This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json) Hash identifier: YOPIshPgQHOILVCw4se3NIqS1JWSgjiQ0xDU0YRJqG4= Subject key identifier: 35:27:22:73:CF:9F:E1:97:2B:46:4F:C0:9C:A0:11:BB:F2:DE:88:CD Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Certificate serial: 019B2D0C02F7D8604246BF7E13F9F6F9F63A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 16:02:00 +0000 Manifest this update: Wed 17 Dec 2025 16:02:00 +0000 Manifest next update: Thu 18 Dec 2025 16:02:00 +0000 Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=) 2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: fJiXxJRTEFJ8xHvVEDseljXZ5VM6iFAZNEN3uwwWEUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:02:f7:d8:60:42:46:bf:7e:13:f9:f6:f9:f6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Validity Not Before: Dec 17 16:02:00 2025 GMT Not After : Dec 18 16:02:00 2025 GMT Subject: CN=35272273cf9fe1972b464fc09ca011bbf2de88cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:46:32:5e:c3:f1:49:37:95:8c:4f:2a:dc: f0:0f:33:86:46:bb:d2:b7:9b:5d:80:66:60:a4:71: 6f:76:25:c0:e8:fe:2b:7a:b4:35:47:7a:02:c8:26: 5a:c2:03:6e:f9:85:d9:ae:ca:70:60:1f:b6:3a:51: 06:5c:e5:e5:7f:c3:99:19:8d:9c:59:c7:45:cc:80: aa:50:ab:01:a0:a2:c2:1d:fc:3b:a5:33:d6:24:3b: 18:3f:1c:c6:be:26:09:9d:90:42:b8:0f:73:de:24: 7b:04:9f:e0:1e:c4:fe:20:fc:13:5b:76:11:7a:79: 73:7f:83:8f:d8:74:9f:91:08:38:56:84:6b:66:6d: 3d:48:63:00:8f:9f:a0:8f:78:3f:8c:2d:5d:cb:bc: a6:d6:ca:85:33:cf:f7:bc:32:08:97:76:77:0a:25: 87:f8:52:10:86:3b:46:cf:06:64:7e:ee:a5:94:fb: 80:32:33:59:11:c1:85:90:7f:06:63:b1:12:01:cc: f2:b8:e7:e3:dd:69:45:6d:35:6a:d1:9c:95:71:dd: 3e:e3:8d:88:e0:c3:d4:72:57:8c:7a:9e:72:dc:92: 9d:eb:ef:9b:f9:e5:7e:d6:44:e5:7c:77:ce:4f:eb: e3:34:fd:23:72:2a:06:e7:38:46:99:6a:7a:08:64: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:27:22:73:CF:9F:E1:97:2B:46:4F:C0:9C:A0:11:BB:F2:DE:88:CD X509v3 Authority Key Identifier: keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:01:f8:07:ea:5d:85:77:2d:a3:f5:13:94:3a:b7:35:00:19: f2:df:58:92:2b:9b:82:3b:77:b8:70:30:1e:99:7d:1c:e0:65: ba:be:f6:7e:d9:33:17:84:e4:96:2f:9e:6b:dc:10:84:b1:36: c5:01:4b:e8:76:5d:f7:6c:50:5a:af:1f:71:0b:20:f1:5f:db: 57:c2:eb:d2:81:de:a5:11:9c:b2:00:64:89:71:fd:86:e8:64: 77:a9:97:fe:b3:93:54:bc:ff:3f:ee:8e:31:5d:39:5e:42:25: 66:d6:dc:da:ef:d9:3f:bf:8e:db:84:5d:c7:e5:8a:ac:f5:4b: 84:c8:57:1c:7b:db:10:5a:4e:c1:c9:a3:8c:c6:5b:b4:37:16: be:5b:a7:d7:c7:4c:1c:4a:07:02:ad:3e:f7:64:5c:8e:03:66: 42:54:a5:1e:96:ae:a3:04:49:75:bb:78:7b:64:06:c0:37:ca: e0:83:18:e7:e4:a3:80:f3:17:78:1e:9a:82:cd:75:72:cf:3a: 23:4e:69:44:b9:a5:6a:06:67:5e:57:e2:93:ab:25:ba:fe:3e: 97:49:25:00:d6:16:f6:21:9b:e2:27:cf:bb:b4:c4:96:94:f3: 7c:9c:e8:a4:5c:01:b0:af:1e:89:42:2d:69:33:fa:2a:91:19: cb:ce:78:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDAL32GBCRr9+E/n2+fY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmI1ZTJlMGZkOTgzMmQ3M2IxZWY4ZjllNDg2ZmZkMDBi M2Q3ODkwHhcNMjUxMjE3MTYwMjAwWhcNMjUxMjE4MTYwMjAwWjAzMTEwLwYDVQQD EygzNTI3MjI3M2NmOWZlMTk3MmI0NjRmYzA5Y2EwMTFiYmYyZGU4OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUpGMl7D8Uk3lYxPKtzwDzOGRrvS t5tdgGZgpHFvdiXA6P4rerQ1R3oCyCZawgNu+YXZrspwYB+2OlEGXOXlf8OZGY2c WcdFzICqUKsBoKLCHfw7pTPWJDsYPxzGviYJnZBCuA9z3iR7BJ/gHsT+IPwTW3YR enlzf4OP2HSfkQg4VoRrZm09SGMAj5+gj3g/jC1dy7ym1sqFM8/3vDIIl3Z3CiWH +FIQhjtGzwZkfu6llPuAMjNZEcGFkH8GY7ESAczyuOfj3WlFbTVq0ZyVcd0+442I 4MPUcleMep5y3JKd6++b+eV+1kTlfHfOT+vjNP0jcioG5zhGmWp6CGTE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUnInPPn+GXK0ZPwJygEbvy3ojNMB8GA1UdIwQY MBaAFPy7Xi4P2YMtc7Hvj55Ib/0As9eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTkt NWU2YTkyZTdmNjhmLzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTktNWU2YTkyZTdmNjhm LzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAH4B+pd hXcto/UTlDq3NQAZ8t9Ykiubgjt3uHAwHpl9HOBlur72ftkzF4Tkli+ea9wQhLE2 xQFL6HZd92xQWq8fcQsg8V/bV8Lr0oHepRGcsgBkiXH9huhkd6mX/rOTVLz/P+6O MV05XkIlZtbc2u/ZP7+O24Rdx+WKrPVLhMhXHHvbEFpOwcmjjMZbtDcWvlun18dM HEoHAq0+92RcjgNmQlSlHpauowRJdbt4e2QGwDfK4IMY5+SjgPMXeB6ags11cs86 I05pRLmlagZnXlfik6sluv4+l0klANYW9iGb4ifPu7TElpTzfJzopFwBsK8eiUIt aTP6KpEZy854kA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:55:19 2025 by rpki-client