This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json) Hash identifier: xNn7ZT6pk5mZe75z8TYNTDGu96tY4FzIv72hsnNTMMk= Subject key identifier: A3:C8:77:8F:5E:B2:65:31:D8:B3:24:87:93:3B:42:D6:FC:05:AF:40 Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Certificate serial: 019B2A09E2D1A8F1D89E2159E4D62FFC0A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft Manifest number: 1591 Signing time: Wed 17 Dec 2025 02:00:49 +0000 Manifest this update: Wed 17 Dec 2025 02:00:49 +0000 Manifest next update: Thu 18 Dec 2025 02:00:49 +0000 Files and hashes: 1: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: lwb47HZC66sQuM4R+vUsPmVD4GAO7PVFrzfF5+1Qns4=) 2: XuUIg00P_oELwRIdekPlKjcVl2M.roa (hash: D5bbltVcpYBKzhGcnj29+Y83dlfa0xkosi+p8XbJoUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:e2:d1:a8:f1:d8:9e:21:59:e4:d6:2f:fc:0a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Validity Not Before: Dec 17 02:00:49 2025 GMT Not After : Dec 18 02:00:49 2025 GMT Subject: CN=a3c8778f5eb26531d8b32487933b42d6fc05af40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:25:73:00:93:f4:d2:8f:56:f5:4b:a6:21: b7:6b:92:71:57:40:3f:12:b4:28:2d:3c:c4:ff:0a: 93:35:7a:a2:12:4b:17:e9:46:28:64:9c:ab:cc:72: fa:0e:96:f6:69:6a:cb:bc:c8:6d:16:05:1c:86:fd: df:70:5d:f7:85:5c:fa:0e:df:28:85:10:03:28:ae: 23:dd:e4:45:81:db:0a:95:e9:77:a3:4d:7e:96:67: 78:57:b3:5b:f6:c2:f9:aa:c9:0b:86:3d:5f:1f:27: d3:9c:ae:c1:a5:6e:c6:6e:1d:ce:b7:4a:d7:03:a2: 88:70:b9:b6:12:8e:e3:fb:a7:0b:fe:67:bc:39:fd: b0:99:67:47:f2:b7:38:72:b0:0e:cf:c5:45:4d:37: ef:13:a2:bf:49:ba:92:19:6a:79:ad:a9:72:30:b1: 53:18:37:07:ef:81:39:c1:3d:ba:88:f2:97:57:9b: a6:2e:23:fa:f0:99:ee:6c:18:fe:5c:af:f9:42:0a: 4d:0d:ce:5f:60:29:1d:d9:66:42:29:98:76:b0:97: f8:7c:f0:71:69:24:a5:55:3e:d2:af:d0:a2:13:03: 8d:4e:2b:13:86:2b:14:67:a1:33:63:50:31:23:09: 8f:ee:3f:ed:f1:61:77:ad:8a:06:18:6f:98:14:d4: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C8:77:8F:5E:B2:65:31:D8:B3:24:87:93:3B:42:D6:FC:05:AF:40 X509v3 Authority Key Identifier: keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:30:18:d2:d6:75:3a:b6:da:1b:8d:50:56:1b:57:78:c9:d4: 3b:41:ab:27:f7:8f:4e:a9:11:f6:06:f1:e3:42:2e:56:f9:5d: 2c:82:ca:18:f0:7a:c4:da:a6:80:41:bc:e7:91:8e:fd:98:5b: 13:06:1c:44:0e:0f:e9:78:6f:75:ba:5d:5e:0d:91:5b:5a:35: 21:6d:ff:d2:2a:bd:f3:6e:4e:60:ce:79:67:d4:5f:0b:24:05: 30:1c:3d:6f:bb:57:19:eb:47:72:a1:90:5f:9d:f9:0d:6c:48: 3a:82:ef:43:11:bb:40:d7:03:07:68:6f:ed:1d:3a:5f:82:98: 0f:cd:a3:7d:3a:7e:bc:33:27:0d:e7:79:b0:f8:15:20:10:ce: be:f1:c3:be:7f:ab:e4:58:8e:53:0a:66:34:0b:ca:e3:01:0f: 5b:83:d4:ce:05:ea:ba:24:f4:ee:0c:10:2b:6a:05:0b:9e:90: ff:75:b8:2d:5a:df:aa:8e:48:30:0e:3e:d7:0f:c1:b0:3c:be: 88:05:49:ac:2b:fb:9e:7b:3c:ab:fa:cc:cc:34:10:00:87:c7: 9a:d9:65:6d:91:8e:37:7c:33:f2:2c:ba:89:d6:f4:87:62:5a: 56:64:76:4c:ff:4e:dd:77:28:aa:d9:e5:96:e7:c7:90:80:fe: 11:75:24:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCeLRqPHYniFZ5NYv/AoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOThjNTA2YTE3NGNmMmNhZDljMWE2YzViODFkNmU4OTg4 NjM2MmQwHhcNMjUxMjE3MDIwMDQ5WhcNMjUxMjE4MDIwMDQ5WjAzMTEwLwYDVQQD EyhhM2M4Nzc4ZjVlYjI2NTMxZDhiMzI0ODc5MzNiNDJkNmZjMDVhZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqslcwCT9NKPVvVLpiG3a5JxV0A/ ErQoLTzE/wqTNXqiEksX6UYoZJyrzHL6Dpb2aWrLvMhtFgUchv3fcF33hVz6Dt8o hRADKK4j3eRFgdsKlel3o01+lmd4V7Nb9sL5qskLhj1fHyfTnK7BpW7Gbh3Ot0rX A6KIcLm2Eo7j+6cL/me8Of2wmWdH8rc4crAOz8VFTTfvE6K/SbqSGWp5ralyMLFT GDcH74E5wT26iPKXV5umLiP68JnubBj+XK/5QgpNDc5fYCkd2WZCKZh2sJf4fPBx aSSlVT7Sr9CiEwONTisThisUZ6EzY1AxIwmP7j/t8WF3rYoGGG+YFNS3LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPId49esmUx2LMkh5M7Qtb8Ba9AMB8GA1UdIwQY MBaAFC6YxQahdM8srZwabFuB1uiYhjYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjIt NmJiYTdmYzMxNzI4LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjItNmJiYTdmYzMxNzI4 LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzAY0tZ1 OrbaG41QVhtXeMnUO0GrJ/ePTqkR9gbx40IuVvldLILKGPB6xNqmgEG855GO/Zhb EwYcRA4P6XhvdbpdXg2RW1o1IW3/0iq9825OYM55Z9RfCyQFMBw9b7tXGetHcqGQ X535DWxIOoLvQxG7QNcDB2hv7R06X4KYD82jfTp+vDMnDed5sPgVIBDOvvHDvn+r 5FiOUwpmNAvK4wEPW4PUzgXquiT07gwQK2oFC56Q/3W4LVrfqo5IMA4+1w/BsDy+ iAVJrCv7nns8q/rMzDQQAIfHmtllbZGON3wz8iy6idb0h2JaVmR2TP9O3Xcoqtnl lufHkID+EXUk1Q== -----END CERTIFICATE-----Generated at Wed Dec 17 12:54:46 2025 by rpki-client