This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json) Hash identifier: Qg/i5E8ihFPT+IlEoqySLamuOPqTwpninXbOkd23EcQ= Subject key identifier: EF:1A:AA:5F:98:C8:F8:9A:74:0A:96:D2:D5:5A:B7:53:11:D7:CA:C3 Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b Certificate serial: 019B52CEAC9F11B754E713F4BA204ED1BCE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft Manifest number: 04FE Signing time: Thu 25 Dec 2025 00:00:34 +0000 Manifest this update: Thu 25 Dec 2025 00:00:34 +0000 Manifest next update: Fri 26 Dec 2025 00:00:34 +0000 Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: ePnv1mY05eF/hSyCPrV19PRhh3z3efK4RXf6OEutKYs=) 2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:ac:9f:11:b7:54:e7:13:f4:ba:20:4e:d1:bc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b Validity Not Before: Dec 25 00:00:34 2025 GMT Not After : Dec 26 00:00:34 2025 GMT Subject: CN=ef1aaa5f98c8f89a740a96d2d55ab75311d7cac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:17:72:25:86:ed:d3:5e:4c:9f:72:fc:7c: 46:55:85:11:6f:3b:f4:34:27:3e:ce:cd:3f:2d:5c: 20:4e:a7:91:03:f6:32:d4:8f:74:db:d6:93:a0:65: de:22:87:62:f6:78:2b:35:82:85:e3:0f:e5:02:ea: b6:b5:7a:3f:66:e5:25:50:c2:82:17:9b:99:72:64: 96:69:10:34:6d:0c:af:d1:4c:81:df:e1:6e:81:06: 66:25:e8:45:3f:82:dd:52:7a:5d:01:8d:2f:3d:fd: 0c:84:ab:a5:0a:31:a9:cf:84:4e:f2:1b:9d:f9:8e: 22:30:44:40:66:93:b8:5e:b6:39:2d:29:e2:56:b5: aa:9c:6c:05:03:59:e6:d3:e0:07:01:e9:af:48:60: ce:6f:bf:ff:12:aa:d0:e8:6e:30:be:fb:f3:00:05: fd:e8:5a:cc:4c:ec:b6:47:53:fd:8b:92:30:60:db: 0e:fe:03:cf:e9:97:53:e9:c2:52:88:9c:ef:19:b9: 40:4e:e2:91:40:51:1e:97:12:02:0e:5c:2e:d2:80: fa:35:d6:87:3f:88:96:2f:2f:1b:16:53:0b:9a:83: fd:61:1a:52:0b:7d:4d:33:d0:a4:1a:ae:c3:b6:fa: b7:23:f2:dd:0a:50:89:5d:8a:4d:7c:4e:0b:e8:ee: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1A:AA:5F:98:C8:F8:9A:74:0A:96:D2:D5:5A:B7:53:11:D7:CA:C3 X509v3 Authority Key Identifier: keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ad:7f:69:88:be:3a:ec:c5:40:37:5c:8a:87:e1:15:1c:e0: b4:02:5c:9e:a9:a2:e3:8e:b8:bc:a3:54:2f:1a:22:be:78:c5: af:23:79:e3:c9:9c:95:cc:62:96:22:1c:5e:81:ac:f8:9d:c4: d4:8c:f3:9e:63:c7:26:3f:90:5b:e2:75:29:22:d6:54:02:b7: 3b:86:a1:bc:00:3c:b8:fa:af:f1:60:f5:60:66:75:0f:8d:08: 19:9e:a6:69:b6:64:01:87:e0:52:09:6a:f8:15:7e:12:0c:a0: f9:a6:25:95:7c:d3:b6:03:07:d8:85:a8:26:eb:79:35:a3:d9: 55:fb:86:f3:39:bf:3c:5b:ac:53:0b:12:0f:e9:60:f9:ee:55: a4:47:ca:32:8e:e4:8b:b3:0d:1d:65:da:aa:b8:f1:8b:d5:8d: 0c:40:d8:ec:2b:29:02:b7:20:68:e0:8c:8a:68:20:f8:8d:3a: 56:d9:75:dd:a2:01:7b:46:d1:35:b9:77:0e:b4:f7:8b:b0:54: e1:58:bb:5c:9f:a7:cb:47:2b:c8:9b:18:f4:10:c8:0c:12:e9: 7e:87:e6:b3:17:4d:8d:88:27:c7:62:51:45:13:40:16:5e:76: 8c:76:34:44:a0:d8:20:51:22:7c:c6:e8:94:f5:40:1e:8e:d4: 9c:b4:c5:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzqyfEbdU5xP0uiBO0bzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzBiNGY1MjIyYTQ2ODVjNTRjZDI1YzRjYjhkNmY5MzIz M2FjN2IwHhcNMjUxMjI1MDAwMDM0WhcNMjUxMjI2MDAwMDM0WjAzMTEwLwYDVQQD EyhlZjFhYWE1Zjk4YzhmODlhNzQwYTk2ZDJkNTVhYjc1MzExZDdjYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZoXciWG7dNeTJ9y/HxGVYURbzv0 NCc+zs0/LVwgTqeRA/Yy1I9029aToGXeIodi9ngrNYKF4w/lAuq2tXo/ZuUlUMKC F5uZcmSWaRA0bQyv0UyB3+FugQZmJehFP4LdUnpdAY0vPf0MhKulCjGpz4RO8hud +Y4iMERAZpO4XrY5LSniVrWqnGwFA1nm0+AHAemvSGDOb7//EqrQ6G4wvvvzAAX9 6FrMTOy2R1P9i5IwYNsO/gPP6ZdT6cJSiJzvGblATuKRQFEelxICDlwu0oD6NdaH P4iWLy8bFlMLmoP9YRpSC31NM9CkGq7Dtvq3I/LdClCJXYpNfE4L6O5ZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8aql+YyPiadAqW0tVat1MR18rDMB8GA1UdIwQY MBaAFC4wtPUiKkaFxUzSXEy41vkyM6x7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWIt ODYxNmEzMTBlODAzLzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWItODYxNmEzMTBlODAz LzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR61/aYi+ OuzFQDdciofhFRzgtAJcnqmi4464vKNULxoivnjFryN548mclcxiliIcXoGs+J3E 1IzznmPHJj+QW+J1KSLWVAK3O4ahvAA8uPqv8WD1YGZ1D40IGZ6mabZkAYfgUglq +BV+Egyg+aYllXzTtgMH2IWoJut5NaPZVfuG8zm/PFusUwsSD+lg+e5VpEfKMo7k i7MNHWXaqrjxi9WNDEDY7CspArcgaOCMimgg+I06Vtl13aIBe0bRNbl3DrT3i7BU 4Vi7XJ+ny0cryJsY9BDIDBLpfofmsxdNjYgnx2JRRRNAFl52jHY0RKDYIFEifMbo lPVAHo7UnLTFwQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:13:29 2025 by rpki-client