This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json) Hash identifier: nyl8xVFopLMXILwEbb71D9MiZRstyTA5z5D1lR3BKEg= Subject key identifier: 0D:50:83:CF:49:ED:6C:2D:C3:D3:55:5F:17:2A:5A:50:DE:28:D2:C9 Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2 Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2 Certificate serial: 019B5674C7AE59DBCF77413A53F8282F9558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 17:00:52 +0000 Manifest this update: Thu 25 Dec 2025 17:00:52 +0000 Manifest next update: Fri 26 Dec 2025 17:00:52 +0000 Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=) 2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: XdfVNOqZKGkCcaOZVE2PpTA5UeopJ4m1a13OT1W3hvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:74:c7:ae:59:db:cf:77:41:3a:53:f8:28:2f:95:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2 Validity Not Before: Dec 25 17:00:52 2025 GMT Not After : Dec 26 17:00:52 2025 GMT Subject: CN=0d5083cf49ed6c2dc3d3555f172a5a50de28d2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:55:2c:82:3a:39:47:b4:fe:99:97:3a:2d: 72:62:47:62:8a:12:58:64:46:90:0c:f7:52:aa:eb: 32:27:5c:bf:38:01:23:79:f6:1a:1c:51:aa:df:79: 20:b0:66:c2:f9:64:66:c7:26:16:16:51:b1:f3:13: 9a:4a:b5:64:a6:f2:99:1a:47:67:f7:6c:53:58:f6: 08:8e:cc:2b:e7:ba:38:5d:56:45:65:a2:ef:c0:22: c3:b0:c1:31:33:88:30:34:2d:4e:dc:94:41:81:1f: 37:5c:af:cc:31:e7:41:84:26:87:83:66:be:33:75: ac:e9:19:78:42:9e:b7:df:d3:78:1c:b8:4c:42:56: af:9a:fa:dc:c0:c0:e4:95:8f:f7:8c:28:d2:88:f3: 98:8b:70:49:2a:c3:4d:05:70:a5:73:d0:9a:ee:9d: 56:9d:5b:57:e0:71:c4:8f:aa:e6:a2:eb:ce:a3:58: c5:69:b3:b8:ba:fe:e0:4d:da:01:bb:b7:bf:cc:3d: 1a:91:51:6d:fa:58:5e:dd:d0:67:f1:dd:ce:da:52: b5:05:0c:30:8f:8a:bb:d3:d4:ca:4b:7e:7d:64:ff: 23:17:ee:ea:b7:ac:73:ca:eb:c0:8b:2e:f1:81:b6: 30:b5:fe:c5:81:5a:9a:9c:31:7b:c4:42:05:85:88: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:83:CF:49:ED:6C:2D:C3:D3:55:5F:17:2A:5A:50:DE:28:D2:C9 X509v3 Authority Key Identifier: keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5f:bd:f0:9a:31:69:6c:00:07:17:48:51:43:23:8b:66:c2: f5:95:ac:29:aa:ab:a2:f5:a6:b2:40:9f:12:ec:de:b0:a7:6d: 36:f1:ed:94:eb:25:c9:70:18:8c:fb:51:0e:74:ba:a8:97:c3: e6:a8:f9:4d:cb:18:fa:fb:74:9f:d8:17:dc:d7:b4:b9:15:db: bc:90:60:9c:cc:12:61:47:5b:a8:e6:5c:b1:75:08:43:66:6e: 31:5b:e9:ee:0c:10:2b:35:bc:62:96:c3:2a:4d:41:4c:a6:f8: 21:45:47:55:62:c1:45:c6:47:ef:2a:46:b1:12:aa:74:e4:ff: d0:0e:19:12:7f:3c:87:ac:2f:a5:06:7f:13:23:84:db:11:e9: bc:71:a3:47:36:a3:5d:85:b8:b0:ad:e2:e5:f8:76:63:8d:ac: e9:8d:05:bb:36:ea:21:65:14:89:10:34:ee:9b:07:5f:e1:fa: 5e:a3:25:9b:24:3b:56:17:be:c2:99:77:64:66:03:e2:54:d7: a4:bb:88:3e:87:4e:c4:ce:e3:8f:f0:54:84:22:66:d9:12:28: f2:17:30:51:8d:56:7a:9c:20:70:a4:8e:9b:31:fe:af:b4:4b: 81:cb:3a:e6:72:40:b3:0d:2a:f4:cc:df:aa:b1:75:6a:9e:06: 48:af:ce:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdMeuWdvPd0E6U/goL5VYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzJiNGYyYjQ3YmJlMTkzNGEyMjQwODFjYzM3ZjE3MGQ3 MjQ4ZDIwHhcNMjUxMjI1MTcwMDUyWhcNMjUxMjI2MTcwMDUyWjAzMTEwLwYDVQQD EygwZDUwODNjZjQ5ZWQ2YzJkYzNkMzU1NWYxNzJhNWE1MGRlMjhkMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGVVLII6OUe0/pmXOi1yYkdiihJY ZEaQDPdSqusyJ1y/OAEjefYaHFGq33kgsGbC+WRmxyYWFlGx8xOaSrVkpvKZGkdn 92xTWPYIjswr57o4XVZFZaLvwCLDsMExM4gwNC1O3JRBgR83XK/MMedBhCaHg2a+ M3Ws6Rl4Qp6339N4HLhMQlavmvrcwMDklY/3jCjSiPOYi3BJKsNNBXClc9Ca7p1W nVtX4HHEj6rmouvOo1jFabO4uv7gTdoBu7e/zD0akVFt+lhe3dBn8d3O2lK1BQww j4q709TKS359ZP8jF+7qt6xzyuvAiy7xgbYwtf7FgVqanDF7xEIFhYjxswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1Qg89J7Wwtw9NVXxcqWlDeKNLJMB8GA1UdIwQY MBaAFJUytPK0e74ZNKIkCBzDfxcNckjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjct NDIwNDBkZjNiNmFmLzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjctNDIwNDBkZjNiNmFm LzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV+98Jox aWwABxdIUUMji2bC9ZWsKaqrovWmskCfEuzesKdtNvHtlOslyXAYjPtRDnS6qJfD 5qj5TcsY+vt0n9gX3Ne0uRXbvJBgnMwSYUdbqOZcsXUIQ2ZuMVvp7gwQKzW8YpbD Kk1BTKb4IUVHVWLBRcZH7ypGsRKqdOT/0A4ZEn88h6wvpQZ/EyOE2xHpvHGjRzaj XYW4sK3i5fh2Y42s6Y0FuzbqIWUUiRA07psHX+H6XqMlmyQ7Vhe+wpl3ZGYD4lTX pLuIPodOxM7jj/BUhCJm2RIo8hcwUY1WepwgcKSOmzH+r7RLgcs65nJAsw0q9Mzf qrF1ap4GSK/OnQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:04:04 2025 by rpki-client