This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json) Hash identifier: 0NleACPx6+1yaHsqEev+auCJBxFFj87Uo/UDXEdkHqg= Subject key identifier: 1E:2E:AE:92:9A:61:0A:6A:4E:2E:D1:C8:35:13:05:16:7F:1E:2A:0A Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7 Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7 Certificate serial: 019AF31C185EE8E47690100A5B0B558040E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft Manifest number: 0443 Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=) 2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: VCaac2sCVDszIBYEIcS3EO1HnO6hqGahpSlp0kEkJKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:18:5e:e8:e4:76:90:10:0a:5b:0b:55:80:40:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7 Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=1e2eae929a610a6a4e2ed1c8351305167f1e2a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:0a:42:b1:c9:c2:d1:52:38:0c:3d:0e:67: 34:dd:3a:f4:92:79:d3:b8:79:30:81:f2:d8:49:b8: ab:ef:e8:8a:59:d4:02:8d:6a:dc:59:23:b0:80:d6: 2c:f5:68:e1:f8:21:73:5d:70:b4:ce:09:60:b5:49: 4c:12:4d:71:91:24:20:b9:0a:12:c4:79:d5:d3:0a: f0:c1:84:22:63:28:78:da:45:02:25:51:f4:e0:b7: 44:59:4f:b6:0f:9f:6c:61:53:87:5d:d9:94:22:d1: b2:df:29:cd:f8:d1:e2:e1:b4:67:be:92:04:59:1b: b7:7e:33:b6:9f:2d:e2:cb:7f:2d:f4:99:9e:b5:e0: b7:22:e6:d5:02:bd:aa:75:bf:30:63:ab:f2:cc:bd: c4:ff:87:c4:b5:9b:46:d6:02:ad:e3:f8:b9:9a:01: 2a:a2:9b:7e:6a:91:c4:71:f3:bc:3f:6f:99:1e:fb: 4d:34:d6:59:e0:72:44:ed:f7:aa:c8:cd:f2:f9:bd: 8a:99:35:78:61:42:a9:7c:f8:ad:fa:b2:c3:9b:42: 88:d2:c0:54:73:15:9a:24:c0:54:97:d5:63:3f:aa: 00:e7:f1:86:fc:d0:a0:45:65:19:06:8b:44:b8:69: dd:5e:97:ca:5e:e5:0d:ff:fd:3b:26:f5:e6:29:50: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2E:AE:92:9A:61:0A:6A:4E:2E:D1:C8:35:13:05:16:7F:1E:2A:0A X509v3 Authority Key Identifier: keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3e:bd:c7:eb:2c:ab:fe:ee:b2:5e:d1:4c:4f:d0:5c:84:37: f3:b0:ae:07:b0:cd:5e:d3:d7:51:46:e4:6c:e2:a9:f0:5b:9e: c0:b3:6b:08:e6:a3:9a:c2:b3:29:8c:d6:13:39:94:d9:37:b9: d1:18:3b:25:1e:c2:f9:cc:f7:6e:c3:0a:2c:71:b2:43:00:a5: 3c:44:d9:21:19:cf:65:cb:b4:a6:9e:5d:49:02:b4:7a:a7:fa: b1:17:6a:8f:63:d4:9a:06:fd:75:8a:3a:a2:f5:64:62:30:7a: 1c:73:cf:3b:2d:74:3d:77:a0:b4:11:d9:74:d1:46:4b:ab:cd: 6f:33:8c:6b:ae:b1:11:e0:dd:90:5f:f0:cd:78:ba:51:47:93: 6d:12:e3:ae:fe:9f:de:28:8a:c9:7b:d2:29:52:21:b6:82:ae: 54:a2:08:55:65:91:37:58:7d:78:2a:3e:9a:d5:85:31:1d:e0: 9c:72:5b:29:7b:9d:d3:e0:8f:1f:1f:dd:43:4b:2f:5e:a5:50: eb:e8:ae:1d:e1:de:e8:6d:d8:79:a9:ce:13:b9:55:98:47:f5: 30:04:a7:7b:2c:9c:ee:bb:f0:b8:05:bf:23:8d:e9:d1:84:51: 06:6c:20:b4:2b:1f:c3:5d:0b:1b:32:2e:c9:89:99:08:98:9b: 04:6f:b4:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBhe6OR2kBAKWwtVgEDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MmRkY2IzNTA3ODI2N2Y0ZjM3NTJlNWI0Y2NjNjVhNjYz YTYzZTcwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD EygxZTJlYWU5MjlhNjEwYTZhNGUyZWQxYzgzNTEzMDUxNjdmMWUyYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNgKQrHJwtFSOAw9Dmc03Tr0knnT uHkwgfLYSbir7+iKWdQCjWrcWSOwgNYs9Wjh+CFzXXC0zglgtUlMEk1xkSQguQoS xHnV0wrwwYQiYyh42kUCJVH04LdEWU+2D59sYVOHXdmUItGy3ynN+NHi4bRnvpIE WRu3fjO2ny3iy38t9JmeteC3IubVAr2qdb8wY6vyzL3E/4fEtZtG1gKt4/i5mgEq opt+apHEcfO8P2+ZHvtNNNZZ4HJE7feqyM3y+b2KmTV4YUKpfPit+rLDm0KI0sBU cxWaJMBUl9VjP6oA5/GG/NCgRWUZBotEuGndXpfKXuUN//07JvXmKVBiGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4urpKaYQpqTi7RyDUTBRZ/HioKMB8GA1UdIwQY MBaAFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjIt YTRjMWJiY2I4Yzk3LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjItYTRjMWJiY2I4Yzk3 LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT69x+ss q/7usl7RTE/QXIQ387CuB7DNXtPXUUbkbOKp8FuewLNrCOajmsKzKYzWEzmU2Te5 0Rg7JR7C+cz3bsMKLHGyQwClPETZIRnPZcu0pp5dSQK0eqf6sRdqj2PUmgb9dYo6 ovVkYjB6HHPPOy10PXegtBHZdNFGS6vNbzOMa66xEeDdkF/wzXi6UUeTbRLjrv6f 3iiKyXvSKVIhtoKuVKIIVWWRN1h9eCo+mtWFMR3gnHJbKXud0+CPHx/dQ0svXqVQ 6+iuHeHe6G3YeanOE7lVmEf1MASneyyc7rvwuAW/I43p0YRRBmwgtCsfw10LGzIu yYmZCJibBG+0xg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:30 2025 by rpki-client