This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json) Hash identifier: DpLm+mm2hkLisGhxoGJzzEh1gSJy/BzBYSSDRuh5w3o= Subject key identifier: F0:6E:9F:AD:55:B9:00:E3:22:ED:11:9F:56:C0:CC:FB:F9:AD:E1:3F Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3 Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3 Certificate serial: 019AF31C250DBD19F7C8FE3C48ED25DC5805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=) 2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: GiZTh6qD/iFAoGCqvAaAlD+f8facR0ztzXAIMQMRm90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:25:0d:bd:19:f7:c8:fe:3c:48:ed:25:dc:58:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3 Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=f06e9fad55b900e322ed119f56c0ccfbf9ade13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:66:02:9e:a2:3a:f3:5d:81:76:27:62:81: 17:52:97:8c:0d:aa:cd:44:97:94:87:1c:40:db:71: 6e:09:7b:0a:95:3b:a0:db:e8:ce:0d:d6:9f:4b:8b: 28:5f:b1:37:37:53:26:4e:62:40:0d:9d:b8:de:58: 2b:9e:0b:85:a3:33:90:43:09:87:c7:72:ed:71:7c: 20:7b:de:5f:35:35:37:8f:e5:e8:7d:9f:24:da:be: c4:1a:6a:4f:86:de:d0:42:27:6c:13:af:2d:76:7c: c0:5e:7b:b9:95:1c:49:10:58:0f:b2:93:2a:b4:c0: 55:20:5d:16:07:10:e0:0f:34:ae:89:d1:8a:4a:cf: 64:a0:88:09:f7:7c:ea:4a:9f:94:1a:13:ba:2b:eb: 8a:bb:e2:a4:37:49:e0:26:cc:24:62:bc:50:85:28: 2e:6e:97:0e:2b:dc:30:54:09:a7:70:7a:b8:72:02: 76:09:85:c1:f5:02:ac:98:02:05:78:5d:e5:b0:d2: ae:dc:af:9a:2f:9d:a0:7c:85:87:b6:ff:46:49:85: 4e:c0:e6:ce:85:e2:ea:27:d6:74:c9:17:99:2b:d4: 04:f7:88:2c:3f:b5:4e:8c:2f:bd:2b:a8:c2:30:8a: 18:88:06:92:60:bb:81:3b:be:72:23:92:86:5b:4c: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:9F:AD:55:B9:00:E3:22:ED:11:9F:56:C0:CC:FB:F9:AD:E1:3F X509v3 Authority Key Identifier: keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1f:98:0e:bb:36:8c:28:fb:03:14:3d:a0:cb:8d:5a:58:b4: 71:d1:8e:a2:06:b1:d2:f5:f1:94:2a:97:13:98:cb:76:7e:c4: 47:a5:65:ee:a7:c2:7c:a9:c9:14:1a:94:04:e2:4a:f8:5e:65: 3d:4d:92:81:2a:bf:76:e0:55:85:96:48:83:4f:1a:d6:60:a5: 17:0f:23:f9:d9:54:e6:b7:24:f0:6f:28:96:7e:6f:5e:c4:f9: d0:a1:00:7c:61:a0:3f:b2:ec:9a:e0:0f:19:80:89:b6:30:d1: 05:f0:79:6c:fd:f6:fd:5a:81:0a:44:69:cf:a0:b0:fd:ff:76: 4f:5a:a5:25:93:04:91:33:c3:c0:9d:33:38:f7:e0:8c:fb:1a: b3:19:0d:c6:fb:31:7b:8a:f0:1c:b0:40:43:6d:c1:0e:37:9a: 49:cb:b3:f4:ca:3c:8a:6b:84:c3:0f:fd:c7:69:ac:c8:59:7b: 85:d3:af:b4:60:2d:73:e2:a4:0d:cd:d3:52:b7:83:cf:e3:d4: 8b:cb:4b:b6:bd:1c:a9:6a:ac:9b:c9:58:5a:01:21:b2:81:aa: 62:f1:59:f3:6b:fc:51:ad:49:d5:fc:54:13:c7:3e:fa:75:d7: b6:5d:3d:01:fc:1f:18:b7:a8:dc:56:9d:11:53:1f:57:79:d6: 5e:ed:33:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCUNvRn3yP48SO0l3FgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzU0NjJlYmIyMDI5YTgzZDNlZWFiNDYyZmYwNTJlY2Zh MGUxYzMwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD EyhmMDZlOWZhZDU1YjkwMGUzMjJlZDExOWY1NmMwY2NmYmY5YWRlMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmtmAp6iOvNdgXYnYoEXUpeMDarN RJeUhxxA23FuCXsKlTug2+jODdafS4soX7E3N1MmTmJADZ243lgrnguFozOQQwmH x3LtcXwge95fNTU3j+XofZ8k2r7EGmpPht7QQidsE68tdnzAXnu5lRxJEFgPspMq tMBVIF0WBxDgDzSuidGKSs9koIgJ93zqSp+UGhO6K+uKu+KkN0ngJswkYrxQhSgu bpcOK9wwVAmncHq4cgJ2CYXB9QKsmAIFeF3lsNKu3K+aL52gfIWHtv9GSYVOwObO heLqJ9Z0yReZK9QE94gsP7VOjC+9K6jCMIoYiAaSYLuBO75yI5KGW0wmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBun61VuQDjIu0Rn1bAzPv5reE/MB8GA1UdIwQY MBaAFJU1Ri67ICmoPT7qtGL/BS7PoOHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTct MzhhYmZhNGZhMzUwLzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTctMzhhYmZhNGZhMzUw LzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYB+YDrs2 jCj7AxQ9oMuNWli0cdGOogax0vXxlCqXE5jLdn7ER6Vl7qfCfKnJFBqUBOJK+F5l PU2SgSq/duBVhZZIg08a1mClFw8j+dlU5rck8G8oln5vXsT50KEAfGGgP7LsmuAP GYCJtjDRBfB5bP32/VqBCkRpz6Cw/f92T1qlJZMEkTPDwJ0zOPfgjPsasxkNxvsx e4rwHLBAQ23BDjeaScuz9Mo8imuEww/9x2msyFl7hdOvtGAtc+KkDc3TUreDz+PU i8tLtr0cqWqsm8lYWgEhsoGqYvFZ82v8Ua1J1fxUE8c++nXXtl09AfwfGLeo3Fad EVMfV3nWXu0z8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:56 2025 by rpki-client