This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json) Hash identifier: SnBsdDhD12SOvogqZwFZJE7kPu9JONpbxsVvSUdBIEY= Subject key identifier: 7E:DB:DF:02:FE:72:6D:54:00:36:90:2D:11:14:AC:DB:DA:04:0B:02 Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Certificate serial: 019AF2093D37DF3CB1C0FF724162ECEA609C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft Manifest number: 14AB Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: 3ClVuGwIZnyzq19yv6OajdRgSck.roa (hash: Pc2ZDdCkzUBbz8l3kHlCiGrzO9OmrpmH04akpnWTzRM=) 2: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: NQ6n9syw47q8JxRdoarLPCg2jU+g1h8I6z9ngCPjffs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3d:37:df:3c:b1:c0:ff:72:41:62:ec:ea:60:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=7edbdf02fe726d540036902d1114acdbda040b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:3c:11:b3:6b:5f:0b:20:d9:e4:7b:c1:9f: 88:62:86:6e:da:97:45:02:93:03:ec:6b:3b:e7:52: 56:78:d2:88:87:69:c6:f9:92:2b:3e:99:5c:4e:af: e4:d9:0a:b2:06:5c:d9:21:25:90:0f:01:57:b0:f8: 59:92:eb:31:72:d3:77:a5:7b:45:43:a0:00:90:dc: 42:a7:f2:a3:5e:e6:b0:61:4a:cc:c9:fa:c9:df:83: d3:e0:8c:dc:51:f8:c0:7f:87:67:e2:ba:2c:71:65: c6:74:a6:9f:cf:8c:b4:78:0b:b4:c6:49:14:56:8e: b7:8e:a2:f5:5f:27:f1:f6:16:64:de:70:f2:aa:c4: ac:93:66:63:c9:fb:3e:9a:f9:2a:b9:88:63:98:6e: 37:23:aa:a7:56:1c:e3:89:7b:90:27:b5:ef:fd:ee: 9a:cf:21:af:b6:11:0b:51:fb:8d:9d:95:c4:02:ff: 0a:5d:c8:c0:82:68:55:3d:96:74:0f:76:40:2a:3b: 2b:94:51:41:f4:54:01:77:fc:0b:12:8c:bb:18:15: ba:0b:24:7a:6c:71:9c:96:8a:96:a1:5f:16:5f:01: 25:ca:e4:a6:26:6b:b9:97:9c:54:b6:1c:bd:46:a5: 89:d2:8b:13:6c:31:80:82:28:f7:86:0d:11:7f:95: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DB:DF:02:FE:72:6D:54:00:36:90:2D:11:14:AC:DB:DA:04:0B:02 X509v3 Authority Key Identifier: keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:88:62:2c:cc:99:00:30:a7:de:ca:b4:16:aa:9f:23:8c:71: 49:75:15:b3:98:bb:ce:6a:06:d6:a4:7b:5f:e3:9b:4c:8d:66: 56:0f:1a:7d:22:e6:5b:b7:81:8b:76:4d:82:de:df:28:9b:8c: 81:43:fc:c4:98:d9:50:fb:c5:83:ab:71:93:0c:a3:0d:5d:82: 4c:6f:dd:ff:c7:a9:a4:dc:9b:41:7b:ae:1f:18:87:29:8c:be: 44:c3:80:2e:69:76:54:53:87:ec:5b:32:0b:37:f8:91:f8:95: 19:61:44:a5:f4:da:ef:a2:11:c8:a4:e1:78:b6:a2:cf:46:b0: 2e:20:4c:bf:9b:77:ef:58:82:90:72:92:15:20:57:ed:ac:2d: 04:95:04:b1:2e:1f:1f:ed:ec:92:c1:3d:15:75:d2:4a:c2:8c: 4f:1c:3a:19:e8:64:b5:e9:23:ef:19:f6:35:6d:0e:18:d9:24: 36:45:3d:06:84:61:16:d9:26:b0:72:75:48:68:9c:19:26:d8: 18:8b:f6:02:4d:d8:3b:12:91:e4:15:e7:c7:33:9c:05:57:76: d5:69:db:a5:38:e7:c9:b4:63:62:c3:7a:3c:9f:b0:ac:d0:dc: f9:4e:30:73:3b:e9:25:1d:d4:21:d0:cf:de:b3:7f:7d:df:f5: 16:27:e8:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT033zyxwP9yQWLs6mCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODhkYjgxZmRmYmVjY2VlNzVmNGE5ZjY5OGEzYzFiM2E4 NDYyNmUwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD Eyg3ZWRiZGYwMmZlNzI2ZDU0MDAzNjkwMmQxMTE0YWNkYmRhMDQwYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1M8EbNrXwsg2eR7wZ+IYoZu2pdF ApMD7Gs751JWeNKIh2nG+ZIrPplcTq/k2QqyBlzZISWQDwFXsPhZkusxctN3pXtF Q6AAkNxCp/KjXuawYUrMyfrJ34PT4IzcUfjAf4dn4roscWXGdKafz4y0eAu0xkkU Vo63jqL1Xyfx9hZk3nDyqsSsk2Zjyfs+mvkquYhjmG43I6qnVhzjiXuQJ7Xv/e6a zyGvthELUfuNnZXEAv8KXcjAgmhVPZZ0D3ZAKjsrlFFB9FQBd/wLEoy7GBW6CyR6 bHGcloqWoV8WXwElyuSmJmu5l5xUthy9RqWJ0osTbDGAgij3hg0Rf5W6HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7b3wL+cm1UADaQLREUrNvaBAsCMB8GA1UdIwQY MBaAFCyI24H9++zO519Kn2mKPBs6hGJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt ZjQ1N2Q0MDRhZTJmLzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm LzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYhiLMyZ ADCn3sq0FqqfI4xxSXUVs5i7zmoG1qR7X+ObTI1mVg8afSLmW7eBi3ZNgt7fKJuM gUP8xJjZUPvFg6txkwyjDV2CTG/d/8eppNybQXuuHxiHKYy+RMOALml2VFOH7Fsy Czf4kfiVGWFEpfTa76IRyKTheLaiz0awLiBMv5t371iCkHKSFSBX7awtBJUEsS4f H+3sksE9FXXSSsKMTxw6Gehktekj7xn2NW0OGNkkNkU9BoRhFtkmsHJ1SGicGSbY GIv2Ak3YOxKR5BXnxzOcBVd21WnbpTjnybRjYsN6PJ+wrNDc+U4wczvpJR3UIdDP 3rN/fd/1Fifofw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:23 2025 by rpki-client