This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json) Hash identifier: ISegCgIl4cmF70RifmtKfoyYhm3/MQXCHuR2NsYu7RM= Subject key identifier: 72:A1:EE:42:73:E4:E9:AA:1A:1E:C2:3E:9D:C4:E7:52:48:E3:2B:8E Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Certificate serial: 019AF0BFA314CEB62EA9E893D187F8BC31C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 23:01:22 +0000 Manifest this update: Fri 05 Dec 2025 23:01:22 +0000 Manifest next update: Sat 06 Dec 2025 23:01:22 +0000 Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=) 2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: v/9+fbVMwhBy0t9im1fs77cHjza9XlNjDzvD7TykKmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a3:14:ce:b6:2e:a9:e8:93:d1:87:f8:bc:31:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Validity Not Before: Dec 5 23:01:22 2025 GMT Not After : Dec 6 23:01:22 2025 GMT Subject: CN=72a1ee4273e4e9aa1a1ec23e9dc4e75248e32b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:0f:99:55:ba:09:9c:82:a4:26:3b:ed:74: 95:1b:33:3b:fe:7a:a2:aa:18:4e:f7:f5:d7:20:c7: df:9a:f3:5f:a3:e0:b4:37:91:c6:3f:58:88:3b:d4: 40:c5:48:d6:3f:fb:fc:ac:8b:8f:e4:ed:b2:a9:fb: dc:01:9a:14:3d:78:c8:2f:24:9d:6c:f6:86:24:8b: 2d:5a:d5:0a:d1:4c:df:4f:f1:da:5f:43:93:fb:16: 84:9a:1d:c9:a4:dd:6c:4e:37:a4:05:23:9a:8a:ab: 64:e8:4d:2b:89:19:4a:4f:18:dc:31:49:d3:35:05: f0:95:71:23:e5:d8:8a:e1:1e:e5:52:e5:12:4e:bd: 55:8e:25:c1:f3:4b:34:04:b2:47:0a:1c:95:17:6f: 20:20:f0:96:3e:19:e1:db:a6:1b:e5:34:2c:61:5f: c0:2f:d6:11:bb:45:ad:03:1d:72:60:31:2b:96:9e: ec:19:db:7d:9a:1f:b9:e1:e3:4a:35:b2:b3:33:75: 0d:d2:90:39:ad:c4:5d:18:6b:d2:90:c3:10:04:51: f2:26:82:c5:95:c9:87:e0:b7:1d:61:25:f8:64:c7: b2:68:b6:55:a2:35:ad:9c:7a:76:dc:98:82:b5:a3: f5:20:ce:aa:33:84:f0:34:7a:5c:2b:36:c0:78:5b: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A1:EE:42:73:E4:E9:AA:1A:1E:C2:3E:9D:C4:E7:52:48:E3:2B:8E X509v3 Authority Key Identifier: keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:14:d1:76:4a:38:a5:9b:c3:e0:b5:b4:cc:01:5f:ef:68: a3:02:1c:53:08:f3:57:cb:c2:a4:b6:4a:e7:9c:a6:ab:f6:05: cd:de:61:2d:c9:e7:8d:3b:c3:ee:b6:89:e9:4a:76:8f:ef:c4: e7:ba:57:d0:87:13:c0:2c:c8:01:d6:57:72:c4:5d:83:0b:84: 60:cd:73:6f:05:d0:42:3a:e4:f8:07:2f:e7:1d:b8:2e:ae:78: 7b:29:52:c2:87:33:12:af:54:2e:2e:fb:dc:54:a0:75:f1:99: e0:90:97:cf:c2:ef:99:59:f0:8b:df:18:ec:72:76:e6:33:f0: 8a:5b:45:42:58:66:e4:2c:12:39:7d:34:9f:ff:78:79:6b:7b: 71:bf:ff:a6:f3:60:02:b4:c8:73:e4:36:ca:b5:1f:7c:12:c4: 14:7b:66:4e:ef:d1:e0:b6:da:69:41:45:61:41:3f:34:f1:e1: cb:1c:39:f5:89:9a:cc:d9:1c:8e:11:1c:53:6d:c4:a8:32:91: e0:54:94:77:ca:68:29:46:ee:fc:2a:78:b1:c3:a3:92:ff:29: 37:5a:4a:41:a5:b6:bd:9c:91:5f:97:d4:45:bd:00:7d:63:c0: 5c:f8:c6:81:a5:b9:ab:bb:bb:80:ed:22:0c:87:cf:bb:6d:47: 72:a7:5b:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6MUzrYuqeiT0Yf4vDHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZjg3NzlhM2M4MmYwMGZjMTQ0MzVlZTdkOGQwYjhkNmRk ODIwNGUwHhcNMjUxMjA1MjMwMTIyWhcNMjUxMjA2MjMwMTIyWjAzMTEwLwYDVQQD Eyg3MmExZWU0MjczZTRlOWFhMWExZWMyM2U5ZGM0ZTc1MjQ4ZTMyYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJwPmVW6CZyCpCY77XSVGzM7/nqi qhhO9/XXIMffmvNfo+C0N5HGP1iIO9RAxUjWP/v8rIuP5O2yqfvcAZoUPXjILySd bPaGJIstWtUK0UzfT/HaX0OT+xaEmh3JpN1sTjekBSOaiqtk6E0riRlKTxjcMUnT NQXwlXEj5diK4R7lUuUSTr1VjiXB80s0BLJHChyVF28gIPCWPhnh26Yb5TQsYV/A L9YRu0WtAx1yYDErlp7sGdt9mh+54eNKNbKzM3UN0pA5rcRdGGvSkMMQBFHyJoLF lcmH4LcdYSX4ZMeyaLZVojWtnHp23JiCtaP1IM6qM4TwNHpcKzbAeFsv/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKh7kJz5OmqGh7CPp3E51JI4yuOMB8GA1UdIwQY MBaAFC34d5o8gvAPwUQ17n2NC41t2CBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4Yjct ZTJhZTA1NWVjZWQxLzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4YjctZTJhZTA1NWVjZWQx LzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEgU0XZK OKWbw+C1tMwBX+9oowIcUwjzV8vCpLZK55ymq/YFzd5hLcnnjTvD7raJ6Up2j+/E 57pX0IcTwCzIAdZXcsRdgwuEYM1zbwXQQjrk+Acv5x24Lq54eylSwoczEq9ULi77 3FSgdfGZ4JCXz8LvmVnwi98Y7HJ25jPwiltFQlhm5CwSOX00n/94eWt7cb//pvNg ArTIc+Q2yrUffBLEFHtmTu/R4LbaaUFFYUE/NPHhyxw59YmazNkcjhEcU23EqDKR 4FSUd8poKUbu/Cp4scOjkv8pN1pKQaW2vZyRX5fURb0AfWPAXPjGgaW5q7u7gO0i DIfPu21HcqdbgA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:48 2025 by rpki-client