This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json) Hash identifier: ao9U2yX8t6CI+WamVlaxNIxZhSzmhaOrwU9+8K3Bej8= Subject key identifier: 9A:EF:A9:20:A2:56:63:E6:FC:AE:B8:C9:7E:C4:3E:3E:03:D0:3F:BA Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60 Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960 Certificate serial: 019AF23FA8B42A2AA1D2392CE9F5D12039DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft Manifest number: 033A Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=) 2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=) 3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: KJAGBNaThGxUY9AwRKlGaiXKqep66LblO47iIjqcp0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a8:b4:2a:2a:a1:d2:39:2c:e9:f5:d1:20:39:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=9aefa920a25663e6fcaeb8c97ec43e3e03d03fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:56:d5:5a:38:79:15:2d:60:16:15:3f:d5: 53:f9:6d:64:ab:75:a8:2d:cc:a4:f9:40:8a:4a:85: 84:72:e2:7d:11:23:93:f2:38:e9:77:b8:39:94:c6: 30:99:e9:3f:86:a0:65:72:d2:0a:91:52:13:5e:15: 00:cf:e0:fa:4a:f5:9a:e5:03:34:3f:fa:32:e1:43: 95:8f:40:3f:23:5d:6f:24:fe:c7:a9:5b:ee:8b:c2: eb:b8:f6:f0:af:e3:ef:4f:36:12:75:73:1e:4e:68: 95:b7:5e:f5:6d:da:26:71:95:26:23:68:c2:a7:24: 17:8d:03:f9:24:58:bd:72:7f:41:46:d4:1c:22:19: be:f8:f5:80:c0:7c:d2:db:7b:7c:61:c6:c3:76:fb: a3:ac:cb:e5:4c:25:05:b2:ad:5b:63:5d:c7:ff:12: 00:e6:e5:71:28:4a:eb:f8:75:c7:a0:ad:fa:5a:bb: 26:5f:01:fa:67:2f:29:d6:e3:cb:74:c8:63:24:58: a1:20:68:14:f4:4a:e0:14:f7:64:81:06:d7:21:20: b8:d5:a6:6d:89:4a:db:36:3c:20:6e:06:a0:56:be: c3:48:6c:7a:c3:df:89:57:8e:34:0f:d3:a3:db:7f: 01:75:59:de:e4:91:30:ef:8e:e7:b2:26:3d:9c:6b: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:A9:20:A2:56:63:E6:FC:AE:B8:C9:7E:C4:3E:3E:03:D0:3F:BA X509v3 Authority Key Identifier: keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a6:4f:99:b8:b9:60:47:2b:c7:89:4d:b8:8a:21:5b:4c:69: b1:b3:58:5e:a1:91:b3:b8:06:84:ed:bb:c8:49:31:ad:6f:ca: c1:19:7b:bc:8e:21:ed:d7:77:4b:74:10:e9:17:81:19:77:5e: 85:a6:3a:82:ea:f2:7c:7f:a6:b5:ed:aa:03:af:ac:14:da:9d: 76:24:f5:b0:29:2f:3d:f3:a3:a1:a5:9b:24:a2:6a:e3:3e:f6: 91:63:2f:b4:6c:cb:4b:8c:20:b8:2c:94:b2:f2:54:d4:e4:fb: 7f:cf:5a:16:b1:5c:ef:14:3d:78:c7:cc:b0:38:9a:47:be:63: 95:2a:22:cd:d7:77:5a:ef:4f:34:17:fd:a8:cb:1b:e4:79:a0: 54:61:f4:ce:e3:21:22:f9:60:f4:40:c4:e2:87:cf:94:92:a0: 9c:00:6a:0c:69:2c:c1:c3:4a:90:89:1c:b0:81:17:87:94:af: 07:0c:fe:20:d2:26:ea:6d:a0:68:48:3c:c8:74:f1:8e:18:68: 60:f6:af:57:66:ce:d1:89:2c:f2:4b:ab:ee:31:86:af:d6:9a: 22:08:59:a0:51:f9:eb:58:25:b5:8e:6d:ab:8c:6f:24:f9:1a: 02:b5:92:d9:ae:07:c7:fe:55:ea:20:0d:c8:15:27:f5:8a:50: aa:c3:be:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6i0Kiqh0jks6fXRIDneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm MTM5NjAwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg5YWVmYTkyMGEyNTY2M2U2ZmNhZWI4Yzk3ZWM0M2UzZTAzZDAzZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSxW1Vo4eRUtYBYVP9VT+W1kq3Wo Lcyk+UCKSoWEcuJ9ESOT8jjpd7g5lMYwmek/hqBlctIKkVITXhUAz+D6SvWa5QM0 P/oy4UOVj0A/I11vJP7HqVvui8LruPbwr+PvTzYSdXMeTmiVt171bdomcZUmI2jC pyQXjQP5JFi9cn9BRtQcIhm++PWAwHzS23t8YcbDdvujrMvlTCUFsq1bY13H/xIA 5uVxKErr+HXHoK36WrsmXwH6Zy8p1uPLdMhjJFihIGgU9ErgFPdkgQbXISC41aZt iUrbNjwgbgagVr7DSGx6w9+JV440D9Oj238BdVne5JEw747nsiY9nGuubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrvqSCiVmPm/K64yX7EPj4D0D+6MB8GA1UdIwQY MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt NWIzMThjMzQ5OWZiLzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaZPmbi5 YEcrx4lNuIohW0xpsbNYXqGRs7gGhO27yEkxrW/KwRl7vI4h7dd3S3QQ6ReBGXde haY6guryfH+mte2qA6+sFNqddiT1sCkvPfOjoaWbJKJq4z72kWMvtGzLS4wguCyU svJU1OT7f89aFrFc7xQ9eMfMsDiaR75jlSoizdd3Wu9PNBf9qMsb5HmgVGH0zuMh Ivlg9EDE4ofPlJKgnABqDGkswcNKkIkcsIEXh5SvBwz+INIm6m2gaEg8yHTxjhho YPavV2bO0Yks8kur7jGGr9aaIghZoFH561gltY5tq4xvJPkaArWS2a4Hx/5V6iAN yBUn9YpQqsO+nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:58 2025 by rpki-client