This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft File: LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json) Hash identifier: +dLAsNQELonQisuOCjQ1ktlZkjk+p3usC5Sm3OdAyIk= Subject key identifier: C3:AF:94:54:03:24:10:F9:02:D4:4E:5E:72:C3:33:FA:42:55:00:37 Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98 Certificate serial: 019AF3F70E132E8F79F3A003DCD84FDF03F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 14:00:45 +0000 Manifest this update: Sat 06 Dec 2025 14:00:45 +0000 Manifest next update: Sun 07 Dec 2025 14:00:45 +0000 Files and hashes: 1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=) 2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=) 3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=) 4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=) 5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=) 6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: xBcGWXrkFkDSqYi+GlmizNtUZ/ObI2Uio7z15BBu5Kg=) 7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:0e:13:2e:8f:79:f3:a0:03:dc:d8:4f:df:03:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Validity Not Before: Dec 6 14:00:45 2025 GMT Not After : Dec 7 14:00:45 2025 GMT Subject: CN=c3af9454032410f902d44e5e72c333fa42550037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:ac:d1:e1:c0:3c:42:11:ac:e1:25:aa:1f: 19:dc:fd:e8:05:16:fb:ab:d0:03:3e:ac:3c:5f:63: 1c:f1:45:79:34:f3:54:18:ba:ba:4c:75:2b:a3:96: f7:65:5d:c9:91:5b:da:38:e7:9c:5c:4a:7a:ed:04: 31:70:3d:e4:9a:27:39:a8:10:d7:9a:b2:4c:79:17: 7a:35:14:49:d0:46:2e:f3:1b:e7:5e:48:7e:58:bd: 0e:7d:77:05:2a:af:ed:25:40:d0:eb:9c:e2:e8:50: 98:0c:27:64:2d:54:13:5d:4a:e4:d4:99:c4:98:37: 8e:3c:93:a8:e1:01:50:22:9b:11:62:dd:6c:5d:29: 77:dd:8a:5a:32:50:31:34:32:db:9d:44:11:0d:d7: 53:47:07:36:42:41:ed:03:e9:87:b5:13:e6:d5:2a: fb:91:fd:b3:fc:05:3b:91:f3:99:99:8d:89:11:aa: 65:d8:af:e4:f1:52:32:b3:ec:cf:27:d5:1e:c3:37: ba:62:fc:84:8c:64:c0:3c:e7:cc:01:5a:ed:36:6d: 1e:f8:eb:80:3d:e6:c2:7a:49:03:88:9c:f5:87:72: ab:fb:87:e9:e9:6a:1a:3c:22:0e:ee:32:c4:9b:50: 3c:54:33:25:11:0c:86:44:68:82:85:84:93:6b:f8: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AF:94:54:03:24:10:F9:02:D4:4E:5E:72:C3:33:FA:42:55:00:37 X509v3 Authority Key Identifier: keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:eb:91:da:98:d5:10:82:92:ee:08:d3:5b:62:ea:e4:c5:9c: 54:49:bb:7f:97:13:42:0e:57:9b:e3:e4:cd:bb:3e:3b:ae:41: a7:93:18:ed:9f:d8:f8:20:d6:d1:ab:2e:fe:36:d5:57:b6:d2: 51:a7:5a:bb:96:ea:90:5e:dc:ce:21:6c:92:16:1b:d4:65:5e: cd:58:e7:a0:c1:46:51:c5:03:de:cb:89:a0:82:c3:a4:7d:6d: 17:ab:d8:6b:4d:6d:55:c2:41:df:5e:5b:ec:95:08:5a:3a:02: e6:c0:8c:1a:4c:34:68:18:3f:fb:95:1d:2c:88:ca:8d:62:be: 48:79:56:04:d0:5a:14:62:00:11:40:b7:be:81:b1:3b:06:16: 1f:68:9d:f6:f6:96:f5:ba:b9:ac:00:6c:91:e3:cd:ec:5d:4d: e0:75:eb:15:fc:5d:2f:42:4c:86:89:e9:8b:5d:91:16:af:b2: 1a:39:40:4c:90:8e:5f:27:94:23:a7:51:ff:cd:2e:70:eb:5c: 4d:18:50:33:11:77:bf:97:2e:d9:52:91:4c:9c:af:ac:57:7e: dc:de:72:ad:3b:28:55:a4:48:a7:6f:86:a6:1e:d5:f4:4c:27: d4:bc:f4:f1:df:d0:cb:e0:04:d6:80:d0:32:3a:a2:79:84:66: 42:ee:78:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9w4TLo9586AD3NhP3wP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2 ZmFjOTgwHhcNMjUxMjA2MTQwMDQ1WhcNMjUxMjA3MTQwMDQ1WjAzMTEwLwYDVQQD EyhjM2FmOTQ1NDAzMjQxMGY5MDJkNDRlNWU3MmMzMzNmYTQyNTUwMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSis0eHAPEIRrOElqh8Z3P3oBRb7 q9ADPqw8X2Mc8UV5NPNUGLq6THUro5b3ZV3JkVvaOOecXEp67QQxcD3kmic5qBDX mrJMeRd6NRRJ0EYu8xvnXkh+WL0OfXcFKq/tJUDQ65zi6FCYDCdkLVQTXUrk1JnE mDeOPJOo4QFQIpsRYt1sXSl33YpaMlAxNDLbnUQRDddTRwc2QkHtA+mHtRPm1Sr7 kf2z/AU7kfOZmY2JEapl2K/k8VIys+zPJ9Uewze6YvyEjGTAPOfMAVrtNm0e+OuA PebCekkDiJz1h3Kr+4fp6WoaPCIO7jLEm1A8VDMlEQyGRGiChYSTa/hyvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOvlFQDJBD5AtROXnLDM/pCVQA3MB8GA1UdIwQY MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt N2Y5NzBhM2FmOWNkLzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReuR2pjV EIKS7gjTW2Lq5MWcVEm7f5cTQg5Xm+Pkzbs+O65Bp5MY7Z/Y+CDW0asu/jbVV7bS Uadau5bqkF7cziFskhYb1GVezVjnoMFGUcUD3suJoILDpH1tF6vYa01tVcJB315b 7JUIWjoC5sCMGkw0aBg/+5UdLIjKjWK+SHlWBNBaFGIAEUC3voGxOwYWH2id9vaW 9bq5rABskePN7F1N4HXrFfxdL0JMhonpi12RFq+yGjlATJCOXyeUI6dR/80ucOtc TRhQMxF3v5cu2VKRTJyvrFd+3N5yrTsoVaRIp2+Gph7V9Ewn1Lz08d/Qy+AE1oDQ MjqieYRmQu54YA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:33 2025 by rpki-client