This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json) Hash identifier: nwFiultXVT7COf204LZOGJr1/aD1I0cZ2LtuSnPsBD8= Subject key identifier: 02:7F:99:05:A7:CC:8F:30:04:DD:F0:D4:D8:6C:1C:09:EC:DF:FE:95 Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Certificate serial: 019AF2400AC65A41BF6F179E411B5D5613FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft Manifest number: 068F Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: DhJdlSXGg4nwo43i-3hsY3C4PiQ.roa (hash: OLFOl5avnYQnKlew3nA3PZbHQQyKutwAJUJzm6ztUrI=) 2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: GB6FPbO2pDgmPmn2CV4furzBoYNrO9LHZfh2lxyjoVA=) 3: ear6glms6xQEx-sJzJyz2U-vwUo.roa (hash: myzxilbkgn8eg20yO8piaw6MM2eVN5CUHaMGcHJd8U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0a:c6:5a:41:bf:6f:17:9e:41:1b:5d:56:13:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=027f9905a7cc8f3004ddf0d4d86c1c09ecdffe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:fc:3c:d9:25:08:c0:79:92:5f:b8:c2:84: 6e:59:00:e7:bd:b4:ac:65:93:da:37:9a:36:54:d8: 5f:67:ea:9d:b2:25:a2:89:e3:8c:16:f3:8d:44:e4: a6:b1:86:36:03:78:20:40:9d:ee:5e:71:ae:fd:4e: 8a:2f:48:32:92:a4:05:f9:76:bf:21:57:22:ee:90: ae:ad:e5:79:5a:2d:e9:7a:91:60:4f:dc:7c:9e:87: 66:3d:8a:a8:88:2d:5e:19:7a:13:ad:a7:97:eb:f7: 02:d8:c9:13:52:0b:aa:5e:d0:eb:75:33:6a:c1:a4: 39:bc:8f:c1:ca:93:b0:92:c9:c5:ec:74:6a:76:23: 72:92:bd:14:13:2b:7a:84:3d:24:43:59:f1:bf:fa: bc:a6:d5:71:85:cd:78:0c:6d:d3:19:6f:8b:45:bc: e5:69:01:43:04:53:8f:b9:ca:85:4b:f5:35:99:9d: 5b:84:5d:74:f3:d8:ba:e3:7b:b9:9c:b7:1e:97:00: 64:ab:3b:84:55:9c:52:2b:0e:c9:e0:1f:4c:ab:63: e3:38:b3:d1:72:7e:bd:4b:bb:61:75:cc:4d:f9:b6: 98:9a:d2:84:c8:3a:cc:e2:c6:31:f3:60:91:6e:ef: 7f:a3:b2:e0:99:b0:05:ae:03:ec:e0:20:96:1f:fc: a6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:99:05:A7:CC:8F:30:04:DD:F0:D4:D8:6C:1C:09:EC:DF:FE:95 X509v3 Authority Key Identifier: keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:c6:7e:5c:71:77:2f:8f:5d:93:2c:41:77:59:3a:e3:ca:26: 1b:8f:03:0b:2d:94:13:bf:78:3b:9c:17:c9:36:57:03:f4:1d: 96:1f:ee:de:f6:e7:b1:cd:99:f3:44:b8:9a:97:01:64:d8:c0: 21:d1:0a:a3:9b:2a:eb:63:64:3b:e0:7e:d2:53:c4:e8:6a:dd: 34:b1:7c:24:2a:72:cd:a7:ef:b0:f0:ba:78:12:05:b8:af:df: 64:02:61:c9:9d:6e:52:41:07:ac:72:24:f9:79:d7:cc:b3:ed: 7a:3a:60:17:7a:ce:22:86:4e:a0:85:5b:7b:41:49:ec:7d:78: aa:0e:01:cf:ef:86:c0:98:1d:3e:46:8b:2a:4e:d3:04:9d:95: 57:df:1b:98:31:ba:bc:da:4b:6f:33:3c:ef:90:ab:16:e9:a9: 84:b8:a6:a9:77:76:32:3a:90:d2:17:42:c8:a5:d7:24:4d:f0: 98:fd:15:31:8f:d4:f4:a4:37:81:f6:47:a1:86:f9:a1:57:24: f2:7e:1f:4b:4a:2e:a6:8d:b4:0b:1c:28:58:c0:11:20:7e:75: b9:a3:90:48:2e:de:15:a5:74:bd:8d:77:84:85:5b:cf:f3:84: 4e:43:1d:77:8d:0d:e3:94:cb:ab:42:fe:19:7d:05:a7:4e:17: 87:90:ad:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQArGWkG/bxeeQRtdVhP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl Zjk3NjMwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD EygwMjdmOTkwNWE3Y2M4ZjMwMDRkZGYwZDRkODZjMWMwOWVjZGZmZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCH8PNklCMB5kl+4woRuWQDnvbSs ZZPaN5o2VNhfZ+qdsiWiieOMFvONROSmsYY2A3ggQJ3uXnGu/U6KL0gykqQF+Xa/ IVci7pCureV5Wi3pepFgT9x8nodmPYqoiC1eGXoTraeX6/cC2MkTUguqXtDrdTNq waQ5vI/BypOwksnF7HRqdiNykr0UEyt6hD0kQ1nxv/q8ptVxhc14DG3TGW+LRbzl aQFDBFOPucqFS/U1mZ1bhF1089i643u5nLcelwBkqzuEVZxSKw7J4B9Mq2PjOLPR cn69S7thdcxN+baYmtKEyDrM4sYx82CRbu9/o7LgmbAFrgPs4CCWH/ym8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ/mQWnzI8wBN3w1NhsHAns3/6VMB8GA1UdIwQY MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcZ+XHF3 L49dkyxBd1k648omG48DCy2UE794O5wXyTZXA/Qdlh/u3vbnsc2Z80S4mpcBZNjA IdEKo5sq62NkO+B+0lPE6GrdNLF8JCpyzafvsPC6eBIFuK/fZAJhyZ1uUkEHrHIk +XnXzLPtejpgF3rOIoZOoIVbe0FJ7H14qg4Bz++GwJgdPkaLKk7TBJ2VV98bmDG6 vNpLbzM875CrFumphLimqXd2MjqQ0hdCyKXXJE3wmP0VMY/U9KQ3gfZHoYb5oVck 8n4fS0oupo20CxwoWMARIH51uaOQSC7eFaV0vY13hIVbz/OETkMdd40N45TLq0L+ GX0Fp04Xh5Ctbw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:57 2025 by rpki-client