This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json) Hash identifier: X4qTNsOvaiPkAvdksfWNsL6nn5ifjV+PaBLYFKRZ0aM= Subject key identifier: 71:10:81:D0:6F:DE:CD:BF:1E:4F:DA:46:16:B5:D0:8B:DB:ED:07:B2 Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42 Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442 Certificate serial: 019AF209842CC0F817F5CDD6177BC00AC745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft Manifest number: 171C Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=) 2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: WhE9tlWIXQmtFLukm3IR/kvC26rT/OJbUa6nhiU3GEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:84:2c:c0:f8:17:f5:cd:d6:17:7b:c0:0a:c7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=711081d06fdecdbf1e4fda4616b5d08bdbed07b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:38:1e:a3:27:31:07:ce:84:e8:9d:17:1d: 5d:97:36:9b:f9:94:2c:6d:6e:eb:9e:57:a6:3b:e0: 6a:4a:77:ff:1d:68:c4:fd:5f:56:2e:b3:81:32:ec: cd:51:69:c5:91:4d:da:d4:1f:2e:40:f0:1b:ea:69: 95:b0:ab:04:7e:9d:20:70:f0:93:89:f0:b1:87:7c: 1c:6c:a3:66:39:be:b4:db:cc:9f:66:a3:c4:21:bf: ab:cb:22:aa:88:5e:37:93:4d:b9:ae:ba:b5:cc:5b: e1:d1:b3:76:95:01:b8:c5:bf:98:6d:f3:29:c1:bd: ba:28:6a:6b:f5:1b:96:06:ac:60:bc:9e:cd:49:be: 66:d0:25:4e:96:b1:b9:e4:11:bf:65:f1:b7:75:f5: 29:aa:ec:0c:79:35:76:1b:8d:62:a7:c6:7d:b1:69: 12:4e:f6:49:51:35:95:dd:0d:5a:55:59:ce:60:3e: 56:45:48:ea:6f:a5:33:f6:c0:48:f0:1f:67:f2:0e: a1:69:fe:4b:30:7e:7a:e5:76:a1:db:aa:01:65:26: 3f:c4:3c:83:23:ea:1f:c3:b8:68:03:8c:a3:1b:11: 83:ba:8c:33:e8:bb:4c:3f:16:d3:c3:ac:d1:b3:21: c8:6f:da:bd:de:52:c2:06:18:d3:e3:d8:63:c8:e6: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:81:D0:6F:DE:CD:BF:1E:4F:DA:46:16:B5:D0:8B:DB:ED:07:B2 X509v3 Authority Key Identifier: keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:06:ab:4a:48:a2:69:dd:5b:cd:ad:61:ac:34:f8:b1:a4:91: b8:97:e6:8b:ca:77:0f:a5:6b:29:04:d9:6f:66:3f:d5:31:a1: 98:e7:fd:a4:98:76:03:8d:6c:6d:c1:3b:49:77:c1:54:6a:64: 5d:2d:7e:e8:82:e9:d2:08:2c:48:15:0f:3e:7f:0b:0c:3c:a4: 66:47:af:aa:d9:d2:db:3e:a6:1e:9a:48:60:d4:4d:4e:ce:ea: 7f:af:ea:fc:f6:ac:54:f5:05:6b:5b:21:4a:f4:9f:6e:30:1a: f1:61:20:d5:88:87:97:0c:3a:9d:0f:af:70:81:86:bb:93:fb: 4a:bd:0d:de:4b:a3:b5:98:1e:a3:4c:37:2b:df:43:66:dc:f0: 2e:ca:4f:8d:f0:4f:b8:0e:1f:d9:ee:cd:48:85:24:9b:c6:84: 9c:be:b6:93:5a:be:d9:d9:9c:85:dc:4e:c6:ad:d0:4c:38:50: be:c0:3b:76:a6:7c:0a:0e:28:53:cd:96:2b:f1:88:da:be:77: 5c:bf:d0:fd:2a:8a:dc:2c:54:f8:4a:e8:bb:58:7c:5b:4c:b3: 9d:3c:3e:ba:37:3b:c8:e9:78:b7:c0:53:39:71:03:d2:96:7b: 0b:1e:07:2b:5b:6c:26:56:0d:a0:44:8a:ca:75:3d:ba:82:cd: 97:bc:e8:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYQswPgX9c3WF3vACsdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh NjM0NDIwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD Eyg3MTEwODFkMDZmZGVjZGJmMWU0ZmRhNDYxNmI1ZDA4YmRiZWQwN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXo4HqMnMQfOhOidFx1dlzab+ZQs bW7rnlemO+BqSnf/HWjE/V9WLrOBMuzNUWnFkU3a1B8uQPAb6mmVsKsEfp0gcPCT ifCxh3wcbKNmOb6028yfZqPEIb+ryyKqiF43k025rrq1zFvh0bN2lQG4xb+YbfMp wb26KGpr9RuWBqxgvJ7NSb5m0CVOlrG55BG/ZfG3dfUpquwMeTV2G41ip8Z9sWkS TvZJUTWV3Q1aVVnOYD5WRUjqb6Uz9sBI8B9n8g6haf5LMH565Xah26oBZSY/xDyD I+ofw7hoA4yjGxGDuowz6LtMPxbTw6zRsyHIb9q93lLCBhjT49hjyOYNDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEQgdBv3s2/Hk/aRha10Ivb7QeyMB8GA1UdIwQY MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt ZDgxOTc5NGEzMmEzLzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAarSkii ad1bza1hrDT4saSRuJfmi8p3D6VrKQTZb2Y/1TGhmOf9pJh2A41sbcE7SXfBVGpk XS1+6ILp0ggsSBUPPn8LDDykZkevqtnS2z6mHppIYNRNTs7qf6/q/PasVPUFa1sh SvSfbjAa8WEg1YiHlww6nQ+vcIGGu5P7Sr0N3kujtZgeo0w3K99DZtzwLspPjfBP uA4f2e7NSIUkm8aEnL62k1q+2dmchdxOxq3QTDhQvsA7dqZ8Cg4oU82WK/GI2r53 XL/Q/SqK3CxU+Erou1h8W0yznTw+ujc7yOl4t8BTOXED0pZ7Cx4HK1tsJlYNoESK ynU9uoLNl7zoXA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:42 2025 by rpki-client