This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json) Hash identifier: C3rv/FpT1CTQ59JZyfngD7Td64xco6S4Zp2ffHcBvDg= Subject key identifier: 61:1F:80:A8:73:9C:7B:24:BB:96:35:BB:97:E5:FD:5B:C8:F4:04:5E Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17 Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717 Certificate serial: 019AF4656D22555AFACDE303559C92E1ABE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft Manifest number: 053B Signing time: Sat 06 Dec 2025 16:01:18 +0000 Manifest this update: Sat 06 Dec 2025 16:01:18 +0000 Manifest next update: Sun 07 Dec 2025 16:01:18 +0000 Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=) 2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: /wjKY2aeQHxQ4nBxwQ9X6BG6dEOeDccyltbeUxNE5v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6d:22:55:5a:fa:cd:e3:03:55:9c:92:e1:ab:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717 Validity Not Before: Dec 6 16:01:18 2025 GMT Not After : Dec 7 16:01:18 2025 GMT Subject: CN=611f80a8739c7b24bb9635bb97e5fd5bc8f4045e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:29:8d:1d:30:f0:70:29:f8:48:b3:0f:79: a0:6b:a3:af:0f:35:0a:b2:b1:1a:6c:78:2a:aa:67: 3d:7e:8f:42:3d:3d:4f:78:3f:c2:b3:ab:80:9d:bb: 27:a3:b4:3d:6d:a8:a6:9d:ab:3f:92:6f:82:ac:1a: 6f:97:80:dd:a8:6e:ff:c8:0d:cc:be:8c:b4:97:95: fe:d6:93:6b:85:9d:78:34:ca:9f:1d:f0:ee:5e:aa: f2:e7:1b:38:dc:a8:e4:a7:5c:6a:0d:c2:11:05:49: b3:71:6b:01:91:a5:fc:0a:ac:68:ea:89:2c:f6:b1: e4:b0:10:48:11:d6:71:c5:8b:b9:e1:d2:6e:a5:0b: 83:4c:f0:79:c4:9b:93:1e:54:05:81:fa:4b:8d:93: e2:52:a2:7e:e1:81:d6:9f:c0:01:65:43:25:6c:18: 2d:ab:0f:3b:a3:54:77:e6:49:45:3e:dc:ac:85:fe: e0:0d:01:57:2f:93:27:3d:16:22:6c:31:ce:42:57: fb:a7:48:cd:74:41:4d:b0:e4:41:7e:e6:88:40:26: c8:78:ea:d4:03:ac:c0:d4:b4:82:bf:fb:86:fe:4d: 52:86:f6:03:16:6c:bd:fd:cc:8f:47:23:f4:d4:e6: d8:6b:a4:61:83:ee:fe:0c:36:a1:05:6c:be:ab:84: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:80:A8:73:9C:7B:24:BB:96:35:BB:97:E5:FD:5B:C8:F4:04:5E X509v3 Authority Key Identifier: keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cb:92:3f:bf:60:49:9e:ba:15:ca:07:cb:b8:d4:8a:c0:eb: 8e:f3:1d:80:63:bc:40:72:c1:7a:fa:30:fb:cd:2c:f9:a7:f8: b2:16:fd:ae:67:fb:bc:cf:62:21:ef:36:3d:2f:5d:21:91:de: 6d:aa:c5:17:03:49:3c:90:ab:9a:a1:81:e1:27:f0:cd:4e:b9: 74:ea:89:5f:b2:da:2c:25:4b:a3:65:33:de:d6:99:3e:06:e2: 28:9d:52:7e:ff:36:f4:07:98:c0:42:75:0d:68:b5:47:84:6d: 6a:ac:63:a4:6a:8b:49:d0:5d:41:96:c8:18:f3:20:c5:f9:8a: f7:87:a5:36:4b:ce:90:f5:b8:db:50:7b:b3:6d:68:41:df:c6: 7c:4a:28:be:ca:72:2b:ae:f8:69:45:0f:d3:44:d1:72:38:bc: 5c:2d:b0:a3:de:47:ff:a8:8f:39:a7:8e:88:a4:fb:69:be:6f: 9c:21:0d:d9:38:1e:2d:82:d4:64:1c:be:dd:80:d3:f7:81:4f: b0:01:b1:81:cc:98:1f:a9:4f:31:10:04:cb:41:49:07:b7:e7: 42:13:89:9b:02:16:75:63:3e:a0:95:73:c0:00:cb:bc:20:5f: c0:38:58:d5:5f:7f:6d:fc:32:08:14:e4:11:b4:47:e6:af:54: 0b:e0:94:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZW0iVVr6zeMDVZyS4avhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh NjE3MTcwHhcNMjUxMjA2MTYwMTE4WhcNMjUxMjA3MTYwMTE4WjAzMTEwLwYDVQQD Eyg2MTFmODBhODczOWM3YjI0YmI5NjM1YmI5N2U1ZmQ1YmM4ZjQwNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaIpjR0w8HAp+EizD3mga6OvDzUK srEabHgqqmc9fo9CPT1PeD/Cs6uAnbsno7Q9baimnas/km+CrBpvl4DdqG7/yA3M voy0l5X+1pNrhZ14NMqfHfDuXqry5xs43Kjkp1xqDcIRBUmzcWsBkaX8Cqxo6oks 9rHksBBIEdZxxYu54dJupQuDTPB5xJuTHlQFgfpLjZPiUqJ+4YHWn8ABZUMlbBgt qw87o1R35klFPtyshf7gDQFXL5MnPRYibDHOQlf7p0jNdEFNsORBfuaIQCbIeOrU A6zA1LSCv/uG/k1ShvYDFmy9/cyPRyP01ObYa6Rhg+7+DDahBWy+q4RRNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEfgKhznHsku5Y1u5fl/VvI9AReMB8GA1UdIwQY MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0 LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMuSP79g SZ66FcoHy7jUisDrjvMdgGO8QHLBevow+80s+af4shb9rmf7vM9iIe82PS9dIZHe barFFwNJPJCrmqGB4SfwzU65dOqJX7LaLCVLo2Uz3taZPgbiKJ1Sfv829AeYwEJ1 DWi1R4RtaqxjpGqLSdBdQZbIGPMgxfmK94elNkvOkPW421B7s21oQd/GfEoovspy K674aUUP00TRcji8XC2wo95H/6iPOaeOiKT7ab5vnCEN2TgeLYLUZBy+3YDT94FP sAGxgcyYH6lPMRAEy0FJB7fnQhOJmwIWdWM+oJVzwADLvCBfwDhY1V9/bfwyCBTk EbRH5q9UC+CUuw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:26 2025 by rpki-client