This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json) Hash identifier: Fa14eBSFi6Ir4jnFKOU4VAONSQmxQK9hOGZVp9T8wLY= Subject key identifier: 98:F9:04:AA:84:2C:55:58:99:D9:1D:E0:FE:DB:03:6C:0D:62:30:92 Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55 Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55 Certificate serial: 019AF2098FF3CCC103B3EE718E8A1CF255B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft Manifest number: 0C9D Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=) 2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: 4NXHxZ/Ju0teIowV1Uv+VzkNg90Rk5slJN8b2aw3oTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8f:f3:cc:c1:03:b3:ee:71:8e:8a:1c:f2:55:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=98f904aa842c555899d91de0fedb036c0d623092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:31:1a:ba:1f:86:bb:10:94:48:1e:49:c5: fd:75:db:5c:3a:eb:58:16:91:cd:9a:5f:84:c6:90: 5b:53:2d:7d:82:08:07:20:92:0b:75:d6:47:cc:b1: 0e:0e:5a:57:c3:2d:3a:3b:c0:d3:e6:db:97:2b:58: 7d:1c:51:fb:12:d0:72:92:62:28:29:96:b2:04:68: a8:ce:cb:f9:b5:03:80:1b:00:d9:9c:86:17:b6:48: 13:a5:27:b5:66:ec:ad:3b:5f:b1:78:fc:14:42:f8: 48:91:d7:8f:b8:c0:8b:c7:42:85:79:b9:44:e4:a6: 0f:0b:1a:e8:9e:ba:a5:ac:5c:a4:82:a9:4c:6c:17: fb:08:a4:fb:84:5f:4a:51:0e:1c:a2:6d:24:de:fc: 65:2c:08:dc:a9:38:50:33:93:ea:0e:52:45:93:59: af:04:c6:ce:be:b0:2a:74:22:a1:d8:87:d8:18:d5: fd:be:f6:bb:5b:c9:56:09:e1:c3:3b:ee:21:b0:08: 4d:7f:90:2c:8b:63:95:fa:e2:c7:28:2d:cc:02:6d: 61:23:31:15:79:07:b1:a7:95:de:a0:dd:49:e7:18: 15:01:1d:7d:df:2d:1d:01:57:1b:ce:41:88:46:61: 9c:2b:9c:6b:c7:83:2a:e2:0d:6d:e3:a0:f3:af:8d: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F9:04:AA:84:2C:55:58:99:D9:1D:E0:FE:DB:03:6C:0D:62:30:92 X509v3 Authority Key Identifier: keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5a:ac:86:cd:be:02:fe:2f:36:c5:ca:89:2a:98:0d:d4:4b: a6:ec:fe:e2:5a:d2:95:a8:61:6e:da:aa:1c:6a:59:46:21:d4: df:8a:98:d6:f9:47:23:81:9a:1b:f7:4a:04:59:ce:30:96:b9: 95:d1:e3:ed:b2:49:44:5e:c2:1b:cc:47:4d:63:bd:4e:75:be: c7:13:97:83:f0:e9:77:47:40:20:4a:5b:cd:4c:11:b5:54:e1: d3:fb:36:31:3a:cc:f5:09:13:c9:a9:9d:84:e8:6d:aa:e9:d0: 55:9d:fe:3e:3a:ea:8b:05:0b:82:38:f6:b2:4e:bc:cc:17:6f: e8:25:1c:b3:23:d3:15:d2:ee:1b:a4:16:58:fb:6f:a0:4a:6c: e7:87:50:0d:7e:e8:ad:e6:50:41:f3:f8:a2:08:5a:aa:15:15: b5:d0:45:96:85:20:53:6f:6f:03:af:83:16:a1:92:f6:65:46: a5:a5:21:10:92:f7:b4:74:eb:19:b7:7d:2a:3d:a9:2d:27:8f: 5d:89:f9:7a:06:c4:2b:20:47:38:e5:3a:3c:82:dc:5b:f0:53: 75:9d:76:97:6e:1b:62:c2:5a:e3:4b:12:da:54:fe:d0:58:61: b3:d9:95:66:e4:11:9c:6f:83:91:a3:28:fb:a9:9f:bb:37:b8: bd:83:a3:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY/zzMEDs+5xjooc8lW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzQ0NDAwMzk2ZDBhZjRjYjc5ZTNjOTQ2NjY2NzFiN2Iz OTFmNTUwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg5OGY5MDRhYTg0MmM1NTU4OTlkOTFkZTBmZWRiMDM2YzBkNjIzMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/0xGrofhrsQlEgeScX9ddtcOutY FpHNml+ExpBbUy19gggHIJILddZHzLEODlpXwy06O8DT5tuXK1h9HFH7EtBykmIo KZayBGiozsv5tQOAGwDZnIYXtkgTpSe1ZuytO1+xePwUQvhIkdePuMCLx0KFeblE 5KYPCxronrqlrFykgqlMbBf7CKT7hF9KUQ4com0k3vxlLAjcqThQM5PqDlJFk1mv BMbOvrAqdCKh2IfYGNX9vva7W8lWCeHDO+4hsAhNf5Asi2OV+uLHKC3MAm1hIzEV eQexp5XeoN1J5xgVAR193y0dAVcbzkGIRmGcK5xrx4Mq4g1t46Dzr42pIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj5BKqELFVYmdkd4P7bA2wNYjCSMB8GA1UdIwQY MBaAFJY0RAA5bQr0y3njyUZmZxt7OR9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wMmU5NjItOGZmOC00MTZlLWIxYmEt YTEyMDFjYzZlMDFiLzEvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wMmU5NjItOGZmOC00MTZlLWIxYmEtYTEyMDFjYzZlMDFi LzEvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFqshs2+ Av4vNsXKiSqYDdRLpuz+4lrSlahhbtqqHGpZRiHU34qY1vlHI4GaG/dKBFnOMJa5 ldHj7bJJRF7CG8xHTWO9TnW+xxOXg/Dpd0dAIEpbzUwRtVTh0/s2MTrM9QkTyamd hOhtqunQVZ3+PjrqiwULgjj2sk68zBdv6CUcsyPTFdLuG6QWWPtvoEps54dQDX7o reZQQfP4oghaqhUVtdBFloUgU29vA6+DFqGS9mVGpaUhEJL3tHTrGbd9Kj2pLSeP XYn5egbEKyBHOOU6PILcW/BTdZ12l24bYsJa40sS2lT+0Fhhs9mVZuQRnG+DkaMo +6mfuze4vYOjEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:46 2025 by rpki-client