This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json) Hash identifier: vsFY0D7XTOnmrmkAKL+Wy27pVBgG+UKdzdPzhwBTcCk= Subject key identifier: 1A:3A:80:32:D2:CA:32:7D:D3:65:AE:36:8A:30:12:66:EC:95:3D:BF Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Certificate serial: 019AF19B39BA09BADFD3E0BABE485B4B4D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft Manifest number: 1702 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: B2F16WkkodMlTKI1qTWvjBHxyD0yU2CyNmHDPnAMBvM=) 2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:ba:09:ba:df:d3:e0:ba:be:48:5b:4b:4d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=1a3a8032d2ca327dd365ae368a301266ec953dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:53:06:9a:b4:3e:ed:a8:93:63:1e:b4:1d: 60:60:4f:ca:a4:62:a9:80:f8:b7:4c:6b:a3:f8:0f: 04:89:f3:d5:76:b3:07:47:b4:60:bf:f4:bf:e4:60: 45:cb:49:37:b3:c4:31:25:bd:25:6b:48:67:2c:50: 0d:ab:06:0e:7e:6a:19:d3:96:de:fe:94:bd:f8:6d: 78:3c:6f:44:4c:41:12:f7:b5:df:c1:8b:6b:dd:46: be:dc:d4:38:38:17:4a:ad:e9:c1:68:b9:9a:ad:cd: 40:77:99:64:b2:24:2e:6e:9b:67:ba:eb:b4:a9:f3: 28:97:e5:bc:5c:7f:ce:f6:e0:7d:da:6b:f1:ba:1d: 52:63:cb:f4:c5:c8:cd:60:b8:b4:2f:68:bb:ad:6d: a9:bc:82:9a:8a:4b:fa:ef:01:23:ff:a1:9c:68:8d: d1:ec:9e:c2:8b:d7:ac:6f:12:61:0d:de:b4:c6:c3: 10:bf:9a:1c:85:42:47:6d:92:f3:47:ad:dc:8d:79: e8:43:18:c8:8a:96:89:1e:12:93:31:4a:43:33:76: 80:67:80:55:51:2b:a9:3d:4d:ed:d0:18:bb:c3:18: 4c:fc:6b:6f:60:32:24:fd:11:9b:bb:a2:67:c9:1e: 95:f3:8d:04:2c:3d:c6:73:ea:78:96:0e:46:1a:70: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3A:80:32:D2:CA:32:7D:D3:65:AE:36:8A:30:12:66:EC:95:3D:BF X509v3 Authority Key Identifier: keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cb:38:68:93:d8:7c:a2:e3:11:59:0f:63:65:ba:df:1b:1c: da:97:03:3d:2f:f7:48:da:18:7c:3f:df:d1:70:5d:04:c1:32: ed:7f:80:d8:17:db:15:9a:fb:4b:ca:6c:7f:a3:ad:9e:f2:b9: f2:cd:ea:1c:27:e1:fb:7d:31:6f:85:7c:34:b2:db:44:46:b3: 02:b6:07:71:59:90:66:6c:12:f9:81:90:0d:44:5d:90:4b:68: 80:3c:26:7a:b2:90:e7:06:51:3f:c6:ea:c4:c7:5c:15:cc:cd: 16:3f:9c:5d:d4:72:9f:bd:dc:cd:d4:85:7c:29:40:80:11:7f: 89:72:57:fa:c4:3a:9c:cb:6e:f8:a5:03:a1:8d:54:e2:76:14: f8:19:fc:7b:09:b1:62:09:3f:71:3d:c2:70:2d:30:81:62:72: 6e:c7:a8:71:5c:49:a7:17:a7:9e:a1:8d:3b:63:34:a3:fe:e3: b6:f9:2a:7b:25:e7:57:a0:d0:0c:44:75:fd:b7:bd:05:7d:9f: 0d:be:ef:9d:85:06:55:ec:a3:30:8f:51:94:e3:85:bd:2c:75: 14:25:3c:00:f7:3f:8f:c0:28:b6:33:53:90:2d:36:be:17:0a: 25:b8:df:f8:6b:3d:87:a7:0b:2c:67:22:b3:05:7e:6c:86:9f: d3:09:a3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzm6Cbrf0+C6vkhbS011MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy Nzg1MjEwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EygxYTNhODAzMmQyY2EzMjdkZDM2NWFlMzY4YTMwMTI2NmVjOTUzZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c9TBpq0Pu2ok2MetB1gYE/KpGKp gPi3TGuj+A8EifPVdrMHR7Rgv/S/5GBFy0k3s8QxJb0la0hnLFANqwYOfmoZ05be /pS9+G14PG9ETEES97XfwYtr3Ua+3NQ4OBdKrenBaLmarc1Ad5lksiQubptnuuu0 qfMol+W8XH/O9uB92mvxuh1SY8v0xcjNYLi0L2i7rW2pvIKaikv67wEj/6GcaI3R 7J7Ci9esbxJhDd60xsMQv5ochUJHbZLzR63cjXnoQxjIipaJHhKTMUpDM3aAZ4BV USupPU3t0Bi7wxhM/GtvYDIk/RGbu6JnyR6V840ELD3Gc+p4lg5GGnACMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo6gDLSyjJ902WuNoowEmbslT2/MB8GA1UdIwQY MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3 LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8s4aJPY fKLjEVkPY2W63xsc2pcDPS/3SNoYfD/f0XBdBMEy7X+A2BfbFZr7S8psf6OtnvK5 8s3qHCfh+30xb4V8NLLbREazArYHcVmQZmwS+YGQDURdkEtogDwmerKQ5wZRP8bq xMdcFczNFj+cXdRyn73czdSFfClAgBF/iXJX+sQ6nMtu+KUDoY1U4nYU+Bn8ewmx Ygk/cT3CcC0wgWJybseocVxJpxennqGNO2M0o/7jtvkqeyXnV6DQDER1/be9BX2f Db7vnYUGVeyjMI9RlOOFvSx1FCU8APc/j8AotjNTkC02vhcKJbjf+Gs9h6cLLGci swV+bIaf0wmjow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:52 2025 by rpki-client