This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json) Hash identifier: eKFzvGDmAK9I72Akqys5arKNUNumPi4eSN15ESUuXWc= Subject key identifier: 59:60:A6:79:8E:FF:3E:E5:B0:71:F2:DE:8C:3F:CE:9E:0D:A9:49:98 Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28 Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28 Certificate serial: 019B3EDAED59709A36FD2680199A4F595715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 03:01:33 +0000 Manifest this update: Sun 21 Dec 2025 03:01:33 +0000 Manifest next update: Mon 22 Dec 2025 03:01:33 +0000 Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=) 2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: Ra75RHthGaHKrWFjjSsNeoHvAvMlY2QBhLXDj+eSZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:ed:59:70:9a:36:fd:26:80:19:9a:4f:59:57:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28 Validity Not Before: Dec 21 03:01:33 2025 GMT Not After : Dec 22 03:01:33 2025 GMT Subject: CN=5960a6798eff3ee5b071f2de8c3fce9e0da94998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:bc:e9:18:d2:f4:60:cc:bc:6e:f4:d7:a2: 1a:ad:59:e4:2f:fb:df:e5:d8:b3:3a:11:7a:8c:71: 64:9e:fa:4f:5a:0d:65:73:37:58:de:2d:b6:cf:26: 1b:d8:49:52:d3:85:61:d4:00:71:7d:b0:ad:71:fc: 16:16:ad:7a:f8:62:22:72:78:06:fe:b7:e3:ab:76: 69:bf:a2:6f:17:fa:34:1e:c7:a0:40:72:1e:14:e0: 45:63:1e:f0:c9:1d:c9:19:c4:4b:bd:55:1d:af:56: 13:1f:24:1a:db:4a:2f:05:1e:a3:0d:5b:b0:16:c2: e9:36:3a:a4:9d:cb:7f:ec:75:08:8a:8d:3e:41:9b: 09:eb:92:df:e9:36:31:3d:ac:65:70:08:b9:c3:f1: 32:2b:10:ec:fd:2c:5f:c6:95:10:ce:e0:fb:4e:6c: 74:73:f4:e3:b4:32:88:22:1a:fa:e0:14:1b:28:26: d4:fb:bb:a9:62:f3:5c:42:6c:40:8b:2c:e1:1b:19: bb:c6:20:4d:b9:fd:18:1d:01:b3:d6:a3:9c:c9:24: c8:4c:4d:53:52:f4:02:ac:57:41:78:e8:85:42:9c: 5d:81:de:c4:7f:0d:68:51:c8:72:cc:f5:68:b6:9e: ed:47:76:11:8d:95:44:cc:2e:61:8b:2d:34:ba:30: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:60:A6:79:8E:FF:3E:E5:B0:71:F2:DE:8C:3F:CE:9E:0D:A9:49:98 X509v3 Authority Key Identifier: keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ed:f9:76:f0:e1:8f:b1:d5:69:c9:07:9a:48:40:83:57:29: 9d:21:7d:8c:98:00:16:75:a0:dd:cc:c9:2d:4b:ae:7b:77:78: 06:4a:71:2d:d2:9b:b6:99:fe:b7:c1:c5:c9:f1:6e:f4:d5:ac: 86:18:f2:33:4b:41:74:1e:8b:20:c5:ff:9f:a5:b2:84:0c:af: 16:be:2f:30:49:f1:3f:9c:35:4b:a5:c3:30:c0:0a:9c:46:2b: 6f:7d:d7:7f:60:57:3f:9e:ce:12:08:2a:94:bc:68:22:fe:01: 2b:80:d5:89:4a:14:a3:b2:a3:8b:5b:96:7c:17:f6:31:56:5e: e9:97:b0:9c:1d:de:d4:93:41:62:d3:9e:51:4c:fb:f1:7d:b4: cf:b5:98:f2:30:d0:f1:b2:26:df:ed:66:e0:b7:cc:cf:b2:d3: b2:6a:83:97:e9:3c:55:58:cd:c7:2a:16:18:01:1f:95:9c:cf: e0:8f:87:9f:5b:bb:53:36:aa:a4:60:98:3a:1c:d2:ef:df:b3: 18:2f:27:3f:ae:af:98:3e:76:6f:af:42:a3:35:53:96:ea:19: d2:42:fe:98:54:df:9a:e2:78:7d:ab:78:a2:2c:ae:dd:0e:fc: f1:28:4a:52:0c:25:e6:f6:6e:96:1b:95:dc:42:a9:9a:a7:db: db:01:c7:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2u1ZcJo2/SaAGZpPWVcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTY2NDUyMWQ1MDM5NTkyMTJmNTViMmE1OWFlYzZkMjA3 YjBhMjgwHhcNMjUxMjIxMDMwMTMzWhcNMjUxMjIyMDMwMTMzWjAzMTEwLwYDVQQD Eyg1OTYwYTY3OThlZmYzZWU1YjA3MWYyZGU4YzNmY2U5ZTBkYTk0OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzm86RjS9GDMvG7016IarVnkL/vf 5dizOhF6jHFknvpPWg1lczdY3i22zyYb2ElS04Vh1ABxfbCtcfwWFq16+GIicngG /rfjq3Zpv6JvF/o0HsegQHIeFOBFYx7wyR3JGcRLvVUdr1YTHyQa20ovBR6jDVuw FsLpNjqknct/7HUIio0+QZsJ65Lf6TYxPaxlcAi5w/EyKxDs/SxfxpUQzuD7Tmx0 c/TjtDKIIhr64BQbKCbU+7upYvNcQmxAiyzhGxm7xiBNuf0YHQGz1qOcySTITE1T UvQCrFdBeOiFQpxdgd7Efw1oUchyzPVotp7tR3YRjZVEzC5hiy00ujCOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlgpnmO/z7lsHHy3ow/zp4NqUmYMB8GA1UdIwQY MBaAFJUWZFIdUDlZIS9VsqWa7G0gewooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUt ZWY3NDUzYWQwOTlmLzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUtZWY3NDUzYWQwOTlm LzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhu35dvDh j7HVackHmkhAg1cpnSF9jJgAFnWg3czJLUuue3d4BkpxLdKbtpn+t8HFyfFu9NWs hhjyM0tBdB6LIMX/n6WyhAyvFr4vMEnxP5w1S6XDMMAKnEYrb33Xf2BXP57OEggq lLxoIv4BK4DViUoUo7Kji1uWfBf2MVZe6ZewnB3e1JNBYtOeUUz78X20z7WY8jDQ 8bIm3+1m4LfMz7LTsmqDl+k8VVjNxyoWGAEflZzP4I+Hn1u7UzaqpGCYOhzS79+z GC8nP66vmD52b69CozVTluoZ0kL+mFTfmuJ4fat4oiyu3Q788ShKUgwl5vZulhuV 3EKpmqfb2wHHpg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:11 2025 by rpki-client