This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json) Hash identifier: RSgIGp9vCoew+FcjtRrlnH+Rb9oIGOLtVdWP19hxxHg= Subject key identifier: 43:92:A9:C8:76:53:A0:1D:8E:36:E5:BC:91:42:77:6A:BA:0B:90:76 Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Certificate serial: 019B3F7F5B93233A0D9669FA9CE9EB25E265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft Manifest number: 06B7 Signing time: Sun 21 Dec 2025 06:01:09 +0000 Manifest this update: Sun 21 Dec 2025 06:01:09 +0000 Manifest next update: Mon 22 Dec 2025 06:01:09 +0000 Files and hashes: 1: DhJdlSXGg4nwo43i-3hsY3C4PiQ.roa (hash: OLFOl5avnYQnKlew3nA3PZbHQQyKutwAJUJzm6ztUrI=) 2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: eHz4nMg8Lq0O91wcIubXRjVrzp1idUZw/3bAfUNqtVg=) 3: ear6glms6xQEx-sJzJyz2U-vwUo.roa (hash: myzxilbkgn8eg20yO8piaw6MM2eVN5CUHaMGcHJd8U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:5b:93:23:3a:0d:96:69:fa:9c:e9:eb:25:e2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Validity Not Before: Dec 21 06:01:09 2025 GMT Not After : Dec 22 06:01:09 2025 GMT Subject: CN=4392a9c87653a01d8e36e5bc9142776aba0b9076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:dd:de:2d:1c:a8:94:80:1d:f5:ae:60:de: 74:27:da:60:29:f8:66:db:97:ee:8c:6e:87:62:c5: e3:26:dc:c1:f9:5c:d0:f6:c3:b7:dd:a7:47:ac:76: a1:5b:51:dc:fc:17:5e:bc:18:04:6d:2b:ff:3b:fc: 92:07:dc:b1:95:5b:52:2b:c7:d2:27:e2:59:72:86: a9:d3:c5:92:b4:3c:8f:a0:89:85:1b:9f:19:a5:2e: a8:a7:63:a7:04:bd:56:ad:33:dd:36:7e:69:59:5f: f3:04:ea:60:d8:11:19:fd:c0:db:11:63:47:4b:aa: e0:37:51:5b:2f:b7:f8:39:4b:52:1c:b1:be:94:64: 48:95:f7:f1:6f:a0:90:90:f3:8f:13:f0:e3:f5:8d: 62:e3:42:09:a9:11:64:cf:95:1c:6b:08:d9:ed:44: c1:66:80:b3:da:c9:48:6d:03:14:a3:e7:50:a2:9a: 80:36:30:cf:31:eb:f9:d9:c4:4b:86:6a:b5:57:b3: 89:75:a7:3a:f1:f8:9d:24:4d:5d:e1:5a:b1:af:be: 23:d9:0e:24:f4:6b:3d:fe:3d:39:53:ef:a1:21:c7: f8:ff:b8:fc:13:5a:66:38:cf:43:46:1c:3e:c7:09: 24:93:3a:60:64:11:a5:5b:4e:1c:f8:03:04:21:2d: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:A9:C8:76:53:A0:1D:8E:36:E5:BC:91:42:77:6A:BA:0B:90:76 X509v3 Authority Key Identifier: keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:18:95:90:02:7f:18:07:15:b1:47:4d:83:b0:64:4f:32:04: b5:92:c9:b3:c3:37:24:53:7c:02:14:ee:3a:22:8a:b0:5c:9b: 3d:5c:d6:47:74:4d:2a:f0:77:5e:71:83:70:d5:4b:49:4c:d7: b8:eb:14:c6:96:e9:3e:4b:5a:1b:fd:b2:55:c3:10:5b:0a:10: d2:31:cd:e7:7e:bd:81:7c:c2:09:e0:97:82:d7:32:bd:52:b0: 3b:a9:5a:8c:74:6f:b9:0a:f5:ef:d7:29:45:a7:f7:5f:d4:bf: 64:87:c3:f8:cb:b8:eb:46:40:25:42:f5:49:a9:ea:93:66:42: 64:e4:0f:1c:d0:05:da:0d:d0:b7:e7:c0:7a:bc:c4:72:ab:05: f4:9e:dc:2c:89:1a:76:7f:96:bb:13:57:f4:ae:24:ae:70:16: 11:55:13:56:78:3f:14:cf:00:2a:4a:5f:84:e9:3e:fa:2f:a4: 58:a2:36:d9:39:4c:b9:05:27:c5:71:dc:c0:83:0e:24:74:f1: 57:ca:4f:98:fe:ff:bb:3e:b5:f3:58:28:a5:97:5e:80:0a:64: f3:87:07:16:b6:52:53:07:64:60:59:75:d1:aa:36:36:d9:18: 00:85:76:80:41:e4:3d:95:8f:b2:56:7f:c1:c8:b5:7b:36:b5: 53:c7:c5:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f1uTIzoNlmn6nOnrJeJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl Zjk3NjMwHhcNMjUxMjIxMDYwMTA5WhcNMjUxMjIyMDYwMTA5WjAzMTEwLwYDVQQD Eyg0MzkyYTljODc2NTNhMDFkOGUzNmU1YmM5MTQyNzc2YWJhMGI5MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCLd3i0cqJSAHfWuYN50J9pgKfhm 25fujG6HYsXjJtzB+VzQ9sO33adHrHahW1Hc/BdevBgEbSv/O/ySB9yxlVtSK8fS J+JZcoap08WStDyPoImFG58ZpS6op2OnBL1WrTPdNn5pWV/zBOpg2BEZ/cDbEWNH S6rgN1FbL7f4OUtSHLG+lGRIlffxb6CQkPOPE/Dj9Y1i40IJqRFkz5UcawjZ7UTB ZoCz2slIbQMUo+dQopqANjDPMev52cRLhmq1V7OJdac68fidJE1d4Vqxr74j2Q4k 9Gs9/j05U++hIcf4/7j8E1pmOM9DRhw+xwkkkzpgZBGlW04c+AMEIS287QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOSqch2U6AdjjblvJFCd2q6C5B2MB8GA1UdIwQY MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRiVkAJ/ GAcVsUdNg7BkTzIEtZLJs8M3JFN8AhTuOiKKsFybPVzWR3RNKvB3XnGDcNVLSUzX uOsUxpbpPktaG/2yVcMQWwoQ0jHN5369gXzCCeCXgtcyvVKwO6lajHRvuQr179cp Raf3X9S/ZIfD+Mu460ZAJUL1Sanqk2ZCZOQPHNAF2g3Qt+fAerzEcqsF9J7cLIka dn+WuxNX9K4krnAWEVUTVng/FM8AKkpfhOk++i+kWKI22TlMuQUnxXHcwIMOJHTx V8pPmP7/uz6181gopZdegApk84cHFrZSUwdkYFl10ao2NtkYAIV2gEHkPZWPslZ/ wci1eza1U8fFcA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:57:23 2025 by rpki-client