This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json) Hash identifier: Pqeyz9TvZbzdQ3jbO7F8+lXDqcNp7IG5ERvxPCUWuJU= Subject key identifier: AC:CE:49:F3:4D:DB:AC:09:B5:0D:3C:45:E9:65:5A:C0:B9:2C:2E:DF Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019AF12E90ACF11989C0B0DA049EB4C5A129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:31 +0000 Manifest this update: Sat 06 Dec 2025 01:02:31 +0000 Manifest next update: Sun 07 Dec 2025 01:02:31 +0000 Files and hashes: 1: 0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa (hash: s0nTtnQSHrND4DvUtBRsZ+0MomnwjVLtYm6521AA6YU=) 2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: 4ESFboKxP8cntcw6hNvy8Sa/Zeise8ESOV2yAhQCBo4=) 3: MuuzFIyNpWZONMllHbmnXx8HRv0.roa (hash: U3fGXgKZfpms0csUXLU3nnmhzkgEcT4L/f6Vy+UF3Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:90:ac:f1:19:89:c0:b0:da:04:9e:b4:c5:a1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Dec 6 01:02:31 2025 GMT Not After : Dec 7 01:02:31 2025 GMT Subject: CN=acce49f34ddbac09b50d3c45e9655ac0b92c2edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:16:d4:da:55:7a:f3:5b:d4:5c:b5:a0:ba: 65:6b:88:2c:d4:51:8b:28:78:6d:19:fd:ad:66:26: 60:67:f7:87:a1:eb:19:87:2e:66:c5:26:ad:f9:93: 61:b5:19:19:b3:ed:5f:4f:bc:49:7f:71:83:59:86: d9:a4:63:82:3c:e1:a8:ef:05:36:e1:9a:f1:04:d1: f9:1e:68:14:23:a9:72:43:5f:4e:e2:a1:ec:d9:af: 3b:90:ee:a9:00:8e:dc:66:42:c9:34:43:e5:c1:df: 3f:98:4e:db:42:9b:ad:9b:19:20:d8:43:cb:8e:c9: 45:a2:df:38:19:7b:7a:db:a8:0c:5e:cf:a1:86:d0: 15:45:b2:ff:e1:53:7e:e1:97:37:1c:da:f5:0d:18: c8:5a:25:2f:9a:6a:36:41:77:05:bc:95:94:ff:f2: ad:6e:02:f2:8c:fd:f5:bf:7e:5d:c1:c1:57:00:a0: 3f:1f:ba:af:ba:05:62:1a:95:bb:3a:49:a8:4e:c2: c9:7e:88:19:cb:34:98:a4:7c:6f:45:97:1b:23:81: f6:99:e9:c9:b4:15:24:81:58:22:e7:72:49:ee:1f: 7f:e6:1f:56:7c:2f:65:74:3d:86:15:34:26:fb:2d: fa:fb:65:ba:bc:f7:73:f0:ef:6e:5f:39:9d:83:ad: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CE:49:F3:4D:DB:AC:09:B5:0D:3C:45:E9:65:5A:C0:B9:2C:2E:DF X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:87:a6:8b:b6:54:43:c4:51:ff:b1:24:9f:44:0c:50:35:ba: 4f:b0:b6:e4:24:8c:f6:fe:1d:08:ce:d5:16:7a:b1:f8:d2:69: c7:9f:ba:62:56:e7:42:01:75:e5:8d:37:62:13:65:b1:3b:a4: 19:2a:22:a7:5e:2c:24:23:fd:2c:35:db:be:e2:04:d9:0a:cf: df:3f:40:77:73:aa:dd:c2:7e:42:24:a3:ee:2f:26:af:99:3e: be:f9:9e:9f:3e:a8:c6:63:47:5f:e4:5b:e4:23:95:85:8e:81: b5:d7:7c:3c:28:ca:fb:da:57:bc:95:13:14:ad:dc:d3:f2:ab: b0:08:5d:09:10:af:b0:96:5c:24:29:94:d8:be:a8:f9:e4:93: c2:5c:9a:ec:cd:19:53:d8:6c:6b:2c:41:a7:57:06:d7:d8:d3: f0:89:51:a5:3e:b2:e4:e7:e7:71:72:7a:f5:ba:a1:eb:e4:c5: c2:75:e2:1a:ed:81:25:6d:ee:6f:a9:e9:da:f8:6d:30:4d:fa: b9:64:69:1d:d1:4a:1a:26:21:49:e2:d5:82:86:21:21:8b:8c: a8:df:a2:b6:a8:eb:d0:3a:6c:68:7c:19:f0:b2:b4:93:31:9e: fc:30:2a:6c:6d:61:d8:2c:78:d0:5f:0a:df:0d:99:70:c8:2f: 7b:a7:2f:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpCs8RmJwLDaBJ60xaEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjUxMjA2MDEwMjMxWhcNMjUxMjA3MDEwMjMxWjAzMTEwLwYDVQQD EyhhY2NlNDlmMzRkZGJhYzA5YjUwZDNjNDVlOTY1NWFjMGI5MmMyZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdwW1NpVevNb1Fy1oLpla4gs1FGL KHhtGf2tZiZgZ/eHoesZhy5mxSat+ZNhtRkZs+1fT7xJf3GDWYbZpGOCPOGo7wU2 4ZrxBNH5HmgUI6lyQ19O4qHs2a87kO6pAI7cZkLJNEPlwd8/mE7bQputmxkg2EPL jslFot84GXt626gMXs+hhtAVRbL/4VN+4Zc3HNr1DRjIWiUvmmo2QXcFvJWU//Kt bgLyjP31v35dwcFXAKA/H7qvugViGpW7OkmoTsLJfogZyzSYpHxvRZcbI4H2menJ tBUkgVgi53JJ7h9/5h9WfC9ldD2GFTQm+y36+2W6vPdz8O9uXzmdg63W7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzOSfNN26wJtQ08RellWsC5LC7fMB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4emi7ZU Q8RR/7Ekn0QMUDW6T7C25CSM9v4dCM7VFnqx+NJpx5+6YlbnQgF15Y03YhNlsTuk GSoip14sJCP9LDXbvuIE2QrP3z9Ad3Oq3cJ+QiSj7i8mr5k+vvmenz6oxmNHX+Rb 5COVhY6Btdd8PCjK+9pXvJUTFK3c0/KrsAhdCRCvsJZcJCmU2L6o+eSTwlya7M0Z U9hsayxBp1cG19jT8IlRpT6y5OfncXJ69bqh6+TFwnXiGu2BJW3ub6np2vhtME36 uWRpHdFKGiYhSeLVgoYhIYuMqN+itqjr0DpsaHwZ8LK0kzGe/DAqbG1h2Cx40F8K 3w2ZcMgve6cvEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:01 2025 by rpki-client