This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json) Hash identifier: Xj5CGXMwYoaD3bZzxgCpRjhdQxLjMv/YiRHC8SaDs9A= Subject key identifier: CF:5F:60:A4:C7:A0:14:D9:96:10:D2:2F:82:1C:01:24:42:7A:9C:16 Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466 Certificate serial: 019B3D5998949444ACEDCCEF876E48D5321E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft Manifest number: 152D Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 1Q5iHdzKxf8MNemcT1RBOOzIIJ0.roa (hash: dhLNFKd+PfuuwcD6QJZQdI1MnPf4yhnne4cWUKHT2mc=) 2: BI16eSxubERsxjczNTuD1FKYiqI.roa (hash: 5RSrabZNzAP6tOwmOjiW5WIGJ28xp22z5+HfxDxqq2o=) 3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: w3wQD2sMnTjaEMyi1gz+jVn80xfzU1Yo7O91Tvd5TL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:98:94:94:44:ac:ed:cc:ef:87:6e:48:d5:32:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466 Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=cf5f60a4c7a014d99610d22f821c0124427a9c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:ab:61:eb:24:e5:8b:35:44:8e:31:7d:75: df:1b:b6:d5:cd:b1:18:ae:54:18:72:bd:4b:58:d4: 31:28:3e:c4:93:88:3d:0e:3b:b9:e3:04:e5:b1:03: 92:82:0d:47:fc:25:86:9b:5c:d8:b6:cd:30:69:2b: 99:7b:4c:5f:ee:1b:38:a7:0c:fd:e5:90:53:82:64: d9:7e:1e:e1:2e:c7:45:14:f0:a7:41:19:b1:ea:c5: 3f:71:9b:9c:4e:99:3e:60:59:01:43:46:7e:8c:fa: e5:4c:f6:c5:c5:c3:bf:2e:f7:6b:18:58:a7:cc:b5: c1:e7:0a:b0:83:ff:d2:f4:e8:3b:10:ae:0f:7d:fc: 5a:44:d2:ee:31:ff:a2:4d:55:67:8f:47:6d:cc:e6: 52:58:37:41:a0:c9:79:7f:24:f4:5c:e1:d4:ba:57: b0:c8:97:8e:b2:19:b2:65:fb:67:e3:0e:6a:7b:c2: 17:87:cd:f4:64:26:f0:a2:f4:c6:a2:b6:7f:a9:7b: 85:e5:dc:33:5a:82:4f:a0:8b:1a:41:05:87:c2:37: 1a:29:84:9d:09:f7:e6:7d:a9:6b:90:3f:30:47:17: a1:cf:fa:5e:09:43:15:25:ad:2d:74:7f:6e:fd:4d: bf:29:83:1a:30:a1:57:5d:b6:03:55:7b:84:ea:a8: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:60:A4:C7:A0:14:D9:96:10:D2:2F:82:1C:01:24:42:7A:9C:16 X509v3 Authority Key Identifier: keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:92:23:b0:e9:3f:6c:24:5f:4d:c9:0e:d9:c3:ec:6f:58:9d: 48:36:6e:20:76:2a:f3:cb:5d:31:fe:11:97:46:f7:40:6c:2c: b3:f8:88:f3:d1:69:de:11:54:62:53:2d:82:9c:06:81:77:22: 03:47:40:f6:e0:07:7f:58:41:38:10:e8:9e:61:c4:5e:c0:e4: 1e:8d:0f:bb:62:c7:06:e5:fd:e9:19:19:79:d3:90:52:71:23: 00:45:06:f1:4e:9d:36:59:21:90:e0:e7:af:45:ea:73:4b:4d: 43:f2:46:a7:4a:10:01:1a:df:c6:43:fc:96:85:9e:c7:60:fd: 37:8b:00:fd:3f:d6:9e:d7:02:a2:b6:b9:72:13:13:33:9c:67: e3:d2:87:3f:2e:28:0a:7f:88:19:3c:f0:78:73:2c:dd:61:f0: fb:a3:52:f2:02:fb:ef:48:09:73:e7:46:6f:be:e5:47:c5:2a: 61:56:ac:81:de:e1:85:6f:c9:d2:3e:2f:b1:d4:fb:57:4a:56: da:1b:c6:86:a9:6d:33:d6:c8:c7:3e:0a:b7:e4:be:68:aa:33: d8:11:03:9b:f9:59:78:51:87:02:ee:34:95:f8:07:a0:2b:63: f9:6e:b0:79:28:8d:dd:3f:ca:f5:3b:06:f7:0e:cf:dd:c1:49: 6b:65:d4:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZiUlESs7czvh25I1TIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl NzI0NjYwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD EyhjZjVmNjBhNGM3YTAxNGQ5OTYxMGQyMmY4MjFjMDEyNDQyN2E5YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG2rYesk5Ys1RI4xfXXfG7bVzbEY rlQYcr1LWNQxKD7Ek4g9Dju54wTlsQOSgg1H/CWGm1zYts0waSuZe0xf7hs4pwz9 5ZBTgmTZfh7hLsdFFPCnQRmx6sU/cZucTpk+YFkBQ0Z+jPrlTPbFxcO/LvdrGFin zLXB5wqwg//S9Og7EK4PffxaRNLuMf+iTVVnj0dtzOZSWDdBoMl5fyT0XOHUulew yJeOshmyZftn4w5qe8IXh830ZCbwovTGorZ/qXuF5dwzWoJPoIsaQQWHwjcaKYSd CffmfalrkD8wRxehz/peCUMVJa0tdH9u/U2/KYMaMKFXXbYDVXuE6qjc9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9fYKTHoBTZlhDSL4IcASRCepwWMB8GA1UdIwQY MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1pIjsOk/ bCRfTckO2cPsb1idSDZuIHYq88tdMf4Rl0b3QGwss/iI89Fp3hFUYlMtgpwGgXci A0dA9uAHf1hBOBDonmHEXsDkHo0Pu2LHBuX96RkZedOQUnEjAEUG8U6dNlkhkODn r0Xqc0tNQ/JGp0oQARrfxkP8loWex2D9N4sA/T/WntcCora5chMTM5xn49KHPy4o Cn+IGTzweHMs3WHw+6NS8gL770gJc+dGb77lR8UqYVasgd7hhW/J0j4vsdT7V0pW 2hvGhqltM9bIxz4Kt+S+aKoz2BEDm/lZeFGHAu40lfgHoCtj+W6weSiN3T/K9TsG 9w7P3cFJa2XUNw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:18 2025 by rpki-client