This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft File: LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json) Hash identifier: kSbuKUt1ljvAUwOL8M99fcfMP1v82cR4DqOdZNm+bHU= Subject key identifier: 99:4F:AC:BA:05:01:A8:FC:5D:43:96:C8:C8:1D:98:7D:97:B6:7F:31 Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Certificate serial: 019B3C7F29C0D4C0B2D9B991D8F243736DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft Manifest number: 1363 Signing time: Sat 20 Dec 2025 16:02:05 +0000 Manifest this update: Sat 20 Dec 2025 16:02:05 +0000 Manifest next update: Sun 21 Dec 2025 16:02:05 +0000 Files and hashes: 1: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=) 2: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: AAv/s+eliM6erz8lkFInVLsh9o8et6770/yJETqB5M8=) 3: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=) 4: lFwxYJ9NT0Uy9IOwwYFb_vwGrhw.roa (hash: z+R9el6Zb5OurCcNqlSTJDxPuVgrOIIhwKwpE5Vc65M=) 5: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:29:c0:d4:c0:b2:d9:b9:91:d8:f2:43:73:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Validity Not Before: Dec 20 16:02:05 2025 GMT Not After : Dec 21 16:02:05 2025 GMT Subject: CN=994facba0501a8fc5d4396c8c81d987d97b67f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:ba:7d:eb:1f:6a:75:41:07:43:d2:64:70: 16:98:af:e2:c2:fc:52:3e:2a:0e:97:59:ba:96:0b: 2a:f3:e1:16:9a:49:c5:5e:36:63:9d:56:8a:dc:bc: 80:fd:65:7c:4b:c7:cf:43:76:13:d6:a7:84:34:c0: 57:62:00:0d:ae:bc:ec:72:b1:06:44:fc:bc:d4:64: 58:53:21:0e:de:e6:46:09:cd:2d:80:65:1f:17:4d: c0:d8:34:bd:ca:51:9d:7e:e8:ff:28:7f:84:7c:04: 82:47:42:58:99:dc:05:11:e5:a5:22:4d:b9:08:47: 7c:5d:de:d9:8e:e5:75:99:c6:f1:de:a6:62:ef:f0: f0:e0:8f:da:1f:e1:ed:3e:10:6a:58:f3:66:ff:75: 21:4a:b5:3f:11:7b:75:2a:75:8b:e5:cc:5e:d3:10: 21:c7:6c:bd:05:f9:21:57:6b:f2:2b:80:a1:39:5a: ef:24:77:36:3b:4d:66:3a:b4:70:a3:cf:72:85:36: 8c:72:cd:11:f8:fe:24:94:bc:03:09:0b:50:19:de: 30:03:53:2a:f8:68:dd:79:8e:f4:a5:38:eb:59:23: c7:ef:00:f5:28:bd:c0:cf:00:7d:a2:64:98:be:ff: 0b:75:6b:ad:7e:51:34:03:a8:ca:e8:3f:eb:95:7b: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4F:AC:BA:05:01:A8:FC:5D:43:96:C8:C8:1D:98:7D:97:B6:7F:31 X509v3 Authority Key Identifier: keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c1:17:3b:3a:b8:45:4f:be:f0:c8:e6:00:80:38:c3:56:38: 03:3e:84:54:61:76:b9:2c:be:2e:f9:5c:45:e0:77:bf:af:e0: 75:81:3a:77:70:09:81:bb:ba:e4:23:18:33:c4:0d:ec:ee:6d: 0a:08:7b:17:75:4e:17:2f:0f:94:7d:a1:5d:10:11:8d:06:81: b3:ab:47:21:ff:07:82:a1:c9:d2:fa:d8:a5:98:ed:df:d6:76: f8:b5:86:4b:15:b0:57:5d:94:d7:ee:a9:9d:e9:3a:fc:48:12: 82:3d:cc:8d:2b:fb:e6:a7:ff:bd:77:50:9c:39:f3:49:01:10: 3a:b6:e5:1f:6b:78:f8:c0:b7:37:47:df:c1:7e:0a:43:7f:05: 65:c6:e2:55:54:39:d5:c5:ca:89:40:f8:14:7b:c7:99:71:d1: 00:d4:f8:f9:d4:b3:1e:55:2e:4d:48:c3:9b:b3:fb:c1:f8:1e: fc:d4:86:f7:37:e9:ec:62:a4:72:ab:39:2f:1d:50:9f:6d:7c: 52:c5:ce:b2:4c:93:30:24:0d:1f:77:37:a2:5b:f2:7c:b9:00: 3d:c7:20:18:77:34:ef:b7:01:d9:1a:b2:30:58:4e:7d:37:4c: 4e:27:45:31:a7:dc:17:0e:04:2d:30:ac:67:31:f5:44:7e:9b: a9:bf:b6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fynA1MCy2bmR2PJDc22gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5 OTM0ZjgwHhcNMjUxMjIwMTYwMjA1WhcNMjUxMjIxMTYwMjA1WjAzMTEwLwYDVQQD Eyg5OTRmYWNiYTA1MDFhOGZjNWQ0Mzk2YzhjODFkOTg3ZDk3YjY3ZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBu6fesfanVBB0PSZHAWmK/iwvxS PioOl1m6lgsq8+EWmknFXjZjnVaK3LyA/WV8S8fPQ3YT1qeENMBXYgANrrzscrEG RPy81GRYUyEO3uZGCc0tgGUfF03A2DS9ylGdfuj/KH+EfASCR0JYmdwFEeWlIk25 CEd8Xd7ZjuV1mcbx3qZi7/Dw4I/aH+HtPhBqWPNm/3UhSrU/EXt1KnWL5cxe0xAh x2y9BfkhV2vyK4ChOVrvJHc2O01mOrRwo89yhTaMcs0R+P4klLwDCQtQGd4wA1Mq +GjdeY70pTjrWSPH7wD1KL3AzwB9omSYvv8LdWutflE0A6jK6D/rlXs+cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlPrLoFAaj8XUOWyMgdmH2Xtn8xMB8GA1UdIwQY MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt M2FkNTJlOGI5NjI4LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4 LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcEXOzq4 RU++8MjmAIA4w1Y4Az6EVGF2uSy+LvlcReB3v6/gdYE6d3AJgbu65CMYM8QN7O5t Cgh7F3VOFy8PlH2hXRARjQaBs6tHIf8HgqHJ0vrYpZjt39Z2+LWGSxWwV12U1+6p nek6/EgSgj3MjSv75qf/vXdQnDnzSQEQOrblH2t4+MC3N0ffwX4KQ38FZcbiVVQ5 1cXKiUD4FHvHmXHRANT4+dSzHlUuTUjDm7P7wfge/NSG9zfp7GKkcqs5Lx1Qn218 UsXOskyTMCQNH3c3olvyfLkAPccgGHc077cB2RqyMFhOfTdMTidFMafcFw4ELTCs ZzH1RH6bqb+2rw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:26 2025 by rpki-client