This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json) Hash identifier: p9dvotg6XTc/ZP3pWrnR8UPv90IO/JO6TzgwrL5vmuI= Subject key identifier: CA:8C:22:D9:77:81:3A:4D:33:D5:B2:95:B3:4E:F6:63:C9:6A:4B:F0 Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81 Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81 Certificate serial: 019AF27753DBDD75756743266B0ABB0050BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 07:01:37 +0000 Manifest this update: Sat 06 Dec 2025 07:01:37 +0000 Manifest next update: Sun 07 Dec 2025 07:01:37 +0000 Files and hashes: 1: MCsIROpcTR7JKSRfmFoIKjJ_nz4.roa (hash: R67ARze8qlkUfDP9bKevHmAROQGEYMGNSr3mOqKWMMQ=) 2: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: B3DihfMTiZ3aYeEUBZEthw0rbjR5zT6MJWt8KTKLz+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:53:db:dd:75:75:67:43:26:6b:0a:bb:00:50:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81 Validity Not Before: Dec 6 07:01:37 2025 GMT Not After : Dec 7 07:01:37 2025 GMT Subject: CN=ca8c22d977813a4d33d5b295b34ef663c96a4bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:a2:f4:cf:d1:e0:a0:64:9d:8c:8e:82:23: 21:40:02:b0:7e:87:1f:81:27:69:23:84:13:3d:cf: 5b:9e:81:60:89:ce:ef:96:65:b6:6c:7d:43:62:db: 18:0e:84:8b:5a:e8:28:54:c4:16:cf:87:4f:a6:85: 3d:4a:eb:6e:ff:00:61:0a:78:86:05:8e:34:a4:5a: b8:8f:7c:ed:8d:b7:74:96:f3:81:06:53:21:57:6c: 53:11:04:23:8e:a5:cf:66:37:d6:57:a0:2b:c5:f2: 60:84:f9:da:93:15:79:dc:f5:0a:a7:d6:2f:e9:f9: ee:69:87:0b:ad:fb:b4:fa:41:82:13:23:78:52:b0: e6:7b:32:d0:1c:fa:ff:ae:81:ee:49:f8:16:25:b9: 17:1c:b4:c4:8f:73:92:80:f4:77:88:c4:af:be:f9: d0:b2:34:19:47:e9:20:97:23:f5:84:79:a4:89:94: f2:c0:10:76:e5:6a:c9:8f:54:a1:69:41:a7:d8:26: 91:87:7b:81:55:30:0b:b4:38:db:f7:b4:d2:03:a4: d4:24:f7:12:ec:ea:99:8e:b2:2d:c3:46:6f:1d:73: a9:e4:d4:fa:24:8b:d9:d7:38:ec:08:47:2a:92:d3: 53:31:81:1d:2f:9a:b7:eb:a9:ea:f5:ed:93:2f:c8: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8C:22:D9:77:81:3A:4D:33:D5:B2:95:B3:4E:F6:63:C9:6A:4B:F0 X509v3 Authority Key Identifier: keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b7:e4:48:84:11:7f:c0:60:aa:40:2b:cd:b2:bd:96:1a:29: f4:c0:b1:a1:29:ef:81:fe:83:05:56:46:76:72:11:65:2c:ad: 13:c8:99:cb:98:d4:b5:49:58:e6:f6:40:44:73:af:69:18:b8: f9:f7:d5:ce:b3:86:69:02:1a:17:13:02:13:07:0a:9c:ca:40: 27:e6:98:5d:a8:68:c4:21:13:3b:1c:b0:51:c3:6e:62:e4:0c: ba:0d:38:0d:d3:8b:fc:31:68:7a:b8:a6:0b:f1:56:83:2b:36: b3:0f:bd:13:b2:f9:ba:2c:f5:77:77:89:38:38:36:a7:17:7d: f9:4d:3e:28:1e:2b:b7:79:b4:ff:bf:c7:65:dc:8d:bc:b4:35: a2:b4:c3:ba:92:f0:16:4e:07:f5:d9:f6:5b:06:78:16:a9:08: 82:11:3e:14:9e:fb:a9:27:82:02:a9:1d:7b:5b:2e:44:60:4d: 0a:77:4f:a2:72:35:7d:d5:cc:01:1b:3c:b2:8e:f3:9b:9d:9a: a2:a7:95:a3:ac:6d:bd:a3:1b:68:d0:b0:22:37:b1:76:7d:7b: 2d:ac:45:53:e8:74:d9:08:c3:cf:d5:4a:84:7a:71:31:d5:b1: 99:81:47:fe:65:1f:58:f1:d2:1c:a0:27:1d:b6:97:aa:2e:52: 0f:b9:ad:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd1Pb3XV1Z0Mmawq7AFC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWEyODM2MzVjYjNiZDE1MjNhODVkZGM5Y2FmNTMwNTY4 ZDJmODEwHhcNMjUxMjA2MDcwMTM3WhcNMjUxMjA3MDcwMTM3WjAzMTEwLwYDVQQD EyhjYThjMjJkOTc3ODEzYTRkMzNkNWIyOTViMzRlZjY2M2M5NmE0YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hqi9M/R4KBknYyOgiMhQAKwfocf gSdpI4QTPc9bnoFgic7vlmW2bH1DYtsYDoSLWugoVMQWz4dPpoU9Sutu/wBhCniG BY40pFq4j3ztjbd0lvOBBlMhV2xTEQQjjqXPZjfWV6ArxfJghPnakxV53PUKp9Yv 6fnuaYcLrfu0+kGCEyN4UrDmezLQHPr/roHuSfgWJbkXHLTEj3OSgPR3iMSvvvnQ sjQZR+kglyP1hHmkiZTywBB25WrJj1ShaUGn2CaRh3uBVTALtDjb97TSA6TUJPcS 7OqZjrItw0ZvHXOp5NT6JIvZ1zjsCEcqktNTMYEdL5q366nq9e2TL8h9nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqMItl3gTpNM9WylbNO9mPJakvwMB8GA1UdIwQY MBaAFJXqKDY1yzvRUjqF3cnK9TBWjS+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81YjQ2YmItMGFmNC00N2Q2LWE0Yjgt N2JhMjY4NmVhNTE4LzEvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi81YjQ2YmItMGFmNC00N2Q2LWE0YjgtN2JhMjY4NmVhNTE4 LzEvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLfkSIQR f8BgqkArzbK9lhop9MCxoSnvgf6DBVZGdnIRZSytE8iZy5jUtUlY5vZARHOvaRi4 +ffVzrOGaQIaFxMCEwcKnMpAJ+aYXahoxCETOxywUcNuYuQMug04DdOL/DFoerim C/FWgys2sw+9E7L5uiz1d3eJODg2pxd9+U0+KB4rt3m0/7/HZdyNvLQ1orTDupLw Fk4H9dn2WwZ4FqkIghE+FJ77qSeCAqkde1suRGBNCndPonI1fdXMARs8so7zm52a oqeVo6xtvaMbaNCwIjexdn17LaxFU+h02QjDz9VKhHpxMdWxmYFH/mUfWPHSHKAn HbaXqi5SD7mtDA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:01 2025 by rpki-client