This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json) Hash identifier: PkC5NWnLNFSD1Anl617JeALOzebOlBcuQAQqaf6myzg= Subject key identifier: EC:EE:8B:9C:E8:B1:D4:1F:F0:6A:3B:56:16:32:3E:A0:50:FE:CB:76 Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Certificate serial: 019AF352439047787DB0B0819F09AB56C007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft Manifest number: 071B Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=) 2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 7AOgmyAfBVfMU8VBPYStHqCefX9icWbWsOZnSjiMMC8=) 3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=) 4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:43:90:47:78:7d:b0:b0:81:9f:09:ab:56:c0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=ecee8b9ce8b1d41ff06a3b5616323ea050fecb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:21:f1:1d:ac:59:81:db:59:68:b4:3b:0a: 9b:8b:c8:4e:8c:67:95:2c:b0:57:de:4b:2a:06:4f: 7d:09:81:80:bd:46:8a:37:96:b8:c8:4a:80:6e:55: 87:67:c6:62:de:84:cf:0b:cb:47:8d:37:55:ed:a8: fc:72:74:25:1e:2b:75:70:f2:a8:91:21:22:6b:ae: cc:ac:86:3c:bc:e9:24:3f:98:c0:a1:16:30:d2:91: e5:61:b5:37:53:c7:23:26:37:14:0b:df:54:7c:3d: 29:26:83:aa:16:76:52:01:0a:bb:7b:64:91:d9:a2: 72:fd:59:26:6b:58:d9:db:43:4c:d3:15:a2:10:39: 24:50:a4:20:97:c5:69:c9:ce:e0:e7:c4:b4:6a:ee: 6d:e8:66:2c:be:11:dd:9e:fa:7b:23:fe:d9:a5:59: 98:2b:4e:ee:3a:12:82:5e:11:7a:96:52:7d:13:ae: cc:c8:10:41:1c:33:6a:b8:38:c1:85:ba:c4:8b:fc: 53:eb:31:fd:4a:23:70:df:e3:d8:9b:ab:5d:af:40: 11:94:b8:9d:7e:b3:ff:eb:02:f0:6c:10:ba:3b:af: 44:4d:4a:a6:ff:9e:79:53:a0:dd:9b:19:8d:38:05: a3:38:b8:7f:ea:41:3d:5f:77:c4:21:46:33:0c:04: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:8B:9C:E8:B1:D4:1F:F0:6A:3B:56:16:32:3E:A0:50:FE:CB:76 X509v3 Authority Key Identifier: keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c8:61:70:87:34:79:25:37:89:38:6b:21:8a:82:72:72:ab: a7:f8:c9:29:a8:39:9c:3c:db:02:5b:7b:ff:83:58:a0:d6:55: 2b:94:b3:bd:90:d6:b6:47:0d:3a:83:96:06:d7:de:41:0d:a1: af:ff:c1:bd:06:5b:db:5e:f3:fb:04:52:2a:17:8e:7b:ad:50: 19:bc:c5:dd:e5:c0:59:5e:fd:5a:5f:41:3e:15:5e:73:8d:3b: 9c:f1:1f:e2:6e:20:4f:31:fb:23:eb:08:2c:e3:b1:9a:ba:fc: 92:f2:d8:be:6f:a2:07:c5:d8:71:85:82:f4:a4:c9:df:6b:48: d3:b8:85:04:30:05:ac:68:52:16:aa:61:33:2b:e4:57:80:66: f1:b1:90:d3:3c:2d:60:57:93:de:46:f0:3d:2d:1e:ae:7a:07: e5:22:85:c5:d6:3a:94:dd:c4:59:4d:91:72:0b:c9:af:35:fa: 7f:b0:02:9b:85:6f:9e:5f:be:aa:48:60:6c:99:60:fd:5c:32: 15:df:44:9a:83:b4:cc:85:3d:7a:85:d1:d6:23:d4:86:65:11: 0d:21:85:e6:0a:2b:52:55:4f:a7:4e:fb:f9:7b:71:31:a8:ab: c4:1f:b3:ea:6e:99:55:87:b0:ac:f5:e7:31:c0:e3:f2:14:b1: 4e:3b:57:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkOQR3h9sLCBnwmrVsAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5 NTZjYWEwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD EyhlY2VlOGI5Y2U4YjFkNDFmZjA2YTNiNTYxNjMyM2VhMDUwZmVjYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/gh8R2sWYHbWWi0Owqbi8hOjGeV LLBX3ksqBk99CYGAvUaKN5a4yEqAblWHZ8Zi3oTPC8tHjTdV7aj8cnQlHit1cPKo kSEia67MrIY8vOkkP5jAoRYw0pHlYbU3U8cjJjcUC99UfD0pJoOqFnZSAQq7e2SR 2aJy/Vkma1jZ20NM0xWiEDkkUKQgl8Vpyc7g58S0au5t6GYsvhHdnvp7I/7ZpVmY K07uOhKCXhF6llJ9E67MyBBBHDNquDjBhbrEi/xT6zH9SiNw3+PYm6tdr0ARlLid frP/6wLwbBC6O69ETUqm/555U6DdmxmNOAWjOLh/6kE9X3fEIUYzDAS7xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzui5zosdQf8Go7VhYyPqBQ/st2MB8GA1UdIwQY MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgchhcIc0 eSU3iThrIYqCcnKrp/jJKag5nDzbAlt7/4NYoNZVK5SzvZDWtkcNOoOWBtfeQQ2h r//BvQZb217z+wRSKheOe61QGbzF3eXAWV79Wl9BPhVec407nPEf4m4gTzH7I+sI LOOxmrr8kvLYvm+iB8XYcYWC9KTJ32tI07iFBDAFrGhSFqphMyvkV4Bm8bGQ0zwt YFeT3kbwPS0ernoH5SKFxdY6lN3EWU2RcgvJrzX6f7ACm4Vvnl++qkhgbJlg/Vwy Fd9EmoO0zIU9eoXR1iPUhmURDSGF5gorUlVPp077+XtxMairxB+z6m6ZVYewrPXn McDj8hSxTjtXKw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:36 2025 by rpki-client