This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json) Hash identifier: cc0Z61U5scq0iZXJ3x5yNzVRg4BrUXzJboqj7i7+sy8= Subject key identifier: EB:B0:12:CE:46:06:BD:17:9F:AF:18:AB:82:39:35:75:15:56:6B:2E Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52 Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52 Certificate serial: 019AF23FBE6BCA1782DF86EFB8C39FED019C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft Manifest number: 15D0 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: 18UiEkWgqpaCUiY-OhtgSebxhOw.roa (hash: 6gZVGHDsK6q4GdqiE+ksKEH6UAMcpQLDmBdSndAkah4=) 2: FbZfSYIH3EeQkv8qBjiOL4mkSRo.roa (hash: KvthMjiMPKXISBfRRLYFJRU4z8PyoDc7qUCgy66NG/Y=) 3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: wSdUg80pGBwXyebkNP2bJom0jybIaIeJAoDNO1gkV8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:be:6b:ca:17:82:df:86:ef:b8:c3:9f:ed:01:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=ebb012ce4606bd179faf18ab8239357515566b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:28:c2:57:25:1b:e1:40:75:18:cc:83:3f: 8d:5a:dc:38:8c:f7:5a:78:c5:87:bf:b7:87:65:17: 4b:08:be:a4:6e:ed:72:83:0d:0a:c7:0a:8e:9f:4b: 84:22:82:b0:dd:1d:91:6b:85:0c:c4:05:26:2a:fe: d4:a2:24:97:3c:79:cf:8c:59:97:48:d0:cb:38:a9: ed:c6:16:e5:96:2e:07:b9:db:fa:90:85:19:7d:80: 96:a2:0c:27:2f:03:1a:f9:82:69:98:59:50:b9:38: 82:aa:35:b0:4c:2a:90:d4:5e:06:11:c9:2d:41:ae: 6e:c3:3d:56:20:8d:e2:1d:3a:1c:15:19:6e:b2:3b: 9c:1b:da:53:36:80:73:7c:b9:72:21:40:cf:21:5e: af:4b:ff:b5:9e:86:40:cb:45:c2:54:e2:97:4b:0d: 53:e1:75:93:16:0c:68:ff:44:39:33:91:6c:85:07: c0:ca:7d:1f:40:42:a3:c2:c0:29:66:e4:23:68:c5: f2:46:bf:36:4b:86:98:47:ce:83:2a:69:1e:d8:b5: 3e:dd:53:ee:0e:05:44:2b:29:42:b9:c5:19:fb:a7: ab:84:d2:4c:ef:72:57:48:cd:bd:31:64:a2:6e:37: 52:33:6c:c4:56:a9:0c:d1:de:8f:bc:59:30:25:cc: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:12:CE:46:06:BD:17:9F:AF:18:AB:82:39:35:75:15:56:6B:2E X509v3 Authority Key Identifier: keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:67:6a:6f:2f:f6:c7:94:e5:b9:27:98:19:8b:e2:dc:59:30: aa:ba:51:81:cc:e8:4d:13:eb:5a:b3:ec:b2:86:59:93:3b:67: 44:55:de:24:50:a0:65:43:ce:c2:94:14:1c:1f:fc:de:5a:4b: c6:c7:e1:8a:2c:8a:6e:69:a2:f8:26:48:b5:b5:52:3f:a7:af: a1:43:dc:46:84:f3:43:35:75:4e:a1:05:2a:39:60:37:56:17: 6c:cc:78:29:ad:16:7a:79:e8:83:60:59:b0:0c:54:88:77:da: 85:03:23:7b:54:2f:05:36:0a:a2:6c:6f:d6:b9:b1:7b:1a:e9: 2b:7c:a0:04:10:57:74:92:fa:54:e5:fd:8d:ac:0f:8c:1c:6c: 4d:fd:61:df:1e:ba:08:61:04:c6:e5:22:b5:0c:da:73:7f:99: cc:82:49:88:d6:61:18:f5:93:69:85:32:c6:da:7c:94:ab:a9: 3e:cb:a3:47:2c:ae:d2:f9:bf:b1:5b:43:03:4e:f6:59:5e:b4: e2:e9:6d:df:6c:37:7d:ec:9b:fe:4d:a9:b6:56:84:24:e0:0c: 5e:a2:c8:07:24:37:57:5f:9a:20:e5:5b:21:53:4c:da:4b:f9: 7a:d6:b1:e3:85:f6:54:82:4d:59:69:e8:fc:f2:36:20:64:cd: d3:3d:ae:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP75ryheC34bvuMOf7QGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTRkNzBjZmI3ZTY5MDE5YTJlMDFjODdkMGE1ZDU0NWE1 OTliNTIwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EyhlYmIwMTJjZTQ2MDZiZDE3OWZhZjE4YWI4MjM5MzU3NTE1NTY2YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRYowlclG+FAdRjMgz+NWtw4jPda eMWHv7eHZRdLCL6kbu1ygw0KxwqOn0uEIoKw3R2Ra4UMxAUmKv7UoiSXPHnPjFmX SNDLOKntxhblli4Hudv6kIUZfYCWogwnLwMa+YJpmFlQuTiCqjWwTCqQ1F4GEckt Qa5uwz1WII3iHTocFRlusjucG9pTNoBzfLlyIUDPIV6vS/+1noZAy0XCVOKXSw1T 4XWTFgxo/0Q5M5FshQfAyn0fQEKjwsApZuQjaMXyRr82S4aYR86DKmke2LU+3VPu DgVEKylCucUZ+6erhNJM73JXSM29MWSibjdSM2zEVqkM0d6PvFkwJcwPlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuwEs5GBr0Xn68Yq4I5NXUVVmsuMB8GA1UdIwQY MBaAFCyU1wz7fmkBmi4ByH0KXVRaWZtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTkt NjlmYzA1NmIyNjI1LzEvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTktNjlmYzA1NmIyNjI1 LzEvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWdqby/2 x5TluSeYGYvi3FkwqrpRgczoTRPrWrPssoZZkztnRFXeJFCgZUPOwpQUHB/83lpL xsfhiiyKbmmi+CZItbVSP6evoUPcRoTzQzV1TqEFKjlgN1YXbMx4Ka0Wennog2BZ sAxUiHfahQMje1QvBTYKomxv1rmxexrpK3ygBBBXdJL6VOX9jawPjBxsTf1h3x66 CGEExuUitQzac3+ZzIJJiNZhGPWTaYUyxtp8lKupPsujRyyu0vm/sVtDA072WV60 4ult32w3feyb/k2ptlaEJOAMXqLIByQ3V1+aIOVbIVNM2kv5etax44X2VIJNWWno /PI2IGTN0z2uYA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:34 2025 by rpki-client