This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json) Hash identifier: pDPaP5SAyAVuJ6o1fy/DG91JHiV6ajxInITMrXU8oaQ= Subject key identifier: 70:A8:D5:19:FE:E0:37:C9:AD:D4:14:AB:8A:7B:15:40:74:3A:1F:22 Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Certificate serial: 019B6AD8C3B22AFDBDAE444D46160C0C2DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft Manifest number: 03E2 Signing time: Mon 29 Dec 2025 16:02:29 +0000 Manifest this update: Mon 29 Dec 2025 16:02:29 +0000 Manifest next update: Tue 30 Dec 2025 16:02:29 +0000 Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: poYcrw/rFOy6wzKNj8j0VdXviSrzYRL+g8Gz+o55y30=) 2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:c3:b2:2a:fd:bd:ae:44:4d:46:16:0c:0c:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Validity Not Before: Dec 29 16:02:29 2025 GMT Not After : Dec 30 16:02:29 2025 GMT Subject: CN=70a8d519fee037c9add414ab8a7b1540743a1f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:e7:48:dd:fa:7f:94:9e:8b:f6:c0:ff:15: 9c:16:b8:03:bb:a7:dc:25:ae:4a:64:2e:24:4b:a2: 5f:13:9d:b6:c8:05:64:17:cc:e1:a6:dc:67:c9:ea: a2:fc:9a:7d:d7:76:c6:45:f3:bc:36:a6:03:24:2d: 54:9b:0d:49:ac:38:91:0f:b2:a3:38:f8:ce:e9:ec: 02:dc:bc:d1:4e:47:4b:d2:85:0d:bc:00:a9:19:63: 60:b1:54:c4:39:7e:56:7e:68:ee:e8:28:61:fc:7c: a1:83:6b:04:72:11:2c:45:b0:0b:1f:53:51:c2:25: 06:b7:21:72:59:3c:60:07:9c:14:ad:34:bc:5a:bc: 01:12:d8:51:d9:c7:d0:dd:5e:1d:2e:1e:06:26:b4: fd:37:51:2f:92:50:3e:5d:59:5f:fa:e2:c3:ca:54: cd:4c:2c:81:e2:24:4f:8a:b9:97:e3:ac:61:b8:97: 8a:c0:eb:67:e0:03:7b:2b:db:80:09:f1:51:f5:e5: 60:5c:1a:ff:cc:25:ef:b4:1a:f7:b2:c2:1d:cf:ef: 00:7f:fa:7c:63:e1:ea:c9:66:a3:ad:4b:24:fe:0b: f8:0e:cf:29:b0:fa:46:a0:ac:89:c1:ec:5c:e7:49: af:d0:61:35:c1:b4:7f:b8:72:4a:30:75:d7:ca:ad: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A8:D5:19:FE:E0:37:C9:AD:D4:14:AB:8A:7B:15:40:74:3A:1F:22 X509v3 Authority Key Identifier: keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:74:bb:f6:e5:b0:e9:0f:d6:ef:c9:50:fb:9d:f1:a0:30:d0: 77:70:32:ec:91:c7:e0:8f:4a:e9:96:45:0d:ae:01:53:cd:67: a4:08:bd:77:93:cf:5c:ab:9e:fe:23:ad:5b:cc:f3:69:5a:c7: a4:20:58:f2:4f:47:99:50:ad:43:c5:97:fd:19:6c:36:ae:b6: 0d:88:f7:dd:2a:e3:de:24:71:29:39:b1:9e:22:10:7e:ae:51: 0f:a6:8c:00:ee:7d:56:3f:80:69:25:1c:e4:8f:f6:55:7e:b8: 34:3b:d8:c1:1b:55:09:44:55:2e:1f:64:c9:16:61:02:96:56: a0:72:02:a6:10:12:40:4d:d9:57:b8:33:84:7f:72:33:72:9b: 4d:b8:3e:1b:75:3f:94:97:30:2b:6a:d7:bd:73:a0:48:ba:f8: a2:70:b4:c0:51:58:44:13:e4:4b:8f:50:a9:cc:2d:ce:64:10: 7d:16:d0:90:0e:47:6f:93:74:01:59:ea:8e:e5:0b:8d:cd:3e: 0b:02:d0:9b:d9:9e:a5:1f:c3:b4:06:0f:9b:29:ef:db:71:f7: 93:e2:05:81:f0:fb:3b:7c:43:49:6d:84:72:f9:03:58:96:88: 7c:89:d6:e5:c4:0a:77:a8:2c:d7:9f:90:b0:95:02:40:d1:c5: 41:80:07:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2MOyKv29rkRNRhYMDC2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1 ZDJhNTEwHhcNMjUxMjI5MTYwMjI5WhcNMjUxMjMwMTYwMjI5WjAzMTEwLwYDVQQD Eyg3MGE4ZDUxOWZlZTAzN2M5YWRkNDE0YWI4YTdiMTU0MDc0M2ExZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuavnSN36f5Sei/bA/xWcFrgDu6fc Ja5KZC4kS6JfE522yAVkF8zhptxnyeqi/Jp913bGRfO8NqYDJC1Umw1JrDiRD7Kj OPjO6ewC3LzRTkdL0oUNvACpGWNgsVTEOX5Wfmju6Chh/Hyhg2sEchEsRbALH1NR wiUGtyFyWTxgB5wUrTS8WrwBEthR2cfQ3V4dLh4GJrT9N1EvklA+XVlf+uLDylTN TCyB4iRPirmX46xhuJeKwOtn4AN7K9uACfFR9eVgXBr/zCXvtBr3ssIdz+8Af/p8 Y+HqyWajrUsk/gv4Ds8psPpGoKyJwexc50mv0GE1wbR/uHJKMHXXyq0vlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCo1Rn+4DfJrdQUq4p7FUB0Oh8iMB8GA1UdIwQY MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3 LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXS79uWw 6Q/W78lQ+53xoDDQd3Ay7JHH4I9K6ZZFDa4BU81npAi9d5PPXKue/iOtW8zzaVrH pCBY8k9HmVCtQ8WX/RlsNq62DYj33Srj3iRxKTmxniIQfq5RD6aMAO59Vj+AaSUc 5I/2VX64NDvYwRtVCURVLh9kyRZhApZWoHICphASQE3ZV7gzhH9yM3KbTbg+G3U/ lJcwK2rXvXOgSLr4onC0wFFYRBPkS49QqcwtzmQQfRbQkA5Hb5N0AVnqjuULjc0+ CwLQm9mepR/DtAYPmynv23H3k+IFgfD7O3xDSW2EcvkDWJaIfInW5cQKd6gs15+Q sJUCQNHFQYAH4g== -----END CERTIFICATE-----Generated at Mon Dec 29 17:59:42 2025 by rpki-client