This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json) Hash identifier: g8fA38VES2OUamA/GLA5iH96hHEeLzWl7d+5CsRA3Ts= Subject key identifier: E3:2A:BC:3E:58:81:82:99:27:1A:EE:DA:D3:64:4C:57:90:EE:BC:FB Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c Certificate serial: 019AF2096A914C6CF826B214F9439D915EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft Manifest number: 1608 Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: 4KUpBqgP7CqsqYjihpL6JW1__PY.roa (hash: y1mWBKsuw1JHXNozTzV9PXz9oElVltZjJ6RCCGIn+Eg=) 2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: UYbnbUG1wuNXEVTGgDY0AKky9w75ANhb6srABDKdrKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6a:91:4c:6c:f8:26:b2:14:f9:43:9d:91:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=e32abc3e58818299271aeedad3644c5790eebcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:da:ad:c7:be:1e:18:0b:c1:b5:db:1e:00: 2f:b4:af:b9:a0:e0:f0:b7:67:67:f1:52:30:9f:7c: 0e:5a:3c:9a:50:3f:07:4a:4b:e5:82:3a:3d:b8:a5: 7f:36:8e:97:c6:83:7e:cb:16:c4:16:e3:4e:ad:e1: 17:82:4c:d8:29:15:e3:e1:d4:87:33:8a:3b:d2:ee: 30:5b:43:20:f7:e4:34:59:fc:15:d5:6c:7d:42:f5: f7:58:06:9b:8d:3b:20:c2:3e:98:23:f7:58:2d:64: f2:66:ca:af:e8:6b:31:c3:7f:78:3a:19:95:e4:a2: 03:f6:43:5e:2c:0d:1e:d1:f9:d5:13:dc:fb:57:82: 1a:ae:82:9e:4d:4b:64:73:2c:d5:c7:e1:0c:32:64: a4:6d:65:d2:d4:72:c2:fe:4f:c3:1a:ca:c3:9e:34: 62:3b:fe:5d:68:b7:8a:8b:be:bf:4e:b9:fd:ae:e0: 7e:8a:f2:0e:db:a9:20:2b:c6:11:79:57:4a:a4:8b: 5a:6d:3a:7a:8f:01:b8:57:22:0a:fb:12:a0:16:84: b8:ad:6d:40:da:ce:5a:0e:0b:dd:16:4f:b2:9a:00: 1b:49:5a:9f:22:45:b7:4c:03:61:35:eb:ef:90:1a: 53:2e:06:9b:71:d8:d9:ed:a0:45:d6:ee:e5:1d:54: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:BC:3E:58:81:82:99:27:1A:EE:DA:D3:64:4C:57:90:EE:BC:FB X509v3 Authority Key Identifier: keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:60:9b:55:2b:b2:c6:be:71:ab:55:4c:d7:2d:af:66:2f:4f: a1:59:12:fe:6f:f4:8d:0c:0b:ad:a2:6c:bc:fe:c4:3f:90:a3: 0e:91:aa:33:09:98:00:cf:03:7c:9a:91:95:d2:70:84:9e:a5: 4c:f4:30:8b:95:c9:34:5c:49:8a:4a:4f:a9:c0:0e:27:84:61: 6d:e3:a3:2e:f2:e4:bc:0e:85:00:ad:16:ea:45:bb:f4:00:4c: ea:84:a0:16:93:9e:7b:ad:90:04:e7:ae:00:96:c7:de:19:5c: 7f:39:6e:13:38:96:a8:03:2c:e9:19:43:ee:d0:10:3f:40:60: b7:ba:70:4e:34:82:76:28:7a:7e:28:f1:be:4f:bf:40:52:da: bf:6e:4a:13:a2:15:b0:1b:0b:ce:12:5d:ad:4b:06:6f:c8:77: a1:23:f3:41:ff:87:f2:cb:04:48:6d:10:92:4b:3b:05:93:fe: 00:d3:c7:23:11:ea:df:34:58:c8:73:28:4f:bf:a2:1e:35:95: 8e:21:0e:30:55:1e:c1:2d:22:d8:7f:e4:78:dc:a5:54:c8:e1: 38:42:82:b8:4a:35:c8:3b:74:cc:3b:ed:ee:42:0e:13:ad:68: b5:7c:db:fd:30:9d:3d:c5:b5:d7:0a:0e:16:3b:0b:c0:e2:c7: 45:91:1d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWqRTGz4JrIU+UOdkV6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy ODQyOGMwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhlMzJhYmMzZTU4ODE4Mjk5MjcxYWVlZGFkMzY0NGM1NzkwZWViY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP3arce+HhgLwbXbHgAvtK+5oODw t2dn8VIwn3wOWjyaUD8HSkvlgjo9uKV/No6XxoN+yxbEFuNOreEXgkzYKRXj4dSH M4o70u4wW0Mg9+Q0WfwV1Wx9QvX3WAabjTsgwj6YI/dYLWTyZsqv6Gsxw394OhmV 5KID9kNeLA0e0fnVE9z7V4IaroKeTUtkcyzVx+EMMmSkbWXS1HLC/k/DGsrDnjRi O/5daLeKi76/Trn9ruB+ivIO26kgK8YReVdKpItabTp6jwG4VyIK+xKgFoS4rW1A 2s5aDgvdFk+ymgAbSVqfIkW3TANhNevvkBpTLgabcdjZ7aBF1u7lHVTTVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMqvD5YgYKZJxru2tNkTFeQ7rz7MB8GA1UdIwQY MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmCbVSuy xr5xq1VM1y2vZi9PoVkS/m/0jQwLraJsvP7EP5CjDpGqMwmYAM8DfJqRldJwhJ6l TPQwi5XJNFxJikpPqcAOJ4RhbeOjLvLkvA6FAK0W6kW79ABM6oSgFpOee62QBOeu AJbH3hlcfzluEziWqAMs6RlD7tAQP0Bgt7pwTjSCdih6fijxvk+/QFLav25KE6IV sBsLzhJdrUsGb8h3oSPzQf+H8ssESG0Qkks7BZP+ANPHIxHq3zRYyHMoT7+iHjWV jiEOMFUewS0i2H/keNylVMjhOEKCuEo1yDt0zDvt7kIOE61otXzb/TCdPcW11woO FjsLwOLHRZEdgw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:31 2025 by rpki-client