This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json) Hash identifier: lYttVTvtqTua5J/QOklsts/vHGvy6DsJQTgnPk7VDb4= Subject key identifier: BA:11:7E:BD:8B:0E:D5:37:C6:26:A9:73:62:58:99:05:DB:60:72:54 Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29 Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029 Certificate serial: 019B5072B2DA939D11C81AC9EEF2BD5F20F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft Manifest number: 0BE6 Signing time: Wed 24 Dec 2025 13:00:52 +0000 Manifest this update: Wed 24 Dec 2025 13:00:52 +0000 Manifest next update: Thu 25 Dec 2025 13:00:52 +0000 Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: 5GYJEwSfX9dMIOgodfAz+dcoq4nB11urWiJG0wyRi9E=) 2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:b2:da:93:9d:11:c8:1a:c9:ee:f2:bd:5f:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029 Validity Not Before: Dec 24 13:00:52 2025 GMT Not After : Dec 25 13:00:52 2025 GMT Subject: CN=ba117ebd8b0ed537c626a97362589905db607254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:b3:d9:53:ce:aa:ff:93:e9:76:63:e6:9c: 15:e3:c0:6f:c1:68:bd:39:67:5a:4f:de:7e:82:d2: 2d:c6:b0:6b:ff:cf:1d:eb:71:f1:c1:40:ea:df:23: b3:e7:9e:53:d1:38:98:32:7b:d9:21:44:10:f7:34: f9:2f:40:05:ff:80:ea:04:28:d5:f9:ad:22:00:35: 06:e4:e0:61:d9:73:44:4f:4b:01:41:5a:db:e1:a9: 26:38:a2:6b:5f:e6:a0:41:e7:18:01:c9:3e:19:d5: 19:46:df:48:07:56:54:d2:eb:ed:84:a8:e0:db:ce: 88:19:0a:64:fd:ea:21:b1:a4:b9:1b:b9:ab:c2:66: 4c:5a:86:c5:4b:8d:34:cb:19:25:58:a0:52:6c:16: c3:77:42:87:34:f8:eb:08:b6:1f:91:05:34:02:84: 47:60:b8:8d:ea:3c:06:1d:d9:90:03:c0:c9:4c:2f: 1d:47:79:21:ed:8e:d9:aa:79:46:47:20:dc:b7:27: 09:83:d7:24:29:f5:f6:22:f4:af:b7:bc:d0:f2:26: 5f:18:a3:62:f2:53:eb:a4:8f:03:8b:65:45:fa:06: 51:25:70:22:eb:62:25:bc:0a:b1:75:6d:26:5e:03: a7:43:f3:7e:7c:70:58:37:03:a2:ef:69:3c:ac:7d: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:7E:BD:8B:0E:D5:37:C6:26:A9:73:62:58:99:05:DB:60:72:54 X509v3 Authority Key Identifier: keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:49:a9:f1:51:b8:6d:33:c8:1a:98:61:fb:48:e8:ee:f1:73: 7c:ee:de:e3:e8:ee:ba:cd:47:a0:40:48:aa:4a:32:ab:f3:93: 59:18:b3:b9:c2:8d:45:26:fc:45:be:55:d8:96:b4:b7:3a:be: d4:2d:e7:3a:cc:ad:6a:3a:a3:a0:35:ed:3d:90:80:24:7d:55: 90:ef:5c:ea:f2:9f:2b:7b:9d:99:d5:ea:e4:f2:b6:70:73:eb: b1:8a:1d:8b:67:d7:bb:eb:4c:09:5c:fc:b0:99:e9:03:69:7a: d5:2b:c4:ce:14:22:a8:6f:18:d7:d4:cd:1c:1b:2b:07:6f:75: 62:bd:e7:cc:e8:b1:8f:8f:b9:33:d0:cf:d7:f9:31:06:1c:86: 14:ed:00:f1:4b:0e:ff:97:00:75:07:26:d8:b9:7f:2d:87:f7: 29:9a:10:41:3f:16:f7:2d:24:78:39:b9:77:39:cc:e8:e5:48: e8:4f:60:dd:e1:b4:3e:0e:5d:f1:53:14:bc:db:c4:8d:33:a4: 9e:38:da:c8:b1:07:21:75:75:fa:c9:7e:d1:ef:63:54:10:5c: ff:32:85:2e:77:24:af:85:a8:dd:e5:e2:ae:fa:bf:15:14:ae: c1:9a:fb:93:62:7b:a4:bb:33:82:09:b2:b9:35:53:0b:28:47: 9d:9a:8b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcrLak50RyBrJ7vK9XyDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWE3OGIxMmQ0MzViOTdkZWZiZjkyYzc0MjY1YzM0MzNi YmQwMjkwHhcNMjUxMjI0MTMwMDUyWhcNMjUxMjI1MTMwMDUyWjAzMTEwLwYDVQQD EyhiYTExN2ViZDhiMGVkNTM3YzYyNmE5NzM2MjU4OTkwNWRiNjA3MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wqz2VPOqv+T6XZj5pwV48BvwWi9 OWdaT95+gtItxrBr/88d63HxwUDq3yOz555T0TiYMnvZIUQQ9zT5L0AF/4DqBCjV +a0iADUG5OBh2XNET0sBQVrb4akmOKJrX+agQecYAck+GdUZRt9IB1ZU0uvthKjg 286IGQpk/eohsaS5G7mrwmZMWobFS400yxklWKBSbBbDd0KHNPjrCLYfkQU0AoRH YLiN6jwGHdmQA8DJTC8dR3kh7Y7ZqnlGRyDctycJg9ckKfX2IvSvt7zQ8iZfGKNi 8lPrpI8Di2VF+gZRJXAi62IlvAqxdW0mXgOnQ/N+fHBYNwOi72k8rH2OFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoRfr2LDtU3xiapc2JYmQXbYHJUMB8GA1UdIwQY MBaAFC3qeLEtQ1uX3vv5LHQmXDQzu9ApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NmZhZWQtODdjMC00YjAwLTgxNzgt YTFkY2MzZmI5YTRmLzEvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85NmZhZWQtODdjMC00YjAwLTgxNzgtYTFkY2MzZmI5YTRm LzEvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEmp8VG4 bTPIGphh+0jo7vFzfO7e4+juus1HoEBIqkoyq/OTWRizucKNRSb8Rb5V2Ja0tzq+ 1C3nOsytajqjoDXtPZCAJH1VkO9c6vKfK3udmdXq5PK2cHPrsYodi2fXu+tMCVz8 sJnpA2l61SvEzhQiqG8Y19TNHBsrB291Yr3nzOixj4+5M9DP1/kxBhyGFO0A8UsO /5cAdQcm2Ll/LYf3KZoQQT8W9y0keDm5dznM6OVI6E9g3eG0Pg5d8VMUvNvEjTOk njjayLEHIXV1+sl+0e9jVBBc/zKFLnckr4Wo3eXirvq/FRSuwZr7k2J7pLszggmy uTVTCyhHnZqLLQ== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:35 2025 by rpki-client