This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json) Hash identifier: x6VZv3FeW3FJuH2CY4f+dJJuVeE9XAOvjxwHAZBN5ic= Subject key identifier: 93:4F:E0:03:CB:E9:66:38:C5:B0:1B:F9:D6:F2:59:9A:61:36:75:2D Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5 Certificate serial: 019B3BD99BB8164CADA0F9357A59BA5C34D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:01:15 +0000 Manifest this update: Sat 20 Dec 2025 13:01:15 +0000 Manifest next update: Sun 21 Dec 2025 13:01:15 +0000 Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: K2LjB6FQl17UVgslBIQx29btIeVZO4RcyaMoVIkBajY=) 2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:9b:b8:16:4c:ad:a0:f9:35:7a:59:ba:5c:34:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5 Validity Not Before: Dec 20 13:01:15 2025 GMT Not After : Dec 21 13:01:15 2025 GMT Subject: CN=934fe003cbe96638c5b01bf9d6f2599a6136752d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:4c:67:ea:85:2c:cf:c3:c2:12:88:04:28: 70:7d:11:9c:d0:12:26:6c:c9:af:1c:3a:08:b7:90: 69:fc:bc:3a:aa:e8:45:14:03:1e:30:a7:8f:85:09: 8c:1b:b7:4c:69:28:7b:a7:ad:78:e9:0f:95:01:a9: 94:ba:a8:85:b9:70:e3:97:09:73:da:29:d1:cf:b1: c3:21:96:7a:b6:a5:21:8a:b0:b3:fc:1d:5f:a1:ef: 8c:12:c2:55:ce:de:5c:d0:79:26:da:2c:3b:46:66: f1:e1:d4:47:50:81:de:5d:77:93:d2:f5:e9:59:b4: 98:d9:67:06:f6:33:6f:e6:19:cd:79:e7:13:e3:70: c5:65:9c:b4:b7:48:62:10:c4:a4:94:8e:63:2b:43: d0:fa:85:39:e0:63:d8:61:49:79:57:90:64:08:3c: af:51:2e:6c:f5:32:8b:00:af:7b:44:84:40:40:8a: d4:37:f3:e5:e7:91:cd:50:dd:1f:cd:6e:27:78:f2: 55:cf:c4:9e:3e:0f:66:d2:1e:ce:31:86:e0:01:98: 10:e9:18:9d:2f:22:d1:75:c0:c2:69:00:8c:a2:4f: d7:f6:72:a7:c5:70:fc:40:27:64:87:e5:8f:6b:3a: 87:6a:0b:40:62:cc:78:83:03:b3:b8:5b:0c:6e:52: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4F:E0:03:CB:E9:66:38:C5:B0:1B:F9:D6:F2:59:9A:61:36:75:2D X509v3 Authority Key Identifier: keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:59:a5:b8:b4:42:ab:df:a9:c5:0e:17:ac:b8:2d:74:ae:4d: aa:34:be:52:a0:a0:dd:70:8c:24:45:5d:d6:58:a4:4d:66:eb: c4:a1:ef:26:cb:40:fc:b1:db:12:0a:22:ba:e0:bf:0f:26:12: d7:95:67:ee:86:f0:77:bf:86:01:1f:3a:8c:7c:89:34:08:e7: 79:fc:f0:98:e3:23:07:30:1c:d6:1f:28:22:7a:d6:96:44:c4: c6:29:4b:4a:f2:44:5f:b8:3b:79:e3:20:bc:3c:68:ab:73:fd: 68:2e:ef:a9:24:de:8a:7b:51:14:97:9c:c3:ad:57:13:20:7f: 6b:60:43:ca:3e:17:29:b3:64:a7:a9:a9:ec:36:d7:ca:de:05: d4:21:27:78:ea:bc:0b:c5:89:c8:6b:19:8a:7b:68:ba:a4:ed: 38:22:fa:4a:8c:b5:c1:b9:da:c5:bd:14:fb:f7:0a:77:fa:a9: 80:e1:fb:3a:8d:27:ce:42:42:c7:33:45:56:d0:67:1f:eb:0a: c0:3f:4a:35:53:03:49:b2:6e:06:3c:87:4f:48:94:8a:fd:fe: 85:c0:81:14:31:80:c0:5e:dc:1c:52:5e:66:a5:a5:00:eb:b8: 99:16:54:7a:37:39:b2:78:37:77:0f:21:66:89:db:4d:9f:c6: 0d:c3:95:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Zu4FkytoPk1elm6XDTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz MTIzYjUwHhcNMjUxMjIwMTMwMTE1WhcNMjUxMjIxMTMwMTE1WjAzMTEwLwYDVQQD Eyg5MzRmZTAwM2NiZTk2NjM4YzViMDFiZjlkNmYyNTk5YTYxMzY3NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO1MZ+qFLM/DwhKIBChwfRGc0BIm bMmvHDoIt5Bp/Lw6quhFFAMeMKePhQmMG7dMaSh7p6146Q+VAamUuqiFuXDjlwlz 2inRz7HDIZZ6tqUhirCz/B1foe+MEsJVzt5c0Hkm2iw7Rmbx4dRHUIHeXXeT0vXp WbSY2WcG9jNv5hnNeecT43DFZZy0t0hiEMSklI5jK0PQ+oU54GPYYUl5V5BkCDyv US5s9TKLAK97RIRAQIrUN/Pl55HNUN0fzW4nePJVz8SePg9m0h7OMYbgAZgQ6Rid LyLRdcDCaQCMok/X9nKnxXD8QCdkh+WPazqHagtAYsx4gwOzuFsMblLfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNP4APL6WY4xbAb+dbyWZphNnUtMB8GA1UdIwQY MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFmluLRC q9+pxQ4XrLgtdK5NqjS+UqCg3XCMJEVd1likTWbrxKHvJstA/LHbEgoiuuC/DyYS 15Vn7obwd7+GAR86jHyJNAjnefzwmOMjBzAc1h8oInrWlkTExilLSvJEX7g7eeMg vDxoq3P9aC7vqSTeintRFJecw61XEyB/a2BDyj4XKbNkp6mp7DbXyt4F1CEneOq8 C8WJyGsZintouqTtOCL6Soy1wbnaxb0U+/cKd/qpgOH7Oo0nzkJCxzNFVtBnH+sK wD9KNVMDSbJuBjyHT0iUiv3+hcCBFDGAwF7cHFJeZqWlAOu4mRZUejc5sng3dw8h ZonbTZ/GDcOVJA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:15 2025 by rpki-client