This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json) Hash identifier: LBY+3AfeUNZCAnYycxyesSy1dFKzKo67syDbfUCwAhw= Subject key identifier: 7B:DE:9E:62:8C:F7:DB:44:E5:66:C5:A8:E7:84:D2:83:17:78:E6:E4 Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556 Certificate serial: 019B3AC6C32DCDD4FEE15ECE998B6FF31293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 08:01:03 +0000 Manifest this update: Sat 20 Dec 2025 08:01:03 +0000 Manifest next update: Sun 21 Dec 2025 08:01:03 +0000 Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=) 2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=) 3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=) 4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: HXUxqBxJmC3Iihq2KRl7fFT+6Sw9/9W/2Kj61FjWvf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:c3:2d:cd:d4:fe:e1:5e:ce:99:8b:6f:f3:12:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556 Validity Not Before: Dec 20 08:01:03 2025 GMT Not After : Dec 21 08:01:03 2025 GMT Subject: CN=7bde9e628cf7db44e566c5a8e784d2831778e6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:a7:a1:17:59:58:a5:88:82:60:b5:0f:ca: 3a:5a:64:ce:08:86:aa:66:4f:31:5e:fc:cb:35:44: 85:30:ba:e3:5e:14:e3:52:1a:dc:94:2f:e3:c3:34: 22:2d:b3:67:03:72:3d:85:fa:cc:14:9b:65:4b:ec: 4d:e8:b0:d1:bb:a1:e0:9f:3a:6d:7a:de:9f:f8:98: f0:d2:e5:02:3e:92:34:84:bc:6d:a8:90:37:17:e7: 61:b8:d8:48:95:01:93:42:7b:c0:63:cf:12:be:fa: 4b:cc:97:54:2d:34:15:26:53:82:78:d3:8e:25:6d: 14:f7:ac:bf:a8:19:2f:5d:30:77:da:19:49:e1:52: aa:6c:fc:55:81:aa:5b:c6:fb:fb:de:a5:27:43:a0: aa:1e:32:f3:07:39:fa:78:ea:07:eb:d4:2c:1f:2d: 2c:63:34:6f:9b:41:ad:ef:1f:39:5d:8b:64:18:e1: 4a:ad:e4:78:bc:15:b2:f3:b0:70:5e:d4:23:05:65: 35:9e:76:1e:b2:cb:22:bb:28:aa:3a:7e:c6:ef:86: a3:72:d3:0e:1f:c7:ab:dc:25:87:93:58:a8:50:32: b6:b5:26:cd:c5:2d:2e:e7:2c:f2:7c:24:e4:96:ac: 75:46:cd:4f:1f:47:2a:03:08:20:3a:26:5a:46:c4: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DE:9E:62:8C:F7:DB:44:E5:66:C5:A8:E7:84:D2:83:17:78:E6:E4 X509v3 Authority Key Identifier: keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:8e:14:68:c0:f7:d7:4e:f9:b3:a5:8a:64:8c:74:51:93: e6:ab:6f:1f:e7:8d:b5:43:82:0f:95:8d:0a:7c:50:ae:96:10: a1:72:b8:bb:8b:b3:b5:67:f7:5b:3d:1c:3d:5d:42:b8:11:78: 6a:bf:09:e5:33:f5:de:ce:1f:a9:90:61:8f:20:21:3d:bb:44: a3:8f:02:73:71:ee:ed:6a:7d:af:4b:63:8c:a9:58:9c:86:e7: 14:37:da:58:ac:49:ab:c4:2c:ce:0b:7a:c1:30:c6:ed:7a:57: 72:c2:c3:f2:16:f5:94:48:d0:c2:35:bc:bd:08:2e:90:c2:8d: f5:09:96:67:ba:6f:16:da:c4:a9:f9:c7:78:60:bf:e4:19:3c: 89:2d:31:b9:38:4e:d8:d4:43:29:30:7f:0b:7c:84:bd:60:84: 35:af:b4:e4:64:97:f9:b5:61:64:6a:60:7c:a0:ab:11:c1:f3: 0f:5f:c2:74:fc:54:9d:3b:14:a6:26:f6:ac:31:a3:b4:8d:56: 9f:ea:c4:e5:7f:00:b2:5e:b7:f8:59:a8:eb:0b:cb:b6:7e:3d: 48:37:8f:c9:13:df:57:90:b7:7d:75:0d:51:42:14:bc:e0:61: bf:06:6b:43:54:c2:44:b4:bf:4c:06:b0:94:79:bb:38:ca:5b: 28:16:48:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xsMtzdT+4V7OmYtv8xKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1 MzE1NTYwHhcNMjUxMjIwMDgwMTAzWhcNMjUxMjIxMDgwMTAzWjAzMTEwLwYDVQQD Eyg3YmRlOWU2MjhjZjdkYjQ0ZTU2NmM1YThlNzg0ZDI4MzE3NzhlNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbynoRdZWKWIgmC1D8o6WmTOCIaq Zk8xXvzLNUSFMLrjXhTjUhrclC/jwzQiLbNnA3I9hfrMFJtlS+xN6LDRu6Hgnzpt et6f+Jjw0uUCPpI0hLxtqJA3F+dhuNhIlQGTQnvAY88SvvpLzJdULTQVJlOCeNOO JW0U96y/qBkvXTB32hlJ4VKqbPxVgapbxvv73qUnQ6CqHjLzBzn6eOoH69QsHy0s YzRvm0Gt7x85XYtkGOFKreR4vBWy87BwXtQjBWU1nnYesssiuyiqOn7G74ajctMO H8er3CWHk1ioUDK2tSbNxS0u5yzyfCTklqx1Rs1PH0cqAwggOiZaRsTzIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvenmKM99tE5WbFqOeE0oMXeObkMB8GA1UdIwQY MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoKOFGjA 99dO+bOlimSMdFGT5qtvH+eNtUOCD5WNCnxQrpYQoXK4u4uztWf3Wz0cPV1CuBF4 ar8J5TP13s4fqZBhjyAhPbtEo48Cc3Hu7Wp9r0tjjKlYnIbnFDfaWKxJq8Qszgt6 wTDG7XpXcsLD8hb1lEjQwjW8vQgukMKN9QmWZ7pvFtrEqfnHeGC/5Bk8iS0xuThO 2NRDKTB/C3yEvWCENa+05GSX+bVhZGpgfKCrEcHzD1/CdPxUnTsUpib2rDGjtI1W n+rE5X8Asl63+Fmo6wvLtn49SDePyRPfV5C3fXUNUUIUvOBhvwZrQ1TCRLS/TAaw lHm7OMpbKBZI1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:18:05 2025 by rpki-client