This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json) Hash identifier: mpcAydE6PsQ8UfYeya/ryk9Ogp4Q3aeiggFE/CAJ4fU= Subject key identifier: CF:3D:0A:7A:A5:CE:71:8D:F6:72:F8:F6:57:9B:83:72:3F:C9:41:26 Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16 Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016 Certificate serial: 019AF50B1D3CFE54A4F494DF8DC8148099F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:02:17 +0000 Manifest this update: Sat 06 Dec 2025 19:02:17 +0000 Manifest next update: Sun 07 Dec 2025 19:02:17 +0000 Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=) 2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: dUYTkZw+ia2Oj841MjNhHlVTVzSBze06WrXiYjAEwMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:1d:3c:fe:54:a4:f4:94:df:8d:c8:14:80:99:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016 Validity Not Before: Dec 6 19:02:17 2025 GMT Not After : Dec 7 19:02:17 2025 GMT Subject: CN=cf3d0a7aa5ce718df672f8f6579b83723fc94126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:ac:26:62:7e:9f:d0:a4:b9:b9:e2:5b:b9: 3e:5f:2f:67:86:1c:92:73:8f:18:24:9c:ed:2d:4f: 2c:18:61:08:c4:6a:05:03:5d:bc:b7:6c:67:6d:d3: 6e:ed:94:3d:5f:60:44:91:2b:a7:7a:23:55:6b:82: fd:54:d4:c6:aa:e0:e7:30:72:cf:a8:73:e7:be:3c: f2:4e:44:1a:0f:88:4d:b8:39:ec:f0:3b:4c:45:fc: 17:c5:23:0b:d1:a4:05:1e:07:22:21:7a:e5:5e:04: 93:a4:f0:ec:67:6e:e1:d6:19:fe:4c:7b:eb:df:ef: a8:8e:6d:29:19:71:58:f5:25:c1:31:7d:b4:5b:dc: ca:cf:bf:5c:f0:8f:98:6a:f9:8a:6e:64:6c:43:ca: c5:d3:0d:3f:38:ea:10:58:db:18:5b:f6:ec:c9:69: c1:5f:cc:89:ee:b3:e2:ca:20:65:c7:21:8b:1f:16: 16:d4:2c:5b:76:c9:39:05:65:20:44:eb:44:68:86: 25:09:96:a6:17:da:80:54:0f:aa:eb:08:c6:2f:da: 77:c9:b0:44:4d:49:8a:0b:c8:1a:cf:ab:0d:59:8e: 51:7a:e1:e0:76:c2:54:5b:70:e4:ce:89:69:97:cd: b0:84:56:60:8a:9a:bd:8e:8f:4a:0e:fc:dc:12:f3: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3D:0A:7A:A5:CE:71:8D:F6:72:F8:F6:57:9B:83:72:3F:C9:41:26 X509v3 Authority Key Identifier: keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:90:21:8d:2b:91:bb:80:f8:dd:ca:aa:4f:a2:f4:f5:dc:db: 27:dc:36:2c:1e:84:f3:ad:3e:f2:e9:f6:20:64:c6:02:39:12: f4:be:9d:70:21:fd:3f:2c:96:41:f2:b7:d0:5b:fd:af:e8:8a: ba:39:a4:7e:c9:7b:cf:da:fa:3f:a8:0d:1d:d8:05:e2:11:1e: 52:2d:f9:29:a7:4c:21:08:47:06:1e:f8:7f:10:fc:d4:b2:8b: 94:28:28:88:33:6c:c4:e6:7a:4d:b4:78:b5:37:f7:3c:8a:48: d9:6a:73:d7:46:d1:6d:bc:17:3c:d9:40:2e:c0:a8:ef:c4:ff: c2:60:a9:28:53:f5:62:99:90:33:e8:66:18:d2:34:db:2c:03: 88:e4:79:9c:44:e0:4a:6b:35:c1:60:66:6f:b0:71:96:0a:c4: a9:c4:95:ec:fd:db:fa:fc:5d:52:a7:f8:72:46:4f:df:03:67: a0:ef:a7:0d:68:eb:f7:d1:29:9f:b4:06:cd:00:12:77:db:69: e5:19:85:ae:6a:11:43:6a:51:43:36:9c:da:46:80:09:59:5b: 34:ff:26:c3:85:89:6a:51:87:d3:96:73:72:75:89:fe:6b:e1: eb:d8:ae:e5:3f:4a:90:9c:f6:48:a6:79:a0:56:a5:63:19:1b: 49:eb:a6:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cx08/lSk9JTfjcgUgJn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj ZjkwMTYwHhcNMjUxMjA2MTkwMjE3WhcNMjUxMjA3MTkwMjE3WjAzMTEwLwYDVQQD EyhjZjNkMGE3YWE1Y2U3MThkZjY3MmY4ZjY1NzliODM3MjNmYzk0MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvySsJmJ+n9CkubniW7k+Xy9nhhyS c48YJJztLU8sGGEIxGoFA128t2xnbdNu7ZQ9X2BEkSuneiNVa4L9VNTGquDnMHLP qHPnvjzyTkQaD4hNuDns8DtMRfwXxSML0aQFHgciIXrlXgSTpPDsZ27h1hn+THvr 3++ojm0pGXFY9SXBMX20W9zKz79c8I+YavmKbmRsQ8rF0w0/OOoQWNsYW/bsyWnB X8yJ7rPiyiBlxyGLHxYW1Cxbdsk5BWUgROtEaIYlCZamF9qAVA+q6wjGL9p3ybBE TUmKC8gaz6sNWY5ReuHgdsJUW3Dkzolpl82whFZgipq9jo9KDvzcEvM2WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM89CnqlznGN9nL49lebg3I/yUEmMB8GA1UdIwQY MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt YjNjMDFkMWE2Yzg1LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1 LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJAhjSuR u4D43cqqT6L09dzbJ9w2LB6E860+8un2IGTGAjkS9L6dcCH9PyyWQfK30Fv9r+iK ujmkfsl7z9r6P6gNHdgF4hEeUi35KadMIQhHBh74fxD81LKLlCgoiDNsxOZ6TbR4 tTf3PIpI2Wpz10bRbbwXPNlALsCo78T/wmCpKFP1YpmQM+hmGNI02ywDiOR5nETg Sms1wWBmb7BxlgrEqcSV7P3b+vxdUqf4ckZP3wNnoO+nDWjr99Epn7QGzQASd9tp 5RmFrmoRQ2pRQzac2kaACVlbNP8mw4WJalGH05ZzcnWJ/mvh69iu5T9KkJz2SKZ5 oFalYxkbSeumIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:32 2025 by rpki-client