This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json) Hash identifier: bD4yHgZiWuqybHLIk1COcf/3XPvQlRo25ckjNboF4yQ= Subject key identifier: 8B:21:3C:CD:4F:BB:7C:F3:15:E9:C3:10:2F:A9:29:E4:14:E9:AB:E0 Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e Certificate serial: 019B4BF226514340569DB89CC34F8D9E29B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft Manifest number: 103E Signing time: Tue 23 Dec 2025 16:01:59 +0000 Manifest this update: Tue 23 Dec 2025 16:01:59 +0000 Manifest next update: Wed 24 Dec 2025 16:01:59 +0000 Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=) 2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: A4ymHZzo0XXKraxrwHmaMOJItM/2mqBjMhIu1hZGLvA=) 3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:26:51:43:40:56:9d:b8:9c:c3:4f:8d:9e:29:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e Validity Not Before: Dec 23 16:01:59 2025 GMT Not After : Dec 24 16:01:59 2025 GMT Subject: CN=8b213ccd4fbb7cf315e9c3102fa929e414e9abe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:e8:d9:ed:43:1f:3f:44:03:3d:15:46:01: a2:51:10:32:b2:ac:c6:43:ea:81:31:c5:dc:5a:09: 28:65:3d:13:c5:4c:7a:a1:b7:b9:d9:35:2b:81:49: 19:c8:86:51:dc:d7:9e:92:3b:ac:e6:65:cd:59:bb: e3:a1:ee:f6:42:ea:14:75:40:56:d1:1d:97:b5:a5: 53:11:fc:98:87:cc:82:8a:9f:b9:c1:99:ec:3c:91: 9a:c1:05:00:74:c1:c9:99:0a:6c:8a:e4:a0:df:47: 52:36:3e:db:82:ea:64:b0:1d:44:77:e8:5e:7f:b5: 2f:6f:4f:68:00:ae:69:3b:50:f8:f8:e1:95:af:10: 8b:7e:89:b7:60:fd:be:c1:3c:7f:4e:0d:ff:ba:02: 3e:e4:37:d6:6d:d1:65:d3:21:ce:fa:8a:34:9b:6a: 32:9e:07:8f:ce:73:e3:b3:29:19:fd:f5:e6:ec:49: 74:2c:2f:cf:9f:24:cc:94:26:7c:28:41:91:a0:8d: ee:40:8a:3e:c6:87:26:f8:89:f9:cd:e0:e6:b3:4d: 25:f4:05:d1:c9:60:e2:03:d9:39:c4:9a:60:94:18: 1f:6d:02:67:9d:fa:1b:09:41:5e:b8:20:47:39:9b: 43:84:e0:53:82:b5:4d:ff:7b:27:c3:a8:3d:20:b9: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:21:3C:CD:4F:BB:7C:F3:15:E9:C3:10:2F:A9:29:E4:14:E9:AB:E0 X509v3 Authority Key Identifier: keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:51:de:fa:9c:11:9b:ab:75:3a:fb:46:f5:6e:cd:98:1d:56: e2:18:92:a8:08:ca:97:d2:13:54:21:e4:c9:f2:f3:b4:95:db: 53:99:6c:d4:b5:1f:27:49:cb:0e:c9:f4:33:58:68:d4:b9:45: 22:6f:51:02:95:a1:13:66:b7:64:24:ba:e8:7a:2f:cc:82:56: e2:a6:4f:5c:1c:66:f4:0d:df:72:27:f9:b4:b0:18:7b:c4:c0: 3e:87:ca:f0:e6:9e:16:55:80:4b:51:7a:03:a9:22:56:6c:22: 69:da:2e:92:6a:c2:08:ad:92:04:6d:23:49:88:7a:b6:69:81: 99:f5:56:94:57:06:41:4c:d0:99:b1:94:62:96:96:51:fd:63: 46:16:28:83:83:f8:fb:ac:84:29:f9:c1:cf:d9:f9:9e:48:ac: bf:fc:7d:62:70:1b:62:1d:1d:45:92:ac:87:a4:78:e8:41:ef: 48:67:14:c8:34:af:af:56:a9:51:97:20:4c:83:6c:e8:3e:7b: ab:47:b2:e4:37:db:a9:b3:63:ad:6e:99:7d:09:e6:7b:69:83: 5c:a8:b9:3a:dd:87:0a:e1:e6:6a:39:65:c4:94:5f:2a:66:5b: a0:fa:3f:c9:d0:73:45:1c:c2:20:4a:06:85:74:05:08:20:05: c5:7c:52:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8iZRQ0BWnbicw0+NnimzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx YWM0N2UwHhcNMjUxMjIzMTYwMTU5WhcNMjUxMjI0MTYwMTU5WjAzMTEwLwYDVQQD Eyg4YjIxM2NjZDRmYmI3Y2YzMTVlOWMzMTAyZmE5MjllNDE0ZTlhYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwbo2e1DHz9EAz0VRgGiURAysqzG Q+qBMcXcWgkoZT0TxUx6obe52TUrgUkZyIZR3Neekjus5mXNWbvjoe72QuoUdUBW 0R2XtaVTEfyYh8yCip+5wZnsPJGawQUAdMHJmQpsiuSg30dSNj7bgupksB1Ed+he f7Uvb09oAK5pO1D4+OGVrxCLfom3YP2+wTx/Tg3/ugI+5DfWbdFl0yHO+oo0m2oy ngePznPjsykZ/fXm7El0LC/PnyTMlCZ8KEGRoI3uQIo+xocm+In5zeDms00l9AXR yWDiA9k5xJpglBgfbQJnnfobCUFeuCBHOZtDhOBTgrVN/3snw6g9ILn2ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIshPM1Pu3zzFenDEC+pKeQU6avgMB8GA1UdIwQY MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlHe+pwR m6t1OvtG9W7NmB1W4hiSqAjKl9ITVCHkyfLztJXbU5ls1LUfJ0nLDsn0M1ho1LlF Im9RApWhE2a3ZCS66HovzIJW4qZPXBxm9A3fcif5tLAYe8TAPofK8OaeFlWAS1F6 A6kiVmwiadoukmrCCK2SBG0jSYh6tmmBmfVWlFcGQUzQmbGUYpaWUf1jRhYog4P4 +6yEKfnBz9n5nkisv/x9YnAbYh0dRZKsh6R46EHvSGcUyDSvr1apUZcgTINs6D57 q0ey5DfbqbNjrW6ZfQnme2mDXKi5Ot2HCuHmajllxJRfKmZboPo/ydBzRRzCIEoG hXQFCCAFxXxStA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:52:37 2025 by rpki-client