This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json) Hash identifier: 3mYbaNalNRwt1d9MyoFRbZ4fRWbFQIrvn+jlJlrAww8= Subject key identifier: C7:83:A0:0B:D6:9A:41:A3:A8:C4:BF:5A:EB:81:DA:2C:DD:9E:BE:AD Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84 Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984 Certificate serial: 019AF765FADB66AB34AC8FDF3A31080AC203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft Manifest number: 12A8 Signing time: Sun 07 Dec 2025 06:00:46 +0000 Manifest this update: Sun 07 Dec 2025 06:00:46 +0000 Manifest next update: Mon 08 Dec 2025 06:00:46 +0000 Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=) 2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: XqzR8lk/gjp8Ztv142MCtt3CYmvszQ/KOHDGUkma+MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:65:fa:db:66:ab:34:ac:8f:df:3a:31:08:0a:c2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984 Validity Not Before: Dec 7 06:00:46 2025 GMT Not After : Dec 8 06:00:46 2025 GMT Subject: CN=c783a00bd69a41a3a8c4bf5aeb81da2cdd9ebead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:d3:98:67:d0:a3:4e:7b:8e:ab:29:c6:b2: 68:8b:88:e7:3a:7e:6f:f2:57:c4:25:f3:74:39:e1: 98:7a:47:ac:74:fa:d1:5e:fd:9b:85:e9:79:1c:77: 43:7b:f0:09:7f:98:39:3d:f2:b4:08:2a:95:2e:8c: 6e:33:08:ee:a1:fc:bd:8e:93:0a:27:4c:d4:05:3d: e0:f7:ff:c0:d2:14:49:48:0b:57:75:0f:62:f3:f9: 8d:77:18:20:04:4f:13:41:d5:67:20:6b:20:05:ce: c3:e1:98:90:f6:5b:15:bf:14:30:cd:2f:08:f7:ef: d4:5e:be:e9:3d:5d:13:61:25:7f:4b:eb:c8:a4:e2: da:03:2e:b5:57:36:86:27:f5:c7:c5:6c:50:85:52: 58:51:0c:f1:e2:4d:44:6f:e1:06:9c:b3:24:4f:64: 68:eb:e8:98:57:91:14:50:5a:5e:4a:52:9d:60:d2: 42:65:a1:2e:7f:78:8b:32:f1:7f:45:a6:e9:19:28: 0d:8f:7d:87:c2:d0:f9:16:93:eb:b8:21:41:c9:da: ff:58:05:e3:0e:e7:b3:a1:d3:5a:a7:36:8f:83:ef: 46:5c:88:5f:ab:59:65:2d:73:13:f7:b6:4a:a3:02: 2c:cd:b9:1a:41:c2:96:b8:1a:84:b4:24:2c:44:42: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:83:A0:0B:D6:9A:41:A3:A8:C4:BF:5A:EB:81:DA:2C:DD:9E:BE:AD X509v3 Authority Key Identifier: keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:51:61:fc:17:ff:ea:90:5d:f7:14:d7:64:84:14:70:4c:c4: f8:b7:01:9a:f0:73:4f:9e:15:6a:30:79:88:b0:18:cd:96:7f: aa:f3:50:7c:65:0d:e2:d6:ba:8d:75:61:19:6a:19:2b:6f:73: df:28:03:89:86:26:3a:6a:9a:3e:e7:8d:7a:f0:25:84:78:b6: 5a:22:1a:e3:9f:6b:91:83:9b:d2:c8:01:d7:60:5b:ff:63:7a: 59:0b:df:ec:d3:cb:cc:9d:43:57:53:f5:97:88:95:07:bf:dc: ae:12:20:59:82:08:31:18:d6:99:5c:17:41:be:23:dd:24:72: 2f:f1:38:c0:54:b5:ee:f5:5c:6a:65:52:90:8f:3a:86:23:bf: 04:c9:96:00:bf:3b:cf:d8:b6:b8:45:f7:95:15:41:b3:70:36: dc:3d:39:ce:e3:be:31:65:d3:0e:19:7c:b1:d0:73:57:40:9f: f1:90:76:87:16:75:08:38:3d:57:d2:b2:b4:e8:fb:8b:64:bb: 6c:c9:ee:6a:e1:62:11:ef:2a:de:9f:49:98:66:bc:94:4b:55: 3d:f4:e3:4a:d7:11:b3:5d:08:bd:3b:4c:07:38:09:ed:65:51: 1a:26:7b:92:0a:25:e5:91:b2:43:a6:2c:f0:bd:37:19:96:1e: a0:64:2a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZfrbZqs0rI/fOjEICsIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz NWI5ODQwHhcNMjUxMjA3MDYwMDQ2WhcNMjUxMjA4MDYwMDQ2WjAzMTEwLwYDVQQD EyhjNzgzYTAwYmQ2OWE0MWEzYThjNGJmNWFlYjgxZGEyY2RkOWViZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ7TmGfQo057jqspxrJoi4jnOn5v 8lfEJfN0OeGYekesdPrRXv2bhel5HHdDe/AJf5g5PfK0CCqVLoxuMwjuofy9jpMK J0zUBT3g9//A0hRJSAtXdQ9i8/mNdxggBE8TQdVnIGsgBc7D4ZiQ9lsVvxQwzS8I 9+/UXr7pPV0TYSV/S+vIpOLaAy61VzaGJ/XHxWxQhVJYUQzx4k1Eb+EGnLMkT2Ro 6+iYV5EUUFpeSlKdYNJCZaEuf3iLMvF/RabpGSgNj32HwtD5FpPruCFBydr/WAXj DuezodNapzaPg+9GXIhfq1llLXMT97ZKowIszbkaQcKWuBqEtCQsREKvEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeDoAvWmkGjqMS/WuuB2izdnr6tMB8GA1UdIwQY MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt MjhjMjJhYmYwOGQwLzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFFh/Bf/ 6pBd9xTXZIQUcEzE+LcBmvBzT54VajB5iLAYzZZ/qvNQfGUN4ta6jXVhGWoZK29z 3ygDiYYmOmqaPueNevAlhHi2WiIa459rkYOb0sgB12Bb/2N6WQvf7NPLzJ1DV1P1 l4iVB7/crhIgWYIIMRjWmVwXQb4j3SRyL/E4wFS17vVcamVSkI86hiO/BMmWAL87 z9i2uEX3lRVBs3A23D05zuO+MWXTDhl8sdBzV0Cf8ZB2hxZ1CDg9V9KytOj7i2S7 bMnuauFiEe8q3p9JmGa8lEtVPfTjStcRs10IvTtMBzgJ7WVRGiZ7kgol5ZGyQ6Ys 8L03GZYeoGQqew== -----END CERTIFICATE-----Generated at Sun Dec 7 12:14:10 2025 by rpki-client