This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json) Hash identifier: JZ2g35Y8eFtwOVlf45sYQghZlQ/kn4xtmI3oUuRn34M= Subject key identifier: A2:8B:59:B0:0C:BD:C6:E8:6A:6D:5E:1C:ED:F0:35:5E:E5:EF:5C:83 Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Certificate serial: 019B3B6B66E4279DC0B792263D5122B4FCF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft Manifest number: 015A Signing time: Sat 20 Dec 2025 11:00:52 +0000 Manifest this update: Sat 20 Dec 2025 11:00:52 +0000 Manifest next update: Sun 21 Dec 2025 11:00:52 +0000 Files and hashes: 1: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (hash: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=) 2: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: SQ0dKSa31cLhZyveY6LbQM2F/Vd7Vm2ZJpclRHzz5oQ=) 3: RpIHAkjNePBkljRPnB1JIyBSnvw.roa (hash: qyk9tqBXRznFnx7BG2DU1S+w/7N7AXbDrx47mo90s+Y=) 4: TnQBnRgF1Fd44NNajn0aU2c4k-U.roa (hash: bygzgFDHIVUQArLZudG2dlgz5CAq7YfyRAQZ0W8ymG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:66:e4:27:9d:c0:b7:92:26:3d:51:22:b4:fc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Validity Not Before: Dec 20 11:00:52 2025 GMT Not After : Dec 21 11:00:52 2025 GMT Subject: CN=a28b59b00cbdc6e86a6d5e1cedf0355ee5ef5c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:e0:1a:69:57:a8:75:1f:0a:82:bf:8a:3b: 12:15:46:47:9f:31:73:b1:20:94:fa:81:05:50:18: 29:24:d1:af:50:f1:5b:b1:2a:e8:5a:e5:bf:6d:13: 38:e5:52:ce:fd:85:ce:73:84:be:6e:02:7d:5f:3b: b4:c3:08:70:84:ec:5b:d8:9c:68:90:8b:21:4d:23: 93:f1:ee:1a:88:32:71:10:a1:10:34:43:3b:aa:7d: 02:db:49:63:75:98:1e:39:6d:cb:f7:71:fd:6f:ee: 63:e5:50:ab:2e:70:9d:52:94:eb:67:97:1b:a2:e5: 50:34:76:bd:3f:be:15:4c:b9:0d:1e:2a:f7:58:2b: 89:d2:f6:2b:c6:18:c7:8b:41:9a:b8:35:7b:0c:f0: 16:9a:f9:2c:f7:ca:32:f6:73:db:9f:4b:0a:dc:5c: 9b:7b:ea:35:a4:a4:a8:99:94:be:b5:4e:02:ed:40: 33:72:7e:96:63:f0:a9:01:d3:36:c6:b0:09:cd:e1: 90:d3:ae:69:6a:b1:8c:e3:5a:a8:b4:b3:0c:15:b9: a4:c4:24:37:b3:82:07:fa:08:2e:9e:be:9a:1f:07: e5:0e:45:a2:bc:6d:37:d6:76:71:01:52:3a:1e:d7: 10:de:7d:25:af:8b:a6:49:53:85:07:fb:c0:3d:e7: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:59:B0:0C:BD:C6:E8:6A:6D:5E:1C:ED:F0:35:5E:E5:EF:5C:83 X509v3 Authority Key Identifier: keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:fd:fd:ba:30:ab:fe:53:d0:69:61:f5:c6:3e:c6:60:4c: 83:56:12:bf:ac:7a:c4:e2:b3:0d:11:e0:99:d5:a4:f4:95:db: f9:c4:40:6e:f4:6b:06:be:b3:74:88:e6:69:06:06:cb:ab:d2: 57:c6:f9:c0:ff:ab:3d:75:2d:d8:f6:48:00:67:dc:61:6b:7f: 41:0d:c4:55:8c:85:f4:09:cb:22:8b:f5:31:59:a3:9f:89:51: d4:21:e7:34:3a:5e:1a:6b:7e:bc:e1:31:92:e4:18:0d:12:3d: 13:d4:a1:62:b4:b5:47:c0:9c:ad:59:26:bd:d2:c6:78:24:71: 0b:c6:25:2d:24:9e:95:65:b4:05:3a:ca:fc:61:29:ab:f3:e6: 57:8e:b3:30:61:8a:41:19:ba:77:73:50:be:48:57:41:e8:7a: 33:8f:c6:53:8f:f0:ae:86:dd:c0:ff:ad:11:33:02:85:ea:06: 79:4f:4b:29:b7:37:e2:9d:f4:09:1a:9d:9a:ae:c9:f0:92:f4: 5c:1a:c2:ce:cf:36:1e:cc:95:e5:91:0e:18:ec:1c:f0:61:d6: e3:4e:57:74:8c:cd:1d:c4:8f:50:65:3a:09:40:69:1f:de:7b: 80:18:92:d8:c6:c2:c8:19:53:b5:c6:fb:73:38:5f:54:4c:48: 09:4e:af:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2bkJ53At5ImPVEitPz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2Q1YWRiMWQwNjQzNjliN2U0MWJhZWJkYjBlOGUxMzVk NjU3NjMwHhcNMjUxMjIwMTEwMDUyWhcNMjUxMjIxMTEwMDUyWjAzMTEwLwYDVQQD EyhhMjhiNTliMDBjYmRjNmU4NmE2ZDVlMWNlZGYwMzU1ZWU1ZWY1YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NPgGmlXqHUfCoK/ijsSFUZHnzFz sSCU+oEFUBgpJNGvUPFbsSroWuW/bRM45VLO/YXOc4S+bgJ9Xzu0wwhwhOxb2Jxo kIshTSOT8e4aiDJxEKEQNEM7qn0C20ljdZgeOW3L93H9b+5j5VCrLnCdUpTrZ5cb ouVQNHa9P74VTLkNHir3WCuJ0vYrxhjHi0GauDV7DPAWmvks98oy9nPbn0sK3Fyb e+o1pKSomZS+tU4C7UAzcn6WY/CpAdM2xrAJzeGQ065parGM41qotLMMFbmkxCQ3 s4IH+ggunr6aHwflDkWivG031nZxAVI6HtcQ3n0lr4umSVOFB/vAPeewxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKLWbAMvcboam1eHO3wNV7l71yDMB8GA1UdIwQY MBaAFC49WtsdBkNpt+Qbrr2w6OE11ldjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMt YmViZjQyZmJlODQ2LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMtYmViZjQyZmJlODQ2 LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV79/bow q/5T0Glh9cY+xmBMg1YSv6x6xOKzDRHgmdWk9JXb+cRAbvRrBr6zdIjmaQYGy6vS V8b5wP+rPXUt2PZIAGfcYWt/QQ3EVYyF9AnLIov1MVmjn4lR1CHnNDpeGmt+vOEx kuQYDRI9E9ShYrS1R8CcrVkmvdLGeCRxC8YlLSSelWW0BTrK/GEpq/PmV46zMGGK QRm6d3NQvkhXQeh6M4/GU4/wrobdwP+tETMCheoGeU9LKbc34p30CRqdmq7J8JL0 XBrCzs82HsyV5ZEOGOwc8GHW405XdIzNHcSPUGU6CUBpH957gBiS2MbCyBlTtcb7 czhfVExICU6vMA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:27 2025 by rpki-client