This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json) Hash identifier: 5+X2/Eh3djkplAM+xfeYCKe0qOnHLaij8ZE2obkzzKU= Subject key identifier: 97:C2:AD:F1:E7:25:95:C1:59:18:6A:D7:5B:E5:0A:3C:EF:64:BA:5A Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019AF19AEBD256BD7CD383464DEEDC2B965F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=) 2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=) 3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=) 4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=) 5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=) 6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: FiEsvjSF7yWt53J01torUdAdUIgWwdhubZAEGMLsb3g=) 7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:eb:d2:56:bd:7c:d3:83:46:4d:ee:dc:2b:96:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=97c2adf1e72595c159186ad75be50a3cef64ba5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:43:10:1f:c6:73:19:3b:c8:5e:21:42:84: a7:52:22:49:09:33:93:e7:61:dc:0d:7d:df:92:10: 4b:fc:3c:46:e3:66:60:74:99:03:8a:84:e6:71:79: ef:05:a1:20:e1:99:24:56:1f:87:f1:de:b5:15:13: cb:9e:3f:14:70:d6:17:19:ac:aa:2c:16:79:67:2e: d3:4d:ce:39:0d:9c:5e:7c:bd:a2:06:55:2e:1b:2b: ce:50:82:a1:09:33:fc:c8:e5:82:7b:82:17:cd:58: f2:cf:a0:e2:81:8c:61:25:d2:ce:99:fc:d1:5b:54: 76:4a:9d:af:38:c0:4b:d3:35:f0:48:db:2d:12:ca: 80:c8:ba:7d:b3:5e:24:f1:3a:8d:d9:19:38:1b:c7: d3:89:76:49:12:1e:56:d4:76:a3:79:ae:c3:3b:a9: 81:62:cf:65:11:8c:ea:dd:dd:6d:e2:6e:65:9b:1d: 43:94:23:04:eb:d1:81:bb:8e:0d:22:a6:9b:b2:89: f1:bf:50:6f:f9:b1:b9:18:9f:8e:c6:28:51:ec:bf: 28:7a:ee:d0:0c:6c:ba:c2:b7:55:83:3b:bb:cf:b3: b1:a6:84:2c:57:c2:b3:0b:70:7a:b1:94:c6:26:05: cb:f1:ad:be:46:8c:15:90:a9:e8:c6:83:d1:6d:83: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C2:AD:F1:E7:25:95:C1:59:18:6A:D7:5B:E5:0A:3C:EF:64:BA:5A X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:71:1e:14:e2:ea:7d:b7:f5:3e:e7:0e:0b:ea:a8:77:dd:a6: 07:f8:72:d7:66:df:10:ef:36:32:dc:29:f0:bc:44:f9:6b:4b: 90:71:61:cb:48:a6:ef:15:de:86:95:67:8e:84:48:61:8d:4b: 2d:65:87:49:ee:27:be:c6:33:82:c5:7b:ba:a6:7f:f1:d3:66: 8e:d1:11:fb:4a:51:fe:a9:9d:9e:6e:f8:0c:4f:45:5a:20:86: 4b:de:78:77:b2:a3:f7:99:7d:fa:2b:44:dd:62:9c:0b:cf:d1: 85:d5:79:ab:d6:62:df:3d:10:5e:cf:6f:c4:be:df:ae:fa:37: fc:b9:e2:1c:b6:7a:b4:e8:e2:4c:50:6b:26:8f:e6:72:7d:12: ae:dc:1c:ff:c5:25:93:f1:a2:9a:9b:f0:c8:20:9a:68:fe:84: 50:df:eb:0d:12:93:ae:7f:74:6f:6a:c0:30:9d:d9:af:8b:31: 04:94:09:84:38:9e:76:81:0b:5c:88:d2:61:94:e6:90:f4:6f: 4b:bd:4f:27:4b:b7:cc:f9:f2:11:fa:36:d1:38:ae:e1:5c:d1: 85:1e:9e:36:f1:0a:8c:c7:d5:51:13:14:0d:53:0e:98:31:b0: 71:02:e1:ff:57:4e:f2:b0:c2:24:98:63:7c:d9:77:3e:75:e4: 29:59:2b:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuvSVr1804NGTe7cK5ZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD Eyg5N2MyYWRmMWU3MjU5NWMxNTkxODZhZDc1YmU1MGEzY2VmNjRiYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVhDEB/Gcxk7yF4hQoSnUiJJCTOT 52HcDX3fkhBL/DxG42ZgdJkDioTmcXnvBaEg4ZkkVh+H8d61FRPLnj8UcNYXGayq LBZ5Zy7TTc45DZxefL2iBlUuGyvOUIKhCTP8yOWCe4IXzVjyz6DigYxhJdLOmfzR W1R2Sp2vOMBL0zXwSNstEsqAyLp9s14k8TqN2Rk4G8fTiXZJEh5W1Hajea7DO6mB Ys9lEYzq3d1t4m5lmx1DlCME69GBu44NIqabsonxv1Bv+bG5GJ+OxihR7L8oeu7Q DGy6wrdVgzu7z7OxpoQsV8KzC3B6sZTGJgXL8a2+RowVkKnoxoPRbYMFWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfCrfHnJZXBWRhq11vlCjzvZLpaMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXEeFOLq fbf1PucOC+qod92mB/hy12bfEO82Mtwp8LxE+WtLkHFhy0im7xXehpVnjoRIYY1L LWWHSe4nvsYzgsV7uqZ/8dNmjtER+0pR/qmdnm74DE9FWiCGS954d7Kj95l9+itE 3WKcC8/RhdV5q9Zi3z0QXs9vxL7frvo3/LniHLZ6tOjiTFBrJo/mcn0Srtwc/8Ul k/GimpvwyCCaaP6EUN/rDRKTrn90b2rAMJ3Zr4sxBJQJhDiedoELXIjSYZTmkPRv S71PJ0u3zPnyEfo20Tiu4VzRhR6eNvEKjMfVURMUDVMOmDGwcQLh/1dO8rDCJJhj fNl3PnXkKVkrXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:40 2025 by rpki-client