This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json) Hash identifier: TVE5qSFqwHRoAQjjyRRz1jLWp7GdNOiWbnCONTO/NXE= Subject key identifier: 52:1F:34:3B:7B:23:20:69:80:76:F0:A5:07:3D:66:6F:B4:B4:96:60 Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b Certificate serial: 019AF3525620B21CEA46D26DC0848204D573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft Manifest number: 104D Signing time: Sat 06 Dec 2025 11:00:50 +0000 Manifest this update: Sat 06 Dec 2025 11:00:50 +0000 Manifest next update: Sun 07 Dec 2025 11:00:50 +0000 Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: 80Np74WfwxExxCDkeaMW77npMs4YZjhuyveW/kqRq7E=) 2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:56:20:b2:1c:ea:46:d2:6d:c0:84:82:04:d5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b Validity Not Before: Dec 6 11:00:50 2025 GMT Not After : Dec 7 11:00:50 2025 GMT Subject: CN=521f343b7b2320698076f0a5073d666fb4b49660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:2f:66:94:1b:d1:29:ed:e9:65:0b:dc:24: 36:37:ff:01:e6:67:7d:8f:e1:3b:c6:be:d6:7f:09: 54:27:d3:0a:17:49:3e:51:47:ee:ad:24:ee:03:c6: fd:f4:27:db:c6:ee:54:97:f9:f5:ed:57:ec:d1:10: 5e:bd:26:12:f7:b9:26:a5:49:02:dd:9a:f0:16:64: 61:69:0b:de:8b:9d:e7:f9:c6:4f:73:29:cd:c3:94: 31:85:3a:18:41:b2:ee:38:11:0f:fd:54:b9:02:2d: af:ba:13:41:96:37:df:c1:c0:5f:27:7e:a1:c8:3a: 72:60:1a:47:6b:8c:58:1a:96:74:a1:13:8c:a8:77: 8d:53:e9:72:e6:a7:1b:38:8d:fe:8d:70:ae:bb:fe: a8:3f:dd:6a:ca:bf:15:29:e6:b2:dd:33:6c:1d:1f: 9d:04:1b:92:7c:ca:02:3c:66:88:ed:86:59:4d:f5: 4b:1f:4b:71:1d:87:6f:34:35:be:dc:59:2d:51:e4: 7f:c3:95:43:95:e2:0d:ab:29:f4:1d:ab:1e:e1:73: 71:e3:c2:50:c5:83:fa:91:6f:e1:08:78:8c:d4:4b: 04:ac:c7:40:c9:db:bf:8d:b3:2e:4b:be:a8:d3:b6: 7d:9f:09:a8:06:ec:4c:76:7d:b9:91:c2:d5:c0:09: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1F:34:3B:7B:23:20:69:80:76:F0:A5:07:3D:66:6F:B4:B4:96:60 X509v3 Authority Key Identifier: keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:70:94:a4:63:26:80:23:2a:45:fd:23:af:f1:52:d0:ef:d3: 6a:27:4c:81:eb:e6:ea:b5:91:f1:a7:ec:5a:2c:4f:3e:3a:38: c1:d1:c4:c8:86:20:e5:fd:b5:32:86:0d:3c:09:4c:a9:4a:7e: 5d:55:d8:16:35:cb:22:aa:df:8c:1d:da:e6:e3:88:1e:ac:6f: fe:9b:a5:9c:a0:34:a9:f6:d5:a7:d9:72:b0:c6:98:93:d3:43: ce:00:6a:64:fd:19:47:28:08:4a:67:41:2f:bb:85:2a:81:8a: c9:b5:b3:1e:2a:8d:6e:73:8d:e3:e3:ca:33:aa:86:d3:38:f9: c8:77:57:92:5f:bb:6e:ff:18:69:60:92:43:c8:8b:97:2c:da: 8c:47:ad:12:35:87:ca:de:b1:2c:38:3d:e2:34:8e:6d:c2:d3: 79:52:54:95:c1:ed:9f:d1:e4:81:ff:8e:b8:50:bb:06:ea:26: 62:48:68:8b:f5:47:4e:8f:8b:99:75:ca:cc:08:de:21:78:5e: 44:d4:68:2e:43:42:4c:45:5f:91:e7:44:ef:e8:cf:a6:57:6d: 86:74:21:a2:c6:e8:45:e6:dc:6e:17:be:38:a7:10:9e:88:e5: 93:dd:2a:57:26:0b:92:44:79:80:e6:a3:4e:69:15:83:86:cb: dd:b5:3f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlYgshzqRtJtwISCBNVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWQxYjkzZDNiY2U2YjZhZmNkZTkwMjBiODAxNjdiODVj NjhmNWIwHhcNMjUxMjA2MTEwMDUwWhcNMjUxMjA3MTEwMDUwWjAzMTEwLwYDVQQD Eyg1MjFmMzQzYjdiMjMyMDY5ODA3NmYwYTUwNzNkNjY2ZmI0YjQ5NjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zAvZpQb0Snt6WUL3CQ2N/8B5md9 j+E7xr7WfwlUJ9MKF0k+UUfurSTuA8b99Cfbxu5Ul/n17Vfs0RBevSYS97kmpUkC 3ZrwFmRhaQvei53n+cZPcynNw5QxhToYQbLuOBEP/VS5Ai2vuhNBljffwcBfJ36h yDpyYBpHa4xYGpZ0oROMqHeNU+ly5qcbOI3+jXCuu/6oP91qyr8VKeay3TNsHR+d BBuSfMoCPGaI7YZZTfVLH0txHYdvNDW+3FktUeR/w5VDleINqyn0Hase4XNx48JQ xYP6kW/hCHiM1EsErMdAydu/jbMuS76o07Z9nwmoBuxMdn25kcLVwAmWhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIfNDt7IyBpgHbwpQc9Zm+0tJZgMB8GA1UdIwQY MBaAFJXtG5PTvOa2r83pAguAFnuFxo9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWIt NTc2Y2U0MTAxNDgzLzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWItNTc2Y2U0MTAxNDgz LzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnCUpGMm gCMqRf0jr/FS0O/TaidMgevm6rWR8afsWixPPjo4wdHEyIYg5f21MoYNPAlMqUp+ XVXYFjXLIqrfjB3a5uOIHqxv/pulnKA0qfbVp9lysMaYk9NDzgBqZP0ZRygISmdB L7uFKoGKybWzHiqNbnON4+PKM6qG0zj5yHdXkl+7bv8YaWCSQ8iLlyzajEetEjWH yt6xLDg94jSObcLTeVJUlcHtn9Hkgf+OuFC7BuomYkhoi/VHTo+LmXXKzAjeIXhe RNRoLkNCTEVfkedE7+jPpldthnQhosboRebcbhe+OKcQnojlk90qVyYLkkR5gOaj TmkVg4bL3bU/pw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:16 2025 by rpki-client