This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json) Hash identifier: KDsfGEDKXtm8saxn4K1RHchOz83AuOVcgPQIUrnmJyI= Subject key identifier: 0E:E1:DC:B0:A1:5F:3C:BD:D2:B9:D3:87:A9:F8:3B:9B:5A:E5:5D:3C Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Certificate serial: 019AF5784BF37BAD1509D06A83916C2E2BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft Manifest number: 94 Signing time: Sat 06 Dec 2025 21:01:32 +0000 Manifest this update: Sat 06 Dec 2025 21:01:32 +0000 Manifest next update: Sun 07 Dec 2025 21:01:32 +0000 Files and hashes: 1: 8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa (hash: dTWrB7/Bcq7TMpdoMtRKk5plCZVXL7i81JXpAEWqK4g=) 2: 9WhKoBtA9w1RuKedqOS6XFmsO3I.roa (hash: CbHe2gPopFpWls+9aZrP72edEhK5Goer7R+Ctk2HNZY=) 3: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: wpj4dwBnzV9hJow7S5ORum2I6Eb3bQy9E+kvoJ07Rkg=) 4: TleCnyfGdZ_mECH_iBY0pup0z6g.roa (hash: HrmWALEujgW08ieMDEygOWdRlqfGF9a1VyxcNiVM0Vg=) 5: cs2tcig_htwGIdVMlsEbECr1KUs.roa (hash: Ltjte90H2AR0ZhY5ZboX1HAAoGLfM6x2vjLJ6VTAc2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:4b:f3:7b:ad:15:09:d0:6a:83:91:6c:2e:2b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Validity Not Before: Dec 6 21:01:32 2025 GMT Not After : Dec 7 21:01:32 2025 GMT Subject: CN=0ee1dcb0a15f3cbdd2b9d387a9f83b9b5ae55d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:b2:12:56:13:f9:55:95:be:9b:29:f2:25: 75:19:6b:95:e7:fd:1f:7c:5f:d0:6d:62:49:a5:bf: 52:79:c3:42:03:5c:10:50:5f:8d:ca:51:94:1a:a4: 0d:32:eb:ca:a0:06:7b:14:e5:1c:85:69:d8:17:7f: 00:5f:a1:6e:80:0d:b0:4b:4c:b7:0d:0a:52:7f:72: 53:67:bf:bf:9a:01:a2:b9:f8:97:58:45:37:6b:47: 96:0d:95:43:6f:0f:ae:44:00:76:94:1e:e0:ea:40: 18:58:62:b6:40:ee:91:48:74:6c:21:dd:bd:6b:80: b7:a3:03:08:34:3f:ae:74:6a:9b:ba:f4:b5:c4:be: 89:3f:f6:4b:3d:ad:0b:62:a3:47:7e:ef:7b:14:7f: ca:22:d1:47:ea:e1:60:f6:19:d3:62:84:72:4d:ad: 9d:12:1d:97:be:73:9a:2c:dd:24:b7:48:5c:6e:11: dc:01:a6:a2:e8:64:53:b1:5d:ca:f2:c6:4c:97:91: 26:c1:58:5e:43:58:d0:5c:a5:31:7a:08:53:af:30: 4a:05:19:ba:5f:67:93:88:c9:6b:51:02:a9:ea:24: b5:b1:dc:be:48:40:74:6b:be:df:5a:28:9d:b0:e3: ff:a0:69:c6:9a:aa:73:2b:bb:f7:fb:29:64:40:07: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E1:DC:B0:A1:5F:3C:BD:D2:B9:D3:87:A9:F8:3B:9B:5A:E5:5D:3C X509v3 Authority Key Identifier: keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a0:a8:ab:ec:8a:93:d3:7f:fd:ad:e7:96:c5:13:33:f3:bd: 9d:18:86:a5:2e:8e:00:d2:c4:0e:9b:b0:4f:de:65:f1:a7:fd: 75:ee:1c:c3:b8:85:8d:5f:2b:19:ae:17:4f:e2:89:b8:a1:59: 2c:90:c0:50:c7:8d:74:b1:90:95:86:76:f6:18:61:d4:7f:ba: 51:1f:60:a8:64:fd:bc:99:81:f1:ce:0c:35:a3:49:8a:d7:36: 02:29:c8:e6:78:e8:01:9b:c9:01:26:8b:6a:a9:b3:bf:ce:dd: 03:be:03:90:bc:78:97:32:9d:76:42:84:8d:0c:90:d5:49:f1: 71:35:fd:5e:b1:80:4d:bc:9d:39:c5:e8:3f:c5:9e:92:66:c1: 2e:cb:f4:bf:68:de:e5:2a:81:e4:49:44:ee:21:57:ad:30:e5: 1e:39:70:04:3d:46:f2:ac:55:16:56:67:b1:af:72:2e:0b:c6: e2:4f:7c:07:dd:38:9f:1b:6a:f5:57:1c:57:2e:4a:3e:33:19: 13:a2:6e:e2:4b:b5:67:49:8d:dc:83:11:ca:d2:7c:72:66:63: 52:e0:7b:e6:08:8f:73:ed:59:7e:44:01:7f:38:ac:ae:30:56: a1:cf:d0:67:76:3f:22:87:a8:72:7a:04:f0:7e:cf:27:2f:17: 92:73:26:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eEvze60VCdBqg5FsLiv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl ZDBlMDEwHhcNMjUxMjA2MjEwMTMyWhcNMjUxMjA3MjEwMTMyWjAzMTEwLwYDVQQD EygwZWUxZGNiMGExNWYzY2JkZDJiOWQzODdhOWY4M2I5YjVhZTU1ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtCyElYT+VWVvpsp8iV1GWuV5/0f fF/QbWJJpb9SecNCA1wQUF+NylGUGqQNMuvKoAZ7FOUchWnYF38AX6FugA2wS0y3 DQpSf3JTZ7+/mgGiufiXWEU3a0eWDZVDbw+uRAB2lB7g6kAYWGK2QO6RSHRsId29 a4C3owMIND+udGqbuvS1xL6JP/ZLPa0LYqNHfu97FH/KItFH6uFg9hnTYoRyTa2d Eh2XvnOaLN0kt0hcbhHcAaai6GRTsV3K8sZMl5EmwVheQ1jQXKUxeghTrzBKBRm6 X2eTiMlrUQKp6iS1sdy+SEB0a77fWiidsOP/oGnGmqpzK7v3+ylkQAcJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7h3LChXzy90rnTh6n4O5ta5V08MB8GA1UdIwQY MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut M2E2ZGU5OWVkZTQ3LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3 LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6Coq+yK k9N//a3nlsUTM/O9nRiGpS6OANLEDpuwT95l8af9de4cw7iFjV8rGa4XT+KJuKFZ LJDAUMeNdLGQlYZ29hhh1H+6UR9gqGT9vJmB8c4MNaNJitc2AinI5njoAZvJASaL aqmzv87dA74DkLx4lzKddkKEjQyQ1UnxcTX9XrGATbydOcXoP8WekmbBLsv0v2je 5SqB5ElE7iFXrTDlHjlwBD1G8qxVFlZnsa9yLgvG4k98B904nxtq9VccVy5KPjMZ E6Ju4ku1Z0mN3IMRytJ8cmZjUuB75giPc+1ZfkQBfzisrjBWoc/QZ3Y/IoeocnoE 8H7PJy8XknMmAg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:54 2025 by rpki-client