This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json) Hash identifier: RLPuiZxqXvIXf/IA4gcxqmSGmLQFmBxSzzzKKlHnwLw= Subject key identifier: 21:B6:C6:E4:F9:A8:02:21:A2:D7:B8:A8:41:64:3A:3A:29:A5:1C:96 Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Certificate serial: 019AF19ACE38210107B7523C12AC91E25BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft Manifest number: 046A Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=) 2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: jN1ZoAqfH768h1bD/Ht+3RKjM+Rlc5oVVIc6clz23vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ce:38:21:01:07:b7:52:3c:12:ac:91:e2:5b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=21b6c6e4f9a80221a2d7b8a841643a3a29a51c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:01:bb:b9:4c:e1:fd:14:b5:a7:ab:46:d5: ea:e9:c6:84:5b:38:a4:02:4f:52:79:2b:c0:73:f7: 04:dd:42:7a:8f:64:1c:de:ff:e0:6c:e1:07:9e:cc: 56:38:b4:8c:8e:6d:13:bb:b3:5b:76:2a:37:7f:c8: e5:d1:18:6b:1e:f1:b0:c8:3b:74:87:89:1d:e9:39: 70:d6:93:5c:65:f6:1d:0d:32:7a:b1:52:1b:18:c9: fb:a9:2f:8e:96:05:da:6e:28:a7:15:b6:59:73:5f: fe:40:8d:9a:07:33:c0:3e:39:71:5b:73:0f:98:76: 22:81:b6:f2:58:14:b1:83:df:ff:68:7a:fe:cc:11: 62:4f:30:fe:71:9a:4a:c1:cb:1e:fd:9d:ca:6b:e3: 9b:41:8b:a9:e0:9f:cf:53:53:45:65:ac:8e:a1:ac: ea:94:51:6c:97:9f:c5:6d:e7:d1:46:31:46:fc:8d: 53:80:d2:4f:8b:3e:cf:7b:fe:a7:04:88:0e:a9:b8: 6d:9c:b5:59:cb:3e:b2:ea:f7:35:88:5b:04:41:b3: 35:e8:97:14:18:b4:c0:9d:85:d1:10:e3:94:46:9d: 4a:81:61:14:23:b1:07:59:0d:34:86:6b:83:43:26: bf:5f:c5:31:f6:43:c4:22:09:83:57:02:26:b2:20: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:C6:E4:F9:A8:02:21:A2:D7:B8:A8:41:64:3A:3A:29:A5:1C:96 X509v3 Authority Key Identifier: keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a4:ad:06:54:4b:75:5e:a6:c8:59:21:33:c5:85:5f:ad:2d: 39:81:5d:2b:45:fd:30:cd:7d:b3:9e:30:df:4b:8a:4f:79:00: 40:fd:14:c8:25:94:8c:16:e3:92:7f:e2:4f:82:c5:2c:20:d0: 9e:ae:d6:1b:64:52:f1:f0:3c:44:09:3e:7e:61:ed:08:67:46: 55:60:61:15:98:d3:7b:45:47:fc:9e:5b:67:76:2f:bd:f6:32: cf:76:b5:f5:f5:b3:16:a9:ac:59:59:80:e6:ba:62:e7:3e:0a: 73:c6:b7:bd:2d:83:f9:b8:a4:17:0a:f0:38:26:c9:18:d1:3d: c7:a8:7a:67:8a:53:ee:d9:ad:cb:a4:d6:33:35:28:1c:2d:47: 1d:88:ff:01:2f:d2:52:41:d7:53:6a:46:3e:2e:2d:e6:e8:4b: e1:e4:14:00:01:87:86:25:2b:b1:04:2b:72:e6:09:67:0e:99: 0f:48:36:ad:63:4e:f9:19:89:9c:94:b0:b1:4c:33:6e:d9:d7: b1:c6:28:de:ff:98:30:cf:81:b1:51:d5:a3:b3:43:f5:3f:73: fd:fb:09:5a:2a:a1:18:e2:85:6a:c7:d2:f2:2a:fd:37:ea:28: 15:45:67:fc:9b:0c:42:0a:76:24:df:b0:21:22:21:5e:bb:f7: 66:52:44:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms44IQEHt1I8EqyR4lvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzk1NWY0YzJjNzE1N2FiYmRiZmU4MDljZjE5NTYwNTk0 OWE2OTgwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EygyMWI2YzZlNGY5YTgwMjIxYTJkN2I4YTg0MTY0M2EzYTI5YTUxYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uoBu7lM4f0UtaerRtXq6caEWzik Ak9SeSvAc/cE3UJ6j2Qc3v/gbOEHnsxWOLSMjm0Tu7Nbdio3f8jl0RhrHvGwyDt0 h4kd6Tlw1pNcZfYdDTJ6sVIbGMn7qS+OlgXabiinFbZZc1/+QI2aBzPAPjlxW3MP mHYigbbyWBSxg9//aHr+zBFiTzD+cZpKwcse/Z3Ka+ObQYup4J/PU1NFZayOoazq lFFsl5/FbefRRjFG/I1TgNJPiz7Pe/6nBIgOqbhtnLVZyz6y6vc1iFsEQbM16JcU GLTAnYXREOOURp1KgWEUI7EHWQ00hmuDQya/X8Ux9kPEIgmDVwImsiCFQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG2xuT5qAIhote4qEFkOjoppRyWMB8GA1UdIwQY MBaAFC3JVfTCxxV6u9v+gJzxlWBZSaaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEt MTE5ODIwYjUyMmFkLzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEtMTE5ODIwYjUyMmFk LzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaStBlRL dV6myFkhM8WFX60tOYFdK0X9MM19s54w30uKT3kAQP0UyCWUjBbjkn/iT4LFLCDQ nq7WG2RS8fA8RAk+fmHtCGdGVWBhFZjTe0VH/J5bZ3YvvfYyz3a19fWzFqmsWVmA 5rpi5z4Kc8a3vS2D+bikFwrwOCbJGNE9x6h6Z4pT7tmty6TWMzUoHC1HHYj/AS/S UkHXU2pGPi4t5uhL4eQUAAGHhiUrsQQrcuYJZw6ZD0g2rWNO+RmJnJSwsUwzbtnX scYo3v+YMM+BsVHVo7ND9T9z/fsJWiqhGOKFasfS8ir9N+ooFUVn/JsMQgp2JN+w ISIhXrv3ZlJEdg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:40 2025 by rpki-client