This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json) Hash identifier: R2/uor6dMroqmKIhJgwbH87x7PzSR6/cbX4Dxqm8Dms= Subject key identifier: 65:AD:E5:C6:3B:31:20:E7:2B:F9:0D:19:6C:67:6A:A8:EF:B1:C6:B4 Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf Certificate serial: 019AF12E3B9FAE5E68194F78857771712ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft Manifest number: 16ED Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=) 2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=) 3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=) 4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: MRHZmwbjb/7IQsaLozphqJv6q/ffXq43blVqhG7QJwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3b:9f:ae:5e:68:19:4f:78:85:77:71:71:2a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=65ade5c63b3120e72bf90d196c676aa8efb1c6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d0:94:96:f3:2b:5f:38:87:2d:d9:fd:2d:38: 45:5b:97:80:6c:42:00:1e:2e:5c:a7:05:3c:89:b7: d0:85:a6:fa:c8:9f:dc:38:65:f2:f2:03:37:8d:63: 8c:ac:ec:7c:5c:e5:18:1c:d3:54:50:6d:f6:ce:82: 3f:75:d8:a3:86:f6:a9:4a:8d:f9:aa:c3:4c:4c:28: ab:9d:05:8a:61:d9:fb:10:d5:da:80:76:4f:c2:83: 2c:19:d0:b1:c4:03:57:45:9e:8e:a7:31:fe:42:8f: dd:94:dc:bd:4c:70:41:80:64:9e:8a:4a:7b:25:7d: 98:05:5e:d7:f6:1d:04:fa:eb:49:18:87:c2:99:04: e0:ae:64:dd:5d:85:ca:fa:9d:4e:64:36:05:18:73: 7c:1b:1a:d8:82:84:53:ff:1b:86:eb:98:0e:cf:f4: 0c:45:06:03:4f:6c:cb:2f:4f:ea:c8:eb:26:67:d0: 28:cd:b5:99:be:e6:66:17:5a:4e:e6:39:b3:80:30: 54:2a:91:db:3d:60:1d:a2:af:6c:1d:9d:5e:ae:1d: f3:44:8a:2c:fa:e1:a7:2a:9b:de:15:05:35:d5:d9: e0:a7:0b:dd:1b:fe:26:a7:34:05:19:c4:54:ad:4f: b7:5a:ef:2f:33:73:a6:b2:c4:f0:83:13:6e:e8:d5: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:E5:C6:3B:31:20:E7:2B:F9:0D:19:6C:67:6A:A8:EF:B1:C6:B4 X509v3 Authority Key Identifier: keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:12:06:d2:76:7f:31:58:c1:ac:42:3b:42:b6:d2:9c:fa:6c: 87:07:1d:30:e8:df:28:84:8d:dc:1a:06:7e:fd:18:ad:f4:a3: 2f:c2:81:31:8a:e5:fc:7f:b5:56:5e:66:56:07:89:d0:eb:40: af:ac:96:1f:26:5e:1b:e4:51:a8:c3:df:96:0f:50:aa:c9:48: c0:c8:bf:5f:80:11:3c:b3:2c:34:16:67:30:20:9b:2e:38:f1: e4:86:b3:20:5b:96:f3:d0:7c:e1:37:16:2d:99:31:eb:f9:dd: 60:5e:1b:b8:01:b0:07:c6:e2:ab:8b:4c:3b:e6:6a:5a:e5:15: c1:a4:1e:94:a4:0c:26:0f:8c:f8:5f:02:e4:80:29:05:7f:b3: 0b:2c:a9:df:f4:b7:ef:a7:a4:81:f6:80:49:4e:4e:7b:61:d7: 37:74:db:eb:bf:64:f7:c8:14:0e:87:25:95:f0:4e:ac:dc:6e: 85:d4:0f:1f:bd:e5:0b:86:39:7b:04:fc:14:c7:fb:ab:4e:57: 91:f2:2b:a3:b1:1d:ef:b9:6f:7e:b1:6a:8c:e8:90:41:73:9d: 9e:83:98:9d:7a:f4:00:3c:a2:a8:bc:77:1c:82:66:88:83:0c: 0c:4c:9f:38:9a:03:b5:66:f9:cf:b7:4a:ed:43:65:16:74:71: 92:67:7a:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjufrl5oGU94hXdxcSrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzUxYzQ3M2ExNmJhMzhmYWI0ZDUxNzA1OTIyNWUwZjEz M2M4YmYwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg2NWFkZTVjNjNiMzEyMGU3MmJmOTBkMTk2YzY3NmFhOGVmYjFjNmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9CUlvMrXziHLdn9LThFW5eAbEIA Hi5cpwU8ibfQhab6yJ/cOGXy8gM3jWOMrOx8XOUYHNNUUG32zoI/ddijhvapSo35 qsNMTCirnQWKYdn7ENXagHZPwoMsGdCxxANXRZ6OpzH+Qo/dlNy9THBBgGSeikp7 JX2YBV7X9h0E+utJGIfCmQTgrmTdXYXK+p1OZDYFGHN8GxrYgoRT/xuG65gOz/QM RQYDT2zLL0/qyOsmZ9AozbWZvuZmF1pO5jmzgDBUKpHbPWAdoq9sHZ1erh3zRIos +uGnKpveFQU11dngpwvdG/4mpzQFGcRUrU+3Wu8vM3OmssTwgxNu6NUmHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWt5cY7MSDnK/kNGWxnaqjvsca0MB8GA1UdIwQY MBaAFJY1HEc6Fro4+rTVFwWSJeDxM8i/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEt ZDU3MzczYmY1MTYyLzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEtZDU3MzczYmY1MTYy LzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixIG0nZ/ MVjBrEI7QrbSnPpshwcdMOjfKISN3BoGfv0YrfSjL8KBMYrl/H+1Vl5mVgeJ0OtA r6yWHyZeG+RRqMPflg9QqslIwMi/X4ARPLMsNBZnMCCbLjjx5IazIFuW89B84TcW LZkx6/ndYF4buAGwB8biq4tMO+ZqWuUVwaQelKQMJg+M+F8C5IApBX+zCyyp3/S3 76ekgfaASU5Oe2HXN3Tb679k98gUDocllfBOrNxuhdQPH73lC4Y5ewT8FMf7q05X kfIro7Ed77lvfrFqjOiQQXOdnoOYnXr0ADyiqLx3HIJmiIMMDEyfOJoDtWb5z7dK 7UNlFnRxkmd6Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:37 2025 by rpki-client