This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json) Hash identifier: kp2uCO4inkzyL13U2AxPGiUPqY9tkeHj35d4P90RnIU= Subject key identifier: 6F:77:71:64:CA:6B:E6:90:D2:6D:6F:F9:88:3A:95:85:E6:25:03:E4 Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf Certificate serial: 019B3C7E7459CAC21E6DF370219DE36ABC69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft Manifest number: 1714 Signing time: Sat 20 Dec 2025 16:01:18 +0000 Manifest this update: Sat 20 Dec 2025 16:01:18 +0000 Manifest next update: Sun 21 Dec 2025 16:01:18 +0000 Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=) 2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=) 3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=) 4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: VzeT2m0RGP8P0L9+5dHuZRDQd5+LUavphwNs+QamGBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:74:59:ca:c2:1e:6d:f3:70:21:9d:e3:6a:bc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf Validity Not Before: Dec 20 16:01:18 2025 GMT Not After : Dec 21 16:01:18 2025 GMT Subject: CN=6f777164ca6be690d26d6ff9883a9585e62503e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:11:f6:5d:ba:07:74:3e:57:d8:06:e8:77: 6f:76:f0:e5:9f:7d:42:b8:b5:08:7b:d9:d6:21:18: 39:40:93:f6:ff:76:fe:2b:64:0b:7a:fa:e6:8e:2e: bc:e5:05:e9:e9:06:3f:2a:98:90:97:20:1a:cf:f7: 19:0c:26:6a:c5:f3:29:9a:df:85:6c:6f:fd:f2:1d: 88:80:0a:a3:c0:fc:41:9b:02:db:3a:75:7e:78:58: c1:8e:79:75:ee:2c:fa:5d:de:15:5d:6e:46:8e:ac: 17:28:04:d6:12:39:77:e1:27:78:78:e8:84:9d:4e: 03:78:24:93:4b:c8:c1:2d:32:84:0c:e5:50:f2:47: d7:48:07:dc:78:e9:69:33:08:f9:32:21:82:f2:b6: 82:ea:bc:97:b7:72:1a:d9:fd:6b:a6:a8:d3:20:25: 5e:2d:a0:ec:bb:70:3e:eb:1f:b5:88:c0:0f:d6:5c: 7e:26:48:7b:8d:b8:91:b9:b2:e2:3d:9d:ad:34:69: 1e:89:d7:67:bf:52:c9:c4:d5:93:b5:90:cb:50:15: 54:37:03:16:24:08:e1:74:3e:c6:ab:4c:21:cd:75: 12:11:76:f5:88:f4:ca:ce:17:dc:e9:30:52:97:c4: d8:79:bd:f7:4d:e8:d1:cd:1c:39:30:0a:f5:82:ed: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:77:71:64:CA:6B:E6:90:D2:6D:6F:F9:88:3A:95:85:E6:25:03:E4 X509v3 Authority Key Identifier: keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5c:12:60:7f:99:a5:24:31:95:9a:ee:00:40:81:78:1c:94: 14:8a:f2:35:e9:b5:e9:5e:b3:17:ad:6b:50:cd:98:b0:2a:cf: 2d:44:bd:94:de:6d:e7:25:fb:94:e1:de:2a:1b:fe:94:55:41: fa:a9:50:68:45:bf:8d:3c:ef:b0:39:b9:c5:3f:be:99:c2:40: ae:b6:76:45:51:ea:07:ce:1e:02:47:98:f6:b3:8c:2f:b3:84: e7:df:98:f9:dc:91:8f:5e:e1:f9:fe:76:b5:38:f9:91:4e:2c: 93:3b:4d:20:b6:cb:38:23:9a:d8:fa:58:1e:58:c6:4e:d7:f1: 5f:ab:1d:97:96:2d:7c:b0:75:58:09:a6:66:68:af:32:de:b6: 6a:ea:5e:a2:6f:b3:2f:19:70:09:ea:4e:0c:34:aa:b5:ca:72: e5:ab:5a:ff:1b:14:fa:ee:e8:d8:bd:a2:cc:bf:5b:5e:9f:38: 92:57:e5:5b:7b:ae:32:48:ae:a1:74:ec:de:a8:8a:99:fe:4d: 86:98:88:f7:1c:73:2d:11:b6:0e:8b:0c:e2:0e:17:39:c8:ba: bf:2f:8d:88:9f:4b:ab:1c:8a:20:2f:b2:0b:b0:d9:34:a6:f3: 7f:88:44:cc:e7:fc:c2:84:5f:7b:43:4a:b2:83:24:b4:aa:5e: b9:be:36:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnRZysIebfNwIZ3jarxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzUxYzQ3M2ExNmJhMzhmYWI0ZDUxNzA1OTIyNWUwZjEz M2M4YmYwHhcNMjUxMjIwMTYwMTE4WhcNMjUxMjIxMTYwMTE4WjAzMTEwLwYDVQQD Eyg2Zjc3NzE2NGNhNmJlNjkwZDI2ZDZmZjk4ODNhOTU4NWU2MjUwM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUkR9l26B3Q+V9gG6HdvdvDln31C uLUIe9nWIRg5QJP2/3b+K2QLevrmji685QXp6QY/KpiQlyAaz/cZDCZqxfMpmt+F bG/98h2IgAqjwPxBmwLbOnV+eFjBjnl17iz6Xd4VXW5GjqwXKATWEjl34Sd4eOiE nU4DeCSTS8jBLTKEDOVQ8kfXSAfceOlpMwj5MiGC8raC6ryXt3Ia2f1rpqjTICVe LaDsu3A+6x+1iMAP1lx+Jkh7jbiRubLiPZ2tNGkeiddnv1LJxNWTtZDLUBVUNwMW JAjhdD7Gq0whzXUSEXb1iPTKzhfc6TBSl8TYeb33TejRzRw5MAr1gu2wswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG93cWTKa+aQ0m1v+Yg6lYXmJQPkMB8GA1UdIwQY MBaAFJY1HEc6Fro4+rTVFwWSJeDxM8i/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEt ZDU3MzczYmY1MTYyLzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEtZDU3MzczYmY1MTYy LzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFwSYH+Z pSQxlZruAECBeByUFIryNem16V6zF61rUM2YsCrPLUS9lN5t5yX7lOHeKhv+lFVB +qlQaEW/jTzvsDm5xT++mcJArrZ2RVHqB84eAkeY9rOML7OE59+Y+dyRj17h+f52 tTj5kU4skztNILbLOCOa2PpYHljGTtfxX6sdl5YtfLB1WAmmZmivMt62aupeom+z LxlwCepODDSqtcpy5ata/xsU+u7o2L2izL9bXp84klflW3uuMkiuoXTs3qiKmf5N hpiI9xxzLRG2DosM4g4XOci6vy+NiJ9LqxyKIC+yC7DZNKbzf4hEzOf8woRfe0NK soMktKpeub421g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:04 2025 by rpki-client