This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json) Hash identifier: 8MflUA5HsECODimcZMATmAjRN4KyNrmIq7naPBjLqMg= Subject key identifier: BB:84:8C:A0:74:E5:C0:96:AA:C8:09:EA:1D:57:DE:75:CE:44:39:7E Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806 Certificate serial: 019B3DFE6E65F11928E18BEEA16061B94647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=) 2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: 2XR22sFnIc6C83irVQFvbn5xjaagaSD1V2XxgvoGRcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:6e:65:f1:19:28:e1:8b:ee:a1:60:61:b9:46:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806 Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=bb848ca074e5c096aac809ea1d57de75ce44397e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:c8:de:90:fc:4c:15:d3:57:1d:3d:6f:5f: 5b:ae:69:1a:d9:88:f3:0e:fe:6d:0c:0e:67:5c:90: b7:1d:21:d6:f3:c1:e8:37:53:8b:40:b5:45:9d:89: 2f:25:a1:16:e6:20:7d:06:08:36:6a:b3:8d:51:e2: 11:af:2e:03:f2:a1:7a:8f:95:ba:16:2e:c6:26:d6: 26:3c:c0:c4:c1:59:55:f9:44:8d:91:94:48:85:50: 07:37:c7:9d:6c:a2:48:96:28:a0:de:24:55:30:05: 6a:77:c7:e4:b3:ad:13:80:53:4d:d9:5b:a0:d1:48: d0:f3:cc:9b:dc:a2:33:10:b4:50:89:34:a4:b9:f1: 0a:4d:63:c8:5f:d9:cb:b1:9a:66:51:9f:72:f4:33: 44:65:f6:f3:f8:4f:15:fb:35:26:d0:5d:42:c4:18: 41:c2:a5:9b:08:5d:c8:fd:21:a4:24:a5:b0:bb:5b: a7:7b:d5:a4:77:57:e8:8c:68:33:6b:ea:b2:07:3c: 1e:d0:8e:1a:ae:f0:3d:1a:b6:ec:c5:f2:81:86:9a: 96:1c:c9:f7:6e:aa:e7:d4:71:b0:e7:4d:6d:b3:78: a1:27:08:fb:68:d5:c7:e1:e1:be:9c:7a:0e:eb:08: 35:14:51:bb:eb:ac:0c:7b:51:2f:e5:eb:54:8d:9e: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:84:8C:A0:74:E5:C0:96:AA:C8:09:EA:1D:57:DE:75:CE:44:39:7E X509v3 Authority Key Identifier: keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1a:cd:77:11:17:43:5f:80:49:d0:5e:50:1f:ec:86:8f:fd: 0a:38:09:dc:24:d5:9c:ef:71:23:22:f5:4c:83:63:b4:6a:92: 1d:9e:18:51:d1:cf:39:00:97:38:c9:62:c7:1e:92:90:16:f8: d3:fe:df:f4:8e:d2:4a:ac:7b:ff:6b:4a:f2:b0:c9:87:a5:19: 35:a8:ad:da:87:f1:6d:c3:1f:3f:46:5f:2b:70:3d:09:4c:fe: 7d:da:52:ef:6e:49:25:4f:5f:fb:41:21:fa:d7:39:65:53:70: e4:2a:61:d4:68:0c:35:88:c5:3a:f9:d2:9d:b5:6d:9e:5f:2f: f3:24:23:e3:17:77:ec:9f:70:b1:c2:48:a7:05:69:86:31:40: 45:c0:a0:59:5e:a5:8a:de:a0:54:be:62:18:a1:a1:18:39:16: f8:28:26:7f:8f:fd:8b:51:33:03:34:5c:81:5a:7c:e9:3e:e1: 65:ba:de:90:4f:37:f0:ff:34:da:a5:3d:17:dc:da:9e:ed:de: 4d:40:07:b3:85:73:c3:b5:6d:29:71:a9:ed:ec:0b:ef:ad:f1: 0e:43:b3:ad:9f:4c:aa:f3:bf:0e:49:d0:4e:0f:e9:e5:dc:f8: af:42:f1:25:44:0f:78:2f:be:99:a1:df:f4:e2:e4:f5:68:89: af:f8:44:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/m5l8Rko4YvuoWBhuUZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzI5YWFlMDJiMzY2ZWQxYTAxYjUyYWMzM2FiZTc2MDU5 M2E4MDYwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD EyhiYjg0OGNhMDc0ZTVjMDk2YWFjODA5ZWExZDU3ZGU3NWNlNDQzOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybXI3pD8TBXTVx09b19brmka2Yjz Dv5tDA5nXJC3HSHW88HoN1OLQLVFnYkvJaEW5iB9Bgg2arONUeIRry4D8qF6j5W6 Fi7GJtYmPMDEwVlV+USNkZRIhVAHN8edbKJIliig3iRVMAVqd8fks60TgFNN2Vug 0UjQ88yb3KIzELRQiTSkufEKTWPIX9nLsZpmUZ9y9DNEZfbz+E8V+zUm0F1CxBhB wqWbCF3I/SGkJKWwu1une9Wkd1fojGgza+qyBzwe0I4arvA9GrbsxfKBhpqWHMn3 bqrn1HGw501ts3ihJwj7aNXH4eG+nHoO6wg1FFG766wMe1Ev5etUjZ5VIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuEjKB05cCWqsgJ6h1X3nXORDl+MB8GA1UdIwQY MBaAFJYymq4Cs2btGgG1KsM6vnYFk6gGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMt YWU5M2RlZjUxMGMyLzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMtYWU5M2RlZjUxMGMy LzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxrNdxEX Q1+ASdBeUB/sho/9CjgJ3CTVnO9xIyL1TINjtGqSHZ4YUdHPOQCXOMlixx6SkBb4 0/7f9I7SSqx7/2tK8rDJh6UZNait2ofxbcMfP0ZfK3A9CUz+fdpS725JJU9f+0Eh +tc5ZVNw5Cph1GgMNYjFOvnSnbVtnl8v8yQj4xd37J9wscJIpwVphjFARcCgWV6l it6gVL5iGKGhGDkW+Cgmf4/9i1EzAzRcgVp86T7hZbrekE838P802qU9F9zanu3e TUAHs4Vzw7VtKXGp7ewL763xDkOzrZ9MqvO/DknQTg/p5dz4r0LxJUQPeC++maHf 9OLk9WiJr/hEUw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:36 2025 by rpki-client