This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json) Hash identifier: VB/EFQexo/1/Uj6WCXWISNaht7utj8yDkxkAj2hjwfc= Subject key identifier: DE:85:5C:62:F5:1A:CC:9A:D0:4C:90:CC:ED:B8:A3:73:35:8C:BD:4B Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a Certificate serial: 019AF5AE8B94FDBF8304C56413D045839B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft Manifest number: 0FE5 Signing time: Sat 06 Dec 2025 22:00:48 +0000 Manifest this update: Sat 06 Dec 2025 22:00:48 +0000 Manifest next update: Sun 07 Dec 2025 22:00:48 +0000 Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: Y3dCCJcnQyTQGtLLsLSYvSDdEa0mfsBmiZtjEmQK+2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:8b:94:fd:bf:83:04:c5:64:13:d0:45:83:9b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a Validity Not Before: Dec 6 22:00:48 2025 GMT Not After : Dec 7 22:00:48 2025 GMT Subject: CN=de855c62f51acc9ad04c90ccedb8a373358cbd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:68:12:2d:a6:bd:e1:f2:06:74:4a:2a:92: a5:83:3e:6e:ab:ad:75:c7:97:42:b2:d9:a1:68:19: 80:62:5a:25:ff:7a:e3:32:70:89:ac:9b:f3:d4:b3: 59:9c:8b:54:3c:fc:ba:30:bf:d0:61:bf:12:f0:ad: e9:04:ee:6d:62:31:bb:9c:ab:45:03:d1:b6:eb:23: be:1a:c9:0e:12:2f:32:07:f2:70:6a:92:ea:b1:9a: 87:af:b2:10:dd:69:be:1f:a5:24:ec:41:2f:e4:5f: 2d:8a:54:5f:18:d4:05:36:3e:76:28:63:97:6a:58: c0:56:4c:9d:a3:ef:37:03:b9:3f:bd:44:60:0b:f5: 0f:8d:8a:2e:02:b6:9f:5b:78:07:6d:e6:21:9f:25: 26:ec:51:19:6a:04:e7:89:8b:c9:30:2f:b8:d5:60: c3:8f:26:03:12:e2:8a:96:7c:c6:c9:fe:33:7c:3e: 43:01:f4:b7:2a:c2:ba:71:b8:25:f2:a0:a0:ce:59: 3d:f0:9b:3a:ec:84:65:9f:18:56:09:b8:08:66:45: 12:9f:c7:53:55:3a:96:5f:2d:41:db:d6:c1:e7:21: 97:1b:91:b0:7e:fa:9c:f0:38:ab:b7:36:39:8c:28: ea:6b:2d:c2:89:25:d8:82:22:56:3d:b6:3c:ae:55: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:85:5C:62:F5:1A:CC:9A:D0:4C:90:CC:ED:B8:A3:73:35:8C:BD:4B X509v3 Authority Key Identifier: keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0e:87:7b:5a:97:f0:55:56:2b:9f:90:0a:f1:57:2d:98:a6: 09:0c:76:ba:04:8f:f7:04:7d:7e:81:7e:5b:58:14:31:11:99: 50:69:b4:60:ac:59:18:33:8b:19:6c:08:17:16:fc:c3:76:a0: 80:42:2f:f9:9d:bc:61:93:ee:29:36:e2:3b:fb:d0:d9:76:8b: 23:ee:5b:55:af:6c:81:7a:36:6f:1a:05:00:4c:7e:2a:ac:18: 52:4b:18:c8:4c:68:93:85:b3:9c:4d:e5:9a:76:52:46:c3:5a: 3d:84:22:be:34:5b:40:15:e8:75:de:73:e7:34:94:69:d5:ca: 74:78:10:a6:d4:26:0a:44:f7:e5:e5:cb:e3:5d:ae:17:25:03: 19:b6:e9:e1:95:5a:7a:38:5b:07:4c:f2:05:7f:3c:92:1c:e8: 88:82:6e:b5:1a:52:80:c6:0c:93:a4:cf:62:c8:7b:35:39:3a: 28:9d:19:4e:85:07:76:32:a8:59:bd:a6:bb:77:1c:2a:d1:c7: 3b:77:7c:72:fb:2a:05:08:c8:26:ed:2b:22:41:10:19:c8:1f: 57:56:2a:ec:53:54:0c:3e:66:62:89:79:d5:48:b9:e4:31:8b: 4d:72:9e:5a:2a:8a:11:a6:c5:58:df:17:23:96:ad:6d:7a:6f: 2c:73:b5:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rouU/b+DBMVkE9BFg5t3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MGU2OGM4Mzg5YjA5ZGMzNDU0NjRhNDAwYWYyNzY1Njhl N2Y5NmEwHhcNMjUxMjA2MjIwMDQ4WhcNMjUxMjA3MjIwMDQ4WjAzMTEwLwYDVQQD EyhkZTg1NWM2MmY1MWFjYzlhZDA0YzkwY2NlZGI4YTM3MzM1OGNiZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmxoEi2mveHyBnRKKpKlgz5uq611 x5dCstmhaBmAYlol/3rjMnCJrJvz1LNZnItUPPy6ML/QYb8S8K3pBO5tYjG7nKtF A9G26yO+GskOEi8yB/JwapLqsZqHr7IQ3Wm+H6Uk7EEv5F8tilRfGNQFNj52KGOX aljAVkydo+83A7k/vURgC/UPjYouArafW3gHbeYhnyUm7FEZagTniYvJMC+41WDD jyYDEuKKlnzGyf4zfD5DAfS3KsK6cbgl8qCgzlk98Js67IRlnxhWCbgIZkUSn8dT VTqWXy1B29bB5yGXG5Gwfvqc8DirtzY5jCjqay3CiSXYgiJWPbY8rlWbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6FXGL1Gsya0EyQzO24o3M1jL1LMB8GA1UdIwQY MBaAFJYOaMg4mwncNFRkpACvJ2Vo5/lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YmQ4ZjMtNDc1My00MmNkLThmZjMt NjMzMzE4NjU4OWE5LzEvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83YmQ4ZjMtNDc1My00MmNkLThmZjMtNjMzMzE4NjU4OWE5 LzEvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw6He1qX 8FVWK5+QCvFXLZimCQx2ugSP9wR9foF+W1gUMRGZUGm0YKxZGDOLGWwIFxb8w3ag gEIv+Z28YZPuKTbiO/vQ2XaLI+5bVa9sgXo2bxoFAEx+KqwYUksYyExok4WznE3l mnZSRsNaPYQivjRbQBXodd5z5zSUadXKdHgQptQmCkT35eXL412uFyUDGbbp4ZVa ejhbB0zyBX88khzoiIJutRpSgMYMk6TPYsh7NTk6KJ0ZToUHdjKoWb2mu3ccKtHH O3d8cvsqBQjIJu0rIkEQGcgfV1Yq7FNUDD5mYol51Ui55DGLTXKeWiqKEabFWN8X I5atbXpvLHO1Pw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:41:39 2025 by rpki-client