This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft File: lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json) Hash identifier: oztso6TD0IeSD7wlJ3VVLuuFOVXUrdW/Mut8hgt401s= Subject key identifier: DC:04:38:4B:D8:75:A9:7A:4D:52:BF:D3:D0:26:A3:B4:A0:7B:5B:A2 Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Certificate serial: 019B3D908F7310431F26024BCC3FD5870A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 21:00:42 +0000 Manifest this update: Sat 20 Dec 2025 21:00:42 +0000 Manifest next update: Sun 21 Dec 2025 21:00:42 +0000 Files and hashes: 1: Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa (hash: K5S02B/Gi2bHkxhJ8aF28VCnMZBi3s2rFauNCvnOiEw=) 2: UIdIZEUaxJjlUmS0DfjMepB-HoU.roa (hash: 7c/wtDjgeQptynstoYum4n7aAfpOsb4reHajWBMyT4A=) 3: bk2E2MwznVO9fyeEdSNKPr5qf4g.roa (hash: koJYcFmVjppjNe30QYkPLjnztCXTOqE8zj4CJBsH3wk=) 4: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: rfJBzx/HS7e2Si3WZvmnbyX9+IzFCFPoFmcLeMWQHwc=) 5: ti67mfJ02xdUJebE8kVITWH-K94.roa (hash: mNTROQB2r5DCdwCoKjtHCnrpF/RYqwhzp7iVZ86dAsQ=) 6: wciPWRp0S7jDGsgBUMCQv3rtcf0.roa (hash: nUbkTnm2+bif0gS51JkC+xvx+yRO0T+FclDoI4aytYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8f:73:10:43:1f:26:02:4b:cc:3f:d5:87:0a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120 Validity Not Before: Dec 20 21:00:42 2025 GMT Not After : Dec 21 21:00:42 2025 GMT Subject: CN=dc04384bd875a97a4d52bfd3d026a3b4a07b5ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:6e:8e:7d:95:ec:bb:27:7a:6b:10:6c:87: 52:cf:ed:84:22:c7:8b:6a:f0:f1:16:02:32:7f:eb: 5a:c7:02:ae:68:9a:4e:8e:f1:62:4a:ce:16:50:0f: 0d:a1:80:8d:75:96:e0:21:e7:1d:be:2d:18:8c:7b: 62:27:b3:4d:ad:b3:81:cf:25:1a:71:35:bf:78:9c: 3d:11:9c:24:e0:2a:50:99:5f:c3:bb:f5:48:c0:4d: b9:19:79:2e:21:1a:e8:f7:27:8d:61:cd:cf:07:e8: 2b:64:b8:dd:2c:da:53:ca:ad:04:32:84:be:24:12: fc:09:bc:6a:9a:4b:49:f0:22:a3:31:07:a9:47:b0: 24:f9:1a:92:d9:9d:07:98:b0:1d:d0:b4:34:a5:92: f1:e2:27:28:18:c7:1d:88:9d:7d:a7:73:1d:eb:b6: 35:ec:ff:dc:fe:61:be:2b:e6:7b:91:d7:78:e5:09: d0:da:fb:54:e9:01:bf:f9:92:0d:0b:6f:d4:9d:ca: c7:46:ac:0d:f4:26:a2:59:84:90:37:a2:0a:cd:ee: a8:1a:91:46:27:e6:0f:fb:f7:05:5e:a6:52:76:06: 90:5e:a1:bf:84:ab:9e:61:53:4a:9c:66:40:7e:c5: 5f:af:0d:8c:ca:53:4b:d1:78:8a:93:26:4b:f6:36: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:38:4B:D8:75:A9:7A:4D:52:BF:D3:D0:26:A3:B4:A0:7B:5B:A2 X509v3 Authority Key Identifier: keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4c:37:77:1e:93:76:fa:de:2b:09:ba:dc:5c:39:7e:7d:5f: c7:ba:fd:2a:ae:05:6b:53:d3:fc:a1:10:1a:20:96:48:40:00: 38:c1:37:ba:1f:e3:b4:d8:33:f9:b6:b4:be:7f:d2:a9:30:5f: 75:5b:3c:8c:5d:d2:d1:10:f6:50:7b:ec:18:6c:af:5d:20:46: d1:1f:22:f6:06:b5:cc:38:f5:34:2c:bb:25:46:0d:35:38:0f: 5c:ab:94:03:78:0c:75:d9:8f:6e:f1:92:9d:26:b5:fb:54:76: 06:2a:4a:b4:23:52:50:93:c1:81:f4:01:ec:22:f1:d4:aa:04: 7e:e9:69:a0:aa:b4:97:67:24:57:37:95:87:ae:60:16:ec:0b: 44:b3:ea:49:57:d3:c1:e3:98:88:87:19:f4:f0:51:5a:00:5f: 32:03:01:76:f2:c8:ce:d4:dd:61:c6:57:01:fe:97:fa:73:b9: eb:99:6e:52:d4:eb:eb:c9:0a:91:b8:6c:ad:5c:fd:50:95:01: 92:75:b8:9a:d3:3d:d3:33:fd:0b:65:f9:bc:52:f1:b9:48:f6: 68:f0:3e:a1:98:a6:b0:08:e6:0e:d0:c7:c6:c9:e6:f3:54:e2: ae:1f:b6:68:bc:b0:51:16:48:0a:f2:aa:ab:88:9d:10:d9:4d: 14:45:6f:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kI9zEEMfJgJLzD/Vhwp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy MzQxMjAwHhcNMjUxMjIwMjEwMDQyWhcNMjUxMjIxMjEwMDQyWjAzMTEwLwYDVQQD EyhkYzA0Mzg0YmQ4NzVhOTdhNGQ1MmJmZDNkMDI2YTNiNGEwN2I1YmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ulujn2V7LsnemsQbIdSz+2EIseL avDxFgIyf+taxwKuaJpOjvFiSs4WUA8NoYCNdZbgIecdvi0YjHtiJ7NNrbOBzyUa cTW/eJw9EZwk4CpQmV/Du/VIwE25GXkuIRro9yeNYc3PB+grZLjdLNpTyq0EMoS+ JBL8CbxqmktJ8CKjMQepR7Ak+RqS2Z0HmLAd0LQ0pZLx4icoGMcdiJ19p3Md67Y1 7P/c/mG+K+Z7kdd45QnQ2vtU6QG/+ZINC2/UncrHRqwN9CaiWYSQN6IKze6oGpFG J+YP+/cFXqZSdgaQXqG/hKueYVNKnGZAfsVfrw2MylNL0XiKkyZL9jammQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwEOEvYdal6TVK/09Amo7Sge1uiMB8GA1UdIwQY MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt YmZmYjc1N2MzMTM0LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0 LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0w3dx6T dvreKwm63Fw5fn1fx7r9Kq4Fa1PT/KEQGiCWSEAAOME3uh/jtNgz+ba0vn/SqTBf dVs8jF3S0RD2UHvsGGyvXSBG0R8i9ga1zDj1NCy7JUYNNTgPXKuUA3gMddmPbvGS nSa1+1R2BipKtCNSUJPBgfQB7CLx1KoEfulpoKq0l2ckVzeVh65gFuwLRLPqSVfT weOYiIcZ9PBRWgBfMgMBdvLIztTdYcZXAf6X+nO565luUtTr68kKkbhsrVz9UJUB knW4mtM90zP9C2X5vFLxuUj2aPA+oZimsAjmDtDHxsnm81Tirh+2aLywURZICvKq q4idENlNFEVvPw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:20 2025 by rpki-client