This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json) Hash identifier: huKxybFIX+pxEUPERWNWFnKd0yemmH9VrjybvxREw1s= Subject key identifier: AB:CE:44:D0:8E:14:5D:5C:6F:A6:29:8C:3B:0C:66:82:18:DA:3A:A4 Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1 Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1 Certificate serial: 019AFAD6699E1A9DBF77053CE7DF87291913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft Manifest number: 1373 Signing time: Sun 07 Dec 2025 22:02:26 +0000 Manifest this update: Sun 07 Dec 2025 22:02:26 +0000 Manifest next update: Mon 08 Dec 2025 22:02:26 +0000 Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=) 2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: rc23zJ9EJ/JEBB08RlSdsFa9LD149OfHyzorJ1P0bvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d6:69:9e:1a:9d:bf:77:05:3c:e7:df:87:29:19:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1 Validity Not Before: Dec 7 22:02:26 2025 GMT Not After : Dec 8 22:02:26 2025 GMT Subject: CN=abce44d08e145d5c6fa6298c3b0c668218da3aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:cd:ac:5b:84:7f:21:9f:db:78:65:ee:dc: b0:20:ea:d8:c5:c1:e6:b9:b2:ec:f7:81:bd:90:b9: fb:30:77:98:09:52:27:2d:68:25:37:c1:cc:cc:39: bd:75:70:b3:04:d6:d1:49:65:f3:8a:47:48:c0:5e: f9:67:97:48:08:82:4c:99:ab:21:b0:c4:ce:7f:f3: d4:65:05:2a:9b:d1:89:77:8d:5f:e2:fd:9f:b2:17: 3e:0c:32:64:1d:f7:f6:6c:15:fc:f6:61:65:0e:05: 25:91:92:2b:6e:79:f2:d6:ce:eb:aa:00:a1:e8:81: 40:d3:e4:e0:f7:b2:f6:cd:c1:b8:08:e4:71:94:53: 75:a1:d5:51:f1:61:c8:24:ae:e2:6b:a7:03:34:d2: a0:03:3f:74:d0:1f:95:bb:2d:dd:7a:62:66:1c:1d: 6d:20:b2:bd:0f:a5:ae:cb:87:bd:99:74:02:d0:17: 7c:4c:54:c3:08:0b:f6:2d:66:63:a9:5d:6a:d6:f3: f3:6d:5a:cf:58:4b:4a:0a:d0:af:46:17:fc:7c:b8: 8c:9c:98:b3:19:d8:f6:14:3e:a3:63:bd:30:3d:4c: a7:ca:0e:3a:a5:17:a3:1e:dd:fc:dc:0c:f7:84:0c: 06:58:68:78:9c:7e:5c:14:34:20:81:4f:39:9c:3a: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CE:44:D0:8E:14:5D:5C:6F:A6:29:8C:3B:0C:66:82:18:DA:3A:A4 X509v3 Authority Key Identifier: keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7b:28:26:05:d1:9b:85:b1:d0:5e:35:78:e1:80:c5:83:32: 9c:fe:3e:ae:47:0c:af:88:b3:8a:0c:b2:48:fc:cc:10:6d:f9: 66:ac:38:eb:32:4e:71:bc:a9:88:be:c4:91:03:d2:1c:c1:55: 19:d5:8e:f7:f5:9f:ab:4a:86:01:76:a6:7a:da:fa:14:ba:6e: bf:de:b1:e7:e7:8e:cd:1c:22:74:13:72:9e:11:37:24:16:dc: 3d:ae:23:c6:c7:5a:23:99:56:aa:86:be:e5:c3:79:f3:f5:04: 20:35:2c:52:ee:09:8c:fa:6e:da:57:f6:65:1d:d4:d0:e1:17: e9:af:37:1a:08:fb:f0:df:7f:e2:57:0d:c9:75:bf:d5:7a:08: aa:95:ce:dd:ce:9e:80:ff:9f:b9:8c:3f:af:2b:61:0d:5c:55: dc:c1:82:6a:88:00:0f:81:99:36:13:83:59:d8:b9:28:4d:e8: 5b:02:1b:7f:b5:08:a8:98:5d:3d:1f:e7:a3:7c:27:fa:88:7d: c9:6d:0a:f1:8d:e7:14:ce:75:1d:1a:e6:93:c4:55:e4:b6:b1: 48:20:d0:8b:3d:09:2c:a4:4b:aa:e3:59:e9:0c:39:e5:25:5d: 80:d7:5f:33:da:79:7a:71:3b:88:ec:a4:f7:0c:46:61:23:12: 25:2e:88:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61mmeGp2/dwU859+HKRkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZmQwM2I1ZjM1YjMxN2I0ZDMyZmYxYTRiMmMxN2JiMzc2 YzIxZTEwHhcNMjUxMjA3MjIwMjI2WhcNMjUxMjA4MjIwMjI2WjAzMTEwLwYDVQQD EyhhYmNlNDRkMDhlMTQ1ZDVjNmZhNjI5OGMzYjBjNjY4MjE4ZGEzYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUPNrFuEfyGf23hl7tywIOrYxcHm ubLs94G9kLn7MHeYCVInLWglN8HMzDm9dXCzBNbRSWXzikdIwF75Z5dICIJMmash sMTOf/PUZQUqm9GJd41f4v2fshc+DDJkHff2bBX89mFlDgUlkZIrbnny1s7rqgCh 6IFA0+Tg97L2zcG4CORxlFN1odVR8WHIJK7ia6cDNNKgAz900B+Vuy3demJmHB1t ILK9D6Wuy4e9mXQC0Bd8TFTDCAv2LWZjqV1q1vPzbVrPWEtKCtCvRhf8fLiMnJiz Gdj2FD6jY70wPUynyg46pRejHt383Az3hAwGWGh4nH5cFDQggU85nDoKMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvORNCOFF1cb6YpjDsMZoIY2jqkMB8GA1UdIwQY MBaAFJX9A7XzWzF7TTL/GkssF7s3bCHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et ZDYwZjQ0YTkzNGIxLzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx LzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHsoJgXR m4Wx0F41eOGAxYMynP4+rkcMr4izigyySPzMEG35Zqw46zJOcbypiL7EkQPSHMFV GdWO9/Wfq0qGAXametr6FLpuv96x5+eOzRwidBNynhE3JBbcPa4jxsdaI5lWqoa+ 5cN58/UEIDUsUu4JjPpu2lf2ZR3U0OEX6a83Ggj78N9/4lcNyXW/1XoIqpXO3c6e gP+fuYw/rythDVxV3MGCaogAD4GZNhODWdi5KE3oWwIbf7UIqJhdPR/no3wn+oh9 yW0K8Y3nFM51HRrmk8RV5LaxSCDQiz0JLKRLquNZ6Qw55SVdgNdfM9p5enE7iOyk 9wxGYSMSJS6IOQ== -----END CERTIFICATE-----Generated at Mon Dec 8 03:33:00 2025 by rpki-client