This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft File: lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json) Hash identifier: AfcuEimgR7bpwEK6hasUpOAX0C9oOisy4J77YR8eBig= Subject key identifier: 30:9A:6B:69:26:1E:72:5B:87:E2:3E:EC:6C:E9:BD:01:26:29:DC:19 Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec Certificate serial: 019B2DE659D60DED5B09DD56ADDBBB2BFB07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft Manifest number: 0D46 Signing time: Wed 17 Dec 2025 20:00:29 +0000 Manifest this update: Wed 17 Dec 2025 20:00:29 +0000 Manifest next update: Thu 18 Dec 2025 20:00:29 +0000 Files and hashes: 1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=) 2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: 8MkHFvh9xFPNWnoYDT+1xzDCY0GttZ7mmGmQrqfyK6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:59:d6:0d:ed:5b:09:dd:56:ad:db:bb:2b:fb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec Validity Not Before: Dec 17 20:00:29 2025 GMT Not After : Dec 18 20:00:29 2025 GMT Subject: CN=309a6b69261e725b87e23eec6ce9bd012629dc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:d8:eb:f5:53:b2:14:ed:f2:48:84:3e:3d: 2e:08:89:a5:7f:eb:34:72:34:ba:db:25:6e:09:63: e2:a5:76:4a:6e:f7:de:af:b2:5e:48:23:1c:77:53: 4b:a4:7f:4c:0d:bf:84:47:e1:08:44:78:10:46:b3: 62:ba:67:9e:83:0d:32:b1:1b:c9:0d:6d:3b:92:2b: af:42:86:09:0a:50:bd:dc:f7:0f:f7:13:86:ba:ca: e7:6c:0d:d8:7f:93:6a:e6:2c:0f:6d:8b:90:df:ec: 29:f5:7b:23:73:0c:f2:52:fd:63:0c:fe:e4:42:ea: d2:ce:05:b9:a9:0c:4e:68:43:d3:1d:c3:ec:6b:36: 7e:2d:c0:cb:32:e2:20:59:1f:40:09:d4:e9:5a:a2: 15:5e:12:6b:e5:0f:74:96:0e:87:66:be:c7:e2:b0: 93:01:04:5a:29:da:0a:0e:37:21:1b:0d:3e:c2:8f: 32:7e:1a:e5:74:3a:eb:46:95:88:59:a2:ee:40:d4: c1:16:d5:82:b5:a3:71:e3:21:9f:e6:27:be:a4:82: 13:fe:f2:cc:5c:a3:c0:10:85:23:28:b8:fa:d8:56: 22:05:ea:05:cb:30:87:37:ee:11:27:c2:f0:99:d2: 1e:e7:7c:3c:b5:fa:9c:86:a7:15:4a:f8:86:8b:bb: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9A:6B:69:26:1E:72:5B:87:E2:3E:EC:6C:E9:BD:01:26:29:DC:19 X509v3 Authority Key Identifier: keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ea:6f:5b:a1:b1:43:96:84:e6:17:57:67:b6:f8:4e:e9:85: 59:af:4c:77:ea:fc:7a:ca:c0:9b:a5:51:47:82:80:95:ad:fc: d2:19:94:a3:08:48:3b:f7:93:1f:02:90:31:e4:51:66:59:86: 5c:30:ea:cd:38:c1:c5:13:bd:58:0e:dd:25:e6:02:e7:e1:a9: 9e:4d:8a:71:77:7c:db:34:e8:75:2a:1d:d5:d0:75:a0:22:c9: a7:80:66:95:35:8f:52:66:5a:b8:f7:60:cb:90:7e:c0:b3:72: f9:56:fe:1b:31:09:e2:e4:c4:cb:fa:d4:9f:fc:03:f7:9b:84: c9:c7:a2:c0:57:a4:d2:42:c2:0b:d9:41:14:9c:b0:a2:37:9f: a9:44:3b:49:1e:2a:38:1a:7f:48:3b:27:ea:f2:45:82:a5:1a: 84:73:b2:8e:78:34:88:7c:e9:23:ce:c8:21:70:e5:e6:6c:cc: e3:bf:02:0f:99:f6:c3:f6:c2:41:92:d9:7e:b8:4d:03:66:50: a2:ac:12:8f:68:15:b9:3e:61:b0:41:6c:ac:2a:2e:42:05:97: da:4d:7f:f5:03:4a:b9:e8:b3:42:6c:02:44:e0:f0:09:42:bd: dc:29:f6:d9:4a:a0:d3:c5:d1:b1:bb:a8:c7:16:dd:76:8a:16: 57:87:58:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5lnWDe1bCd1Wrdu7K/sHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NmE3YWFlMTVmZjNlODMxZTM4MDNmZDk4YzEwNjNjY2M0 YmYzZWMwHhcNMjUxMjE3MjAwMDI5WhcNMjUxMjE4MjAwMDI5WjAzMTEwLwYDVQQD EygzMDlhNmI2OTI2MWU3MjViODdlMjNlZWM2Y2U5YmQwMTI2MjlkYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsbY6/VTshTt8kiEPj0uCImlf+s0 cjS62yVuCWPipXZKbvfer7JeSCMcd1NLpH9MDb+ER+EIRHgQRrNiumeegw0ysRvJ DW07kiuvQoYJClC93PcP9xOGusrnbA3Yf5Nq5iwPbYuQ3+wp9XsjcwzyUv1jDP7k QurSzgW5qQxOaEPTHcPsazZ+LcDLMuIgWR9ACdTpWqIVXhJr5Q90lg6HZr7H4rCT AQRaKdoKDjchGw0+wo8yfhrldDrrRpWIWaLuQNTBFtWCtaNx4yGf5ie+pIIT/vLM XKPAEIUjKLj62FYiBeoFyzCHN+4RJ8LwmdIe53w8tfqchqcVSviGi7vM8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCaa2kmHnJbh+I+7GzpvQEmKdwZMB8GA1UdIwQY MBaAFJRqeq4V/z6DHjgD/ZjBBjzMS/PsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85ZTYxYjgtNjIyMy00ZGNlLTkxZDUt YzZkNWYyYTAyYzZmLzEvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85ZTYxYjgtNjIyMy00ZGNlLTkxZDUtYzZkNWYyYTAyYzZm LzEvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeupvW6Gx Q5aE5hdXZ7b4TumFWa9Md+r8esrAm6VRR4KAla380hmUowhIO/eTHwKQMeRRZlmG XDDqzTjBxRO9WA7dJeYC5+Gpnk2KcXd82zTodSod1dB1oCLJp4BmlTWPUmZauPdg y5B+wLNy+Vb+GzEJ4uTEy/rUn/wD95uEyceiwFek0kLCC9lBFJywojefqUQ7SR4q OBp/SDsn6vJFgqUahHOyjng0iHzpI87IIXDl5mzM478CD5n2w/bCQZLZfrhNA2ZQ oqwSj2gVuT5hsEFsrCouQgWX2k1/9QNKueizQmwCRODwCUK93Cn22Uqg08XRsbuo xxbddooWV4dYbw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:51 2025 by rpki-client