This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json) Hash identifier: rGqa6KyomdvDvmmZLl027NaX+J2Awe9aFHATlFxseTY= Subject key identifier: 2B:30:B2:20:9A:57:C2:6A:4B:F5:81:98:05:37:B4:90:9E:C3:3A:D5 Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28 Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28 Certificate serial: 019B4A71775E0AA55E888297BCEDFE2F002A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 09:01:48 +0000 Manifest this update: Tue 23 Dec 2025 09:01:48 +0000 Manifest next update: Wed 24 Dec 2025 09:01:48 +0000 Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=) 2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: FKBvOzv32JAHhUJWh4mt+ZDsTN1NzKlqNaAnEBmAHxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:77:5e:0a:a5:5e:88:82:97:bc:ed:fe:2f:00:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28 Validity Not Before: Dec 23 09:01:48 2025 GMT Not After : Dec 24 09:01:48 2025 GMT Subject: CN=2b30b2209a57c26a4bf581980537b4909ec33ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:0b:76:8c:ff:19:b6:e6:1d:bb:83:69:48: 42:15:5d:f3:3a:b0:ff:fe:9a:bc:bd:d3:82:94:85: 24:d3:73:9f:d0:8f:5a:e4:5d:e0:a1:4d:af:70:80: a0:10:94:af:45:86:16:86:0b:e4:f7:74:a3:1b:2a: 43:d5:af:54:28:51:02:c1:3e:17:d9:14:9c:8c:55: a1:8b:aa:a3:ac:c7:0e:9a:fb:9b:8c:2b:3f:e3:f9: 24:43:e0:0e:ba:de:74:54:e5:6a:ae:8e:39:fd:56: 64:a8:e8:78:5f:7f:ed:55:d8:11:04:63:f1:a0:1f: 26:39:97:35:da:76:f7:1e:b2:e2:91:e8:ab:45:9c: 12:1b:cb:f8:bb:66:8c:a4:ac:48:4c:b9:ea:66:75: 7d:3a:ad:fc:f7:37:5f:71:07:6b:e4:db:80:79:21: c9:8e:5a:74:38:8b:bf:22:02:3d:a9:a6:12:df:96: b1:da:e2:a3:c6:cc:56:01:d9:f1:16:78:33:ea:ef: c2:1e:54:6c:cd:a2:6c:ee:8c:6b:42:4e:29:34:4d: 63:8b:36:92:6a:24:9a:1c:30:22:62:8b:b2:53:5f: 55:13:e5:d4:70:c2:37:54:dc:54:ec:a6:6c:62:79: 3c:91:c8:29:a3:ab:79:ff:1f:66:e9:f1:53:a9:e1: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:30:B2:20:9A:57:C2:6A:4B:F5:81:98:05:37:B4:90:9E:C3:3A:D5 X509v3 Authority Key Identifier: keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:12:db:55:42:1f:f3:26:30:01:fb:59:6f:6e:8d:33:79:10: 55:0d:1e:fd:2a:ac:a5:cd:2b:f5:87:1f:d4:02:1e:d1:08:e9: a7:bf:a9:76:ea:eb:e9:68:23:60:3c:dd:9a:8e:20:8e:7d:ae: fe:24:35:14:04:42:6d:27:42:b5:95:dd:66:cb:03:a1:8d:41: 37:d6:0e:e1:1a:cb:7b:05:a9:c4:6e:92:25:dc:06:81:e6:56: 59:c6:41:34:0a:4e:7b:68:7f:cd:20:ed:41:7e:55:05:ae:e7: 52:d8:ed:a9:2c:44:22:9c:3c:09:a1:8b:74:88:71:f8:17:7f: 28:56:93:4a:56:4d:02:59:c1:73:3d:f0:5f:a1:c3:90:33:55: d6:8f:65:00:53:64:bb:59:ab:d4:52:03:28:c4:a7:9a:0d:31: 19:41:8b:ce:64:fe:6f:34:c5:5d:63:7f:0f:16:ce:e1:f6:dd: df:ab:3a:fa:c7:1b:4f:50:bf:ab:11:fb:82:97:8f:f5:eb:ce: 51:a1:23:27:a6:2d:d1:a0:22:16:a8:ff:dc:03:97:58:3f:c1: 5c:41:7a:71:e3:4a:89:33:32:ee:a6:1f:ef:d2:b2:b4:57:72: e7:fa:8f:1a:bf:a3:ca:cf:2f:9a:e3:3a:a1:ce:9c:e7:44:7b: e8:3c:ce:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcXdeCqVeiIKXvO3+LwAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTY2NDUyMWQ1MDM5NTkyMTJmNTViMmE1OWFlYzZkMjA3 YjBhMjgwHhcNMjUxMjIzMDkwMTQ4WhcNMjUxMjI0MDkwMTQ4WjAzMTEwLwYDVQQD EygyYjMwYjIyMDlhNTdjMjZhNGJmNTgxOTgwNTM3YjQ5MDllYzMzYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pILdoz/GbbmHbuDaUhCFV3zOrD/ /pq8vdOClIUk03Of0I9a5F3goU2vcICgEJSvRYYWhgvk93SjGypD1a9UKFECwT4X 2RScjFWhi6qjrMcOmvubjCs/4/kkQ+AOut50VOVqro45/VZkqOh4X3/tVdgRBGPx oB8mOZc12nb3HrLikeirRZwSG8v4u2aMpKxITLnqZnV9Oq389zdfcQdr5NuAeSHJ jlp0OIu/IgI9qaYS35ax2uKjxsxWAdnxFngz6u/CHlRszaJs7oxrQk4pNE1jizaS aiSaHDAiYouyU19VE+XUcMI3VNxU7KZsYnk8kcgpo6t5/x9m6fFTqeHe4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCswsiCaV8JqS/WBmAU3tJCewzrVMB8GA1UdIwQY MBaAFJUWZFIdUDlZIS9VsqWa7G0gewooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUt ZWY3NDUzYWQwOTlmLzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUtZWY3NDUzYWQwOTlm LzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzRLbVUIf 8yYwAftZb26NM3kQVQ0e/Sqspc0r9Ycf1AIe0Qjpp7+pdurr6WgjYDzdmo4gjn2u /iQ1FARCbSdCtZXdZssDoY1BN9YO4RrLewWpxG6SJdwGgeZWWcZBNApOe2h/zSDt QX5VBa7nUtjtqSxEIpw8CaGLdIhx+Bd/KFaTSlZNAlnBcz3wX6HDkDNV1o9lAFNk u1mr1FIDKMSnmg0xGUGLzmT+bzTFXWN/DxbO4fbd36s6+scbT1C/qxH7gpeP9evO UaEjJ6Yt0aAiFqj/3AOXWD/BXEF6ceNKiTMy7qYf79KytFdy5/qPGr+jys8vmuM6 oc6c50R76DzORw== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:39 2025 by rpki-client