This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json) Hash identifier: p8BCiHgkysKH2YVYyMcEUNf9/vEBYmvBPIN+eeRk9yI= Subject key identifier: B8:18:BE:56:A2:39:0C:E1:81:BE:22:84:E1:03:62:DA:99:03:70:19 Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019B2EFA1268F13A94A9C17F1D4496F5C993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft Manifest number: 049D Signing time: Thu 18 Dec 2025 01:01:39 +0000 Manifest this update: Thu 18 Dec 2025 01:01:39 +0000 Manifest next update: Fri 19 Dec 2025 01:01:39 +0000 Files and hashes: 1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=) 2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=) 3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=) 4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: EsKaWQUi2QohJaUhnUtZKouMIVpgojWmBnX3orWmqBs=) 5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:12:68:f1:3a:94:a9:c1:7f:1d:44:96:f5:c9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Dec 18 01:01:39 2025 GMT Not After : Dec 19 01:01:39 2025 GMT Subject: CN=b818be56a2390ce181be2284e10362da99037019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:64:c6:19:1a:b8:9b:9a:2e:f7:8b:24:67: 5c:27:c1:d2:d5:82:5a:72:17:fc:fb:ce:b1:f6:d3: 67:e4:6a:55:b8:d1:5c:f3:42:81:f8:30:6d:22:3d: f8:a8:a9:33:8e:8b:73:3b:ef:7a:9f:b9:46:a3:55: 31:8c:c8:37:92:43:ab:57:97:cc:e4:b9:fd:0c:0b: 49:83:10:4b:c8:ba:e5:9d:31:3f:47:16:09:d5:87: 30:db:92:4f:99:5d:3f:e4:0a:20:66:15:0a:c9:63: 5c:33:97:52:9a:d0:52:fc:5e:99:ce:a8:1b:08:21: 9a:23:82:c3:8f:a1:9a:93:97:59:90:d5:76:28:e5: 8b:37:f1:9d:42:83:e6:d0:23:f1:1e:10:45:fb:d9: 65:dc:33:1c:a2:4e:2d:0d:f3:82:85:f3:28:b2:da: 55:d5:07:c1:46:14:c3:62:4c:c7:03:99:18:f2:ff: 5b:d1:b5:5d:98:dc:11:f1:51:c0:b4:e0:0a:b2:31: 23:ef:95:55:93:a7:cc:3e:dd:a7:65:e9:cf:3d:13: a8:4a:cb:bd:a3:86:10:cb:c8:0b:ea:52:b2:d4:2a: 2b:e3:94:c8:93:4b:ef:2b:ab:4a:5a:74:f2:96:82: 58:39:dc:3a:0f:33:3a:a4:10:eb:d8:8b:67:dd:a4: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:18:BE:56:A2:39:0C:E1:81:BE:22:84:E1:03:62:DA:99:03:70:19 X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4d:4e:44:da:a6:74:16:60:23:6e:bc:ef:5f:fa:02:28:a7: c1:42:a7:6e:09:8e:88:0c:3a:7f:e5:0d:6c:f4:9a:91:61:d6: 0f:5f:de:03:10:8c:42:7f:65:7b:48:6d:88:96:7a:92:42:0c: ed:03:44:4c:d7:92:fd:d1:71:ff:81:f0:9e:f0:c7:35:9d:84: d8:45:15:ef:99:92:75:6d:ab:f4:8e:50:b6:e9:74:e7:05:13: 7f:5e:57:c7:b8:0e:77:05:a5:d3:7b:9a:03:75:bf:ba:46:80: 0c:b6:57:fe:42:5e:e8:c4:3c:c2:4b:68:f7:47:87:3f:6d:2b: a2:83:63:b0:df:a2:6d:50:c5:a5:3a:00:54:c5:9a:24:4a:7d: 09:8f:f9:b2:ae:9f:2b:00:ca:5c:c8:29:aa:82:ed:7c:ec:98: 92:af:cf:ae:84:cd:57:f7:8e:be:83:49:e0:9c:ec:19:f2:70: 15:34:3f:d5:79:59:d6:51:8a:8f:f3:e0:26:9d:f0:39:6d:4b: 41:ac:36:46:0c:70:74:6d:07:f1:dc:d6:13:89:40:9f:a0:88: f9:7f:87:76:4d:c8:e2:c3:f2:b4:50:fa:e5:75:7c:1b:3d:03: a1:78:2f:d3:85:44:53:52:a7:8f:d3:35:65:07:90:fd:7a:ad: a8:78:09:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+hJo8TqUqcF/HUSW9cmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjUxMjE4MDEwMTM5WhcNMjUxMjE5MDEwMTM5WjAzMTEwLwYDVQQD EyhiODE4YmU1NmEyMzkwY2UxODFiZTIyODRlMTAzNjJkYTk5MDM3MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1pkxhkauJuaLveLJGdcJ8HS1YJa chf8+86x9tNn5GpVuNFc80KB+DBtIj34qKkzjotzO+96n7lGo1UxjMg3kkOrV5fM 5Ln9DAtJgxBLyLrlnTE/RxYJ1Ycw25JPmV0/5AogZhUKyWNcM5dSmtBS/F6Zzqgb CCGaI4LDj6Gak5dZkNV2KOWLN/GdQoPm0CPxHhBF+9ll3DMcok4tDfOChfMostpV 1QfBRhTDYkzHA5kY8v9b0bVdmNwR8VHAtOAKsjEj75VVk6fMPt2nZenPPROoSsu9 o4YQy8gL6lKy1Cor45TIk0vvK6tKWnTyloJYOdw6DzM6pBDr2Itn3aRCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgYvlaiOQzhgb4ihOEDYtqZA3AZMB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU1ORNqm dBZgI26871/6AiinwUKnbgmOiAw6f+UNbPSakWHWD1/eAxCMQn9le0htiJZ6kkIM 7QNETNeS/dFx/4HwnvDHNZ2E2EUV75mSdW2r9I5Qtul05wUTf15Xx7gOdwWl03ua A3W/ukaADLZX/kJe6MQ8wkto90eHP20rooNjsN+ibVDFpToAVMWaJEp9CY/5sq6f KwDKXMgpqoLtfOyYkq/ProTNV/eOvoNJ4JzsGfJwFTQ/1XlZ1lGKj/PgJp3wOW1L Qaw2RgxwdG0H8dzWE4lAn6CI+X+Hdk3I4sPytFD65XV8Gz0DoXgv04VEU1Knj9M1 ZQeQ/XqtqHgJSQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:12 2025 by rpki-client