This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json) Hash identifier: KpNZniRjXsYUbiCKTI49XjdBI1yQZNS3YrfR7FQIBu4= Subject key identifier: 03:05:A0:A6:E7:8F:56:49:00:FE:D5:52:54:D8:9D:34:92:A5:ED:13 Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b Certificate serial: 019AF31B7880D42BF1C2CBFB141AF6F6F7D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft Manifest number: 1462 Signing time: Sat 06 Dec 2025 10:00:55 +0000 Manifest this update: Sat 06 Dec 2025 10:00:55 +0000 Manifest next update: Sun 07 Dec 2025 10:00:55 +0000 Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: rU///VZr7CsTJv/EpaGddI5rQaRwFzHys3Qk4fqZAWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:78:80:d4:2b:f1:c2:cb:fb:14:1a:f6:f6:f7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b Validity Not Before: Dec 6 10:00:55 2025 GMT Not After : Dec 7 10:00:55 2025 GMT Subject: CN=0305a0a6e78f564900fed55254d89d3492a5ed13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:76:33:e5:87:6b:c6:84:f0:f6:26:e5:bc: 4a:47:e9:de:99:38:fb:86:eb:8e:be:e8:46:57:0d: 05:14:99:d5:cb:17:ea:a6:3d:b4:bb:fe:6b:bd:0f: 75:8d:2b:51:93:b3:d5:4a:dc:ff:cb:0c:0d:70:cb: e2:ec:fa:ae:c7:34:7b:ba:78:c9:44:13:76:26:c6: 16:2b:1a:4a:38:a2:d0:24:7f:07:8a:ef:bd:1d:ba: 3c:7c:c9:28:bb:49:21:ec:4f:ae:fb:1c:7d:33:4d: 0a:0c:f2:22:f1:91:e3:92:f3:37:46:ee:2c:8b:39: 40:22:67:38:a3:06:c5:3f:ba:62:fe:26:35:e3:d4: ec:89:8c:c4:ac:70:95:d3:0f:a2:6e:4a:0f:2c:6f: 97:a1:94:6e:3b:41:01:21:05:12:b7:4b:73:52:8c: 84:88:8b:6a:27:ba:69:a7:21:51:48:34:db:d5:54: e9:44:83:85:f7:19:20:c4:11:d7:86:5c:fe:0e:4b: 1d:0c:ed:c4:d9:a1:29:c8:cc:3f:d4:30:11:a1:08: 67:72:f6:d1:41:33:96:e1:f0:96:46:58:7c:c6:f3: 77:8c:72:4c:3f:ec:f2:a8:28:3e:93:c6:e5:6f:71: 71:f5:be:48:22:6d:ce:f0:fe:a4:d7:e5:77:88:72: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:05:A0:A6:E7:8F:56:49:00:FE:D5:52:54:D8:9D:34:92:A5:ED:13 X509v3 Authority Key Identifier: keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:6f:d6:03:8d:11:9d:68:87:9c:6d:f4:13:c5:30:2e:81:d4: 86:11:71:60:a7:a8:bc:ca:06:e3:aa:14:09:da:8b:10:cf:f1: fb:e1:08:78:20:b4:4d:39:ef:62:13:ac:53:42:84:a0:2b:10: 0e:d5:6e:fc:86:a1:41:16:7a:b2:73:42:fc:04:7e:a7:44:8d: 5a:35:c5:86:13:00:0d:f1:ba:5b:12:a5:2c:a2:3a:30:56:4f: bd:53:66:43:b6:6e:f9:4d:b9:92:2b:93:53:e7:ec:8a:dd:48: 6c:6d:8f:11:a8:d2:94:10:7e:e4:93:2b:95:02:66:e0:dc:2f: 4e:85:af:8b:ef:98:ba:91:67:3c:4b:52:2a:7d:20:15:73:80: 01:ac:f2:ca:06:f6:d5:4f:42:72:a8:8c:a5:7d:1c:0a:cc:10: 34:f5:a2:21:0a:a7:73:02:c8:95:0c:fa:44:92:07:17:89:d5: 98:c1:2d:75:f4:c1:e5:29:66:89:94:c8:f7:6a:4c:2e:0b:87: 53:f6:d0:2b:3e:93:9e:01:cd:fb:53:5d:64:4b:12:07:30:cb: c3:54:d0:94:ae:cf:f5:04:fd:6d:ec:92:c1:0a:15:7f:e6:cd: 33:da:7d:32:42:f4:cb:1d:3d:99:97:01:88:ef:1b:b1:34:fa: a7:0e:21:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3iA1Cvxwsv7FBr29vfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjIyMWY3OWFiZWE2ZDNjMGMzNDgwNjQyNTkwZGQwYWUw Y2FhM2IwHhcNMjUxMjA2MTAwMDU1WhcNMjUxMjA3MTAwMDU1WjAzMTEwLwYDVQQD EygwMzA1YTBhNmU3OGY1NjQ5MDBmZWQ1NTI1NGQ4OWQzNDkyYTVlZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh92M+WHa8aE8PYm5bxKR+nemTj7 huuOvuhGVw0FFJnVyxfqpj20u/5rvQ91jStRk7PVStz/ywwNcMvi7PquxzR7unjJ RBN2JsYWKxpKOKLQJH8Hiu+9Hbo8fMkou0kh7E+u+xx9M00KDPIi8ZHjkvM3Ru4s izlAImc4owbFP7pi/iY149TsiYzErHCV0w+ibkoPLG+XoZRuO0EBIQUSt0tzUoyE iItqJ7pppyFRSDTb1VTpRIOF9xkgxBHXhlz+DksdDO3E2aEpyMw/1DARoQhncvbR QTOW4fCWRlh8xvN3jHJMP+zyqCg+k8blb3Fx9b5IIm3O8P6k1+V3iHLlqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMFoKbnj1ZJAP7VUlTYnTSSpe0TMB8GA1UdIwQY MBaAFJRiIfeavqbTwMNIBkJZDdCuDKo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdJaDk1cS1wdFBBdzBnR1Fsa04wSzRNcWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDlhYTUtZDUyYS00ODZmLWI2NGMt N2M2MDVkMzIxNjVkLzEvbEdJaDk1cS1wdFBBdzBnR1Fsa04wSzRNcWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi84ZDlhYTUtZDUyYS00ODZmLWI2NGMtN2M2MDVkMzIxNjVk LzEvbEdJaDk1cS1wdFBBdzBnR1Fsa04wSzRNcWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqm/WA40R nWiHnG30E8UwLoHUhhFxYKeovMoG46oUCdqLEM/x++EIeCC0TTnvYhOsU0KEoCsQ DtVu/IahQRZ6snNC/AR+p0SNWjXFhhMADfG6WxKlLKI6MFZPvVNmQ7Zu+U25kiuT U+fsit1IbG2PEajSlBB+5JMrlQJm4NwvToWvi++YupFnPEtSKn0gFXOAAazyygb2 1U9CcqiMpX0cCswQNPWiIQqncwLIlQz6RJIHF4nVmMEtdfTB5SlmiZTI92pMLguH U/bQKz6TngHN+1NdZEsSBzDLw1TQlK7P9QT9beySwQoVf+bNM9p9MkL0yx09mZcB iO8bsTT6pw4hQA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:44 2025 by rpki-client