This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json) Hash identifier: F5DxbTaSvXiVY8QZ1Y5+A2QyVhZB+ciGi+/AyJu0smA= Subject key identifier: 3C:9D:EB:D9:E7:0E:3B:F4:4A:39:BA:21:3F:CA:90:75:1F:34:36:4C Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Certificate serial: 019AF12E7196D75DE2586A22DC23188A3706 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft Manifest number: 03A3 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: 1A4HCSr0L9Ih7N9KRizYDOgr7uwNipxx8GNtOfM3Rvs=) 2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:71:96:d7:5d:e2:58:6a:22:dc:23:18:8a:37:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=3c9debd9e70e3bf44a39ba213fca90751f34364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:a7:7b:9c:68:8b:92:b3:fd:30:b1:9e:37: bc:b7:22:70:d6:7c:d3:5b:38:b1:38:08:c2:56:49: 1d:90:99:40:f6:52:de:8e:b3:21:c0:24:78:ce:49: 12:fe:5e:91:77:42:18:35:be:20:dd:e6:d8:64:0f: 1f:f0:1c:f5:24:79:a8:2c:27:fb:a6:f8:95:4f:ef: 04:da:0e:b0:d4:16:ac:c9:0c:66:c1:98:4a:d7:bc: 83:50:93:c0:b3:d2:f6:d4:0d:af:68:1f:64:2b:dd: 2f:6a:be:65:4e:cd:0a:a0:b7:75:ea:56:68:44:af: 34:b3:58:b4:68:92:d5:49:0f:a3:9c:4a:2b:39:c9: 84:30:94:c4:da:d0:8c:a2:06:bd:a6:03:14:67:1e: 9c:59:bc:69:da:82:19:c9:78:99:96:8c:c5:21:04: a4:a1:cb:37:5a:be:35:3d:b9:e3:bf:fe:e0:94:0a: d6:e2:13:b6:f4:fa:61:53:53:94:75:c7:57:c5:aa: 8d:60:2d:67:6b:cf:44:93:cd:8e:b5:ae:90:8b:f4: 93:df:73:04:7d:bf:14:af:c7:eb:0c:0d:41:34:21: 9c:15:7d:df:6c:52:c1:b8:52:72:4c:40:42:f1:38: e2:e9:2b:ec:f3:40:b6:eb:28:9c:78:d3:8d:11:7c: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:EB:D9:E7:0E:3B:F4:4A:39:BA:21:3F:CA:90:75:1F:34:36:4C X509v3 Authority Key Identifier: keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:2a:35:a7:3f:cc:f1:05:75:76:e8:ca:53:f2:c9:76:9b: 41:dd:3c:49:20:e8:8e:29:8a:03:d0:74:b8:9d:99:ec:b3:57: a1:a2:4d:ba:44:6b:6f:42:15:81:a2:c1:be:2c:16:23:03:8b: 0d:46:69:04:71:2b:29:a2:27:39:fb:57:79:13:37:68:36:59: 4d:19:74:98:cb:6b:6b:0e:b1:00:5a:39:bb:38:fc:91:81:fd: 52:35:17:30:ce:c4:aa:fb:b4:db:bd:cb:31:2f:e5:57:77:79: 5e:33:da:1e:00:8d:46:de:b7:c8:7b:8a:79:9b:76:42:3a:ed: 83:20:51:2b:9b:67:1d:56:31:bc:c9:9f:dd:67:91:1d:4d:45: a4:c6:1d:b8:a0:ea:51:7a:6d:dd:1e:80:00:38:d8:c2:31:18: 92:f2:32:56:8c:15:05:f2:4b:13:04:3b:62:26:35:4b:ce:83: 15:5c:21:60:36:8a:01:2d:8b:f7:56:ce:70:b8:ca:57:12:cd: 6c:f5:37:de:e7:d7:99:f6:98:da:16:ee:5b:ce:2b:ef:29:22: 68:75:1b:4d:55:cf:26:e1:a6:9e:c1:0e:c0:04:9f:9b:d3:c1: 66:53:57:f7:d5:16:61:48:0c:c3:b7:71:7b:4e:bd:72:72:95: c1:a5:7f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnGW113iWGoi3CMYijcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1 ZDJhNTEwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EygzYzlkZWJkOWU3MGUzYmY0NGEzOWJhMjEzZmNhOTA3NTFmMzQzNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHqne5xoi5Kz/TCxnje8tyJw1nzT WzixOAjCVkkdkJlA9lLejrMhwCR4zkkS/l6Rd0IYNb4g3ebYZA8f8Bz1JHmoLCf7 pviVT+8E2g6w1BasyQxmwZhK17yDUJPAs9L21A2vaB9kK90var5lTs0KoLd16lZo RK80s1i0aJLVSQ+jnEorOcmEMJTE2tCMoga9pgMUZx6cWbxp2oIZyXiZlozFIQSk ocs3Wr41Pbnjv/7glArW4hO29PphU1OUdcdXxaqNYC1na89Ek82Ota6Qi/ST33ME fb8Ur8frDA1BNCGcFX3fbFLBuFJyTEBC8Tji6Svs80C26yiceNONEXxvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyd69nnDjv0Sjm6IT/KkHUfNDZMMB8GA1UdIwQY MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3 LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj84qNac/ zPEFdXboylPyyXabQd08SSDojimKA9B0uJ2Z7LNXoaJNukRrb0IVgaLBviwWIwOL DUZpBHErKaInOftXeRM3aDZZTRl0mMtraw6xAFo5uzj8kYH9UjUXMM7Eqvu0273L MS/lV3d5XjPaHgCNRt63yHuKeZt2QjrtgyBRK5tnHVYxvMmf3WeRHU1FpMYduKDq UXpt3R6AADjYwjEYkvIyVowVBfJLEwQ7YiY1S86DFVwhYDaKAS2L91bOcLjKVxLN bPU33ufXmfaY2hbuW84r7ykiaHUbTVXPJuGmnsEOwASfm9PBZlNX99UWYUgMw7dx e069cnKVwaV/ag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:43 2025 by rpki-client