This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json) Hash identifier: xvSG0t+9zOngDyB/B47yA1fukp8UxO8IYXxJp+lWxN8= Subject key identifier: CB:F4:F2:85:D7:BE:57:E6:1E:7D:4E:BF:05:60:CC:37:C8:95:E9:40 Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73 Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773 Certificate serial: 019B3BD974997FD8748B4D4000F2A2847321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft Manifest number: 05CE Signing time: Sat 20 Dec 2025 13:01:05 +0000 Manifest this update: Sat 20 Dec 2025 13:01:05 +0000 Manifest next update: Sun 21 Dec 2025 13:01:05 +0000 Files and hashes: 1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=) 2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: 78KZzYGrcUMGG/1B+KkPB/CJ/Mx961jcKIxCXc7YLfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:74:99:7f:d8:74:8b:4d:40:00:f2:a2:84:73:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9514d5a840049d442df377445394df719201a773 Validity Not Before: Dec 20 13:01:05 2025 GMT Not After : Dec 21 13:01:05 2025 GMT Subject: CN=cbf4f285d7be57e61e7d4ebf0560cc37c895e940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:1f:db:8b:22:4d:39:2b:ca:63:e3:b5:47: 14:5b:e3:5f:58:6a:a2:c9:cd:21:e4:f7:78:7f:d4: 21:80:82:7a:61:26:ae:cf:c7:c0:a5:6d:d7:09:4a: 87:8e:38:1c:86:d2:4e:d4:d2:f4:ef:ff:cf:f4:9f: c9:18:aa:16:7c:d6:8d:90:10:79:92:18:44:7c:81: bb:ab:d6:d9:d2:a0:82:eb:99:9e:ba:21:ca:59:42: 58:ab:cf:b1:4c:e9:3f:08:b3:70:4f:1e:a3:ad:b4: 6f:fd:46:b4:ee:a1:5f:6e:d7:65:de:05:1e:45:c4: ea:87:e7:ba:26:9a:f5:fa:88:66:cc:4f:c8:4d:3a: 32:c5:90:6c:2f:81:c0:63:48:74:a6:12:cc:cd:27: d6:ae:e3:d2:d3:ce:82:02:81:b2:b6:d9:cb:4f:b8: 97:15:0d:29:dc:31:63:03:57:39:7b:7e:82:3f:24: 21:a1:cb:89:bd:3e:5b:42:d0:b0:80:90:d8:c4:6e: b5:94:1d:9d:23:f0:5b:67:a6:a4:c1:3c:d7:f3:63: a0:f1:74:60:69:6c:76:d7:cb:a9:1f:50:21:ed:11: a2:3e:91:58:8d:ea:3c:bc:b0:bd:8e:d9:ef:c7:0e: 4e:57:1d:aa:9a:18:22:7a:1f:c8:5f:da:ea:f6:5b: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:F2:85:D7:BE:57:E6:1E:7D:4E:BF:05:60:CC:37:C8:95:E9:40 X509v3 Authority Key Identifier: keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:08:32:79:68:1f:5f:e6:63:22:68:ea:46:ff:31:90:8b:83: b6:37:29:9a:39:86:ba:a1:6c:8c:85:08:13:68:09:09:63:64: 2b:73:f4:f0:71:31:ab:b8:9e:40:f5:4b:07:7b:20:ad:cb:65: 9e:17:4b:dc:bb:b6:54:7b:64:96:09:06:3a:13:58:9d:e7:9e: 89:0b:9b:8d:30:57:9c:7f:f6:fc:cd:3c:80:75:ae:57:e3:ab: ab:6c:31:15:a8:7b:13:c4:74:08:4d:cb:03:e6:89:ed:da:95: 1a:17:98:3b:71:83:50:76:a1:d2:30:76:ea:18:b0:87:30:63: 4f:f3:5b:9c:31:6d:63:bc:34:da:74:72:bc:53:63:8c:91:82: 24:67:5d:5e:d0:3a:27:7f:13:2d:92:3f:fa:d9:a7:3b:84:bf: 91:9f:4d:70:f7:37:af:7c:90:8c:29:86:38:d5:75:f8:5a:a9: 5e:a0:fd:28:9a:63:16:7b:bd:dd:3a:ed:c9:c4:89:2c:c1:88: 7c:e8:39:89:3a:13:90:31:32:43:19:a5:aa:d4:46:95:18:51: 9b:e6:1c:15:1b:02:a8:cf:98:b6:1e:39:6a:40:36:eb:20:82: 61:7f:fe:9d:c1:01:b7:1a:f8:71:e7:06:8b:50:6d:53:5c:d4: 41:f0:d7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XSZf9h0i01AAPKihHMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTRkNWE4NDAwNDlkNDQyZGYzNzc0NDUzOTRkZjcxOTIw MWE3NzMwHhcNMjUxMjIwMTMwMTA1WhcNMjUxMjIxMTMwMTA1WjAzMTEwLwYDVQQD EyhjYmY0ZjI4NWQ3YmU1N2U2MWU3ZDRlYmYwNTYwY2MzN2M4OTVlOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugMf24siTTkrymPjtUcUW+NfWGqi yc0h5Pd4f9QhgIJ6YSauz8fApW3XCUqHjjgchtJO1NL07//P9J/JGKoWfNaNkBB5 khhEfIG7q9bZ0qCC65meuiHKWUJYq8+xTOk/CLNwTx6jrbRv/Ua07qFfbtdl3gUe RcTqh+e6Jpr1+ohmzE/ITToyxZBsL4HAY0h0phLMzSfWruPS086CAoGyttnLT7iX FQ0p3DFjA1c5e36CPyQhocuJvT5bQtCwgJDYxG61lB2dI/BbZ6akwTzX82Og8XRg aWx218upH1Ah7RGiPpFYjeo8vLC9jtnvxw5OVx2qmhgieh/IX9rq9ltnVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv08oXXvlfmHn1OvwVgzDfIlelAMB8GA1UdIwQY MBaAFJUU1ahABJ1ELfN3RFOU33GSAadzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWUyNDItZTdkMy00OTFmLWJhNjUt NTdkMTU4NDNmN2YwLzEvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84MWUyNDItZTdkMy00OTFmLWJhNjUtNTdkMTU4NDNmN2Yw LzEvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcggyeWgf X+ZjImjqRv8xkIuDtjcpmjmGuqFsjIUIE2gJCWNkK3P08HExq7ieQPVLB3sgrctl nhdL3Lu2VHtklgkGOhNYneeeiQubjTBXnH/2/M08gHWuV+Orq2wxFah7E8R0CE3L A+aJ7dqVGheYO3GDUHah0jB26hiwhzBjT/NbnDFtY7w02nRyvFNjjJGCJGddXtA6 J38TLZI/+tmnO4S/kZ9NcPc3r3yQjCmGONV1+FqpXqD9KJpjFnu93TrtycSJLMGI fOg5iToTkDEyQxmlqtRGlRhRm+YcFRsCqM+Yth45akA26yCCYX/+ncEBtxr4cecG i1BtU1zUQfDXwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:46 2025 by rpki-client