This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json) Hash identifier: mmUuVc3VtbZjh+GcsThHDk744fuopjw8hPTMKEuwGcI= Subject key identifier: 0C:12:FB:2F:4B:CF:2B:F3:12:4D:EE:1F:7D:34:06:20:9A:23:70:06 Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2 Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2 Certificate serial: 019AF27690DAB672C93234152470671140F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft Manifest number: 05DC Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=) 2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: FhTQGJEBalM8E4+nWrcuS/2VRqnu4d4ERJ3bR1FwDk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:90:da:b6:72:c9:32:34:15:24:70:67:11:40:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=0c12fb2f4bcf2bf3124dee1f7d3406209a237006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:4d:f1:fd:f4:a9:3a:e1:10:5f:61:0b:13: d8:4f:a8:7a:ca:2f:43:83:f5:ca:5b:0c:e5:e0:e4: 05:19:b1:0c:af:a4:a4:a9:11:07:0b:fc:9c:3d:8b: cd:bd:58:81:da:70:fd:72:7b:4c:4b:97:e0:f1:d4: 2c:8b:ae:79:23:91:49:f8:26:2b:d5:a1:4c:4e:ad: 9d:c7:bd:b0:a9:93:0a:ce:fe:d7:e2:0e:85:e2:23: 4f:94:f1:94:81:40:3c:c1:4c:02:38:af:c8:3a:c4: 4e:a1:25:47:70:cb:eb:cd:f9:c0:e5:c9:62:99:6e: 1a:94:a1:62:63:0a:1d:8f:93:71:48:2c:dd:8d:58: 13:6f:cd:6c:da:ab:59:a1:4b:0f:84:cb:d3:d1:b8: 8f:61:64:62:43:cf:58:67:d7:39:2c:8f:78:20:a1: fb:a0:4c:77:ee:41:ab:0c:33:f0:8b:00:48:1b:9a: 0e:e3:4b:24:d2:f7:35:0c:56:f3:95:c7:79:ca:14: 80:70:78:74:2c:f9:e7:a3:cd:4b:9e:6a:3c:04:42: a6:94:5a:48:06:91:c2:b6:7d:0b:24:45:a5:e6:9f: 58:48:88:7f:ae:e5:5d:3d:1a:93:12:29:dc:e7:f3: 2d:ac:17:a5:ea:9b:37:0d:9f:6f:04:bf:86:3b:93: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:12:FB:2F:4B:CF:2B:F3:12:4D:EE:1F:7D:34:06:20:9A:23:70:06 X509v3 Authority Key Identifier: keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c2:ce:ba:d2:a1:88:4f:48:8d:7b:c0:3c:dd:0e:b1:0b:1c: 88:8d:27:b7:6f:a0:05:53:df:42:be:bb:b5:ee:00:98:f6:eb: 82:ff:37:ac:41:3b:cd:9e:c6:b9:d7:eb:07:07:c6:7d:8d:5d: f0:30:ba:05:da:02:7f:62:24:5e:4b:f6:43:cf:39:fe:ee:0a: db:a3:c0:98:6e:43:0e:c8:90:48:29:eb:f6:e6:6f:69:6a:0f: 8c:53:17:d8:36:31:44:68:50:ce:42:bb:0c:de:57:35:c8:43: 72:d5:3e:0b:c4:f2:36:de:27:da:11:cc:e9:83:de:03:2b:3a: 54:61:4d:55:d1:07:ea:96:23:af:e1:37:42:73:2c:00:83:7a: 77:90:c8:8d:4f:8c:8a:99:8c:7a:9b:c4:ee:03:26:47:1f:dd: d0:ab:7c:f6:6b:5a:43:65:03:b8:e1:24:5d:24:8b:7f:a6:6d: 66:38:44:67:07:82:3f:ef:83:b6:c6:96:a0:70:88:28:1f:d6: ab:1a:2e:69:07:5c:c8:89:f1:f9:8c:02:7e:92:14:a0:d1:98: 7d:ba:01:a3:b1:b6:13:d1:4d:83:ee:ed:39:8d:2d:6a:3c:4c: 69:61:71:c9:2a:af:e2:27:a2:41:52:1f:a8:c1:24:56:06:8e: e5:f5:f4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpDatnLJMjQVJHBnEUDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTgzMmYwMjVjYmVmYTFlYTFiY2EwYzM5MGI2M2MxNzY5 NDhjZDIwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EygwYzEyZmIyZjRiY2YyYmYzMTI0ZGVlMWY3ZDM0MDYyMDlhMjM3MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5N8f30qTrhEF9hCxPYT6h6yi9D g/XKWwzl4OQFGbEMr6SkqREHC/ycPYvNvViB2nD9cntMS5fg8dQsi655I5FJ+CYr 1aFMTq2dx72wqZMKzv7X4g6F4iNPlPGUgUA8wUwCOK/IOsROoSVHcMvrzfnA5cli mW4alKFiYwodj5NxSCzdjVgTb81s2qtZoUsPhMvT0biPYWRiQ89YZ9c5LI94IKH7 oEx37kGrDDPwiwBIG5oO40sk0vc1DFbzlcd5yhSAcHh0LPnno81Lnmo8BEKmlFpI BpHCtn0LJEWl5p9YSIh/ruVdPRqTEinc5/MtrBel6ps3DZ9vBL+GO5POyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwS+y9LzyvzEk3uH300BiCaI3AGMB8GA1UdIwQY MBaAFJSYMvAly++h6hvKDDkLY8F2lIzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQt NzhmYzNiYzI4YmExLzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQtNzhmYzNiYzI4YmEx LzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8LOutKh iE9IjXvAPN0OsQsciI0nt2+gBVPfQr67te4AmPbrgv83rEE7zZ7GudfrBwfGfY1d 8DC6BdoCf2IkXkv2Q885/u4K26PAmG5DDsiQSCnr9uZvaWoPjFMX2DYxRGhQzkK7 DN5XNchDctU+C8TyNt4n2hHM6YPeAys6VGFNVdEH6pYjr+E3QnMsAIN6d5DIjU+M ipmMepvE7gMmRx/d0Kt89mtaQ2UDuOEkXSSLf6ZtZjhEZweCP++DtsaWoHCIKB/W qxouaQdcyInx+YwCfpIUoNGYfboBo7G2E9FNg+7tOY0tajxMaWFxySqv4ieiQVIf qMEkVgaO5fX0IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:52 2025 by rpki-client