This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft File: ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json) Hash identifier: tTlbp5LpjtvRtaRm/zyVg1tvIjDfa51WNj4acdyx5g0= Subject key identifier: E6:37:12:02:41:5A:E7:E1:09:94:AB:20:03:66:54:EF:B3:2F:4D:57 Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A Certificate issuer: /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a Certificate serial: 019AF50A9808119A8D91F4E5C6E1C425BD5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft Manifest number: 13D3 Signing time: Sat 06 Dec 2025 19:01:43 +0000 Manifest this update: Sat 06 Dec 2025 19:01:43 +0000 Manifest next update: Sun 07 Dec 2025 19:01:43 +0000 Files and hashes: 1: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: lM/h6C3pmm4QIbHdsF39IvbQsRabhy94OyRrilF6mng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:98:08:11:9a:8d:91:f4:e5:c6:e1:c4:25:bd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a Validity Not Before: Dec 6 19:01:43 2025 GMT Not After : Dec 7 19:01:43 2025 GMT Subject: CN=e6371202415ae7e10994ab20036654efb32f4d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:53:fa:0a:d4:70:0b:58:34:a0:d4:c4:4d: f2:9b:aa:2d:c3:dc:35:ff:65:89:3e:9b:84:03:d0: 7b:c1:69:30:16:6b:d3:c7:57:e9:f1:0f:aa:30:82: 8e:ce:bb:67:fe:8d:d4:f8:e5:18:04:eb:06:e8:ed: 87:20:97:8b:f7:6b:1e:42:ca:36:12:05:eb:99:d4: 02:26:cb:45:77:2e:da:f6:a5:40:a8:83:59:c8:c1: 5c:fa:be:cf:33:2e:fb:ef:ef:e2:b8:e3:1e:09:e8: d1:3a:cb:1d:60:7b:3b:aa:06:1d:b6:27:78:ad:07: 9b:d8:e4:c1:4c:cb:cb:0c:ad:70:34:0e:31:f7:43: 9f:4b:19:81:5a:8b:26:f3:7c:2b:3f:e4:cc:da:21: a1:09:6c:22:5f:21:1d:29:02:d9:89:e5:ba:89:4f: 21:84:e6:c1:59:02:40:28:da:7f:78:aa:8f:07:68: a8:48:84:75:69:61:7c:62:e9:20:e9:0a:06:dd:6a: ad:2d:91:31:fd:e0:d4:80:77:ef:49:0c:ca:12:23: 39:34:a2:42:06:20:21:18:5a:59:2a:ae:86:c4:57: 0e:2a:1f:2f:74:70:2f:ca:2f:47:92:78:7c:fb:84: b8:cf:b1:42:bd:40:97:f5:32:54:47:6b:af:de:96: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:12:02:41:5A:E7:E1:09:94:AB:20:03:66:54:EF:B3:2F:4D:57 X509v3 Authority Key Identifier: keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:78:a3:15:82:f3:a4:75:90:2a:4d:b3:ee:a9:1b:66:9a:6f: ad:4b:d8:67:8c:40:ba:bc:94:d8:72:ab:44:18:32:c3:74:eb: f7:e9:32:58:88:17:09:72:ec:53:58:7f:bc:c9:91:ee:1a:6e: ef:09:09:56:54:d5:c1:0d:44:97:a3:22:f0:b1:c3:16:4e:c9: 1f:75:8f:2d:ca:29:67:a6:18:0d:68:a1:d5:3a:b0:ad:36:c4: bd:db:da:fd:be:51:b8:e3:71:49:e8:39:9f:69:83:08:96:fe: fc:a1:3f:8d:2f:b9:eb:7b:d1:19:eb:48:c9:31:49:07:b0:f6: de:22:ce:ad:cd:f4:20:f7:08:1e:a8:ef:5b:0c:8b:a5:d1:e1: 69:9c:50:e0:74:15:48:df:b9:98:5e:41:68:51:ed:fc:e4:f1: 7d:fa:a9:df:f6:95:1a:7b:d9:d6:ca:67:dc:6f:b1:90:c5:52: 10:18:14:74:3b:4f:47:8a:9e:c6:84:f0:fc:12:27:d9:03:8a: 91:d8:27:07:ae:3a:a4:51:ef:01:d7:75:2f:a5:1f:05:9f:20: 9c:a2:8e:61:b2:1f:ef:eb:0a:ea:18:3e:7c:8f:2e:5e:b3:50: a7:9b:51:dd:f0:1e:98:cd:d1:48:dc:95:ca:56:b9:ea:8e:1a: 45:61:47:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpgIEZqNkfTlxuHEJb1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDRjMGFmMTViZTM4ZDJmYzVlMzBmZTM0NTc0NzVkMzRi NzgzOWEwHhcNMjUxMjA2MTkwMTQzWhcNMjUxMjA3MTkwMTQzWjAzMTEwLwYDVQQD EyhlNjM3MTIwMjQxNWFlN2UxMDk5NGFiMjAwMzY2NTRlZmIzMmY0ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+1T+grUcAtYNKDUxE3ym6otw9w1 /2WJPpuEA9B7wWkwFmvTx1fp8Q+qMIKOzrtn/o3U+OUYBOsG6O2HIJeL92seQso2 EgXrmdQCJstFdy7a9qVAqINZyMFc+r7PMy777+/iuOMeCejROssdYHs7qgYdtid4 rQeb2OTBTMvLDK1wNA4x90OfSxmBWosm83wrP+TM2iGhCWwiXyEdKQLZieW6iU8h hObBWQJAKNp/eKqPB2ioSIR1aWF8Yukg6QoG3WqtLZEx/eDUgHfvSQzKEiM5NKJC BiAhGFpZKq6GxFcOKh8vdHAvyi9Hknh8+4S4z7FCvUCX9TJUR2uv3pZwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY3EgJBWufhCZSrIANmVO+zL01XMB8GA1UdIwQY MBaAFJbUwK8VvjjS/F4w/jRXR100t4OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRUQXJ4Vy1PTkw4WGpELU5GZEhYVFMzZzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iMWIxMjgtNGYxMC00ODZlLWExZWUt OTUyZjZmYzAyNjcyLzEvbHRUQXJ4Vy1PTkw4WGpELU5GZEhYVFMzZzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iMWIxMjgtNGYxMC00ODZlLWExZWUtOTUyZjZmYzAyNjcy LzEvbHRUQXJ4Vy1PTkw4WGpELU5GZEhYVFMzZzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHijFYLz pHWQKk2z7qkbZppvrUvYZ4xAuryU2HKrRBgyw3Tr9+kyWIgXCXLsU1h/vMmR7hpu 7wkJVlTVwQ1El6Mi8LHDFk7JH3WPLcopZ6YYDWih1TqwrTbEvdva/b5RuONxSeg5 n2mDCJb+/KE/jS+563vRGetIyTFJB7D23iLOrc30IPcIHqjvWwyLpdHhaZxQ4HQV SN+5mF5BaFHt/OTxffqp3/aVGnvZ1spn3G+xkMVSEBgUdDtPR4qexoTw/BIn2QOK kdgnB646pFHvAdd1L6UfBZ8gnKKOYbIf7+sK6hg+fI8uXrNQp5tR3fAemM3RSNyV yla56o4aRWFHoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:44 2025 by rpki-client