This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft File: Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json) Hash identifier: fRxfskwLTKx+HUfCixdyLxwCpJYsZKUOGOXvkUg9pQ4= Subject key identifier: 3A:4C:A6:35:58:00:8A:75:B2:0E:DC:F5:17:A8:6C:8E:6C:FC:AD:83 Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Certificate serial: 019B45EEC5DC90AC1F9E51447F9AF68FF7C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft Manifest number: 06B6 Signing time: Mon 22 Dec 2025 12:00:34 +0000 Manifest this update: Mon 22 Dec 2025 12:00:34 +0000 Manifest next update: Tue 23 Dec 2025 12:00:34 +0000 Files and hashes: 1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=) 2: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (hash: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=) 3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: op4NoPruLdEOpLVIVYi8FzgivdmylQK0yVhz1yOUOb0=) 4: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (hash: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:c5:dc:90:ac:1f:9e:51:44:7f:9a:f6:8f:f7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Validity Not Before: Dec 22 12:00:34 2025 GMT Not After : Dec 23 12:00:34 2025 GMT Subject: CN=3a4ca63558008a75b20edcf517a86c8e6cfcad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:6e:b1:b4:4c:ea:6e:18:79:c9:fe:a0:63: d3:b7:de:33:19:a3:46:a3:4b:45:8b:6e:0f:51:92: 6d:4f:13:43:64:4a:33:b6:ca:4c:3d:a5:5b:6b:2d: 6d:29:05:5b:66:b5:3c:cd:b5:0b:38:ec:3d:48:81: cb:ee:15:5a:2c:1c:fa:06:3a:02:b7:16:a6:17:ec: 41:5b:5b:fb:8f:ae:3c:0f:db:ac:a2:88:f6:51:90: 70:41:64:f4:55:b2:62:03:14:f1:cc:c1:cc:23:b6: 7d:77:33:c2:64:4f:14:58:80:c7:c2:42:b8:04:25: 3d:da:d2:4b:53:29:59:e5:9e:86:2a:89:be:74:51: 88:26:87:5c:96:d2:5a:27:55:2b:e7:0e:63:25:0f: 6c:1c:86:6d:a4:50:3f:67:50:c9:62:87:ed:97:95: 47:3e:81:32:c6:0f:cd:cf:c8:20:57:6b:92:f1:ac: 41:9a:46:e9:7d:4c:c4:02:34:9a:88:dd:13:10:7d: 3e:5d:b2:79:49:6b:9f:08:67:d0:68:2e:8f:3f:24: 4a:1f:22:96:d2:15:a7:02:1a:f4:3a:73:d6:a0:86: 23:60:f0:63:a4:fc:1b:6a:9b:06:fb:56:79:64:35: d7:c6:51:49:71:e0:f0:ec:e9:c3:16:93:62:5a:b9: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4C:A6:35:58:00:8A:75:B2:0E:DC:F5:17:A8:6C:8E:6C:FC:AD:83 X509v3 Authority Key Identifier: keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3e:50:92:56:83:16:5a:a2:75:fe:a0:51:e9:84:ab:2a:d1: 86:8c:08:8d:f1:bd:96:0b:4c:3f:b6:7e:05:b6:a8:6c:e3:a8: ae:f9:68:73:6c:b8:69:01:4b:9c:e8:0d:8b:7e:46:d4:a5:36: 00:e5:c3:8f:bc:9a:27:32:5b:f0:8b:5d:d0:40:c7:64:12:1c: 6c:31:17:fb:2b:dc:68:b8:31:91:2e:3d:f9:fe:c2:dd:32:0b: 8d:95:e2:a8:c0:72:b6:63:76:75:a7:58:2e:03:c5:7b:2b:12: 54:c0:d0:ed:ae:46:e3:37:f9:73:c0:97:36:ca:36:83:bf:c8: c2:b9:f7:bc:42:e1:3b:81:5a:18:1d:d5:73:15:80:13:0a:69: e9:7e:b6:9a:7f:a6:04:42:d9:88:0a:36:34:75:14:7a:1f:87: 8d:b4:83:90:47:12:8f:90:dd:11:1a:1c:66:d1:50:41:6d:2f: 93:66:20:3e:52:e2:dd:89:03:f9:90:54:64:b2:68:d7:49:fd: 6f:6a:09:fa:95:c9:ab:e7:76:4d:d2:b8:32:90:ff:31:08:45: e9:51:be:6d:8e:d4:f9:c8:fc:4f:5f:17:8a:bf:b7:27:ab:fa: d2:be:c0:2b:8f:4d:2b:7d:19:e9:5a:3c:fd:81:c5:2c:d3:62: 3a:7d:2c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7sXckKwfnlFEf5r2j/fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGVjOWEyMDk2ZGVjMTAzYmFlMmQ3YzM3OTZlMGQ0NzA4 NWMyMDIwHhcNMjUxMjIyMTIwMDM0WhcNMjUxMjIzMTIwMDM0WjAzMTEwLwYDVQQD EygzYTRjYTYzNTU4MDA4YTc1YjIwZWRjZjUxN2E4NmM4ZTZjZmNhZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FJusbRM6m4Yecn+oGPTt94zGaNG o0tFi24PUZJtTxNDZEoztspMPaVbay1tKQVbZrU8zbULOOw9SIHL7hVaLBz6BjoC txamF+xBW1v7j648D9usooj2UZBwQWT0VbJiAxTxzMHMI7Z9dzPCZE8UWIDHwkK4 BCU92tJLUylZ5Z6GKom+dFGIJodcltJaJ1Ur5w5jJQ9sHIZtpFA/Z1DJYoftl5VH PoEyxg/Nz8ggV2uS8axBmkbpfUzEAjSaiN0TEH0+XbJ5SWufCGfQaC6PPyRKHyKW 0hWnAhr0OnPWoIYjYPBjpPwbapsG+1Z5ZDXXxlFJceDw7OnDFpNiWrkHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpMpjVYAIp1sg7c9ReobI5s/K2DMB8GA1UdIwQY MBaAFC7eyaIJbewQO64tfDeW4NRwhcICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEt MDU3ZDdhZjBhZWY0LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEtMDU3ZDdhZjBhZWY0 LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD5QklaD Flqidf6gUemEqyrRhowIjfG9lgtMP7Z+BbaobOOorvloc2y4aQFLnOgNi35G1KU2 AOXDj7yaJzJb8Itd0EDHZBIcbDEX+yvcaLgxkS49+f7C3TILjZXiqMBytmN2dadY LgPFeysSVMDQ7a5G4zf5c8CXNso2g7/Iwrn3vELhO4FaGB3VcxWAEwpp6X62mn+m BELZiAo2NHUUeh+HjbSDkEcSj5DdERocZtFQQW0vk2YgPlLi3YkD+ZBUZLJo10n9 b2oJ+pXJq+d2TdK4MpD/MQhF6VG+bY7U+cj8T18Xir+3J6v60r7AK49NK30Z6Vo8 /YHFLNNiOn0s8w== -----END CERTIFICATE-----Generated at Mon Dec 22 19:58:38 2025 by rpki-client