This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json) Hash identifier: 8wpz9BNzV8tpvXr93lzKkuLgkLYel24lbK3ahh5ehQ0= Subject key identifier: 74:DC:3E:25:94:7B:5A:B1:DD:2B:3A:1B:54:1E:06:11:89:F9:41:05 Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad Certificate serial: 019AF3F76B2EBBE7E74FE82D0A4A9DE8F4EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft Manifest number: 131D Signing time: Sat 06 Dec 2025 14:01:09 +0000 Manifest this update: Sat 06 Dec 2025 14:01:09 +0000 Manifest next update: Sun 07 Dec 2025 14:01:09 +0000 Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=) 2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=) 3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: 6ahw+ajSPRsS7G2+dpDMNBcnAM/uOTdi2754aaRJUE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:6b:2e:bb:e7:e7:4f:e8:2d:0a:4a:9d:e8:f4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad Validity Not Before: Dec 6 14:01:09 2025 GMT Not After : Dec 7 14:01:09 2025 GMT Subject: CN=74dc3e25947b5ab1dd2b3a1b541e061189f94105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:ca:ce:7b:13:71:55:64:ea:36:09:2d:b8: 81:19:5c:55:d5:c8:8b:a0:80:03:b1:b2:8d:cd:bf: 1c:f2:07:ca:24:f1:38:e5:96:ad:4b:aa:df:1c:86: 82:68:5a:a6:35:0e:58:c2:aa:c4:d7:e2:41:26:3b: ac:c5:31:21:46:a8:4f:09:39:46:34:4f:f0:fb:0d: c0:19:98:61:98:88:f2:eb:01:d3:b9:3c:52:b6:b9: 5f:0d:8e:6c:8b:d1:03:6f:18:b6:ad:9c:5f:ac:4d: 52:8e:1d:e4:1f:ea:54:db:06:d3:59:4a:71:ea:75: 95:f3:62:7d:0b:0b:34:f0:64:08:1b:40:01:1e:8f: eb:82:6d:55:4a:b4:03:d6:67:7e:e0:07:0b:e4:e8: e2:40:2b:3f:9d:f2:ac:e6:80:50:c5:14:21:b2:8a: 63:8b:fb:58:f7:40:0e:61:3f:64:71:0b:b7:24:5c: f7:6a:00:2e:f1:66:74:e3:d3:ce:af:32:2a:f0:2b: 5f:00:9d:8e:ef:b5:f2:86:99:cc:57:98:b9:3c:95: 8b:10:90:d4:03:ef:6b:7c:f1:bc:b8:8b:6f:ef:99: 03:be:67:09:6b:3a:aa:a7:0c:4c:ff:27:2e:fc:2b: ca:a3:c2:07:0b:81:04:d8:e0:57:5b:0e:5d:c5:27: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DC:3E:25:94:7B:5A:B1:DD:2B:3A:1B:54:1E:06:11:89:F9:41:05 X509v3 Authority Key Identifier: keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a6:1e:73:0e:f6:bc:ae:47:b2:ed:bd:a4:e2:08:b5:ae:7b: 55:c0:0f:2b:dc:e2:5e:1c:15:7e:5c:23:e4:e4:50:52:09:fc: 9b:53:62:93:9e:20:03:c2:74:74:5c:de:cd:a4:0c:26:ab:f0: 97:6c:3d:f1:36:11:fb:46:d2:5d:2a:4b:f5:dd:5a:a8:d2:c0: c8:10:a1:16:52:94:81:27:b5:ea:e1:a1:38:8c:a8:68:24:de: 74:ed:fb:27:48:19:47:a3:28:da:4b:2a:f8:33:17:10:92:c2: 24:03:f5:54:97:23:c2:a0:5c:65:ba:4f:d4:12:6e:09:c1:7d: f6:79:73:52:4d:70:19:07:5e:3b:2c:0e:5d:6e:e7:b2:5b:36: 5d:6b:58:93:97:26:e6:07:db:89:5a:d6:a0:33:80:63:8a:1d: 3c:bf:33:39:92:64:57:e3:1e:eb:24:d0:42:52:b3:c5:3c:03: f4:40:11:d9:c5:34:33:2f:63:62:32:12:77:85:57:98:84:9e: 21:ff:75:b7:5c:9e:ae:68:3d:15:c5:3e:03:4b:ad:87:70:39: bf:bb:95:a9:eb:61:ca:c8:8f:a2:41:b2:25:c3:20:d9:5d:11: 95:fa:e6:7a:44:81:5b:1e:66:5c:36:59:23:37:f9:68:1a:fb: e1:a9:c8:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92suu+fnT+gtCkqd6PTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5 MGExYWQwHhcNMjUxMjA2MTQwMTA5WhcNMjUxMjA3MTQwMTA5WjAzMTEwLwYDVQQD Eyg3NGRjM2UyNTk0N2I1YWIxZGQyYjNhMWI1NDFlMDYxMTg5Zjk0MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI7KznsTcVVk6jYJLbiBGVxV1ciL oIADsbKNzb8c8gfKJPE45ZatS6rfHIaCaFqmNQ5YwqrE1+JBJjusxTEhRqhPCTlG NE/w+w3AGZhhmIjy6wHTuTxStrlfDY5si9EDbxi2rZxfrE1Sjh3kH+pU2wbTWUpx 6nWV82J9Cws08GQIG0ABHo/rgm1VSrQD1md+4AcL5OjiQCs/nfKs5oBQxRQhsopj i/tY90AOYT9kcQu3JFz3agAu8WZ049POrzIq8CtfAJ2O77XyhpnMV5i5PJWLEJDU A+9rfPG8uItv75kDvmcJazqqpwxM/ycu/CvKo8IHC4EE2OBXWw5dxSfpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTcPiWUe1qx3Ss6G1QeBhGJ+UEFMB8GA1UdIwQY MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqYecw72 vK5Hsu29pOIIta57VcAPK9ziXhwVflwj5ORQUgn8m1Nik54gA8J0dFzezaQMJqvw l2w98TYR+0bSXSpL9d1aqNLAyBChFlKUgSe16uGhOIyoaCTedO37J0gZR6Mo2ksq +DMXEJLCJAP1VJcjwqBcZbpP1BJuCcF99nlzUk1wGQdeOywOXW7nsls2XWtYk5cm 5gfbiVrWoDOAY4odPL8zOZJkV+Me6yTQQlKzxTwD9EAR2cU0My9jYjISd4VXmISe If91t1yermg9FcU+A0uth3A5v7uVqethysiPokGyJcMg2V0RlfrmekSBWx5mXDZZ Izf5aBr74anIWw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:45 2025 by rpki-client