This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json) Hash identifier: 8hZjh1uIAgVYG2DKc9jOxRlD0vcLrg5qE7MtOQIVAUY= Subject key identifier: 28:86:4C:39:45:FB:F5:C7:B9:63:A4:6D:28:1C:1B:10:32:0C:1E:AE Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Certificate serial: 019B53ABC93B878EF9FF062D7B65570119E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 04:02:05 +0000 Manifest this update: Thu 25 Dec 2025 04:02:05 +0000 Manifest next update: Fri 26 Dec 2025 04:02:05 +0000 Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=) 2: UOQHKJxMF7C_9axA2ZXFxeIGRa4.roa (hash: 1HCLCUjxNGGDZURuVB2yTjspaXZmBODEBg4gNoMhB8Q=) 3: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: 1s/zoo2BVp7aAEX61zUZ6q+4tBiNbTDd8bZMCELL9rI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:c9:3b:87:8e:f9:ff:06:2d:7b:65:57:01:19:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Validity Not Before: Dec 25 04:02:05 2025 GMT Not After : Dec 26 04:02:05 2025 GMT Subject: CN=28864c3945fbf5c7b963a46d281c1b10320c1eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:a4:fc:d0:ad:a0:e1:21:48:1e:aa:4a:48: e7:f1:13:4c:7a:e6:da:d8:45:46:30:c4:25:b2:15: d3:ea:b7:bd:e3:d0:25:2a:cb:8e:c8:7a:df:cb:75: 97:3f:2a:2f:48:52:bb:4e:b9:e0:bf:14:19:01:1e: 23:07:69:6a:38:9e:09:e3:f3:7f:62:97:8b:ad:de: 02:6b:30:31:be:49:d6:8b:b4:49:71:87:54:0a:8d: 5e:cc:af:a1:77:77:32:25:1b:1b:75:87:7f:79:84: b8:79:af:21:3c:6c:98:14:f7:a4:56:dc:6c:14:dc: ec:d6:7b:24:6d:98:90:ae:e6:a6:83:9e:30:a7:f4: 56:bb:29:e9:0a:db:cd:0c:7f:91:77:72:a5:ef:8e: de:a8:b8:3f:52:77:bc:1d:1a:fc:be:dd:5d:2e:33: 0e:e4:18:23:9f:94:49:7c:b0:be:e8:1d:70:74:a4: e4:c2:e5:ac:c8:45:c8:41:a1:c6:a4:9c:75:80:ea: fe:7a:0c:15:7a:8a:f9:27:4f:a6:82:0a:a1:7c:6a: a7:82:74:39:6c:9c:8a:d4:42:f4:ae:98:1c:db:20: 96:74:2c:4a:c7:b2:bd:32:c8:29:a7:95:2e:12:8b: 67:3f:44:5d:ee:b4:2e:b4:6d:ab:71:4f:1d:7b:cd: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:86:4C:39:45:FB:F5:C7:B9:63:A4:6D:28:1C:1B:10:32:0C:1E:AE X509v3 Authority Key Identifier: keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c3:6d:7c:61:1a:00:ea:ed:2b:4d:dc:62:9a:14:f9:f9:f5: 6f:df:5e:26:07:0e:0d:26:bb:a8:80:5e:bd:9a:a0:64:d0:88: f1:90:fc:23:1c:df:7c:ea:41:85:9e:53:20:2f:f7:69:93:06: 66:25:4e:a9:bb:68:38:a4:4a:d8:ef:36:24:db:c9:25:6e:0b: 52:0f:65:d3:42:75:81:14:32:d7:e1:ca:32:78:cd:25:94:45: 14:f1:f3:87:f4:8e:c8:e5:82:26:b7:be:7a:fa:b3:7e:e9:e5: 9a:c4:f1:05:22:44:52:c8:3c:a6:bf:16:0c:01:7a:bb:89:b2: f7:ab:1b:c2:3e:9b:e6:13:1c:7d:db:a9:11:7e:d3:29:c0:8e: c4:2a:b5:a2:c2:79:f8:e7:f8:1f:d5:49:6e:32:de:93:78:1e: 99:ef:05:81:81:69:98:14:53:fa:9f:8a:07:c6:06:f0:cc:6f: a5:13:25:70:55:e1:e5:34:8a:1b:32:6a:91:aa:26:cd:d9:9a: 1a:74:e9:96:17:34:a0:7e:e3:80:e2:6c:d8:11:58:42:69:b6: e2:ee:0a:79:75:6e:da:04:e0:06:fb:46:f4:1c:7a:7f:3f:3f: 6e:ba:70:a3:bd:fe:15:bf:79:aa:f7:6d:1f:af:dc:04:37:da: 95:f6:eb:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq8k7h475/wYte2VXARnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3 YjBiMDkwHhcNMjUxMjI1MDQwMjA1WhcNMjUxMjI2MDQwMjA1WjAzMTEwLwYDVQQD EygyODg2NGMzOTQ1ZmJmNWM3Yjk2M2E0NmQyODFjMWIxMDMyMGMxZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCKk/NCtoOEhSB6qSkjn8RNMeuba 2EVGMMQlshXT6re949AlKsuOyHrfy3WXPyovSFK7TrngvxQZAR4jB2lqOJ4J4/N/ YpeLrd4CazAxvknWi7RJcYdUCo1ezK+hd3cyJRsbdYd/eYS4ea8hPGyYFPekVtxs FNzs1nskbZiQruamg54wp/RWuynpCtvNDH+Rd3Kl747eqLg/Une8HRr8vt1dLjMO 5Bgjn5RJfLC+6B1wdKTkwuWsyEXIQaHGpJx1gOr+egwVeor5J0+mggqhfGqngnQ5 bJyK1EL0rpgc2yCWdCxKx7K9Msgpp5UuEotnP0Rd7rQutG2rcU8de81TJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiGTDlF+/XHuWOkbSgcGxAyDB6uMB8GA1UdIwQY MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt YTgyZjY1OGEyYWExLzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcNtfGEa AOrtK03cYpoU+fn1b99eJgcODSa7qIBevZqgZNCI8ZD8IxzffOpBhZ5TIC/3aZMG ZiVOqbtoOKRK2O82JNvJJW4LUg9l00J1gRQy1+HKMnjNJZRFFPHzh/SOyOWCJre+ evqzfunlmsTxBSJEUsg8pr8WDAF6u4my96sbwj6b5hMcfdupEX7TKcCOxCq1osJ5 +Of4H9VJbjLek3geme8FgYFpmBRT+p+KB8YG8MxvpRMlcFXh5TSKGzJqkaomzdma GnTplhc0oH7jgOJs2BFYQmm24u4KeXVu2gTgBvtG9Bx6fz8/brpwo73+Fb95qvdt H6/cBDfalfbr2w== -----END CERTIFICATE-----Generated at Thu Dec 25 07:13:23 2025 by rpki-client