This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json) Hash identifier: tMkYtecRv3+eBMQc2MawA/BogDROuvsI8hGGN6BAdCw= Subject key identifier: F0:6E:10:61:FA:CA:A5:98:7D:DD:46:1D:EA:F3:DB:82:66:DA:0B:8E Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65 Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665 Certificate serial: 019AF23F9167A4824E6B86F6FDADFACD7519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft Manifest number: 034C Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=) 2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: Cw8t1dYs6qaG9B5ij+/B+36R03ZGfgLRxaDSMfJhiIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:67:a4:82:4e:6b:86:f6:fd:ad:fa:cd:75:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=f06e1061facaa5987ddd461deaf3db8266da0b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:55:83:7e:12:d0:12:de:91:d3:44:18:dd: 43:cb:02:82:03:ac:16:fa:13:44:39:f5:f2:87:2a: 38:f2:34:29:74:5f:cd:55:87:0c:8f:5e:2a:53:37: e1:3f:fa:bc:bb:5e:1e:1a:08:26:ff:67:8c:c7:3c: 76:f8:64:b6:31:6f:f0:da:8b:5f:a2:65:12:14:59: 7d:33:8b:2c:04:3a:4f:4b:57:46:5b:9e:78:1e:15: 6f:5e:f6:90:08:f8:8b:63:c7:37:d7:b1:48:70:92: 63:62:02:19:bd:36:7c:b1:e9:f9:c3:d4:39:06:cc: 06:0d:8a:02:b5:c8:ac:70:44:44:64:b5:a9:19:f7: 11:5e:ea:9f:60:8b:8d:bb:3b:a3:30:fa:89:30:f4: 28:34:34:05:c2:d6:ed:3f:aa:5a:27:80:f2:d3:82: 1c:20:53:93:dd:54:4b:1d:81:c2:be:70:30:39:a4: e1:0a:e7:56:64:4e:56:85:76:14:e7:54:a3:68:0f: 89:6b:c5:42:a5:1f:a7:b8:3b:e8:72:db:c4:50:c9: c4:30:13:0c:a8:cc:04:59:f1:bb:dd:ba:fd:18:19: 1f:19:ea:6d:97:a0:a1:62:83:58:d4:32:0b:0b:26: 60:2e:95:d5:c1:48:8d:fa:43:21:1f:2b:3e:3b:ca: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:10:61:FA:CA:A5:98:7D:DD:46:1D:EA:F3:DB:82:66:DA:0B:8E X509v3 Authority Key Identifier: keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:46:c8:27:33:22:b0:b2:9c:fc:3e:2b:9b:dc:71:3c:ba:30: b5:0b:db:30:a8:85:9a:16:58:4a:36:5a:7b:88:12:fb:48:af: df:70:1e:df:98:e8:82:49:0f:fe:57:6b:4f:12:92:fc:3e:ec: dd:c0:5a:36:2a:b7:34:a1:3b:2d:39:d2:04:c9:da:27:f3:33: c8:e6:be:1c:1c:32:b6:09:a2:ea:d4:ef:93:be:ee:64:05:a0: e8:a9:7c:76:04:ce:f5:d4:c8:f1:62:18:e9:ce:23:01:ce:7c: af:22:6d:b5:f5:b8:7d:a3:a4:21:b0:d6:ec:df:ad:66:66:57: ac:10:76:fb:de:99:40:4a:8a:70:57:c9:c8:6b:76:32:e1:30: 41:f7:07:b0:b0:40:22:a2:d3:a6:91:dc:34:d6:71:8a:05:02: f0:29:f8:e2:5e:34:3b:05:ad:c2:79:56:52:b3:2a:d3:cc:6e: 36:9c:a5:65:13:a1:cb:be:72:d2:d5:4c:99:21:6c:c8:53:4f: ef:b6:1c:85:e7:19:9e:72:2c:93:38:f1:49:6a:4f:b2:58:1e: 91:36:72:c3:4d:3b:1d:55:66:b0:6a:15:55:a8:30:e7:04:99: b0:e1:c9:49:58:c7:c5:df:1c:da:9b:12:d0:98:2b:af:bd:c7: 16:98:78:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5FnpIJOa4b2/a36zXUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzAzNWJjOGZiZjY3NjNjODg4ZGIzNDRkMmFiNGFlNjI5 NDY2NjUwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhmMDZlMTA2MWZhY2FhNTk4N2RkZDQ2MWRlYWYzZGI4MjY2ZGEwYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGlVg34S0BLekdNEGN1DywKCA6wW +hNEOfXyhyo48jQpdF/NVYcMj14qUzfhP/q8u14eGggm/2eMxzx2+GS2MW/w2otf omUSFFl9M4ssBDpPS1dGW554HhVvXvaQCPiLY8c317FIcJJjYgIZvTZ8sen5w9Q5 BswGDYoCtciscEREZLWpGfcRXuqfYIuNuzujMPqJMPQoNDQFwtbtP6paJ4Dy04Ic IFOT3VRLHYHCvnAwOaThCudWZE5WhXYU51SjaA+Ja8VCpR+nuDvoctvEUMnEMBMM qMwEWfG73br9GBkfGeptl6ChYoNY1DILCyZgLpXVwUiN+kMhHys+O8pcywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBuEGH6yqWYfd1GHerz24Jm2guOMB8GA1UdIwQY MBaAFJbANbyPv2djyIjbNE0qtK5ilGZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAt ZDYzMDdlMmRhOWY3LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAtZDYzMDdlMmRhOWY3 LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0bIJzMi sLKc/D4rm9xxPLowtQvbMKiFmhZYSjZae4gS+0iv33Ae35jogkkP/ldrTxKS/D7s 3cBaNiq3NKE7LTnSBMnaJ/MzyOa+HBwytgmi6tTvk77uZAWg6Kl8dgTO9dTI8WIY 6c4jAc58ryJttfW4faOkIbDW7N+tZmZXrBB2+96ZQEqKcFfJyGt2MuEwQfcHsLBA IqLTppHcNNZxigUC8Cn44l40OwWtwnlWUrMq08xuNpylZROhy75y0tVMmSFsyFNP 77YchecZnnIskzjxSWpPslgekTZyw007HVVmsGoVVagw5wSZsOHJSVjHxd8c2psS 0Jgrr73HFph4lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:14 2025 by rpki-client