This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json) Hash identifier: 8PopSloL9sF5beqRFzC5ucgGtWP0f9sVFxoED9tBNb0= Subject key identifier: 13:B4:A2:6C:08:36:C4:B9:C3:7F:98:C0:93:F5:C5:BB:C0:FE:77:41 Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019AF31B3156CEB6D634319DC52EFCF0F109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft Manifest number: 047E Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=) 2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=) 3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=) 4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: T6ynMeduPpfJflfkqoNZxFsam81EdPnhirqcZbmot1k=) 5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:31:56:ce:b6:d6:34:31:9d:c5:2e:fc:f0:f1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=13b4a26c0836c4b9c37f98c093f5c5bbc0fe7741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:c3:27:e9:60:d4:ba:c5:f4:f6:39:ae:db: 1d:ff:e8:c3:03:84:46:a6:ec:ca:3b:42:fb:6c:81: d7:0d:c6:c2:a0:6d:6a:04:bf:ab:ef:3e:b8:52:c6: e4:39:6d:3b:13:03:0e:ed:81:be:20:46:a5:af:3c: 2d:6b:1d:59:5b:b1:de:fa:c8:e2:f9:85:5f:7f:c1: 48:bd:68:e2:88:a7:df:47:e0:ec:34:7d:52:02:b0: 36:16:06:0d:f8:c0:9d:8c:39:3a:9d:ee:e3:58:47: 82:42:10:e4:ef:e4:94:4e:d2:fb:5d:e3:c6:ae:d1: 3b:1a:f2:68:45:e9:b4:75:ca:9a:bb:77:01:a7:8c: 9c:3f:88:8b:91:fa:0a:6f:71:0b:f7:8e:29:4f:4b: ff:83:d6:bc:0a:d1:1d:99:74:b2:82:12:4d:13:b4: b2:b7:bd:6c:2d:6a:14:18:82:f8:7e:48:fa:b0:13: d5:89:4f:36:a7:dc:f4:47:65:83:33:9b:22:a1:3d: 00:0f:0c:0a:cf:b8:5c:0c:08:cd:2f:d5:c6:d0:80: bf:ca:13:76:3a:13:71:f4:dd:e8:76:66:a8:92:e6: 23:c9:2e:7e:a4:0b:11:23:53:2e:f3:aa:45:e2:30: e7:40:81:9d:83:86:90:e0:40:b3:a7:35:37:0c:46: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B4:A2:6C:08:36:C4:B9:C3:7F:98:C0:93:F5:C5:BB:C0:FE:77:41 X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9d:e9:48:f1:8f:48:21:e1:a4:db:77:10:1f:b4:4c:43:ab: 80:07:92:ca:00:33:7c:98:b7:36:34:40:5a:bf:7d:cd:c2:f9: 22:2c:cb:65:62:4b:96:82:63:c0:d3:69:21:8e:c7:92:02:c2: 42:85:17:4f:bc:8b:6a:5c:d9:d9:d4:ca:1b:ba:b7:66:fe:04: 95:f9:e6:fe:c8:93:88:ef:e6:02:1e:13:db:33:ba:d4:7a:d5: 07:4f:44:df:de:f3:fe:e3:c7:56:96:84:33:da:99:00:f5:f8: 40:38:9b:7f:68:c2:52:fd:57:db:c1:64:e8:e4:a9:96:70:28: 01:1f:18:58:69:46:f9:33:0c:7a:0f:e8:46:f9:b8:58:03:7e: e3:f5:f7:fa:20:d7:1e:86:f0:03:5c:fd:18:b0:d5:7c:0f:61: 24:f4:a1:d5:c9:6e:d2:69:c9:7a:ee:64:95:8e:67:9b:ba:34: 7f:09:d9:39:39:5a:f8:ba:eb:27:e9:a3:08:77:01:d6:37:e0: 1c:a4:5d:d9:b9:fc:31:c3:7a:3a:b1:60:dd:5c:72:f5:7a:c5: 5d:4c:86:f0:98:64:ed:bb:17:b8:fb:64:9e:71:5f:10:bc:65: 7c:7a:7f:ad:16:af:8e:54:23:88:66:de:90:af:07:da:cb:95: 22:14:49:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzFWzrbWNDGdxS788PEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD EygxM2I0YTI2YzA4MzZjNGI5YzM3Zjk4YzA5M2Y1YzViYmMwZmU3NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr3DJ+lg1LrF9PY5rtsd/+jDA4RG puzKO0L7bIHXDcbCoG1qBL+r7z64UsbkOW07EwMO7YG+IEalrzwtax1ZW7He+sji +YVff8FIvWjiiKffR+DsNH1SArA2FgYN+MCdjDk6ne7jWEeCQhDk7+SUTtL7XePG rtE7GvJoRem0dcqau3cBp4ycP4iLkfoKb3EL944pT0v/g9a8CtEdmXSyghJNE7Sy t71sLWoUGIL4fkj6sBPViU82p9z0R2WDM5sioT0ADwwKz7hcDAjNL9XG0IC/yhN2 OhNx9N3odmaokuYjyS5+pAsRI1Mu86pF4jDnQIGdg4aQ4ECzpzU3DEaI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBO0omwINsS5w3+YwJP1xbvA/ndBMB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ3pSPGP SCHhpNt3EB+0TEOrgAeSygAzfJi3NjRAWr99zcL5IizLZWJLloJjwNNpIY7HkgLC QoUXT7yLalzZ2dTKG7q3Zv4Elfnm/siTiO/mAh4T2zO61HrVB09E397z/uPHVpaE M9qZAPX4QDibf2jCUv1X28Fk6OSplnAoAR8YWGlG+TMMeg/oRvm4WAN+4/X3+iDX HobwA1z9GLDVfA9hJPSh1clu0mnJeu5klY5nm7o0fwnZOTla+LrrJ+mjCHcB1jfg HKRd2bn8McN6OrFg3Vxy9XrFXUyG8Jhk7bsXuPtknnFfELxlfHp/rRavjlQjiGbe kK8H2suVIhRJVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:04 2025 by rpki-client