This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft File: LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json) Hash identifier: ZGBKEU/DTAfCOegRt3+87OY0WVknq/BXfDt7WKKghvI= Subject key identifier: 63:D8:34:4E:31:CD:89:C6:B6:DC:B0:6B:13:B3:CD:A0:AB:F6:26:0B Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Certificate serial: 019AF12E0EF1F2E7B1A6855648EDAB0DA5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft Manifest number: 133C Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=) 2: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: wh6dsUjA8GGcMrrFnzrmkOdqWJz886y74FkbViMTgto=) 3: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=) 4: lFwxYJ9NT0Uy9IOwwYFb_vwGrhw.roa (hash: z+R9el6Zb5OurCcNqlSTJDxPuVgrOIIhwKwpE5Vc65M=) 5: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0e:f1:f2:e7:b1:a6:85:56:48:ed:ab:0d:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=63d8344e31cd89c6b6dcb06b13b3cda0abf6260b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:66:2e:52:af:8d:e1:b0:f6:df:38:92:25: fd:56:3b:5a:dc:40:0e:e7:97:73:75:f3:40:88:a9: 0b:6b:76:b4:ce:c0:ab:60:fb:ef:29:13:13:44:87: e4:26:d6:8b:bf:73:65:35:c5:e6:95:cd:ef:0d:32: 8f:22:05:8b:a4:48:a6:98:45:73:2a:c6:6b:2b:16: d5:19:70:bd:f8:71:95:56:d1:19:02:34:4c:cc:57: e8:cf:93:aa:13:44:82:d4:8d:cb:8e:2e:af:cf:53: b4:fa:3c:70:e4:6c:05:1c:3b:36:5a:a6:d7:30:a8: 11:2b:7f:2a:9d:be:8c:81:90:25:5e:78:cc:38:5e: 25:7d:0a:37:f5:a3:77:e4:fc:f0:79:73:a6:12:d9: 7a:a2:24:0c:fe:dc:d8:50:2e:bb:52:a9:19:24:9d: 32:a7:df:59:7a:27:4a:69:b6:47:f2:a1:e4:03:1e: 57:af:10:fd:01:dc:a4:94:94:8e:5e:74:4d:07:1b: c1:43:f4:7c:96:74:0d:df:5b:c7:58:00:a1:22:63: 1c:41:07:b4:4a:91:86:5f:00:2d:02:ee:09:5a:89: 58:3f:7a:3e:8a:86:2a:d0:27:2c:e7:43:79:18:9c: 18:9b:7f:93:98:6d:82:d5:b2:ce:72:e5:1d:3f:04: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:34:4E:31:CD:89:C6:B6:DC:B0:6B:13:B3:CD:A0:AB:F6:26:0B X509v3 Authority Key Identifier: keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b0:c1:2d:a1:bd:cf:a9:60:97:b8:a5:e9:b1:04:0a:95:8f: 97:47:ec:f8:88:80:73:32:ba:e7:ff:6f:47:15:fb:98:15:fb: e5:f3:70:36:62:4b:bc:6a:d0:2e:f2:63:d8:e7:80:62:a5:ce: 3a:9c:78:85:56:61:fc:a6:42:54:63:72:14:68:9e:09:1a:72: 43:b5:ab:ce:fc:e8:51:72:d2:b7:e3:72:c2:f6:84:82:be:68: 84:10:c8:bd:04:56:42:d6:6d:91:6e:8e:50:08:2e:a8:9e:70: 3a:bc:c6:a1:a4:83:7a:af:12:da:6f:70:0f:b7:3d:88:3c:e9: a6:48:fe:61:2e:ee:b5:e6:71:d7:27:87:81:69:24:43:9b:4a: 2c:e0:64:d7:8f:d5:d3:75:fb:74:67:84:e3:c2:3d:e1:05:67: c9:48:fc:16:a8:e5:de:54:d9:4c:fa:01:3e:44:60:96:b1:8a: 44:04:d4:5c:27:bc:82:15:57:4d:eb:de:45:91:7d:36:c2:a8: ef:40:15:b5:c7:8d:ea:e5:a2:77:8c:7a:de:5f:45:ea:6f:39: 17:c0:d4:17:49:53:f7:e0:3f:7f:28:01:5c:d8:2d:ae:c8:0b: 53:9a:e5:74:68:38:e9:67:1a:00:5d:e0:14:70:af:11:28:1c: 39:84:52:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLg7x8uexpoVWSO2rDaXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5 OTM0ZjgwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD Eyg2M2Q4MzQ0ZTMxY2Q4OWM2YjZkY2IwNmIxM2IzY2RhMGFiZjYyNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ABmLlKvjeGw9t84kiX9Vjta3EAO 55dzdfNAiKkLa3a0zsCrYPvvKRMTRIfkJtaLv3NlNcXmlc3vDTKPIgWLpEimmEVz KsZrKxbVGXC9+HGVVtEZAjRMzFfoz5OqE0SC1I3Lji6vz1O0+jxw5GwFHDs2WqbX MKgRK38qnb6MgZAlXnjMOF4lfQo39aN35PzweXOmEtl6oiQM/tzYUC67UqkZJJ0y p99ZeidKabZH8qHkAx5XrxD9AdyklJSOXnRNBxvBQ/R8lnQN31vHWAChImMcQQe0 SpGGXwAtAu4JWolYP3o+ioYq0Ccs50N5GJwYm3+TmG2C1bLOcuUdPwR+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPYNE4xzYnGttywaxOzzaCr9iYLMB8GA1UdIwQY MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt M2FkNTJlOGI5NjI4LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4 LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbDBLaG9 z6lgl7il6bEECpWPl0fs+IiAczK65/9vRxX7mBX75fNwNmJLvGrQLvJj2OeAYqXO Opx4hVZh/KZCVGNyFGieCRpyQ7WrzvzoUXLSt+NywvaEgr5ohBDIvQRWQtZtkW6O UAguqJ5wOrzGoaSDeq8S2m9wD7c9iDzppkj+YS7uteZx1yeHgWkkQ5tKLOBk14/V 03X7dGeE48I94QVnyUj8Fqjl3lTZTPoBPkRglrGKRATUXCe8ghVXTeveRZF9NsKo 70AVtceN6uWid4x63l9F6m85F8DUF0lT9+A/fygBXNgtrsgLU5rldGg46WcaAF3g FHCvESgcOYRSUA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:44 2025 by rpki-client