This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json) Hash identifier: KKE1kb/xEUXgq2MhzhOrisYUQoZ/ePKg4/8qdVZfcPo= Subject key identifier: 6A:86:E5:66:BA:69:46:37:B9:9D:70:41:32:D9:4B:4D:5B:FD:9E:46 Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88 Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88 Certificate serial: 019AF50AD676F674D3BA340BA1767B40204F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:59 +0000 Manifest this update: Sat 06 Dec 2025 19:01:59 +0000 Manifest next update: Sun 07 Dec 2025 19:01:59 +0000 Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=) 2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: U030QHeFEKpaCP+/Q5DJ+tPwV2OTYFrIPnRXL3ih9bI=) 3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d6:76:f6:74:d3:ba:34:0b:a1:76:7b:40:20:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88 Validity Not Before: Dec 6 19:01:59 2025 GMT Not After : Dec 7 19:01:59 2025 GMT Subject: CN=6a86e566ba694637b99d704132d94b4d5bfd9e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:b5:07:89:fa:94:2d:b1:4a:03:c9:e4:8b: 0e:2f:38:d6:74:8c:6f:94:af:bd:5e:09:47:3c:bd: 4c:ac:42:a2:0c:cd:ee:47:9e:73:7a:ac:fc:09:2c: e7:66:4d:27:1a:c1:ad:b1:8e:52:78:b6:57:95:9f: 69:45:be:4d:6a:35:5d:cc:98:d0:a7:ad:92:33:90: 3e:94:29:51:ed:3f:34:79:f3:9a:6a:89:61:68:3a: 6d:bd:54:0e:77:85:e9:ec:00:e8:cb:b4:47:b2:87: 30:69:9f:2b:14:35:4a:43:b1:36:3b:ca:5d:a3:13: dd:ec:65:29:94:7a:bd:35:af:5a:40:99:09:22:03: c8:9e:50:c1:1e:77:e3:44:d2:25:cb:2d:ae:71:2f: 5c:d4:7b:ec:4d:98:0f:23:26:88:af:5d:60:b4:9b: dc:40:74:e7:7e:b3:13:e6:fc:13:59:91:24:22:1f: ce:7a:0e:6a:a4:77:f7:5c:9e:4a:e0:72:17:d7:a5: ab:8e:4c:29:50:ab:29:84:4a:28:90:d3:52:6e:ca: 77:49:60:81:c2:c9:64:16:3f:6b:20:99:e4:41:87: 52:d6:d0:20:b0:d5:b6:3f:42:97:8b:30:91:52:7e: 64:0b:d7:f1:24:c3:9d:01:f4:9b:b6:e7:00:43:db: 01:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:86:E5:66:BA:69:46:37:B9:9D:70:41:32:D9:4B:4D:5B:FD:9E:46 X509v3 Authority Key Identifier: keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:04:0a:82:25:15:11:a8:89:06:44:49:e1:33:de:ea:b7:18: 37:be:3a:87:e9:ea:c7:93:6f:65:de:85:18:56:8b:3b:cd:c9: 6f:7b:12:92:e3:10:f9:89:a4:14:ca:91:b7:29:ef:65:1b:ed: 35:b2:4b:e5:89:eb:c7:ad:32:71:66:66:a0:5a:29:b5:f7:bf: 9a:98:0b:5f:88:0f:dd:47:75:a6:42:a1:6f:6e:e3:7e:f7:06: 87:7a:7d:f1:85:85:62:5e:15:d9:80:b8:13:a4:1a:bf:9a:6c: 52:df:35:06:0b:57:d3:18:b3:0a:f2:94:68:a8:31:aa:24:b2: 9f:d0:27:58:63:82:75:cd:4f:46:4e:14:c4:1c:e0:66:85:de: 08:d5:0f:da:1f:b7:e0:3b:0b:db:7a:45:3e:f7:12:67:75:3b: 2d:3a:0d:b9:51:a9:39:c0:85:67:63:fe:79:a4:d0:5f:77:1d: 5d:e0:fa:10:91:ed:dc:d3:77:f3:22:7a:dc:f9:9f:ee:72:44: cd:96:9d:d8:d5:ee:7b:f1:e8:f2:6f:74:a5:70:69:30:02:cc: 7b:d7:0e:3d:4d:6f:f5:b9:21:42:41:77:43:e4:86:48:5c:51: 89:9b:bd:f0:37:e0:8c:c1:79:6d:b6:4e:8e:91:1a:b3:ac:da: 57:76:a4:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtZ29nTTujQLoXZ7QCBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3 NzViODgwHhcNMjUxMjA2MTkwMTU5WhcNMjUxMjA3MTkwMTU5WjAzMTEwLwYDVQQD Eyg2YTg2ZTU2NmJhNjk0NjM3Yjk5ZDcwNDEzMmQ5NGI0ZDViZmQ5ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtm1B4n6lC2xSgPJ5IsOLzjWdIxv lK+9XglHPL1MrEKiDM3uR55zeqz8CSznZk0nGsGtsY5SeLZXlZ9pRb5NajVdzJjQ p62SM5A+lClR7T80efOaaolhaDptvVQOd4Xp7ADoy7RHsocwaZ8rFDVKQ7E2O8pd oxPd7GUplHq9Na9aQJkJIgPInlDBHnfjRNIlyy2ucS9c1HvsTZgPIyaIr11gtJvc QHTnfrMT5vwTWZEkIh/Oeg5qpHf3XJ5K4HIX16WrjkwpUKsphEookNNSbsp3SWCB wslkFj9rIJnkQYdS1tAgsNW2P0KXizCRUn5kC9fxJMOdAfSbtucAQ9sBHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqG5Wa6aUY3uZ1wQTLZS01b/Z5GMB8GA1UdIwQY MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt YWE2MjI5Njk4NDYxLzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAQKgiUV EaiJBkRJ4TPe6rcYN746h+nqx5NvZd6FGFaLO83Jb3sSkuMQ+YmkFMqRtynvZRvt NbJL5Ynrx60ycWZmoFoptfe/mpgLX4gP3Ud1pkKhb27jfvcGh3p98YWFYl4V2YC4 E6Qav5psUt81BgtX0xizCvKUaKgxqiSyn9AnWGOCdc1PRk4UxBzgZoXeCNUP2h+3 4DsL23pFPvcSZ3U7LToNuVGpOcCFZ2P+eaTQX3cdXeD6EJHt3NN38yJ63Pmf7nJE zZad2NXue/Ho8m90pXBpMALMe9cOPU1v9bkhQkF3Q+SGSFxRiZu98DfgjMF5bbZO jpEas6zaV3aklg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:39 2025 by rpki-client