This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json) Hash identifier: OEvtEKaODVUZyuPiSbaksKhW1gB/PgoVZQpbHACU9IY= Subject key identifier: 5A:92:E2:C3:E0:67:19:77:42:51:C8:D5:27:89:9E:9A:C7:74:A3:B7 Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B2B8A95D4DF96A1A8CE843CD551569DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 09:01:00 +0000 Manifest this update: Wed 17 Dec 2025 09:01:00 +0000 Manifest next update: Thu 18 Dec 2025 09:01:00 +0000 Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=) 2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=) 3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=) 4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=) 5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=) 6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: 8rzyY7lCHx6LeP8yV6fkakH37J9NBYo6+NnUMoWuUmk=) 7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:95:d4:df:96:a1:a8:ce:84:3c:d5:51:56:9d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Dec 17 09:01:00 2025 GMT Not After : Dec 18 09:01:00 2025 GMT Subject: CN=5a92e2c3e06719774251c8d527899e9ac774a3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:e0:19:79:84:1d:2e:c0:29:6f:1c:06:47: 03:00:b0:c7:9f:08:f4:05:a4:d2:32:0f:84:eb:98: 89:a9:c6:41:6c:42:0e:5e:ab:5a:aa:e8:da:76:ee: 9e:21:6a:e1:f3:6f:41:cc:b5:a4:39:ad:1e:fc:31: d6:e1:bd:fd:9e:c9:ef:c2:71:3d:1e:57:11:31:fd: 3e:ce:b3:e9:0a:70:7e:7d:fa:9f:6a:33:5c:53:d3: 8c:a9:8e:3b:48:79:07:e8:b9:62:17:20:90:c4:34: 30:56:8e:e9:2d:ff:19:b1:71:f5:c8:33:db:f7:05: 77:42:95:60:02:2f:d9:30:dc:bb:65:11:7b:cc:22: 0b:87:60:2c:2c:b5:d2:a0:4a:61:24:3d:52:b4:d8: b2:4d:99:91:ac:b1:51:3a:c4:bd:0f:41:a0:85:1a: 18:1f:91:17:a5:69:b8:cd:ee:eb:98:24:f0:41:f3: ee:64:94:15:a5:db:ed:54:2e:d9:64:44:64:40:ea: 14:bc:55:2a:43:ec:60:86:e9:55:a3:04:4c:04:bd: c0:dc:c0:18:fc:f2:48:bc:41:dc:95:a1:e9:19:bf: ec:bf:8d:2f:2a:40:47:6d:c0:e9:fd:80:04:12:d0: 97:3b:9c:12:45:7b:a6:0c:8a:0c:b7:74:0f:03:a5: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:92:E2:C3:E0:67:19:77:42:51:C8:D5:27:89:9E:9A:C7:74:A3:B7 X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0a:06:54:1f:71:29:2d:25:60:c5:36:55:b8:bd:19:20:34: 1f:52:85:f3:cd:57:c4:0f:2f:22:47:c1:e6:bd:25:03:e7:45: 5b:94:de:94:f5:56:93:c7:1b:e3:da:4b:90:a4:6c:34:26:64: 27:ba:02:47:8c:9a:0d:88:56:02:75:cf:97:6e:2a:18:5e:05: 47:81:87:d7:1c:6e:e0:7f:d8:dd:2f:31:2b:c3:dd:24:1a:9f: 79:c4:5c:d3:3a:4a:80:2a:f7:4b:21:01:4a:9a:99:d4:9c:7a: 5c:ae:78:ed:7a:21:ac:07:3c:22:ac:f7:44:d9:64:04:a0:64: f7:e1:2f:12:72:43:61:52:40:3f:56:7c:bd:e7:d0:c8:95:16: b3:55:4b:f3:87:20:ad:89:c4:05:9b:b0:58:92:a7:2b:56:57: 01:37:c5:21:25:79:c6:13:9a:38:bd:1a:73:9d:25:80:1d:21: b7:1c:ad:6a:31:39:09:82:ea:1f:ab:44:21:87:99:2b:96:f9: 3c:5c:ce:81:bb:6d:3d:e6:e0:ad:d8:42:2b:85:ac:e7:de:45: 76:39:81:06:58:ae:d5:fe:1f:1e:5e:94:3d:cd:93:bc:3b:af: 89:51:67:08:9b:a8:09:03:ef:d0:c5:fb:8a:69:51:82:08:c6: 22:41:0e:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsripXU35ahqM6EPNVRVp3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjUxMjE3MDkwMTAwWhcNMjUxMjE4MDkwMTAwWjAzMTEwLwYDVQQD Eyg1YTkyZTJjM2UwNjcxOTc3NDI1MWM4ZDUyNzg5OWU5YWM3NzRhM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulngGXmEHS7AKW8cBkcDALDHnwj0 BaTSMg+E65iJqcZBbEIOXqtaqujadu6eIWrh829BzLWkOa0e/DHW4b39nsnvwnE9 HlcRMf0+zrPpCnB+ffqfajNcU9OMqY47SHkH6LliFyCQxDQwVo7pLf8ZsXH1yDPb 9wV3QpVgAi/ZMNy7ZRF7zCILh2AsLLXSoEphJD1StNiyTZmRrLFROsS9D0GghRoY H5EXpWm4ze7rmCTwQfPuZJQVpdvtVC7ZZERkQOoUvFUqQ+xghulVowRMBL3A3MAY /PJIvEHclaHpGb/sv40vKkBHbcDp/YAEEtCXO5wSRXumDIoMt3QPA6WoVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqS4sPgZxl3QlHI1SeJnprHdKO3MB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgoGVB9x KS0lYMU2Vbi9GSA0H1KF881XxA8vIkfB5r0lA+dFW5TelPVWk8cb49pLkKRsNCZk J7oCR4yaDYhWAnXPl24qGF4FR4GH1xxu4H/Y3S8xK8PdJBqfecRc0zpKgCr3SyEB SpqZ1Jx6XK547XohrAc8Iqz3RNlkBKBk9+EvEnJDYVJAP1Z8vefQyJUWs1VL84cg rYnEBZuwWJKnK1ZXATfFISV5xhOaOL0ac50lgB0htxytajE5CYLqH6tEIYeZK5b5 PFzOgbttPebgrdhCK4Ws595FdjmBBliu1f4fHl6UPc2TvDuviVFnCJuoCQPv0MX7 imlRggjGIkEOjA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:46 2025 by rpki-client