This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json) Hash identifier: vggz/wzX3DVio7pWyS1cUmurAUVxYVPlokMeK1vzpxk= Subject key identifier: 56:80:33:51:9F:8D:C9:EB:65:01:9D:F6:05:BF:0A:7C:97:94:3A:49 Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Certificate serial: 019B3EA3AEDD0EB3C737F3F28A8E02C47427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft Manifest number: 0742 Signing time: Sun 21 Dec 2025 02:01:12 +0000 Manifest this update: Sun 21 Dec 2025 02:01:12 +0000 Manifest next update: Mon 22 Dec 2025 02:01:12 +0000 Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=) 2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: ZRSwUQI6e5zROMUhK58l/LpVChWX7URFIHHZG8b9O+I=) 3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=) 4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ae:dd:0e:b3:c7:37:f3:f2:8a:8e:02:c4:74:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Validity Not Before: Dec 21 02:01:12 2025 GMT Not After : Dec 22 02:01:12 2025 GMT Subject: CN=568033519f8dc9eb65019df605bf0a7c97943a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:fd:fc:70:67:71:31:20:ab:8b:fb:62:3d: 52:1e:19:b1:2e:a7:ca:14:2c:ea:54:75:d0:62:5f: f0:49:f3:9e:8a:b8:be:52:90:62:17:91:68:49:11: ec:6f:b0:b7:1d:60:d9:6f:fc:05:ba:fa:13:7f:60: 46:09:35:6e:81:11:89:f5:40:92:af:75:70:f7:b0: 6d:b1:a0:30:ac:f9:27:11:6d:77:c3:df:b5:f5:5c: 86:14:b9:ed:f8:6f:5e:05:6c:82:f8:f0:b2:6f:de: 28:19:73:e6:28:d3:ef:18:d2:ac:b4:44:cb:c8:38: 78:44:a5:0d:5e:a5:15:86:c8:1c:4f:93:45:c9:12: 8a:f5:9f:e9:41:dc:6b:23:3e:9b:92:1d:75:d1:88: db:55:fa:8f:11:15:73:e0:7c:56:6e:61:f9:c3:39: b4:08:1f:31:5e:74:b7:26:44:b4:39:7b:17:1d:5d: 8d:68:d4:44:3c:ea:d6:62:c2:f2:b8:cf:19:95:45: e0:93:e7:b7:99:55:aa:29:27:59:fe:0f:de:19:aa: d3:41:16:f2:d8:8d:80:be:d1:d7:a4:9a:32:0f:8e: 37:ab:aa:60:cc:f6:70:4e:ee:4a:b2:6c:73:90:54: 11:74:7a:b7:f6:61:3c:63:13:66:c0:5d:45:a0:4d: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:80:33:51:9F:8D:C9:EB:65:01:9D:F6:05:BF:0A:7C:97:94:3A:49 X509v3 Authority Key Identifier: keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:48:40:9a:7f:14:fb:3c:27:d8:be:b8:56:5c:f9:46:0b:bd: c0:50:89:41:01:c0:bc:98:6b:cc:c2:91:a3:13:bd:e7:f5:2c: 51:2e:6f:ed:63:d3:f3:df:a2:16:48:d9:ac:ba:99:36:b5:0e: 83:31:31:39:7a:3d:4a:2d:83:39:ee:b6:cc:de:26:f4:27:f4: aa:57:8d:f5:b0:67:db:6a:14:25:5d:08:63:d6:55:56:04:f8: 5e:20:96:f1:31:b1:06:6e:d9:fa:9f:ad:69:70:84:91:42:17: e4:bc:a5:e1:4a:7c:5a:c3:6c:5a:bd:04:e9:77:83:33:06:3d: db:d4:6d:71:7a:90:36:71:14:5a:92:c4:06:54:69:3c:0a:84: 17:92:13:07:72:81:06:5c:5b:08:4f:82:9a:79:bb:6e:9f:98: 60:cf:0b:f8:ef:a3:65:a4:2f:76:16:34:9a:87:92:35:a8:81: c7:7a:77:25:2d:ab:d8:f8:7c:18:a2:73:dc:0d:3c:a2:5b:ca: 7b:21:e3:40:ff:cd:9c:ba:fb:85:15:18:00:02:80:b9:fc:96: 76:e9:75:cb:ec:76:a9:1b:d5:9a:f6:08:c7:f2:c0:d3:c1:f4: e0:b4:c5:84:dc:69:50:ab:31:51:50:35:85:01:fd:ff:08:68: 6c:8c:8f:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o67dDrPHN/Pyio4CxHQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5 NTZjYWEwHhcNMjUxMjIxMDIwMTEyWhcNMjUxMjIyMDIwMTEyWjAzMTEwLwYDVQQD Eyg1NjgwMzM1MTlmOGRjOWViNjUwMTlkZjYwNWJmMGE3Yzk3OTQzYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3z9/HBncTEgq4v7Yj1SHhmxLqfK FCzqVHXQYl/wSfOeiri+UpBiF5FoSRHsb7C3HWDZb/wFuvoTf2BGCTVugRGJ9UCS r3Vw97BtsaAwrPknEW13w9+19VyGFLnt+G9eBWyC+PCyb94oGXPmKNPvGNKstETL yDh4RKUNXqUVhsgcT5NFyRKK9Z/pQdxrIz6bkh110YjbVfqPERVz4HxWbmH5wzm0 CB8xXnS3JkS0OXsXHV2NaNREPOrWYsLyuM8ZlUXgk+e3mVWqKSdZ/g/eGarTQRby 2I2AvtHXpJoyD443q6pgzPZwTu5KsmxzkFQRdHq39mE8YxNmwF1FoE3n4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaAM1GfjcnrZQGd9gW/CnyXlDpJMB8GA1UdIwQY MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikhAmn8U +zwn2L64Vlz5Rgu9wFCJQQHAvJhrzMKRoxO95/UsUS5v7WPT89+iFkjZrLqZNrUO gzExOXo9Si2DOe62zN4m9Cf0qleN9bBn22oUJV0IY9ZVVgT4XiCW8TGxBm7Z+p+t aXCEkUIX5Lyl4Up8WsNsWr0E6XeDMwY929RtcXqQNnEUWpLEBlRpPAqEF5ITB3KB BlxbCE+Cmnm7bp+YYM8L+O+jZaQvdhY0moeSNaiBx3p3JS2r2Ph8GKJz3A08olvK eyHjQP/NnLr7hRUYAAKAufyWdul1y+x2qRvVmvYIx/LA08H04LTFhNxpUKsxUVA1 hQH9/whobIyPWw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:20:45 2025 by rpki-client