This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json) Hash identifier: JN2NdJ0vBkeAhaOKG1UVDAI9V/dgywKqVv7XGodhxBo= Subject key identifier: A1:8D:1F:04:14:2F:F1:5F:30:C6:7F:39:B5:09:14:22:48:E9:BB:80 Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb Certificate serial: 019AF12EB8F341B218BBB6ADC009011804CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft Manifest number: 0D5E Signing time: Sat 06 Dec 2025 01:02:42 +0000 Manifest this update: Sat 06 Dec 2025 01:02:42 +0000 Manifest next update: Sun 07 Dec 2025 01:02:42 +0000 Files and hashes: 1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=) 2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: +nhJsPSCXrDL6NHSHSAGuAHOJ//1wT9YaeXfoLLLR/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b8:f3:41:b2:18:bb:b6:ad:c0:09:01:18:04:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb Validity Not Before: Dec 6 01:02:42 2025 GMT Not After : Dec 7 01:02:42 2025 GMT Subject: CN=a18d1f04142ff15f30c67f39b509142248e9bb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:44:38:90:fa:43:dc:cc:44:3e:f0:b9:b5: 7a:6b:2a:a0:ec:fc:79:d1:c6:9b:4d:28:80:03:ec: a8:82:d7:cd:99:a5:c0:ca:0e:fa:e9:3b:2d:03:e3: c0:e5:08:03:30:dd:9f:c1:df:b1:bd:29:4d:81:33: 7e:45:aa:86:0b:1f:42:6c:c3:51:09:cc:fa:43:ec: fd:e8:03:fb:5a:20:cd:4a:d6:1e:7c:84:56:ed:60: d6:62:48:bd:51:21:95:29:bb:16:0a:94:3e:19:48: 5c:fa:3d:a3:11:cf:9b:e3:d7:17:dd:e7:7a:0a:30: 0c:c9:13:6a:61:1c:86:a6:2b:09:4b:5d:bd:42:cd: fe:6e:b0:46:98:af:d4:5c:bc:ec:7e:9e:fc:eb:db: a6:0c:af:c5:fc:b4:f1:99:43:49:30:e8:c5:cd:4d: 7b:1e:2b:bb:97:ac:85:53:1a:68:20:f2:f3:48:a3: 77:d9:47:19:f3:26:c2:80:d6:bb:d1:a2:41:19:9a: 52:98:6b:2e:e1:67:8e:42:51:88:2b:8b:05:ce:e3: 75:6b:f2:39:aa:68:59:c9:60:49:1a:d3:0f:9b:25: 26:66:94:45:94:ac:3c:5d:b2:20:ee:76:cb:58:bf: 84:76:fd:81:15:de:3c:1d:1a:a3:77:b0:83:2c:df: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:1F:04:14:2F:F1:5F:30:C6:7F:39:B5:09:14:22:48:E9:BB:80 X509v3 Authority Key Identifier: keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7f:58:c8:4f:b0:23:02:d1:ec:01:34:95:cf:dc:f5:b3:4d: 72:77:44:d2:a3:ea:74:41:7d:e4:ea:d1:02:77:59:2d:3a:ed: d1:1c:f7:4e:f3:68:32:5b:52:7e:22:a7:bf:8f:77:c2:5b:e2: a0:23:d2:f7:21:ee:30:2d:85:85:a8:3b:20:eb:5f:f9:07:af: 0e:e2:b7:44:2b:ae:61:1c:b9:f1:51:e7:c9:f8:ed:3d:22:1b: 7a:34:36:d4:40:bb:14:52:40:c2:a8:e5:63:65:e2:7a:b9:3f: 53:44:bc:61:16:18:cc:56:01:53:d8:b8:71:99:db:5f:ff:67: e4:ff:ac:4a:e4:3c:4d:5a:55:62:0f:77:82:e3:58:c5:b7:69: 54:e0:5c:64:af:1e:bd:a1:38:e0:4e:d2:3d:df:66:9a:be:86: 17:3e:a3:6e:e6:f3:7c:34:f3:2a:a8:3a:c3:13:0c:5a:fe:0c: 31:76:42:93:6d:b3:8a:26:6d:b4:08:a8:b1:49:37:e9:a7:5c: 6e:b5:03:36:3a:80:ef:11:03:46:69:6a:0b:41:a7:25:3c:f0: 25:95:2e:09:1e:32:d7:b8:48:9c:c8:04:05:84:a3:72:2d:a1: f0:e5:60:84:08:f9:90:c4:ad:ba:49:c0:93:71:4b:25:1b:78: 57:62:9f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrjzQbIYu7atwAkBGATOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2M2EwZmM0N2E3YWRmNjI4NDVhZDZkY2Q3ZmI3NjFhNmMx OWZlZGIwHhcNMjUxMjA2MDEwMjQyWhcNMjUxMjA3MDEwMjQyWjAzMTEwLwYDVQQD EyhhMThkMWYwNDE0MmZmMTVmMzBjNjdmMzliNTA5MTQyMjQ4ZTliYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR5EOJD6Q9zMRD7wubV6ayqg7Px5 0cabTSiAA+yogtfNmaXAyg766TstA+PA5QgDMN2fwd+xvSlNgTN+RaqGCx9CbMNR Ccz6Q+z96AP7WiDNStYefIRW7WDWYki9USGVKbsWCpQ+GUhc+j2jEc+b49cX3ed6 CjAMyRNqYRyGpisJS129Qs3+brBGmK/UXLzsfp7869umDK/F/LTxmUNJMOjFzU17 Hiu7l6yFUxpoIPLzSKN32UcZ8ybCgNa70aJBGZpSmGsu4WeOQlGIK4sFzuN1a/I5 qmhZyWBJGtMPmyUmZpRFlKw8XbIg7nbLWL+Edv2BFd48HRqjd7CDLN+RiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGNHwQUL/FfMMZ/ObUJFCJI6buAMB8GA1UdIwQY MBaAFJY6D8R6et9ihFrW3Nf7dhpsGf7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUt ZTQwNDVkOGNmZThmLzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUtZTQwNDVkOGNmZThm LzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn9YyE+w IwLR7AE0lc/c9bNNcndE0qPqdEF95OrRAndZLTrt0Rz3TvNoMltSfiKnv493wlvi oCPS9yHuMC2Fhag7IOtf+QevDuK3RCuuYRy58VHnyfjtPSIbejQ21EC7FFJAwqjl Y2Xierk/U0S8YRYYzFYBU9i4cZnbX/9n5P+sSuQ8TVpVYg93guNYxbdpVOBcZK8e vaE44E7SPd9mmr6GFz6jbubzfDTzKqg6wxMMWv4MMXZCk22ziiZttAiosUk36adc brUDNjqA7xEDRmlqC0GnJTzwJZUuCR4y17hInMgEBYSjci2h8OVghAj5kMStuknA k3FLJRt4V2KfGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:06 2025 by rpki-client