This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json) Hash identifier: 4fnoDyGN60bYHiGPXjTYRhCMVDb8g8PgkBnvlv2z8wI= Subject key identifier: 99:13:A6:AA:9C:10:5A:7A:96:A6:AC:36:DE:EE:A4:F1:8B:7A:08:30 Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B372090C24EE7B765FC550D919EBEE113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 15:00:39 +0000 Manifest this update: Fri 19 Dec 2025 15:00:39 +0000 Manifest next update: Sat 20 Dec 2025 15:00:39 +0000 Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=) 2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=) 3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=) 4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=) 5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=) 6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: c9/u4xs9grNKmnfVonqfneU7xP+gS5ZR0L4cJFXHXr8=) 7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:90:c2:4e:e7:b7:65:fc:55:0d:91:9e:be:e1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Dec 19 15:00:39 2025 GMT Not After : Dec 20 15:00:39 2025 GMT Subject: CN=9913a6aa9c105a7a96a6ac36deeea4f18b7a0830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:4c:a8:c0:2a:fe:79:ed:3f:2d:65:ad:36: cc:f1:7b:95:ec:f1:fe:cd:03:fa:75:eb:f3:36:fb: 0d:52:bb:28:ba:ba:0b:92:80:26:32:91:b6:72:9b: ed:1e:61:3b:8c:97:ce:d3:49:e3:0e:86:fc:af:d4: 2e:09:dd:c9:8e:3b:da:da:e2:35:15:8c:f1:3f:34: dc:c2:3f:19:d9:d6:22:37:3f:2a:64:45:a8:99:93: b9:6c:6d:40:98:3c:15:07:bd:f7:e7:89:02:44:42: 85:86:95:16:9a:99:7e:75:95:8c:32:e0:08:5c:54: 1d:9a:96:56:10:27:9f:90:28:e8:67:f3:81:66:c6: 3f:e3:1f:42:ce:bb:6e:d5:cc:26:48:fc:0e:b9:9f: 4b:d4:6a:09:79:44:d3:3a:b2:9d:cd:ea:a4:84:0e: 16:20:4c:33:6d:b4:ae:0c:04:52:a5:bf:c5:ba:57: 89:e3:ba:62:c5:f4:ba:cb:9e:96:9c:0e:6e:c1:37: f9:d4:c5:49:71:00:be:77:da:4d:b8:f3:fd:db:9c: 94:4e:1e:22:a6:82:ec:61:d5:23:73:83:b8:ed:95: 40:2d:d2:ee:5e:d5:de:d6:4b:d0:f8:f6:11:47:f6: 22:1e:b6:ea:ec:36:52:f7:08:ef:a5:d9:1b:c8:3a: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:13:A6:AA:9C:10:5A:7A:96:A6:AC:36:DE:EE:A4:F1:8B:7A:08:30 X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9f:5e:a2:84:a6:fc:ec:89:b4:4a:66:1c:c4:5e:dc:dc:0e: 23:d3:18:46:e3:c9:3b:f4:b8:36:a4:ff:8a:85:9e:0c:d4:c9: 91:b6:76:86:bc:59:db:76:c3:0b:72:b5:b3:66:a7:d1:fa:c0: a9:4e:c0:79:03:61:5a:f1:4a:de:e9:59:41:f3:45:ab:28:a8: 04:6f:eb:d8:89:5b:33:e2:dd:73:f5:90:19:0a:0c:c9:c8:02: 09:dd:1a:22:71:34:47:82:20:d1:cd:c0:e4:86:ea:b6:b4:db: 79:69:95:ff:a2:5e:f6:a5:7d:84:e1:50:86:7f:56:50:43:25: bb:f2:5d:01:3e:a7:5e:5a:8d:ef:00:01:56:34:0f:c9:7c:8b: 8c:61:60:0c:4e:04:0a:50:11:f6:5d:f5:02:57:91:67:47:70: f9:1c:9c:86:6d:4d:02:d3:be:b7:3b:0f:aa:d3:76:7f:39:5b: 87:15:be:8c:5a:80:eb:d5:e7:ad:a6:73:ee:ff:97:a9:94:72: 9a:8c:ba:d8:78:21:19:16:ab:f5:d5:ee:97:f6:ae:61:ac:43: 04:d6:d2:60:60:98:ef:67:28:3e:21:b2:94:88:5d:72:aa:72: 86:07:35:39:8b:99:08:f0:14:e3:6d:81:c2:ca:9b:63:32:4d: e1:c9:e7:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IJDCTue3ZfxVDZGevuETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjUxMjE5MTUwMDM5WhcNMjUxMjIwMTUwMDM5WjAzMTEwLwYDVQQD Eyg5OTEzYTZhYTljMTA1YTdhOTZhNmFjMzZkZWVlYTRmMThiN2EwODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YJMqMAq/nntPy1lrTbM8XuV7PH+ zQP6devzNvsNUrsouroLkoAmMpG2cpvtHmE7jJfO00njDob8r9QuCd3Jjjva2uI1 FYzxPzTcwj8Z2dYiNz8qZEWomZO5bG1AmDwVB73354kCREKFhpUWmpl+dZWMMuAI XFQdmpZWECefkCjoZ/OBZsY/4x9Czrtu1cwmSPwOuZ9L1GoJeUTTOrKdzeqkhA4W IEwzbbSuDARSpb/FuleJ47pixfS6y56WnA5uwTf51MVJcQC+d9pNuPP925yUTh4i poLsYdUjc4O47ZVALdLuXtXe1kvQ+PYRR/YiHrbq7DZS9wjvpdkbyDqawQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkTpqqcEFp6lqasNt7upPGLeggwMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd59eooSm /OyJtEpmHMRe3NwOI9MYRuPJO/S4NqT/ioWeDNTJkbZ2hrxZ23bDC3K1s2an0frA qU7AeQNhWvFK3ulZQfNFqyioBG/r2IlbM+Ldc/WQGQoMycgCCd0aInE0R4Ig0c3A 5IbqtrTbeWmV/6Je9qV9hOFQhn9WUEMlu/JdAT6nXlqN7wABVjQPyXyLjGFgDE4E ClAR9l31AleRZ0dw+Rychm1NAtO+tzsPqtN2fzlbhxW+jFqA69XnraZz7v+XqZRy moy62HghGRar9dXul/auYaxDBNbSYGCY72coPiGylIhdcqpyhgc1OYuZCPAU422B wsqbYzJN4cnnFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:09:17 2025 by rpki-client