ea:61:1d:1c:18:61:2a:0b:c7:3c:e1:9a:e0:32: 14:9f:5d:0c:c0:76:fb:de:55:91:dc:9e:a5:0a:a3:54:2f:e9: 3d:45:86:80:9c:6a:c8:6c:c5:e6:d2:77:60:fa:8a:d2:f7:ac: b0:47:0b:8f:48:41:ca:1a:41:52:b1:5d:07:69:29:69:2b:73: 2e:5e:f7:a3:39:1a:ad:5c:40:3d:92:c8:46:cc:ef:20:eb:59: 97:c9:0d:5c:5f:dc:7a:b0:82:7b:4c:18:33:ac:c0:26:52:52: 66:a4:88:b2:53:ae:89:b4:d9:ff:ff:98:bb:91:b7:02:70:88: 78:7b:27:a6:94:a1:15:4a:84:57:ba:df:c6:fd:48:15:88:53: d8:49:e7:a7:a3:47:ef:38:d6:c8:b0:04:09:cc:37:ac:23:df: d9:66:02:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrstoIut9IWppVIiUYaTOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5 MGExYWQwHhcNMjUxMjI5MjAwMDQxWhcNMjUxMjMwMjAwMDQxWjAzMTEwLwYDVQQD EyhmYjBmMjgxNjkzNTM5NzYxZGIyNDM1MjY5ODE4YWVlMDUzMmRkMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj3hkvezj03FJJq9ws5yVfD4iRXq 3mtQcJ9wNkLXOoGcFqXJ6kSKhk3oVPjfv35JKKxDJAdI+9fwf/0Y+p9L1dJkKbno uJ1jR/sArxBgyap0T4i+CDoDCgWnYxFyOXUMqgUGSSVG429UZ5By++Qb7wh8MhjL MePL4AR/SezU9SoNIgdHd2+Hj+gf/P6Uxg9DMMEu81TLglJOjfjIymnmCqE44cE6 TKfVYYbVyMVk7be+JWu3RmLL5eX0fIImS6PO2VCTEXIPV+1L9mI/UFBNNp3HZzSo oPeCoZfveZg/oLmcxlejAc6/sm8czg04r/+pW8nDSB+7Raa8+8GlCEv6wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsPKBaTU5dh2yQ1JpgYruBTLdNnMB8GA1UdIwQY MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfErkoV30 f+dDl7Rhd1BS8RGS6QzbC+RJDxzL+JwFW53rUQC8popcJn5nlLRzxPnPgT7zZlAv i9VV4oBxrULpQUBew0IEQHcEHgWrU+IDMIah+c+ldeSi/3J0Z9aRZ+phHRwYYSoL xzzhmuAyFJ9dDMB2+95VkdyepQqjVC/pPUWGgJxqyGzF5tJ3YPqK0vessEcLj0hB yhpBUrFdB2kpaStzLl73ozkarVxAPZLIRszvIOtZl8kNXF/cerCCe0wYM6zAJlJS ZqSIslOuibTZ//+Yu5G3AnCIeHsnppShFUqEV7rfxv1IFYhT2Ennp6NH7zjWyLAE Ccw3rCPf2WYC8A== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:18 2025 by rpki-client