This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json) Hash identifier: gg91DJ170fx0X43n/a3oU6qKc5zUru0TsdNKPP3V68o= Subject key identifier: A4:9F:BB:C1:03:B8:53:96:ED:B1:A1:89:9E:A2:DF:93:C9:39:DB:08 Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43 Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43 Certificate serial: 019AF50AF1E3833A1093EB8E85F5B879C9A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft Manifest number: 1523 Signing time: Sat 06 Dec 2025 19:02:06 +0000 Manifest this update: Sat 06 Dec 2025 19:02:06 +0000 Manifest next update: Sun 07 Dec 2025 19:02:06 +0000 Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=) 2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: lPs06sEZIHUCtXhAuXWyGC8Fq4AZdZm37pj7Ne1ilKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:f1:e3:83:3a:10:93:eb:8e:85:f5:b8:79:c9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43 Validity Not Before: Dec 6 19:02:06 2025 GMT Not After : Dec 7 19:02:06 2025 GMT Subject: CN=a49fbbc103b85396edb1a1899ea2df93c939db08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:a1:45:30:35:47:d9:0f:33:db:f4:53:dd: f4:c7:b3:97:e2:62:e7:b9:20:d2:54:f5:19:4d:ec: 09:9b:7c:f5:d1:1c:b7:82:97:06:3c:17:fb:82:bb: d6:ae:d4:a6:fb:c9:a6:27:c4:29:f2:79:98:7c:81: 84:06:2d:36:98:d4:43:30:6e:6a:52:d9:ee:d3:68: 0e:ec:13:97:db:ca:c6:dc:31:73:80:a7:89:94:0b: 8c:10:8c:2b:1d:4f:7e:90:5b:ba:ee:ad:fa:7d:5a: da:88:fc:80:65:8f:b1:91:22:ac:b4:65:12:db:9c: cd:6f:c0:b5:5f:53:f4:40:e7:1b:db:a5:b2:f9:e1: 2f:2a:ab:2c:d6:66:29:27:c5:c6:4c:26:d3:e8:63: 64:2b:b3:a4:74:fa:d1:13:12:30:a2:46:7a:10:ee: fc:28:fe:07:41:63:95:a3:58:35:eb:de:09:a0:0a: 26:2a:b5:1c:4e:b4:b5:9a:b8:b2:ee:8c:20:96:92: ae:ef:fd:df:a4:aa:a3:1b:0a:78:74:bb:dd:35:3f: f4:1f:67:da:15:c2:08:d3:f9:89:ec:e3:ec:d9:2e: 42:f7:72:83:82:34:13:88:6b:73:f3:c3:45:63:ab: 99:b4:28:d4:75:f2:4a:21:70:b6:ae:4a:f3:6a:f7: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:BB:C1:03:B8:53:96:ED:B1:A1:89:9E:A2:DF:93:C9:39:DB:08 X509v3 Authority Key Identifier: keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:85:e4:71:63:54:c9:e3:47:d2:0a:d1:b0:4e:77:21:ba: 51:55:86:a1:38:17:18:05:95:f7:d2:8a:dc:33:c0:76:11:b6: 88:6b:5a:7e:ab:bc:32:73:9e:db:be:64:b4:55:1b:3a:33:40: 7e:d3:71:76:27:b3:7d:38:0f:25:83:d9:96:83:5f:1b:ec:16: 0a:c3:8b:ec:a4:61:76:8c:f0:bb:53:13:3f:1c:e8:10:dc:8e: c9:f1:b7:9d:bf:c1:af:98:e7:02:38:a3:a3:11:b9:9e:74:aa: 0a:1d:59:bd:d3:f4:26:d9:f9:2a:7f:ad:f5:ba:e6:2a:47:52: 4d:3d:65:6d:bb:3b:ae:8c:e7:e7:77:66:c0:0f:29:65:61:90: 4e:8b:72:84:17:35:a8:e2:2c:ed:5f:3b:05:35:69:93:21:a0: c1:0c:08:d8:b7:fa:00:fb:a7:68:e2:c6:b8:f9:97:fd:8f:64: 21:d3:ac:13:10:dc:e7:1b:7f:63:00:6e:49:f3:97:d3:00:dd: 76:18:41:74:46:09:3f:68:bd:5f:55:5b:21:55:97:cf:20:89: ed:ac:21:ae:af:c6:ac:17:60:10:4c:67:1e:a5:68:4f:2f:0a: 73:4c:23:90:f6:95:1a:ba:a3:44:33:d6:65:63:59:2e:cb:24: 72:63:12:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CvHjgzoQk+uOhfW4ecmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzlhMWE3ZGUwNmQ3N2FiMmFlMzM4N2RjYTY5YTdmZWM3 NjZjNDMwHhcNMjUxMjA2MTkwMjA2WhcNMjUxMjA3MTkwMjA2WjAzMTEwLwYDVQQD EyhhNDlmYmJjMTAzYjg1Mzk2ZWRiMWExODk5ZWEyZGY5M2M5MzlkYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgqhRTA1R9kPM9v0U930x7OX4mLn uSDSVPUZTewJm3z10Ry3gpcGPBf7grvWrtSm+8mmJ8Qp8nmYfIGEBi02mNRDMG5q Utnu02gO7BOX28rG3DFzgKeJlAuMEIwrHU9+kFu67q36fVraiPyAZY+xkSKstGUS 25zNb8C1X1P0QOcb26Wy+eEvKqss1mYpJ8XGTCbT6GNkK7OkdPrRExIwokZ6EO78 KP4HQWOVo1g1694JoAomKrUcTrS1mriy7owglpKu7/3fpKqjGwp4dLvdNT/0H2fa FcII0/mJ7OPs2S5C93KDgjQTiGtz88NFY6uZtCjUdfJKIXC2rkrzavfAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSfu8EDuFOW7bGhiZ6i35PJOdsIMB8GA1UdIwQY MBaAFJY5oafeBtd6sq4zh9ymmn/sdmxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82Y2Q4NzAtMDk2OC00Y2VmLWE5MWQt YWYyMGZlNzkzZTY0LzEvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS82Y2Q4NzAtMDk2OC00Y2VmLWE5MWQtYWYyMGZlNzkzZTY0 LzEvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJ+F5HFj VMnjR9IK0bBOdyG6UVWGoTgXGAWV99KK3DPAdhG2iGtafqu8MnOe275ktFUbOjNA ftNxdiezfTgPJYPZloNfG+wWCsOL7KRhdozwu1MTPxzoENyOyfG3nb/Br5jnAjij oxG5nnSqCh1ZvdP0Jtn5Kn+t9brmKkdSTT1lbbs7rozn53dmwA8pZWGQTotyhBc1 qOIs7V87BTVpkyGgwQwI2Lf6APunaOLGuPmX/Y9kIdOsExDc5xt/YwBuSfOX0wDd dhhBdEYJP2i9X1VbIVWXzyCJ7awhrq/GrBdgEExnHqVoTy8Kc0wjkPaVGrqjRDPW ZWNZLsskcmMSLg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:31 2025 by rpki-client