This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json) Hash identifier: EMhOHSm8eEZNDmv3HEbGRAixFbiwcVRNJQmQXe3stPk= Subject key identifier: 0B:BE:97:53:94:3C:D8:60:71:3B:D1:9F:1C:F8:77:90:CE:A3:11:41 Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Certificate serial: 019AF16427C74C53B4971239C0895C0C1018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft Manifest number: 01EA Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: aE6W_12we24MrX4UESfc-orZJK0.roa (hash: Tn+H21K97sLydc4eo5ghf77e2fc70nABLBDtYTFdsDQ=) 2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: DxfB1mZ1IgjXwYm7I+z/zOWOW6VsEaWiX0Z5FTz65LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:27:c7:4c:53:b4:97:12:39:c0:89:5c:0c:10:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=0bbe9753943cd860713bd19f1cf87790cea31141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:33:5e:a1:c8:83:82:17:4d:7f:b5:56:e6: 45:f3:d8:47:3f:92:c2:b6:69:99:ca:b3:78:60:60: a9:2f:0c:29:0a:09:6a:5e:a0:1f:64:67:9d:d0:51: c0:e4:fa:2e:74:94:02:48:c1:55:15:33:c0:12:46: 8a:e6:09:ed:e0:5b:48:0f:98:a7:0d:b8:2c:39:f5: 14:87:9b:99:85:22:4f:f3:bf:dd:18:4f:e0:c8:40: c5:7a:54:e8:29:b3:bb:a8:72:25:54:55:23:3b:81: 23:65:27:09:89:87:08:a6:aa:09:b0:71:18:15:d7: 7c:ad:7f:17:56:e9:f1:29:f9:9c:94:39:2f:b1:18: ac:3d:74:b4:38:f7:30:e6:48:df:be:31:e1:7c:22: a6:1a:1e:22:f5:75:53:46:a4:b2:87:cd:9c:a2:61: b6:f0:5d:11:83:74:76:24:5b:c0:5b:ec:b4:3e:98: d3:3e:49:c7:53:39:7d:55:e0:4b:a9:c3:ad:9b:1e: b0:b5:30:26:9c:03:5d:5d:48:8c:8f:a9:08:4b:2d: 19:ca:9e:17:26:12:c3:47:65:29:60:d3:d1:cf:d8: e3:4b:00:cf:f6:b7:e7:fa:79:a0:39:5e:bf:07:89: 3e:8b:14:f5:96:8e:3a:e5:dd:05:26:b2:99:b1:16: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:97:53:94:3C:D8:60:71:3B:D1:9F:1C:F8:77:90:CE:A3:11:41 X509v3 Authority Key Identifier: keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3d:47:16:c2:52:ae:d7:ae:23:31:03:28:64:97:ff:8c:9e: 25:91:d0:3f:76:ef:2f:73:db:3b:72:87:85:aa:4e:01:49:8b: 51:6e:a2:83:c3:66:f4:3d:86:19:40:be:f1:7d:ed:d6:80:0d: 86:3f:6e:96:1b:d5:ed:2a:d6:f5:73:db:d1:a4:51:a4:3e:fb: 40:4e:61:9a:7a:46:a4:55:a7:59:4c:de:91:94:10:33:6a:1b: 3d:92:d0:03:e5:1b:3b:35:68:a0:38:13:e6:4f:d4:6d:49:8a: f4:11:20:7d:51:68:bb:9d:a2:b3:7e:97:67:86:8e:7d:7a:7f: 94:cb:b6:de:f9:2a:e4:08:e2:e4:30:8e:98:f6:fe:54:f3:31: 0f:de:7a:c8:c0:7c:5f:80:bd:27:fc:03:12:08:0b:12:2b:ee: 9e:07:24:60:ce:f1:6c:10:49:0e:b4:9c:fe:93:f5:67:ea:f3: 82:65:e8:23:72:0b:b0:72:10:90:66:dd:9f:10:3f:ec:08:17: c7:8a:d4:46:dd:5d:1f:3c:37:1a:69:be:df:0a:ec:86:1b:02: 7a:76:2f:2e:ba:b2:67:61:1b:03:32:09:ed:86:b7:7d:87:1e: fa:59:41:4c:ee:52:6d:ac:97:6f:4e:71:98:ec:6e:0e:f5:b9: eb:a7:98:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCfHTFO0lxI5wIlcDBAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj OGM1NTAwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EygwYmJlOTc1Mzk0M2NkODYwNzEzYmQxOWYxY2Y4Nzc5MGNlYTMxMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VEzXqHIg4IXTX+1VuZF89hHP5LC tmmZyrN4YGCpLwwpCglqXqAfZGed0FHA5PoudJQCSMFVFTPAEkaK5gnt4FtID5in DbgsOfUUh5uZhSJP87/dGE/gyEDFelToKbO7qHIlVFUjO4EjZScJiYcIpqoJsHEY Fdd8rX8XVunxKfmclDkvsRisPXS0OPcw5kjfvjHhfCKmGh4i9XVTRqSyh82comG2 8F0Rg3R2JFvAW+y0PpjTPknHUzl9VeBLqcOtmx6wtTAmnANdXUiMj6kISy0Zyp4X JhLDR2UpYNPRz9jjSwDP9rfn+nmgOV6/B4k+ixT1lo465d0FJrKZsRZlwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu+l1OUPNhgcTvRnxz4d5DOoxFBMB8GA1UdIwQY MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt YjBlNjA1OGQ0ZGQ3LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3 LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT1HFsJS rteuIzEDKGSX/4yeJZHQP3bvL3PbO3KHhapOAUmLUW6ig8Nm9D2GGUC+8X3t1oAN hj9ulhvV7SrW9XPb0aRRpD77QE5hmnpGpFWnWUzekZQQM2obPZLQA+UbOzVooDgT 5k/UbUmK9BEgfVFou52is36XZ4aOfXp/lMu23vkq5Aji5DCOmPb+VPMxD956yMB8 X4C9J/wDEggLEivungckYM7xbBBJDrSc/pP1Z+rzgmXoI3ILsHIQkGbdnxA/7AgX x4rURt1dHzw3Gmm+3wrshhsCenYvLrqyZ2EbAzIJ7Ya3fYce+llBTO5SbayXb05x mOxuDvW566eYJw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:10 2025 by rpki-client