This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json) Hash identifier: JkhkE4jyseZIezl4tQoHtU7ckldU/QEZLYxUoVdodqY= Subject key identifier: D5:A4:EF:30:8E:B7:59:EE:DA:6B:ED:36:05:71:31:2C:59:7B:56:AD Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Certificate serial: 019AF57882E05A63AB0E8A44FBC9CCC00F2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 21:01:47 +0000 Manifest this update: Sat 06 Dec 2025 21:01:47 +0000 Manifest next update: Sun 07 Dec 2025 21:01:47 +0000 Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=) 2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: WKRP3p3PXe5z0jrFaf2PAVvOhHZQql+RJbaJRt57ixw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:82:e0:5a:63:ab:0e:8a:44:fb:c9:cc:c0:0f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Validity Not Before: Dec 6 21:01:47 2025 GMT Not After : Dec 7 21:01:47 2025 GMT Subject: CN=d5a4ef308eb759eeda6bed360571312c597b56ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:4d:29:e7:a9:3c:c2:63:34:87:e1:3c:89: 50:e9:5b:d3:aa:da:6c:2a:a6:47:80:16:f8:88:6e: b0:53:b3:77:46:aa:bd:9a:bc:ee:cc:d6:be:e5:96: 20:ab:28:de:a0:1b:68:f8:34:6e:0d:bc:ca:73:b8: d0:39:1f:f8:35:6b:d9:fc:5e:3a:fb:e2:65:f4:9d: 43:01:5c:7d:2a:be:a1:c5:50:67:21:80:6e:0a:f6: 66:20:69:c3:d9:37:6f:d1:77:ef:cc:08:4e:61:91: ff:ae:1e:96:cb:23:09:b3:5c:6e:50:96:04:6c:e4: 73:29:af:91:fa:00:9e:9d:98:77:d0:e5:d8:77:b2: da:a7:98:93:cd:90:03:db:c1:48:61:c2:d1:c7:a5: 17:47:67:12:46:13:65:d4:dd:f7:6e:35:8e:51:32: c1:1c:58:43:0c:5a:78:b3:4f:65:d4:cc:79:f9:03: 77:bd:7a:7e:8a:0e:66:46:37:6d:db:66:54:a9:ba: 9e:72:64:1f:ca:85:ac:69:8e:f6:16:80:ef:21:90: 4e:2a:9a:bc:2d:78:d1:14:a3:c9:1f:48:34:11:f9: ab:73:03:11:d5:fb:e8:dc:c8:7f:01:2b:40:fa:79: 17:5a:04:80:ee:e2:75:55:ec:46:b8:40:f2:9e:bd: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A4:EF:30:8E:B7:59:EE:DA:6B:ED:36:05:71:31:2C:59:7B:56:AD X509v3 Authority Key Identifier: keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:00:20:1b:10:8b:40:bb:2b:c2:d7:68:e5:bc:44:db:0b:35: 8e:53:b3:52:45:4b:8f:32:63:91:37:5c:55:52:ed:26:b2:9a: 23:96:02:3f:0b:0d:c8:5f:3a:f4:15:b0:fd:fb:24:eb:06:cf: e1:fe:37:a6:32:db:62:75:7f:2b:e4:b5:3f:9d:e8:d0:24:4e: a1:14:a7:ac:1a:84:44:c4:56:7b:89:66:5a:e1:0a:f9:94:cc: dd:0c:a7:d7:06:5a:0f:4c:cb:f1:9c:1b:b4:b7:35:75:66:b6: d1:6a:20:b3:32:ba:57:3c:4d:7c:e8:32:01:67:66:0c:4a:09: c3:a6:1b:99:5c:cf:ca:f4:47:31:5a:aa:1a:cd:52:7d:e4:83: 75:7a:41:df:4b:e5:61:0f:3c:1e:6a:7a:72:9d:07:35:41:16: d3:28:9c:76:93:5c:fc:be:6e:75:77:5e:05:b7:85:0f:b1:15: 1e:9a:f7:44:a8:71:62:f3:4f:ff:61:d9:a8:3b:c4:46:a0:f8: da:76:29:fa:d4:c4:bf:9c:7a:fb:a5:5b:29:12:55:12:d7:c0: ad:4a:9a:5c:78:a9:fc:3b:99:d9:51:7d:6a:76:b4:9a:fd:9d: 24:5f:8b:1d:b4:59:ee:fe:e8:32:fb:20:3e:4e:c5:b5:07:f4: 74:c2:1a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eILgWmOrDopE+8nMwA8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZTEyMDNhY2Q5YjA3YTExZWEzN2U4MmY2YzI0MWZmODQw Mjk3NWEwHhcNMjUxMjA2MjEwMTQ3WhcNMjUxMjA3MjEwMTQ3WjAzMTEwLwYDVQQD EyhkNWE0ZWYzMDhlYjc1OWVlZGE2YmVkMzYwNTcxMzEyYzU5N2I1NmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyRNKeepPMJjNIfhPIlQ6VvTqtps KqZHgBb4iG6wU7N3Rqq9mrzuzNa+5ZYgqyjeoBto+DRuDbzKc7jQOR/4NWvZ/F46 ++Jl9J1DAVx9Kr6hxVBnIYBuCvZmIGnD2Tdv0XfvzAhOYZH/rh6WyyMJs1xuUJYE bORzKa+R+gCenZh30OXYd7Lap5iTzZAD28FIYcLRx6UXR2cSRhNl1N33bjWOUTLB HFhDDFp4s09l1Mx5+QN3vXp+ig5mRjdt22ZUqbqecmQfyoWsaY72FoDvIZBOKpq8 LXjRFKPJH0g0EfmrcwMR1fvo3Mh/AStA+nkXWgSA7uJ1VexGuEDynr0bXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWk7zCOt1nu2mvtNgVxMSxZe1atMB8GA1UdIwQY MBaAFC3hIDrNmwehHqN+gvbCQf+EApdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMt ZjI4Y2QyNzY0OTA0LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMtZjI4Y2QyNzY0OTA0 LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegAgGxCL QLsrwtdo5bxE2ws1jlOzUkVLjzJjkTdcVVLtJrKaI5YCPwsNyF869BWw/fsk6wbP 4f43pjLbYnV/K+S1P53o0CROoRSnrBqERMRWe4lmWuEK+ZTM3Qyn1wZaD0zL8Zwb tLc1dWa20WogszK6VzxNfOgyAWdmDEoJw6YbmVzPyvRHMVqqGs1SfeSDdXpB30vl YQ88Hmp6cp0HNUEW0yicdpNc/L5udXdeBbeFD7EVHpr3RKhxYvNP/2HZqDvERqD4 2nYp+tTEv5x6+6VbKRJVEtfArUqaXHip/DuZ2VF9ana0mv2dJF+LHbRZ7v7oMvsg Pk7FtQf0dMIaqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:54 2025 by rpki-client