This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json) Hash identifier: 39tq8E9EDNX56oXWRiHRPjJHCBiMTCzhVa52SzjOjKo= Subject key identifier: BA:12:B3:52:AD:80:35:B3:9B:E5:BC:CE:8E:F3:91:83:25:33:D0:B9 Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f Certificate serial: 019AF31BC0CB77B68EDE2033256C72672040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft Manifest number: 09EA Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: JyPPpCuNeKq3NmKVxHEF5k3YvjYD6WitIblKuJkhrdE=) 2: Vjktac0EQutqMz1o5f1-TeAG4AY.roa (hash: 8mwOPd8uKHxcwF0athR1g43eU49G81HPQuicA6jXBsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c0:cb:77:b6:8e:de:20:33:25:6c:72:67:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=ba12b352ad8035b39be5bcce8ef391832533d0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:7a:27:be:76:07:47:c5:70:11:04:3f:3a: 12:01:11:01:dd:2c:42:2c:95:10:c9:b3:76:34:53: 34:19:b3:80:92:96:1e:30:6a:61:a8:9e:f9:42:e3: 65:9c:6d:b3:54:cf:69:7d:b9:f4:d0:af:ee:06:a4: b3:15:16:17:97:c9:d6:5f:f5:4d:73:f6:5d:75:f1: 05:19:0a:2d:4a:2e:da:8e:c2:5b:a8:81:2f:05:7d: 24:cd:f2:c0:cc:65:18:43:24:b8:d9:0e:e1:7c:53: 30:b9:49:f9:47:94:8d:9f:b5:a2:8f:c7:89:ac:7d: 13:1d:92:eb:f3:61:f1:db:ec:f3:9b:9d:81:54:e9: 49:ab:d9:ab:0d:66:cb:81:4a:f6:5f:ee:7b:64:70: 88:44:d1:85:85:cb:42:5e:94:ff:ca:e2:32:59:a4: 11:b8:82:60:8e:91:e1:78:02:bb:98:b5:d1:e9:22: f3:e0:ba:bf:e3:64:18:20:0e:8e:54:b1:cb:12:8b: 7b:e3:85:e1:ab:d8:95:e3:23:94:9c:58:fd:18:43: 59:35:2f:0d:c4:e5:4a:91:83:57:3f:3f:c4:9f:91: 3f:8b:07:57:3f:e9:0a:f3:3d:0d:68:a7:a0:70:1f: 2e:5b:00:72:d5:43:4f:43:4f:00:93:29:76:31:ee: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:12:B3:52:AD:80:35:B3:9B:E5:BC:CE:8E:F3:91:83:25:33:D0:B9 X509v3 Authority Key Identifier: keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d6:03:a0:1f:c7:59:81:ab:19:13:12:6c:5e:11:1f:7c:65: 91:0e:64:1d:58:c7:43:e1:20:2a:32:a8:06:a2:c6:f3:5b:01: 7e:ef:96:87:4f:7e:54:81:18:dc:62:2a:ca:f7:b7:3a:06:76: 4e:14:19:af:2a:58:f0:ff:35:ff:58:f6:2f:4d:41:1b:0a:c5: d3:69:23:a1:a3:a7:16:9c:aa:1b:83:6b:70:17:e5:e7:b1:80: 83:55:40:36:f7:81:b1:66:13:5e:21:3a:dd:96:11:54:07:85: bb:a8:72:48:75:25:ed:11:f2:5c:4f:47:45:22:a7:79:a5:47: dc:d6:ff:b8:13:0b:87:e2:33:a2:92:29:78:e8:26:0f:82:55: fc:17:b1:13:5d:36:9c:c7:fe:f4:0c:fe:a0:5a:8b:46:aa:2c: 43:33:81:b4:98:19:7c:8a:a9:da:41:6c:ac:01:ec:e9:ff:68: 55:01:98:9b:18:1d:33:cb:55:bc:0b:7c:e4:97:8a:be:1f:dc: 49:d9:4a:c7:2d:a2:ff:ae:0d:ef:20:93:ac:7a:05:f2:cd:30: 2c:c6:54:3f:82:9a:db:d9:6e:10:5f:8a:03:80:39:f2:e8:7b: db:a9:cf:25:46:d7:42:17:1b:5e:b8:1d:5f:31:2f:f7:41:e7: 39:48:67:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8DLd7aO3iAzJWxyZyBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTk3OWVhMzhiOWRiZGRjYTc0YjdiZmE3Mzc2OGI1N2Jm ZmMxMmYwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD EyhiYTEyYjM1MmFkODAzNWIzOWJlNWJjY2U4ZWYzOTE4MzI1MzNkMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCh6J752B0fFcBEEPzoSAREB3SxC LJUQybN2NFM0GbOAkpYeMGphqJ75QuNlnG2zVM9pfbn00K/uBqSzFRYXl8nWX/VN c/ZddfEFGQotSi7ajsJbqIEvBX0kzfLAzGUYQyS42Q7hfFMwuUn5R5SNn7Wij8eJ rH0THZLr82Hx2+zzm52BVOlJq9mrDWbLgUr2X+57ZHCIRNGFhctCXpT/yuIyWaQR uIJgjpHheAK7mLXR6SLz4Lq/42QYIA6OVLHLEot744Xhq9iV4yOUnFj9GENZNS8N xOVKkYNXPz/En5E/iwdXP+kK8z0NaKegcB8uWwBy1UNPQ08Akyl2Me6nVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoSs1KtgDWzm+W8zo7zkYMlM9C5MB8GA1UdIwQY MBaAFCyZeeo4udvdynS3v6c3aLV7/8EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQt YWMzMzJmOGQ4YzQ4LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQtYWMzMzJmOGQ4YzQ4 LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtYDoB/H WYGrGRMSbF4RH3xlkQ5kHVjHQ+EgKjKoBqLG81sBfu+Wh09+VIEY3GIqyve3OgZ2 ThQZrypY8P81/1j2L01BGwrF02kjoaOnFpyqG4NrcBfl57GAg1VANveBsWYTXiE6 3ZYRVAeFu6hySHUl7RHyXE9HRSKneaVH3Nb/uBMLh+IzopIpeOgmD4JV/BexE102 nMf+9Az+oFqLRqosQzOBtJgZfIqp2kFsrAHs6f9oVQGYmxgdM8tVvAt85JeKvh/c SdlKxy2i/64N7yCTrHoF8s0wLMZUP4Ka29luEF+KA4A58uh726nPJUbXQhcbXrgd XzEv90HnOUhnng== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:33 2025 by rpki-client