This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json) Hash identifier: l2SMt1oCZNp/zRAplFUaKwQPyKfPs9YGGF0trIgmMfc= Subject key identifier: AA:F3:F1:68:F3:24:A4:CE:B1:B1:50:95:AF:69:F4:CA:70:B0:AA:21 Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466 Certificate serial: 019B4513C2F9795D420BF5BCB27FADCBC456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft Manifest number: 1531 Signing time: Mon 22 Dec 2025 08:01:21 +0000 Manifest this update: Mon 22 Dec 2025 08:01:21 +0000 Manifest next update: Tue 23 Dec 2025 08:01:21 +0000 Files and hashes: 1: 1Q5iHdzKxf8MNemcT1RBOOzIIJ0.roa (hash: dhLNFKd+PfuuwcD6QJZQdI1MnPf4yhnne4cWUKHT2mc=) 2: BI16eSxubERsxjczNTuD1FKYiqI.roa (hash: 5RSrabZNzAP6tOwmOjiW5WIGJ28xp22z5+HfxDxqq2o=) 3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: QDUlcX9JAGUSd8rPP7VXnKmb8VN6twyVCwI3Jy3ecP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:c2:f9:79:5d:42:0b:f5:bc:b2:7f:ad:cb:c4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466 Validity Not Before: Dec 22 08:01:21 2025 GMT Not After : Dec 23 08:01:21 2025 GMT Subject: CN=aaf3f168f324a4ceb1b15095af69f4ca70b0aa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:09:e3:01:5e:8b:4c:d9:98:44:b9:02:13: aa:4e:6a:7e:d8:07:96:e5:84:1c:3b:91:8d:7f:d8: 98:10:c3:29:22:56:34:ac:db:11:d4:27:9e:8a:70: b7:78:13:e4:30:e4:3a:c7:a7:1e:ca:ed:cc:9c:a9: cd:be:a2:87:d6:47:98:03:32:8a:c4:e1:7f:ec:05: c5:00:14:a1:4a:1f:76:d6:e8:aa:da:0b:4e:18:4c: 0a:3d:02:7b:7e:87:a9:b9:e0:3e:c6:89:83:99:1a: ad:2b:60:60:14:c1:7e:94:fb:fd:07:7b:36:66:f3: 6b:a7:68:16:f1:96:f1:f0:e5:90:18:7a:b9:f6:e9: 92:82:f6:ca:ab:22:b3:d8:e8:5e:a3:ad:47:59:54: 29:a1:4d:01:81:e5:77:ea:3e:74:36:ca:ca:55:94: 66:b2:d6:fd:ee:79:8d:75:31:1a:2a:02:08:33:9c: 56:5a:06:5e:eb:4a:48:28:3f:02:91:5b:18:6b:a6: f8:74:e6:31:f9:1d:48:19:e4:2d:e8:ce:4d:46:33: 80:f9:96:22:b4:3d:00:b6:44:42:45:d7:e1:96:0a: 4e:fb:b8:b6:c5:9b:f4:1e:95:3b:91:bd:65:67:d3: 41:76:b7:9e:59:c3:ab:ad:9c:a7:48:70:fe:2c:79: f1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F3:F1:68:F3:24:A4:CE:B1:B1:50:95:AF:69:F4:CA:70:B0:AA:21 X509v3 Authority Key Identifier: keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:e2:44:fb:ea:24:28:91:9e:0c:7b:a5:29:27:92:6a:43: 29:0a:85:03:30:fd:31:32:b3:2a:74:4e:ca:70:57:fb:a0:d2: ec:ad:c8:12:a7:5e:60:fc:f8:53:71:39:b5:12:44:9c:05:72: 39:1c:ff:ee:97:5a:7a:3d:28:2a:66:48:c9:bd:74:47:57:87: 4a:9e:e6:ec:ae:98:3b:f8:1c:5c:0f:02:26:33:60:2e:b1:3c: b2:44:1c:16:c3:0a:96:62:ba:6a:85:c0:c3:2e:13:83:8a:13: ef:4d:4e:8f:3b:4f:28:9c:8d:44:22:d1:cc:af:0a:75:ab:fb: 2b:71:c7:5c:71:4a:14:b8:16:2f:5b:b9:e8:bd:25:9b:6e:ae: ad:43:75:e0:b8:e1:9d:7c:19:c9:4a:a0:0b:98:b1:70:dc:c6: c8:a8:be:88:44:e8:de:dc:cd:b0:e3:89:af:72:f2:7b:d0:36: 67:20:83:b6:97:a0:de:a8:a1:34:ec:c2:e5:dc:9e:d0:ea:34: 0b:8a:7e:fc:6a:56:45:0c:0e:1a:c5:e4:a4:1d:dd:84:29:80: de:b6:af:df:ba:d8:64:b0:e0:29:81:03:cd:8f:8e:73:46:23: 9d:64:04:2f:f7:70:2d:9e:da:3f:fc:42:68:3c:d2:dc:90:bc: 63:ca:ae:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE8L5eV1CC/W8sn+ty8RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl NzI0NjYwHhcNMjUxMjIyMDgwMTIxWhcNMjUxMjIzMDgwMTIxWjAzMTEwLwYDVQQD EyhhYWYzZjE2OGYzMjRhNGNlYjFiMTUwOTVhZjY5ZjRjYTcwYjBhYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKMJ4wFei0zZmES5AhOqTmp+2AeW 5YQcO5GNf9iYEMMpIlY0rNsR1CeeinC3eBPkMOQ6x6ceyu3MnKnNvqKH1keYAzKK xOF/7AXFABShSh921uiq2gtOGEwKPQJ7foepueA+xomDmRqtK2BgFMF+lPv9B3s2 ZvNrp2gW8Zbx8OWQGHq59umSgvbKqyKz2Oheo61HWVQpoU0BgeV36j50NsrKVZRm stb97nmNdTEaKgIIM5xWWgZe60pIKD8CkVsYa6b4dOYx+R1IGeQt6M5NRjOA+ZYi tD0AtkRCRdfhlgpO+7i2xZv0HpU7kb1lZ9NBdreeWcOrrZynSHD+LHnx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrz8WjzJKTOsbFQla9p9MpwsKohMB8GA1UdIwQY MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhbiRPvq JCiRngx7pSknkmpDKQqFAzD9MTKzKnROynBX+6DS7K3IEqdeYPz4U3E5tRJEnAVy ORz/7pdaej0oKmZIyb10R1eHSp7m7K6YO/gcXA8CJjNgLrE8skQcFsMKlmK6aoXA wy4Tg4oT701OjztPKJyNRCLRzK8Kdav7K3HHXHFKFLgWL1u56L0lm26urUN14Ljh nXwZyUqgC5ixcNzGyKi+iETo3tzNsOOJr3Lye9A2ZyCDtpeg3qihNOzC5dye0Oo0 C4p+/GpWRQwOGsXkpB3dhCmA3rav37rYZLDgKYEDzY+Oc0YjnWQEL/dwLZ7aP/xC aDzS3JC8Y8quBw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:10:26 2025 by rpki-client