This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json) Hash identifier: D2srUZSp0NOyKb6n3LmY4TsTg+09iswj6L2CYrWlgw4= Subject key identifier: 9D:DC:C8:D4:B3:69:69:36:18:C0:9F:D2:B4:CC:DF:C4:92:1E:7B:AC Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c Certificate serial: 019B41369CBDF47C9DA3D4822CC8C8A54BB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 14:00:56 +0000 Manifest this update: Sun 21 Dec 2025 14:00:56 +0000 Manifest next update: Mon 22 Dec 2025 14:00:56 +0000 Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: 0hLM4sByYUxMdm4KuCZ5OO8e82Tkfsx0h2B2rYIs92g=) 2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:9c:bd:f4:7c:9d:a3:d4:82:2c:c8:c8:a5:4b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c Validity Not Before: Dec 21 14:00:56 2025 GMT Not After : Dec 22 14:00:56 2025 GMT Subject: CN=9ddcc8d4b369693618c09fd2b4ccdfc4921e7bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:4c:63:8d:3d:d7:aa:51:6f:1d:1f:b8:41: 7f:06:cb:4d:2f:90:b4:5a:79:97:7e:d1:f2:5c:c7: b5:99:6c:8a:5c:57:c5:10:03:19:ef:13:f0:b4:be: 0a:12:65:4e:12:f3:29:9c:72:a9:e7:80:90:d5:ce: 3e:45:25:28:ec:6c:d8:18:5a:28:fb:ec:90:bb:64: c2:67:5e:09:6f:00:ab:42:be:9c:02:b4:13:26:23: b0:de:85:72:2f:24:27:65:1e:d1:d2:25:41:2b:80: f7:62:5d:2f:e6:a9:f7:21:17:75:c9:57:31:3b:2e: 0f:10:1b:b3:8e:cd:39:ac:ca:99:0c:fc:b7:2f:81: cd:a9:35:29:5b:ee:36:06:da:9f:84:93:a2:58:9a: c1:9c:ad:ab:63:77:bf:15:7c:d8:db:b6:25:d2:8e: a5:12:79:08:16:d3:b6:0d:51:0e:0f:d4:e3:e4:d2: a5:7d:84:3c:dc:10:6d:00:b0:09:e3:bb:84:7c:1a: 00:09:6f:28:0c:87:38:a4:24:3b:a9:27:be:98:b6: 77:c1:cd:17:99:7b:77:42:07:e9:a4:ad:1e:26:7d: 01:f9:59:27:c2:7b:03:6b:69:9c:00:ba:97:e6:2f: 63:bf:94:5d:f1:0b:8a:17:6a:ff:58:8d:1d:c9:d5: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:C8:D4:B3:69:69:36:18:C0:9F:D2:B4:CC:DF:C4:92:1E:7B:AC X509v3 Authority Key Identifier: keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2d:2f:c6:d0:33:57:81:d2:66:4e:7c:9f:8c:09:5a:18:5f: 14:67:15:40:c6:b0:a0:73:49:e0:cf:9b:05:82:72:b4:60:ab: 7f:4b:74:85:1b:af:28:4b:e5:ad:52:29:31:49:42:49:ab:d7: 44:61:d1:d3:a0:c0:6d:de:2a:91:a4:da:e7:c8:4a:f2:f6:a8: e7:5f:29:5a:63:50:a0:49:b2:cc:0a:5b:51:43:e1:ab:2e:e5: 61:50:f9:45:b6:10:94:8f:a5:f0:68:88:c1:d9:80:79:cc:ac: 78:93:45:e9:cc:1b:57:22:44:72:a6:85:76:63:08:f1:9d:3c: b0:6f:7b:5f:10:4a:96:a6:21:4f:27:dc:02:8a:7a:af:00:b4: 02:86:36:11:84:89:c6:b4:ad:50:0c:bb:bb:28:f5:fa:04:15: 2e:68:75:46:90:19:22:68:c3:13:8c:d5:b8:a4:f5:07:97:a1: 17:e4:5f:5a:07:f5:03:83:32:94:dc:a7:aa:51:8b:c0:ec:77: 66:bb:ec:93:36:31:23:8d:30:e3:1d:5f:38:4f:a9:b5:9e:00: 60:a9:11:7e:7d:16:ce:db:92:3f:1e:46:e0:0a:43:8c:f5:58: 5f:83:71:35:63:df:7a:07:6e:12:a3:94:d0:68:1b:98:83:ec: 08:e0:20:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpy99Hydo9SCLMjIpUu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1 NTM4NmMwHhcNMjUxMjIxMTQwMDU2WhcNMjUxMjIyMTQwMDU2WjAzMTEwLwYDVQQD Eyg5ZGRjYzhkNGIzNjk2OTM2MThjMDlmZDJiNGNjZGZjNDkyMWU3YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8JMY40916pRbx0fuEF/BstNL5C0 WnmXftHyXMe1mWyKXFfFEAMZ7xPwtL4KEmVOEvMpnHKp54CQ1c4+RSUo7GzYGFoo ++yQu2TCZ14JbwCrQr6cArQTJiOw3oVyLyQnZR7R0iVBK4D3Yl0v5qn3IRd1yVcx Oy4PEBuzjs05rMqZDPy3L4HNqTUpW+42BtqfhJOiWJrBnK2rY3e/FXzY27Yl0o6l EnkIFtO2DVEOD9Tj5NKlfYQ83BBtALAJ47uEfBoACW8oDIc4pCQ7qSe+mLZ3wc0X mXt3QgfppK0eJn0B+VknwnsDa2mcALqX5i9jv5Rd8QuKF2r/WI0dydWaJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3cyNSzaWk2GMCf0rTM38SSHnusMB8GA1UdIwQY MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt NDZmZDQ2ZDZiNTQ3LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3 LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy0vxtAz V4HSZk58n4wJWhhfFGcVQMawoHNJ4M+bBYJytGCrf0t0hRuvKEvlrVIpMUlCSavX RGHR06DAbd4qkaTa58hK8vao518pWmNQoEmyzApbUUPhqy7lYVD5RbYQlI+l8GiI wdmAecyseJNF6cwbVyJEcqaFdmMI8Z08sG97XxBKlqYhTyfcAop6rwC0AoY2EYSJ xrStUAy7uyj1+gQVLmh1RpAZImjDE4zVuKT1B5ehF+RfWgf1A4MylNynqlGLwOx3 ZrvskzYxI40w4x1fOE+ptZ4AYKkRfn0WztuSPx5G4ApDjPVYX4NxNWPfegduEqOU 0GgbmIPsCOAgog== -----END CERTIFICATE-----Generated at Sun Dec 21 15:23:15 2025 by rpki-client