This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json) Hash identifier: WDBy3OQaikCEqAviZdbY2JEEiWgWjVPn7YnyPatMNi8= Subject key identifier: A4:45:76:C4:E2:66:78:3E:A5:39:C2:A7:57:E7:28:B4:E3:43:AC:FC Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Certificate serial: 019B34FBC767FFD373BF841250F0B8C95887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft Manifest number: 0AED Signing time: Fri 19 Dec 2025 05:01:14 +0000 Manifest this update: Fri 19 Dec 2025 05:01:14 +0000 Manifest next update: Sat 20 Dec 2025 05:01:14 +0000 Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=) 2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: PrvOGVi48zgbRR0+T+ANwkPGAnuTBoODkQOQaT3dxlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:c7:67:ff:d3:73:bf:84:12:50:f0:b8:c9:58:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Validity Not Before: Dec 19 05:01:14 2025 GMT Not After : Dec 20 05:01:14 2025 GMT Subject: CN=a44576c4e266783ea539c2a757e728b4e343acfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:93:4d:33:bb:58:e1:fc:89:8f:23:18:d7: e7:20:3c:ae:5c:44:f3:27:f6:0c:57:9d:bf:a9:0c: 6f:4d:6a:50:c1:bc:f4:54:2f:64:d3:fe:b9:39:8f: 15:86:05:e4:d0:c2:83:49:ce:3f:fb:c3:46:65:c3: 59:22:c5:43:05:88:cf:2b:26:88:4a:f3:f3:e0:03: 73:99:75:45:da:eb:13:e3:f4:b6:38:63:1c:b3:95: e8:b3:71:f4:be:59:80:e7:44:5d:7c:31:7d:3a:4d: 61:93:a9:40:19:0f:ad:a6:a4:e2:01:84:33:fd:d9: 88:f3:13:dd:e2:af:87:64:4d:09:9a:a5:e0:56:ad: b3:28:02:3f:e1:ed:c6:52:b5:57:21:2a:46:eb:70: fd:8c:0d:93:85:f9:16:9c:d3:11:12:6c:f6:c2:98: b8:1e:5d:02:4c:11:1d:84:00:79:10:0f:e2:75:ab: 3a:b7:23:8a:ba:72:5d:45:58:f4:be:53:bb:4a:fc: 6e:e9:d6:36:01:6d:4a:be:e6:54:33:8e:6a:1f:87: ad:47:1c:ec:0b:8b:b4:50:ac:58:d0:18:29:33:68: 97:0b:fd:cf:9e:f9:77:cb:35:73:a9:b1:a2:3d:6c: 19:e6:eb:b6:d1:63:4d:23:26:d9:ed:b3:b8:cc:ad: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:45:76:C4:E2:66:78:3E:A5:39:C2:A7:57:E7:28:B4:E3:43:AC:FC X509v3 Authority Key Identifier: keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8b:4c:19:de:9e:dc:ce:12:e7:02:32:12:6b:38:01:81:be: 3d:61:b0:c7:e7:c4:29:2c:56:96:36:c9:a8:d9:f9:7e:26:e0: a4:cc:08:d1:27:8c:3e:77:dd:c8:f6:89:84:7b:f3:9b:5b:b9: 1e:2c:b3:bd:f6:01:8e:b3:c3:9b:8c:f1:3c:80:f5:a9:23:e6: 59:cf:68:79:33:c9:76:33:27:af:e1:4c:c2:6c:c9:76:96:de: 59:f6:8d:8c:56:71:62:e9:35:f6:91:45:cb:d9:0e:02:ec:bb: 6a:3b:0f:15:15:d8:56:c8:f7:b6:de:b1:4b:cf:43:c5:b9:0a: 97:f3:21:3f:33:79:58:62:71:e0:58:33:ac:8f:bb:b0:6d:7b: da:73:38:f5:13:35:e0:21:45:2e:2a:de:98:ba:aa:02:7e:5d: 25:f1:2c:10:99:4b:0d:ef:a2:47:57:3f:b0:24:e5:a6:19:62: c1:3a:c8:d7:f7:06:24:03:a6:b8:7c:a7:04:89:b9:6c:70:2d: ac:14:04:72:11:d0:35:0a:7b:97:e1:8c:79:92:08:70:37:9b: 14:3a:e0:58:4d:4f:87:07:21:3d:e3:65:e5:03:ca:75:72:61: b7:d6:f4:96:e5:81:4a:d7:a6:67:54:2b:0c:45:c1:6e:c0:06: 35:ea:ca:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+8dn/9Nzv4QSUPC4yViHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj ZDkyYWUwHhcNMjUxMjE5MDUwMTE0WhcNMjUxMjIwMDUwMTE0WjAzMTEwLwYDVQQD EyhhNDQ1NzZjNGUyNjY3ODNlYTUzOWMyYTc1N2U3MjhiNGUzNDNhY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxaTTTO7WOH8iY8jGNfnIDyuXETz J/YMV52/qQxvTWpQwbz0VC9k0/65OY8VhgXk0MKDSc4/+8NGZcNZIsVDBYjPKyaI SvPz4ANzmXVF2usT4/S2OGMcs5Xos3H0vlmA50RdfDF9Ok1hk6lAGQ+tpqTiAYQz /dmI8xPd4q+HZE0JmqXgVq2zKAI/4e3GUrVXISpG63D9jA2ThfkWnNMREmz2wpi4 Hl0CTBEdhAB5EA/idas6tyOKunJdRVj0vlO7Svxu6dY2AW1KvuZUM45qH4etRxzs C4u0UKxY0BgpM2iXC/3Pnvl3yzVzqbGiPWwZ5uu20WNNIybZ7bO4zK1d7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRFdsTiZng+pTnCp1fnKLTjQ6z8MB8GA1UdIwQY MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2 LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKItMGd6e 3M4S5wIyEms4AYG+PWGwx+fEKSxWljbJqNn5fibgpMwI0SeMPnfdyPaJhHvzm1u5 HiyzvfYBjrPDm4zxPID1qSPmWc9oeTPJdjMnr+FMwmzJdpbeWfaNjFZxYuk19pFF y9kOAuy7ajsPFRXYVsj3tt6xS89DxbkKl/MhPzN5WGJx4FgzrI+7sG172nM49RM1 4CFFLiremLqqAn5dJfEsEJlLDe+iR1c/sCTlphliwTrI1/cGJAOmuHynBIm5bHAt rBQEchHQNQp7l+GMeZIIcDebFDrgWE1PhwchPeNl5QPKdXJht9b0luWBStemZ1Qr DEXBbsAGNerKuA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:21:24 2025 by rpki-client