This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json) Hash identifier: vxdAVYIkqOqUt/fkkcxMpv+k1KPiAL0hDxZfCPpnNoA= Subject key identifier: 3A:0C:A9:89:1A:4E:1F:6B:C3:0E:19:A4:7B:EE:5C:36:6A:05:C8:C8 Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88 Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88 Certificate serial: 019B3C7F19DCFDA43A05FE0839E82D31FC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:01 +0000 Manifest this update: Sat 20 Dec 2025 16:02:01 +0000 Manifest next update: Sun 21 Dec 2025 16:02:01 +0000 Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=) 2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: ASEhpPdz9qRBNQDtkCUP3cO4358cL4n3L8ulPMvq75o=) 3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:19:dc:fd:a4:3a:05:fe:08:39:e8:2d:31:fc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88 Validity Not Before: Dec 20 16:02:01 2025 GMT Not After : Dec 21 16:02:01 2025 GMT Subject: CN=3a0ca9891a4e1f6bc30e19a47bee5c366a05c8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:e7:b9:ca:7e:e1:d1:5e:81:d7:c0:be:d1: de:d3:5c:7f:b0:27:48:5f:45:ad:9b:ca:72:28:86: 5f:0e:9c:a4:2c:49:8c:1a:50:58:c5:f8:e1:ac:e2: 23:26:75:58:e2:67:45:65:69:55:09:b7:23:08:16: 12:eb:18:ab:d5:a7:d5:f0:de:75:09:cb:79:98:1f: e3:1c:b2:51:74:4f:20:23:6a:33:88:1b:4f:01:ba: ed:f8:e0:d3:79:d5:82:5d:87:5a:55:55:68:09:7f: 3a:35:53:f3:74:41:ae:51:34:34:bc:8f:b4:c0:8c: ce:47:8e:bd:46:df:a6:21:3e:01:1e:1a:57:41:cc: c9:85:2e:73:4b:d9:ff:3e:06:93:3d:d7:ab:df:6b: 41:c7:57:a1:ec:80:16:e6:f5:20:70:04:16:36:04: 12:5f:cb:33:b3:5e:f1:68:59:f9:87:14:01:54:7b: af:f0:51:f8:a5:57:03:58:c3:48:68:b9:b4:db:47: 0e:15:6b:5b:0b:39:ee:fb:70:b5:e3:53:08:98:5f: 52:f2:e3:c1:8c:32:cc:b2:4c:98:21:4f:eb:8f:e4: b1:3d:8b:1e:52:c0:c4:e9:11:5b:34:59:4f:27:e4: ce:cb:bb:5e:3b:fb:50:b7:39:5b:6e:7b:dc:e0:5e: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0C:A9:89:1A:4E:1F:6B:C3:0E:19:A4:7B:EE:5C:36:6A:05:C8:C8 X509v3 Authority Key Identifier: keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:25:a9:63:51:b6:5b:17:15:4e:93:a9:5e:10:ec:90:99:4a: 3a:31:d7:5a:fe:a5:9e:72:c1:d4:b2:70:d1:11:62:06:73:a6: b7:d9:8a:bb:ac:42:bb:55:41:ad:22:b5:f5:cc:40:e1:e1:df: ae:46:28:97:73:23:5d:9e:b1:37:d1:f9:8b:57:34:f0:ad:4f: da:fc:03:83:aa:61:ec:ed:1a:9d:f4:17:44:5c:64:f2:8e:23: 5b:70:ce:b8:72:9a:ce:90:55:61:75:b4:b0:1a:2e:40:08:7f: 8c:fb:5c:c6:53:cf:bc:c0:f7:5f:6d:f9:d5:cc:b7:38:a2:85: 1a:de:a9:db:fe:59:e0:38:0d:d4:19:ce:69:e5:48:08:40:3e: b5:b9:59:e4:dd:87:fa:87:e3:cf:0a:1d:1b:4c:f2:30:42:b7: 9e:1e:fe:6c:b7:28:f8:ce:e6:3f:80:55:81:50:10:3b:22:8c: dd:1a:ca:23:c3:5b:4d:a7:2b:0a:cf:08:3d:14:de:11:34:e2: 72:4a:ad:f7:af:3a:d7:b1:0b:53:d6:50:ef:66:e7:e0:9b:02: aa:c8:be:3d:9d:73:1f:b7:f1:4d:16:9c:6b:3f:ed:9f:2a:1f: 13:d9:6f:63:03:89:cf:c3:ff:ea:3b:75:4e:cd:08:67:78:2d: 22:e3:94:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fxnc/aQ6Bf4IOegtMfw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3 NzViODgwHhcNMjUxMjIwMTYwMjAxWhcNMjUxMjIxMTYwMjAxWjAzMTEwLwYDVQQD EygzYTBjYTk4OTFhNGUxZjZiYzMwZTE5YTQ3YmVlNWMzNjZhMDVjOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1fnucp+4dFegdfAvtHe01x/sCdI X0Wtm8pyKIZfDpykLEmMGlBYxfjhrOIjJnVY4mdFZWlVCbcjCBYS6xir1afV8N51 Cct5mB/jHLJRdE8gI2oziBtPAbrt+ODTedWCXYdaVVVoCX86NVPzdEGuUTQ0vI+0 wIzOR469Rt+mIT4BHhpXQczJhS5zS9n/PgaTPder32tBx1eh7IAW5vUgcAQWNgQS X8szs17xaFn5hxQBVHuv8FH4pVcDWMNIaLm020cOFWtbCznu+3C141MImF9S8uPB jDLMskyYIU/rj+SxPYseUsDE6RFbNFlPJ+TOy7teO/tQtzlbbnvc4F5kgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoMqYkaTh9rww4ZpHvuXDZqBcjIMB8GA1UdIwQY MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt YWE2MjI5Njk4NDYxLzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyWpY1G2 WxcVTpOpXhDskJlKOjHXWv6lnnLB1LJw0RFiBnOmt9mKu6xCu1VBrSK19cxA4eHf rkYol3MjXZ6xN9H5i1c08K1P2vwDg6ph7O0anfQXRFxk8o4jW3DOuHKazpBVYXW0 sBouQAh/jPtcxlPPvMD3X2351cy3OKKFGt6p2/5Z4DgN1BnOaeVICEA+tblZ5N2H +ofjzwodG0zyMEK3nh7+bLco+M7mP4BVgVAQOyKM3RrKI8NbTacrCs8IPRTeETTi ckqt968617ELU9ZQ72bn4JsCqsi+PZ1zH7fxTRacaz/tnyofE9lvYwOJz8P/6jt1 Ts0IZ3gtIuOUrA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:11 2025 by rpki-client