This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json) Hash identifier: qnwheP95DFogtrof1uTOnePoLzrZ5p265HyO7IG860g= Subject key identifier: BF:D1:3E:DA:D7:F2:27:5F:40:45:63:EF:7F:10:A9:48:F8:1C:ED:18 Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Certificate serial: 019AF61C6C0F1BD0D316E04474046D1A06C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft Manifest number: 151D Signing time: Sun 07 Dec 2025 00:00:48 +0000 Manifest this update: Sun 07 Dec 2025 00:00:48 +0000 Manifest next update: Mon 08 Dec 2025 00:00:48 +0000 Files and hashes: 1: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=) 2: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=) 3: _c0pJJZ7zU5EHB0txGdfoaZUuHE.roa (hash: JBEJnTbk0DUkFdoYHdzISJaKoNBjc9m3vJ4DFADUl0E=) 4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: vXVo273lXyFt2EwR0tZy5HsAyF+oEFoaOdb98x49L8I=) 5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:6c:0f:1b:d0:d3:16:e0:44:74:04:6d:1a:06:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Validity Not Before: Dec 7 00:00:48 2025 GMT Not After : Dec 8 00:00:48 2025 GMT Subject: CN=bfd13edad7f2275f404563ef7f10a948f81ced18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:96:ea:cf:15:0a:0a:aa:60:bc:b5:d6:d2: 53:63:72:cc:fa:82:4c:1f:de:fa:90:aa:52:49:d1: 96:de:36:a9:60:6c:8a:62:7c:9d:04:19:4c:0d:c9: 0e:6e:a7:a9:88:23:8a:bd:d8:c7:f5:48:7c:ea:6e: 6e:96:15:48:13:75:e2:6c:b9:5e:eb:20:9f:41:67: 32:1b:37:52:e8:8c:dc:0f:ff:87:02:d8:6b:a5:f5: af:10:79:10:8a:5f:8d:86:15:7b:5a:a0:45:af:de: 78:e7:e9:81:98:9e:43:13:63:f3:47:50:78:bd:e6: 87:a3:08:e8:5d:9e:5f:a5:c7:a0:e7:9f:77:87:59: b3:fa:d4:02:3d:b6:fd:fb:04:a8:36:7c:d6:c9:06: 14:b9:76:16:0d:5a:63:a7:62:8f:5e:c9:1a:c0:63: 3b:f0:da:30:65:f4:7f:4e:c0:52:46:81:b0:9b:04: 1e:cb:9e:e5:8f:fc:c7:ba:06:5f:ee:7c:02:43:be: 3a:59:bf:81:a6:00:94:d1:36:5b:9b:82:7a:68:ea: 83:65:b1:db:b3:70:ba:3e:69:7f:64:fc:05:3d:93: b9:e3:a6:75:f4:ef:d7:84:df:f2:d9:64:93:91:25: e4:99:a0:66:20:9c:b0:51:8d:16:c3:1e:80:ec:32: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D1:3E:DA:D7:F2:27:5F:40:45:63:EF:7F:10:A9:48:F8:1C:ED:18 X509v3 Authority Key Identifier: keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:53:a2:eb:f3:fa:89:76:a6:b0:fa:d8:ec:ec:a4:4b:78:70: fd:04:dd:f6:cd:0d:7d:8b:04:bc:72:8e:d2:1b:32:a8:64:cc: 87:91:29:39:4a:d4:b9:bc:ed:9f:81:8d:78:6c:48:14:e0:c9: 10:ee:e5:db:f6:ca:d7:b8:67:33:3d:34:a7:77:73:cc:d2:b8: 63:12:bf:8c:9f:41:bf:4d:b6:96:e7:12:0c:49:5c:c4:ba:73: fd:9f:80:fe:7a:95:3c:2f:7a:be:98:d9:ec:68:dc:1c:00:8c: a0:7c:c9:9d:44:4b:0b:15:d5:c3:88:69:bf:ec:e2:cb:9b:21: 89:b2:72:cc:f7:bf:ef:e8:83:0c:db:67:57:3c:d6:d7:ed:ca: 0a:fc:67:c1:67:81:8d:b3:59:c7:06:58:65:f7:7b:d7:f3:f2: 09:2e:6a:49:40:39:2b:e2:9d:76:d7:d3:f3:3a:5e:62:2a:58: 61:0d:fc:5f:14:8f:92:a5:dc:cb:00:a9:99:df:f2:45:81:0e: 9b:88:60:9f:45:13:2c:4c:86:97:57:65:b9:2a:f4:04:7d:af: 2d:14:1a:54:92:2c:44:3a:ba:63:0d:33:4d:15:51:d4:a6:e0: 3d:57:24:e2:43:0b:84:ce:21:de:de:e8:3b:dc:f3:73:f6:1d: 85:6d:ac:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGwPG9DTFuBEdARtGgbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh NGFlNDEwHhcNMjUxMjA3MDAwMDQ4WhcNMjUxMjA4MDAwMDQ4WjAzMTEwLwYDVQQD EyhiZmQxM2VkYWQ3ZjIyNzVmNDA0NTYzZWY3ZjEwYTk0OGY4MWNlZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD6W6s8VCgqqYLy11tJTY3LM+oJM H976kKpSSdGW3japYGyKYnydBBlMDckObqepiCOKvdjH9Uh86m5ulhVIE3XibLle 6yCfQWcyGzdS6IzcD/+HAthrpfWvEHkQil+NhhV7WqBFr9545+mBmJ5DE2PzR1B4 veaHowjoXZ5fpceg5593h1mz+tQCPbb9+wSoNnzWyQYUuXYWDVpjp2KPXskawGM7 8NowZfR/TsBSRoGwmwQey57lj/zHugZf7nwCQ746Wb+BpgCU0TZbm4J6aOqDZbHb s3C6Pml/ZPwFPZO546Z19O/XhN/y2WSTkSXkmaBmIJywUY0Wwx6A7DJ9gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/RPtrX8idfQEVj738QqUj4HO0YMB8GA1UdIwQY MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVOi6/P6 iXamsPrY7OykS3hw/QTd9s0NfYsEvHKO0hsyqGTMh5EpOUrUubztn4GNeGxIFODJ EO7l2/bK17hnMz00p3dzzNK4YxK/jJ9Bv022lucSDElcxLpz/Z+A/nqVPC96vpjZ 7GjcHACMoHzJnURLCxXVw4hpv+ziy5shibJyzPe/7+iDDNtnVzzW1+3KCvxnwWeB jbNZxwZYZfd71/PyCS5qSUA5K+KddtfT8zpeYipYYQ38XxSPkqXcywCpmd/yRYEO m4hgn0UTLEyGl1dluSr0BH2vLRQaVJIsRDq6Yw0zTRVR1KbgPVck4kMLhM4h3t7o O9zzc/YdhW2sjA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:29 2025 by rpki-client