This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json) Hash identifier: RfJCU6esA1/t7wLkWXWuo6zNT7GXVtze2mZKtuwk/CQ= Subject key identifier: 28:CC:A7:67:BC:42:A7:58:78:E8:74:B1:95:04:79:A5:B0:91:60:3B Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f Certificate serial: 019AF31B3E41797BED7B95D58A68DB69A304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=) 2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: 4sv+YPwZ8ptd042XULEnzORmlEYD/vrShrZivb5TldM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3e:41:79:7b:ed:7b:95:d5:8a:68:db:69:a3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=28cca767bc42a75878e874b1950479a5b091603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:62:72:22:2e:74:4f:3c:d8:44:60:12:36: a9:21:22:dd:01:71:eb:ba:11:5c:a6:e1:9c:25:24: be:46:37:2f:84:ee:5b:bb:8c:4e:8d:d9:35:bc:82: f0:7d:8f:55:e8:b6:83:80:ba:92:b3:a5:60:23:83: 32:29:1b:55:69:24:b0:e2:40:f9:1d:b8:06:09:14: 50:f7:c7:b2:c4:22:46:fc:f3:5f:47:3c:3f:d2:72: 5c:e3:32:3c:db:1e:bb:b5:f1:de:17:b0:9f:ce:10: 36:70:9d:49:a4:29:48:78:b6:f5:fc:1b:cb:f7:0e: c6:b6:0f:9b:9d:48:ea:c5:92:0b:4e:90:bc:f8:f2: e2:8f:f3:37:ca:38:ea:37:71:5a:41:a2:1d:10:80: af:20:68:15:6f:10:d5:bf:50:68:18:c6:29:1a:4d: c0:f0:81:57:73:1f:d5:b4:e9:2d:02:8e:13:bf:e1: 05:6e:53:60:a2:95:71:a5:2b:90:1c:c4:62:b5:c5: 27:f7:cc:97:65:3b:a9:77:7a:34:fd:f3:b9:27:ef: 2f:1a:62:53:15:81:67:f9:97:7d:e5:c7:70:d5:3e: d1:91:ad:00:36:c1:7c:5f:54:0c:2c:bd:c3:06:5b: 5d:a1:e7:7f:7e:d6:0b:ca:b3:4f:0a:9d:cd:fb:40: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CC:A7:67:BC:42:A7:58:78:E8:74:B1:95:04:79:A5:B0:91:60:3B X509v3 Authority Key Identifier: keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f2:eb:dd:f4:6f:c6:e8:3e:ae:12:63:50:32:ba:1f:97:83: 41:93:43:41:1a:1a:a4:25:f2:76:f9:1c:48:87:91:d0:cc:ab: 12:50:98:e0:65:b5:e2:be:8c:21:b5:56:21:88:82:5d:dd:75: 92:02:7c:aa:22:c4:1b:44:a5:36:91:0c:78:49:64:f4:da:6d: 93:d4:3e:9f:32:83:82:82:73:f5:82:29:d8:be:fb:12:2e:c7: 33:20:da:f5:52:47:c2:c8:04:c5:bb:09:5e:88:a1:50:6d:84: ae:de:7e:5b:ba:c0:cc:6b:6e:14:ac:96:fc:f1:14:5e:93:cc: 7d:56:eb:0b:00:69:0d:43:a8:42:50:cf:af:0b:51:6b:fc:1c: 26:59:43:05:e1:87:81:e8:ce:53:79:42:2d:c1:20:e5:22:03: 94:b1:34:f8:56:98:1b:de:a2:06:b5:00:59:67:99:70:72:61: 4a:c0:53:0b:ef:e0:45:d1:ab:7f:55:d2:42:fb:a5:f5:65:ac: 26:8c:61:f5:01:9c:f2:de:6f:ac:a2:d1:4e:fd:3f:ec:c9:ea: e8:0a:fa:b8:04:b4:9d:ce:c1:50:34:25:9f:e7:64:ee:cb:55: d1:6a:11:15:5a:a4:3c:e1:c2:42:ed:3f:29:50:86:fb:a9:72: 59:31:bb:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz5BeXvte5XVimjbaaMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi MTg2OGYwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EygyOGNjYTc2N2JjNDJhNzU4NzhlODc0YjE5NTA0NzlhNWIwOTE2MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ViciIudE882ERgEjapISLdAXHr uhFcpuGcJSS+RjcvhO5bu4xOjdk1vILwfY9V6LaDgLqSs6VgI4MyKRtVaSSw4kD5 HbgGCRRQ98eyxCJG/PNfRzw/0nJc4zI82x67tfHeF7CfzhA2cJ1JpClIeLb1/BvL 9w7Gtg+bnUjqxZILTpC8+PLij/M3yjjqN3FaQaIdEICvIGgVbxDVv1BoGMYpGk3A 8IFXcx/VtOktAo4Tv+EFblNgopVxpSuQHMRitcUn98yXZTupd3o0/fO5J+8vGmJT FYFn+Zd95cdw1T7Rka0ANsF8X1QMLL3DBltdoed/ftYLyrNPCp3N+0BVtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjMp2e8QqdYeOh0sZUEeaWwkWA7MB8GA1UdIwQY MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPLr3fRv xug+rhJjUDK6H5eDQZNDQRoapCXydvkcSIeR0MyrElCY4GW14r6MIbVWIYiCXd11 kgJ8qiLEG0SlNpEMeElk9Nptk9Q+nzKDgoJz9YIp2L77Ei7HMyDa9VJHwsgExbsJ XoihUG2Ert5+W7rAzGtuFKyW/PEUXpPMfVbrCwBpDUOoQlDPrwtRa/wcJllDBeGH gejOU3lCLcEg5SIDlLE0+FaYG96iBrUAWWeZcHJhSsBTC+/gRdGrf1XSQvul9WWs Joxh9QGc8t5vrKLRTv0/7Mnq6Ar6uAS0nc7BUDQln+dk7stV0WoRFVqkPOHCQu0/ KVCG+6lyWTG7+w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:29 2025 by rpki-client