This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json) Hash identifier: U+QhVBcDKaC8soMokP8v2u+LGfb7oE9W4LkoXX1Yn+0= Subject key identifier: 2A:25:EB:5B:A5:FC:F7:2A:4A:F7:FF:30:84:86:3E:11:78:B6:CB:07 Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98 Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98 Certificate serial: 019B6A699A86E677D26EBAE27E3364CE71F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft Manifest number: 0C0C Signing time: Mon 29 Dec 2025 14:01:04 +0000 Manifest this update: Mon 29 Dec 2025 14:01:04 +0000 Manifest next update: Tue 30 Dec 2025 14:01:04 +0000 Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=) 2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: w7dlhii95QeqZj6m2xDzKKaxU7SsPLfxI4CGDedKqhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:9a:86:e6:77:d2:6e:ba:e2:7e:33:64:ce:71:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98 Validity Not Before: Dec 29 14:01:04 2025 GMT Not After : Dec 30 14:01:04 2025 GMT Subject: CN=2a25eb5ba5fcf72a4af7ff3084863e1178b6cb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:3c:32:1e:a4:aa:67:c4:c4:b1:00:eb:16: 7a:b2:67:2e:1e:bf:73:29:0b:03:b4:76:0d:d8:4f: 4a:ca:d0:2f:e0:d1:b7:f8:3d:90:07:df:f0:56:b6: 65:09:fc:5b:13:9d:64:57:0e:a1:72:e6:9b:20:24: 71:f5:f3:5a:5a:03:d0:71:33:a9:c9:05:ab:99:0c: be:6a:22:c9:e1:8a:11:41:54:8b:86:a8:a6:30:96: 20:3b:30:84:d8:0c:e8:9e:95:8a:a8:77:32:a3:03: 3d:15:ab:08:9a:5b:e2:c0:92:1a:67:f1:e7:1a:64: 9a:c3:7c:fc:f3:83:5b:03:07:4c:cc:22:ae:5c:cc: e1:a4:84:38:ff:34:83:d7:48:90:8c:ac:5e:78:7f: 60:8b:27:e8:1e:b7:16:f2:6c:f6:34:50:5a:92:e9: 74:9d:3d:58:0d:0b:d1:3d:1f:ff:7b:a5:59:7b:5a: 4b:24:52:80:2c:65:c9:6b:94:d4:f6:b0:66:e2:f7: ce:22:cf:ac:5b:d3:a8:e2:62:e5:41:bb:f6:72:83: e5:ae:4c:f7:1a:0a:f2:59:d8:0a:c9:bd:33:ce:d0: cf:2f:04:f9:86:0b:ff:b2:02:7b:a7:39:2a:51:20: 80:ac:d9:79:77:e6:03:97:72:82:bf:b6:f6:61:60: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:25:EB:5B:A5:FC:F7:2A:4A:F7:FF:30:84:86:3E:11:78:B6:CB:07 X509v3 Authority Key Identifier: keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:50:c4:88:ef:04:b9:5b:94:a2:ae:28:4c:5f:57:78:df:95: 05:a2:61:0c:a4:53:51:1a:cf:60:d2:55:18:10:08:79:39:1f: 92:f2:9f:73:da:21:da:b3:09:4a:49:a8:61:8e:a9:8b:94:5f: a9:07:e5:3c:e7:68:77:05:02:88:40:81:80:a3:ea:b3:a8:31: 19:ea:9f:f2:6e:32:51:54:24:54:40:51:56:13:79:64:aa:99: 83:07:f9:38:9a:6a:f6:7c:e3:7d:9e:3a:d3:77:1e:5e:d0:d4: 8c:d2:b0:67:37:5c:db:12:e8:b1:51:a5:24:f9:fa:ef:64:55: 1e:31:d5:e9:27:08:15:8c:fc:4f:86:86:eb:f3:61:55:85:04: 53:35:56:a0:1b:75:27:7c:35:22:2d:3a:d1:ac:29:e5:8b:39: a0:ce:c0:d5:3d:54:24:aa:21:98:b8:c1:c3:90:d2:5d:3b:60: a9:25:5a:97:2d:69:5b:41:ef:65:f8:dd:7c:7f:8c:82:29:82: 0b:3b:d2:62:4e:fa:3c:2a:a1:b0:ae:fd:f2:e3:c5:f7:01:ba: 33:6e:27:b3:45:6c:a3:80:f4:3c:a8:cc:16:63:82:40:b8:28: 4b:8b:90:53:b4:1b:09:78:9b:bf:5c:ac:f4:4d:fe:c5:95:64: 74:d9:65:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaZqG5nfSbrrifjNkznH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzU2YzVlYTU0NzhmNGQzN2IzMGYzNjgyZTQzYjdlMmVm OTBkOTgwHhcNMjUxMjI5MTQwMTA0WhcNMjUxMjMwMTQwMTA0WjAzMTEwLwYDVQQD EygyYTI1ZWI1YmE1ZmNmNzJhNGFmN2ZmMzA4NDg2M2UxMTc4YjZjYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Og8Mh6kqmfExLEA6xZ6smcuHr9z KQsDtHYN2E9KytAv4NG3+D2QB9/wVrZlCfxbE51kVw6hcuabICRx9fNaWgPQcTOp yQWrmQy+aiLJ4YoRQVSLhqimMJYgOzCE2AzonpWKqHcyowM9FasImlviwJIaZ/Hn GmSaw3z884NbAwdMzCKuXMzhpIQ4/zSD10iQjKxeeH9giyfoHrcW8mz2NFBakul0 nT1YDQvRPR//e6VZe1pLJFKALGXJa5TU9rBm4vfOIs+sW9Oo4mLlQbv2coPlrkz3 GgryWdgKyb0zztDPLwT5hgv/sgJ7pzkqUSCArNl5d+YDl3KCv7b2YWCjvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCol61ul/PcqSvf/MISGPhF4tssHMB8GA1UdIwQY MBaAFJbFbF6lR49NN7MPNoLkO34u+Q2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMt MzVjNzhlNzAxOTllLzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMtMzVjNzhlNzAxOTll LzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlDEiO8E uVuUoq4oTF9XeN+VBaJhDKRTURrPYNJVGBAIeTkfkvKfc9oh2rMJSkmoYY6pi5Rf qQflPOdodwUCiECBgKPqs6gxGeqf8m4yUVQkVEBRVhN5ZKqZgwf5OJpq9nzjfZ46 03ceXtDUjNKwZzdc2xLosVGlJPn672RVHjHV6ScIFYz8T4aG6/NhVYUEUzVWoBt1 J3w1Ii060awp5Ys5oM7A1T1UJKohmLjBw5DSXTtgqSValy1pW0HvZfjdfH+MgimC CzvSYk76PCqhsK798uPF9wG6M24ns0Vso4D0PKjMFmOCQLgoS4uQU7QbCXibv1ys 9E3+xZVkdNll+g== -----END CERTIFICATE-----Generated at Mon Dec 29 22:40:37 2025 by rpki-client