This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft File: Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json) Hash identifier: CaYQ7N8jTfmus0Dam7lMi6YsIrnXXv9zVr8Otw+LFb4= Subject key identifier: DE:DA:97:5D:61:86:7A:F5:00:B3:B2:2D:25:BF:9B:F6:1D:2E:62:02 Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Certificate serial: 019B518560DEB1FBD05C687D92BBAB34C3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft Manifest number: 06BC Signing time: Wed 24 Dec 2025 18:00:54 +0000 Manifest this update: Wed 24 Dec 2025 18:00:54 +0000 Manifest next update: Thu 25 Dec 2025 18:00:54 +0000 Files and hashes: 1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=) 2: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (hash: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=) 3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: 2Go9vUVUsXqRlnAKDN9r93cTIY9W5OrLV32aewOEyP8=) 4: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (hash: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:60:de:b1:fb:d0:5c:68:7d:92:bb:ab:34:c3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Validity Not Before: Dec 24 18:00:54 2025 GMT Not After : Dec 25 18:00:54 2025 GMT Subject: CN=deda975d61867af500b3b22d25bf9bf61d2e6202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:77:da:13:66:08:b9:83:41:67:dd:eb:6e: 8a:fe:4a:77:c8:74:8f:38:2f:6e:78:e2:84:08:60: ce:1d:e0:26:d0:d2:8a:7d:61:b1:ab:05:2e:34:1e: 86:54:f7:0c:cb:78:a5:fb:50:4a:7d:03:05:96:31: 5b:65:6a:7d:d0:6b:86:0f:d4:ad:c7:45:85:0b:07: 2f:e5:9c:e3:16:db:21:e3:73:7c:84:1d:8b:ed:bb: 58:16:f0:ce:e4:19:80:7e:27:32:e4:f4:d4:3c:79: 0f:5a:c8:63:72:ad:e7:07:9d:45:93:96:d4:c2:2c: 88:17:2c:6b:ba:c5:b9:6b:eb:82:1f:dd:0a:22:8d: ee:cd:0f:15:e8:02:bc:4a:de:f0:e7:25:ef:36:e5: 40:73:a2:cc:5d:d7:90:f4:0c:44:33:b8:0c:a6:67: 20:45:c5:ab:9e:40:ae:a3:83:41:03:67:c2:e1:fa: 3b:be:82:86:95:91:45:e2:ec:29:17:37:c7:33:2a: 90:ee:79:21:67:f0:19:2b:52:ab:af:33:6a:c6:37: de:26:4b:09:2c:c7:62:bf:48:af:b6:65:f3:29:9d: bb:6c:c9:bf:f5:b0:0c:f2:98:49:7c:6c:de:36:4b: e4:68:3e:50:1c:a9:9c:88:bb:ce:07:85:be:9e:81: 1f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DA:97:5D:61:86:7A:F5:00:B3:B2:2D:25:BF:9B:F6:1D:2E:62:02 X509v3 Authority Key Identifier: keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4b:b7:7f:9c:c0:7f:98:4e:66:20:2e:35:73:8e:fa:60:4a: 61:14:f8:33:37:47:74:13:11:b9:05:a7:cc:46:78:68:d9:d6: 5f:b3:13:eb:a3:dd:86:63:e1:09:b0:f4:c2:34:fe:a7:31:b8: 4c:20:00:66:e9:1f:ca:73:83:b7:69:3a:94:bf:e5:e5:27:83: 15:69:47:67:99:4d:8a:c0:e3:5c:8f:92:e6:22:1a:63:97:04: 5f:98:6a:4b:d8:b6:10:f9:ba:8b:f5:98:78:9a:28:6f:fd:73: cf:ed:93:53:69:09:6b:20:9d:39:f8:b1:ce:30:a1:68:46:84: 44:f4:ed:6a:4a:4f:f4:e4:c4:43:e7:ca:43:02:63:55:a6:bf: 15:9e:df:fb:37:9c:b8:d3:90:a6:3a:8c:06:ef:9e:04:6f:69: 91:93:e9:20:59:d3:da:63:b8:74:24:54:ef:87:22:6d:e7:ce: 2d:05:df:e0:3a:ae:51:b7:79:a1:ed:e4:c5:ab:e0:6a:ee:d5: 31:e8:6c:f3:1e:90:b1:c8:98:d5:9e:21:60:85:ab:64:1c:20: 01:75:3f:77:a2:0e:09:10:bc:08:54:99:5b:84:46:aa:89:77: 34:66:49:4b:0c:10:a6:ad:ad:e1:b3:68:2d:d4:f7:2c:b7:9f: 67:bf:e1:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhWDesfvQXGh9krurNMO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGVjOWEyMDk2ZGVjMTAzYmFlMmQ3YzM3OTZlMGQ0NzA4 NWMyMDIwHhcNMjUxMjI0MTgwMDU0WhcNMjUxMjI1MTgwMDU0WjAzMTEwLwYDVQQD EyhkZWRhOTc1ZDYxODY3YWY1MDBiM2IyMmQyNWJmOWJmNjFkMmU2MjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgp32hNmCLmDQWfd626K/kp3yHSP OC9ueOKECGDOHeAm0NKKfWGxqwUuNB6GVPcMy3il+1BKfQMFljFbZWp90GuGD9St x0WFCwcv5ZzjFtsh43N8hB2L7btYFvDO5BmAficy5PTUPHkPWshjcq3nB51Fk5bU wiyIFyxrusW5a+uCH90KIo3uzQ8V6AK8St7w5yXvNuVAc6LMXdeQ9AxEM7gMpmcg RcWrnkCuo4NBA2fC4fo7voKGlZFF4uwpFzfHMyqQ7nkhZ/AZK1KrrzNqxjfeJksJ LMdiv0ivtmXzKZ27bMm/9bAM8phJfGzeNkvkaD5QHKmciLvOB4W+noEfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7al11hhnr1ALOyLSW/m/YdLmICMB8GA1UdIwQY MBaAFC7eyaIJbewQO64tfDeW4NRwhcICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEt MDU3ZDdhZjBhZWY0LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEtMDU3ZDdhZjBhZWY0 LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEu3f5zA f5hOZiAuNXOO+mBKYRT4MzdHdBMRuQWnzEZ4aNnWX7MT66PdhmPhCbD0wjT+pzG4 TCAAZukfynODt2k6lL/l5SeDFWlHZ5lNisDjXI+S5iIaY5cEX5hqS9i2EPm6i/WY eJoob/1zz+2TU2kJayCdOfixzjChaEaERPTtakpP9OTEQ+fKQwJjVaa/FZ7f+zec uNOQpjqMBu+eBG9pkZPpIFnT2mO4dCRU74cibefOLQXf4DquUbd5oe3kxavgau7V Mehs8x6QsciY1Z4hYIWrZBwgAXU/d6IOCRC8CFSZW4RGqol3NGZJSwwQpq2t4bNo LdT3LLefZ7/hiw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:23 2025 by rpki-client