This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json) Hash identifier: fJji4T3oEszHgr4QpIpFHk2mTeAeMzC7vYehdOzL0bA= Subject key identifier: 13:D9:D6:34:72:27:8B:29:95:DA:D6:15:85:96:60:CE:34:11:39:E9 Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68 Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668 Certificate serial: 019B3DFE91A5AEAEB2FD777F456C3E53E1FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 23:00:52 +0000 Manifest this update: Sat 20 Dec 2025 23:00:52 +0000 Manifest next update: Sun 21 Dec 2025 23:00:52 +0000 Files and hashes: 1: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (hash: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=) 2: Z0bxD_dypTvELJHwQ8sfKKr3Yl0.roa (hash: OilYGhipbpMsApciEZvD2e2HegS2pxvaEYjH93aVvgg=) 3: jmbXitTxYDhXxX8Sm7GQvdd6SyE.roa (hash: zVpGoN0B3V4SBK16rXtn4P+ZIoIETx7c6+rwVBVyUtc=) 4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: uyQoK8uSmCOH4YokDgdCNwNUGjhHj3O7HzgTY2lQLyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:91:a5:ae:ae:b2:fd:77:7f:45:6c:3e:53:e1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668 Validity Not Before: Dec 20 23:00:52 2025 GMT Not After : Dec 21 23:00:52 2025 GMT Subject: CN=13d9d63472278b2995dad615859660ce341139e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:b9:7e:fb:ea:af:d8:83:44:4e:64:c3:31: ca:7b:b4:e8:0e:92:25:b1:c4:d2:53:43:4d:3c:b9: 4e:84:21:07:ca:ee:e6:ea:34:f0:88:2d:90:8e:ea: 8c:2d:60:d6:de:1a:dc:b1:f9:58:5b:71:b6:02:b5: f1:c3:40:28:78:69:ba:56:13:9b:53:2d:44:e5:74: e3:d4:94:a5:85:87:d5:c3:c3:ef:35:38:6b:52:52: a9:ad:ed:46:57:fa:c7:d4:90:0a:73:71:40:b3:a9: 07:82:fc:f5:03:2c:34:6b:e2:70:c1:83:b4:71:d2: e3:18:a8:4b:b1:71:1b:0c:e6:f1:2a:5d:a3:85:08: 8d:83:c9:3a:6e:b4:a6:13:05:2e:e3:a2:e7:84:6f: 82:3b:47:7c:46:67:f5:9f:cb:f2:f3:21:29:47:65: 6e:a9:c0:e2:07:a8:97:8f:4b:02:c5:57:70:b8:9d: 7a:fd:26:06:3a:69:60:d6:01:57:3f:4a:92:24:27: 03:c9:68:d0:f8:aa:40:6e:67:69:50:6e:1b:f7:f2: c2:27:ef:40:67:24:e9:0e:eb:bd:8f:bb:5d:d6:da: d8:40:7e:92:20:95:94:9d:f4:3d:51:4f:80:0b:f3: 3b:84:25:ee:d9:e1:25:e7:d2:df:ee:1f:b3:af:d0: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:D6:34:72:27:8B:29:95:DA:D6:15:85:96:60:CE:34:11:39:E9 X509v3 Authority Key Identifier: keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:3f:e1:29:04:e6:07:8d:c5:1c:9c:7b:ac:ca:9d:ea:92: 86:56:d2:36:55:9c:da:0e:77:a0:6b:ec:78:0d:a7:fa:a4:78: 4c:6e:d0:bc:1c:d5:ee:99:f8:56:5a:d7:d7:67:07:5c:62:f7: 08:1d:3b:0e:8b:2d:43:99:32:51:f7:50:e5:73:09:9a:8f:fa: f9:93:83:03:9b:4f:49:94:80:eb:52:9b:69:30:29:74:3c:05: 70:50:12:43:26:51:95:73:3f:2c:6a:97:41:bc:a0:d8:02:79: c4:05:c6:78:fa:91:e8:d3:bc:0f:17:ee:c2:7e:f5:41:36:9f: ef:4e:44:64:5a:c0:73:7e:8a:4e:9e:8d:a9:ab:f7:cf:fe:3b: a4:e6:f6:73:c9:c3:ba:f4:b6:be:a3:69:8f:08:d1:36:9a:05: 16:bb:be:1e:05:7b:a3:ad:c7:16:e9:b9:5b:0c:8f:6d:df:19: 63:e4:58:94:4b:ac:32:74:00:9a:51:4b:3b:7b:2f:df:1c:2d: c9:a2:d9:0f:ff:63:97:36:ca:f3:38:ca:f6:32:14:95:06:cc: 96:57:1e:9f:a5:39:15:b6:d7:1f:68:d3:7c:ce:f1:be:5a:a5: 2b:95:44:1d:d6:62:48:c8:1a:52:7b:8c:62:fb:26:bb:07:2f: 91:1e:d2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pGlrq6y/Xd/RWw+U+H9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGVjNjQxMDUxYjAyNmI5NWM4NDU5MTUwY2E0N2RkYWVj ODk2NjgwHhcNMjUxMjIwMjMwMDUyWhcNMjUxMjIxMjMwMDUyWjAzMTEwLwYDVQQD EygxM2Q5ZDYzNDcyMjc4YjI5OTVkYWQ2MTU4NTk2NjBjZTM0MTEzOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFy5fvvqr9iDRE5kwzHKe7ToDpIl scTSU0NNPLlOhCEHyu7m6jTwiC2QjuqMLWDW3hrcsflYW3G2ArXxw0AoeGm6VhOb Uy1E5XTj1JSlhYfVw8PvNThrUlKpre1GV/rH1JAKc3FAs6kHgvz1Ayw0a+JwwYO0 cdLjGKhLsXEbDObxKl2jhQiNg8k6brSmEwUu46LnhG+CO0d8Rmf1n8vy8yEpR2Vu qcDiB6iXj0sCxVdwuJ16/SYGOmlg1gFXP0qSJCcDyWjQ+KpAbmdpUG4b9/LCJ+9A ZyTpDuu9j7td1trYQH6SIJWUnfQ9UU+AC/M7hCXu2eEl59Lf7h+zr9A4IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPZ1jRyJ4spldrWFYWWYM40ETnpMB8GA1UdIwQY MBaAFJTexkEFGwJrlchFkVDKR92uyJZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTExMTMtZWQ4NS00MmIyLWI2NGYt OWVhNjQ4NjJhOWFiLzEvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNTExMTMtZWQ4NS00MmIyLWI2NGYtOWVhNjQ4NjJhOWFi LzEvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa0/4SkE 5geNxRyce6zKneqShlbSNlWc2g53oGvseA2n+qR4TG7QvBzV7pn4VlrX12cHXGL3 CB07DostQ5kyUfdQ5XMJmo/6+ZODA5tPSZSA61KbaTApdDwFcFASQyZRlXM/LGqX Qbyg2AJ5xAXGePqR6NO8Dxfuwn71QTaf705EZFrAc36KTp6Nqav3z/47pOb2c8nD uvS2vqNpjwjRNpoFFru+HgV7o63HFum5WwyPbd8ZY+RYlEusMnQAmlFLO3sv3xwt yaLZD/9jlzbK8zjK9jIUlQbMllcen6U5FbbXH2jTfM7xvlqlK5VEHdZiSMgaUnuM YvsmuwcvkR7SVA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:46 2025 by rpki-client