This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json) Hash identifier: 9Nxqay0oKODAdofraNkLIwrORqJ4dQ+IjYKoejiuD3w= Subject key identifier: 88:43:C8:3C:70:48:EC:54:1C:65:C9:D2:88:5B:33:05:11:44:6B:47 Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Certificate serial: 019B650D58CE65CF7EA8D3FFF2761CD0A832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 13:02:12 +0000 Manifest this update: Sun 28 Dec 2025 13:02:12 +0000 Manifest next update: Mon 29 Dec 2025 13:02:12 +0000 Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=) 2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: bLFgToBxfbwW/TNFeVOyaFO4gfAlhmk8DP9mmTLqrfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:58:ce:65:cf:7e:a8:d3:ff:f2:76:1c:d0:a8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Validity Not Before: Dec 28 13:02:12 2025 GMT Not After : Dec 29 13:02:12 2025 GMT Subject: CN=8843c83c7048ec541c65c9d2885b330511446b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:b0:30:b6:0f:7c:1b:88:7c:86:58:01:0d: b8:92:4d:75:61:57:3d:75:ac:8f:08:71:55:d9:17: 9f:d4:91:a1:31:da:0d:14:ee:14:99:03:91:82:9c: 89:41:b9:2a:63:0b:fa:36:47:57:a9:32:dd:f6:4b: 43:1b:6d:41:bf:d5:07:44:bf:7d:23:f0:01:26:26: 8f:9f:7d:42:84:2b:93:5d:b3:5a:72:12:4b:95:50: de:30:60:e3:f0:30:4d:c1:b6:9b:8b:4c:d3:53:6f: a0:5c:d8:50:b4:1d:cd:34:7e:ff:5e:2d:0f:c7:24: bc:e5:c5:dc:50:d1:64:f0:c2:05:13:4a:08:60:b0: 7a:88:f8:e8:9d:f4:c2:8d:d9:0f:30:a0:79:80:e0: 6f:ec:23:a8:a9:56:7f:29:c8:66:1a:f6:00:9b:d3: 17:04:63:8b:16:96:59:11:e5:9b:2c:63:ab:12:0b: 35:4c:08:e2:a5:4d:03:20:f8:f1:a3:04:db:15:46: 19:23:a6:e5:2e:32:7d:be:36:e0:10:4d:c0:81:5a: 4d:f6:3e:8c:50:62:1d:52:74:34:8c:05:fc:61:8b: 2c:75:31:05:8f:f0:bd:da:03:53:a1:bf:e4:c9:a0: 7b:a1:e6:68:47:b2:b3:34:38:d9:73:c4:76:60:05: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:43:C8:3C:70:48:EC:54:1C:65:C9:D2:88:5B:33:05:11:44:6B:47 X509v3 Authority Key Identifier: keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:71:80:0a:cc:33:27:60:7c:7e:fb:48:19:ea:fc:6b:c5:70: 3a:93:fb:81:32:7c:3f:8e:d2:d4:52:09:2c:23:61:86:0f:04: 08:e8:c7:ec:d6:64:d0:ea:96:32:fc:ae:6f:c1:4d:b0:1e:b8: 94:6e:fe:71:9d:df:15:cc:17:e9:aa:56:f2:79:41:b3:0a:1a: de:52:9c:fd:c3:f8:31:24:11:fe:d1:77:80:f3:7d:60:cc:59: 8d:25:6a:49:d7:d9:f3:ce:b5:cc:72:61:7b:2e:8b:3f:31:77: cd:64:02:c8:93:00:26:68:2f:51:3c:8f:a0:2d:d6:5f:e2:74: a5:33:b6:c3:fa:04:fe:48:01:c9:ec:ad:63:2a:b5:37:8e:32: 22:ad:94:25:74:9e:0b:e3:f9:3e:2f:81:8f:cb:d6:12:54:27: 27:f8:e2:9c:cb:e1:11:8c:f2:7f:08:fe:da:8a:a8:e0:59:31: 3c:ab:5c:67:c9:53:1e:07:a5:35:df:ee:fb:13:a0:14:15:35: 97:11:84:bc:c7:ef:c9:7b:0c:b1:92:f6:33:74:57:85:fd:0c: d5:25:17:1d:b5:b1:6a:72:0b:87:2d:6a:0d:cc:0f:a7:98:b2: 1d:b1:1d:7f:15:eb:7d:53:1a:42:96:5c:04:93:44:2f:6c:04: 8e:7b:79:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDVjOZc9+qNP/8nYc0KgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmI1ZTJlMGZkOTgzMmQ3M2IxZWY4ZjllNDg2ZmZkMDBi M2Q3ODkwHhcNMjUxMjI4MTMwMjEyWhcNMjUxMjI5MTMwMjEyWjAzMTEwLwYDVQQD Eyg4ODQzYzgzYzcwNDhlYzU0MWM2NWM5ZDI4ODViMzMwNTExNDQ2YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEuwMLYPfBuIfIZYAQ24kk11YVc9 dayPCHFV2Ref1JGhMdoNFO4UmQORgpyJQbkqYwv6NkdXqTLd9ktDG21Bv9UHRL99 I/ABJiaPn31ChCuTXbNachJLlVDeMGDj8DBNwbabi0zTU2+gXNhQtB3NNH7/Xi0P xyS85cXcUNFk8MIFE0oIYLB6iPjonfTCjdkPMKB5gOBv7COoqVZ/KchmGvYAm9MX BGOLFpZZEeWbLGOrEgs1TAjipU0DIPjxowTbFUYZI6blLjJ9vjbgEE3AgVpN9j6M UGIdUnQ0jAX8YYssdTEFj/C92gNTob/kyaB7oeZoR7KzNDjZc8R2YAVggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhDyDxwSOxUHGXJ0ohbMwURRGtHMB8GA1UdIwQY MBaAFPy7Xi4P2YMtc7Hvj55Ib/0As9eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTkt NWU2YTkyZTdmNjhmLzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTktNWU2YTkyZTdmNjhm LzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3GACswz J2B8fvtIGer8a8VwOpP7gTJ8P47S1FIJLCNhhg8ECOjH7NZk0OqWMvyub8FNsB64 lG7+cZ3fFcwX6apW8nlBswoa3lKc/cP4MSQR/tF3gPN9YMxZjSVqSdfZ8861zHJh ey6LPzF3zWQCyJMAJmgvUTyPoC3WX+J0pTO2w/oE/kgByeytYyq1N44yIq2UJXSe C+P5Pi+Bj8vWElQnJ/jinMvhEYzyfwj+2oqo4FkxPKtcZ8lTHgelNd/u+xOgFBU1 lxGEvMfvyXsMsZL2M3RXhf0M1SUXHbWxanILhy1qDcwPp5iyHbEdfxXrfVMaQpZc BJNEL2wEjnt50Q== -----END CERTIFICATE-----Generated at Sun Dec 28 23:07:43 2025 by rpki-client