This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft File: rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json) Hash identifier: sbAdZ4OphA90F/VFjjorbViZMApnXxUjCYMMNosOgZs= Subject key identifier: 46:7A:E1:14:15:76:FC:A4:79:15:45:E9:CA:50:76:9E:6E:BE:E5:CE Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92 Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492 Certificate serial: 019B3FB5D1967D0385E24C5A74039741A022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 07:00:38 +0000 Manifest this update: Sun 21 Dec 2025 07:00:38 +0000 Manifest next update: Mon 22 Dec 2025 07:00:38 +0000 Files and hashes: 1: JhWEH1-OplFyfRpnGPaAH68zRx4.roa (hash: 58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=) 2: Kalap6T2m16JSwDjwLxjNXHdNyY.roa (hash: JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=) 3: PUwPc09p8c8_Sn1YM_ZYypexbaI.roa (hash: OH20qakQRBJhyXsGRRFFaEvlTNopBkE9EYzgH/uJXtA=) 4: Qa2_2S_PkTHxTJ-vKPqlybewfm4.roa (hash: drfKDlHg11rvWBFBJCgdefYg02WWSePfByGXqjFYb5E=) 5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: YxyZLK9qDdlbEQDy1YXzT1+DJbmJULnn7cLsMJBkup0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:d1:96:7d:03:85:e2:4c:5a:74:03:97:41:a0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492 Validity Not Before: Dec 21 07:00:38 2025 GMT Not After : Dec 22 07:00:38 2025 GMT Subject: CN=467ae1141576fca4791545e9ca50769e6ebee5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:83:dc:71:f9:19:db:6f:2e:66:02:fd:91: 9b:ac:53:24:f0:95:3d:69:09:76:55:ad:5a:d4:c7: 50:20:96:43:9f:d8:3a:7d:aa:03:ac:22:c5:3c:5b: 9a:3b:42:47:b0:fe:d5:32:3d:69:a8:ef:1b:e9:78: a6:a6:b9:2f:f5:f9:48:b9:f4:4f:d1:7c:dd:6f:43: 83:03:b1:5b:71:79:c2:fb:7c:eb:3a:9b:33:29:49: 8c:e3:35:42:dc:16:4f:87:4e:bf:cd:28:bd:51:00: 87:db:70:c7:dc:c8:f1:ad:b4:c2:61:86:80:35:a8: af:e7:d0:f9:14:7e:8f:ba:81:33:5a:b7:5f:ac:7c: c5:87:84:22:76:24:94:c7:14:f7:03:5b:2e:e0:37: 62:d0:c0:08:7e:16:97:e9:31:b2:bf:37:5f:6f:cb: 9d:69:11:57:57:f1:9d:8c:66:4c:e7:72:ba:e5:61: c0:d8:d9:30:c6:6a:ab:69:6a:15:22:32:ef:09:ec: 1b:bc:c6:fd:72:42:cd:f1:8d:d2:b5:31:54:7d:b2: 41:7f:ad:74:37:d5:ee:e3:15:81:a2:c3:af:05:7a: c0:e3:f2:ac:53:1b:14:ee:e7:a8:83:71:b4:09:ac: 9c:25:6b:5d:d1:af:fc:ca:bc:d6:28:c1:38:4c:cf: 3a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7A:E1:14:15:76:FC:A4:79:15:45:E9:CA:50:76:9E:6E:BE:E5:CE X509v3 Authority Key Identifier: keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6a:af:db:f6:71:77:42:fb:e9:04:28:41:6d:fe:31:cb:ca: 73:34:94:8c:83:d6:3f:c9:9c:76:0a:f8:21:df:d1:7b:3f:52: 18:dd:24:7d:7d:48:a6:e2:2f:42:b8:0a:0c:11:71:86:06:cb: ea:07:e6:e8:42:f8:aa:b0:37:5a:71:98:22:a9:60:a3:1a:d5: 47:87:fb:db:c5:b9:43:28:e7:fd:6a:ba:06:a3:b5:b6:7f:98: d2:bb:72:72:7b:b7:ab:c6:60:d0:fe:a9:d9:41:0b:d2:09:54: 95:e3:7e:de:38:c0:f4:9c:12:2d:27:fe:af:e6:31:9c:eb:ad: c4:16:d0:43:6d:6a:e3:f0:44:15:66:d4:9b:60:a6:2e:35:0a: c8:59:49:0b:b8:b7:fc:60:d6:17:c8:61:99:07:33:70:4e:d2: 23:d7:97:e3:98:93:8f:48:b3:ec:6c:d3:dc:4d:fa:58:6f:32: 2a:7c:67:d6:b8:40:c8:7c:eb:72:01:f3:b5:69:31:47:a9:82: 91:bb:b9:89:56:2c:14:ea:2c:7b:cb:c7:c6:a4:8a:0c:76:77: c7:bd:4d:99:6a:8d:9e:90:83:15:c2:52:aa:31:3d:44:e1:61: 86:c2:26:78:50:ef:cb:fb:97:1b:04:80:77:be:08:9c:e2:d5: 10:1f:9b:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdGWfQOF4kxadAOXQaAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjU0YmNjNDkyOTFhMWYzMmI3Y2VhZDRmMjk2ODgyZDA1 MzE0OTIwHhcNMjUxMjIxMDcwMDM4WhcNMjUxMjIyMDcwMDM4WjAzMTEwLwYDVQQD Eyg0NjdhZTExNDE1NzZmY2E0NzkxNTQ1ZTljYTUwNzY5ZTZlYmVlNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa6D3HH5GdtvLmYC/ZGbrFMk8JU9 aQl2Va1a1MdQIJZDn9g6faoDrCLFPFuaO0JHsP7VMj1pqO8b6Ximprkv9flIufRP 0Xzdb0ODA7FbcXnC+3zrOpszKUmM4zVC3BZPh06/zSi9UQCH23DH3MjxrbTCYYaA Naiv59D5FH6PuoEzWrdfrHzFh4QidiSUxxT3A1su4Ddi0MAIfhaX6TGyvzdfb8ud aRFXV/GdjGZM53K65WHA2NkwxmqraWoVIjLvCewbvMb9ckLN8Y3StTFUfbJBf610 N9Xu4xWBosOvBXrA4/KsUxsU7ueog3G0CaycJWtd0a/8yrzWKME4TM86qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ64RQVdvykeRVF6cpQdp5uvuXOMB8GA1UdIwQY MBaAFKy1S8xJKRofMrfOrU8paILQUxSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYt YWYzYTY4NWQ1NzlmLzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYtYWYzYTY4NWQ1Nzlm LzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWqv2/Zx d0L76QQoQW3+McvKczSUjIPWP8mcdgr4Id/Rez9SGN0kfX1IpuIvQrgKDBFxhgbL 6gfm6EL4qrA3WnGYIqlgoxrVR4f728W5Qyjn/Wq6BqO1tn+Y0rtycnu3q8Zg0P6p 2UEL0glUleN+3jjA9JwSLSf+r+YxnOutxBbQQ21q4/BEFWbUm2CmLjUKyFlJC7i3 /GDWF8hhmQczcE7SI9eX45iTj0iz7GzT3E36WG8yKnxn1rhAyHzrcgHztWkxR6mC kbu5iVYsFOose8vHxqSKDHZ3x71NmWqNnpCDFcJSqjE9ROFhhsImeFDvy/uXGwSA d74InOLVEB+bNg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:57:28 2025 by rpki-client