This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json) Hash identifier: 1eZoHpmDV7Fh4OzD5Ue1T4obFob4xYHypnoPrpDL79c= Subject key identifier: 45:20:ED:C8:B7:A2:F4:1D:DB:97:29:E5:BF:2D:6A:BE:CA:6F:27:54 Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80 Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680 Certificate serial: 019B30B0A219D6F3AF575F56D48DFDAF4966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft Manifest number: 060E Signing time: Thu 18 Dec 2025 09:00:40 +0000 Manifest this update: Thu 18 Dec 2025 09:00:40 +0000 Manifest next update: Fri 19 Dec 2025 09:00:40 +0000 Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: ls0wpywINGuROHRopIdf1hXTe7EEOooFXA9apUkPykM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:a2:19:d6:f3:af:57:5f:56:d4:8d:fd:af:49:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680 Validity Not Before: Dec 18 09:00:40 2025 GMT Not After : Dec 19 09:00:40 2025 GMT Subject: CN=4520edc8b7a2f41ddb9729e5bf2d6abeca6f2754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:10:5b:06:8f:a8:8a:91:fd:60:54:7d:ce: 55:32:6f:5d:f2:85:42:2f:0c:20:10:47:80:33:f6: 63:0b:93:4d:05:aa:a4:06:81:77:89:ba:27:48:48: 98:a4:0c:3b:d4:07:10:d9:90:0f:85:8c:92:7f:06: c1:45:5c:87:a5:e4:e4:53:b2:12:79:85:07:1e:a5: 11:c3:55:ad:42:e4:d2:ec:10:40:c0:01:86:d9:cd: 6d:a4:4e:8a:3a:81:34:8e:04:a0:f6:33:7b:fb:a5: e1:01:60:14:5b:05:e0:25:67:6c:55:b1:35:18:34: b8:3e:c7:df:bc:7f:e5:68:55:81:75:b2:90:8a:3f: 6b:aa:f5:40:96:4b:8b:60:66:7f:20:ef:d0:87:6e: 74:59:90:b6:20:63:18:2a:ce:b4:ec:03:65:2b:60: 0d:71:79:96:90:b4:75:ba:d0:03:bd:2c:c7:80:59: 69:8d:42:b1:69:24:53:d3:85:36:a8:39:2c:f3:f3: f8:c5:a2:7d:2b:8f:cc:68:26:4c:94:8c:05:4b:4b: 88:0c:70:f5:a2:b7:21:16:85:b8:cb:8c:f4:66:7d: ba:d3:d1:18:0d:0d:e0:3b:51:97:ed:9c:06:a1:c7: 30:af:60:47:22:69:c2:93:4a:a5:d7:38:7e:5b:d2: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:20:ED:C8:B7:A2:F4:1D:DB:97:29:E5:BF:2D:6A:BE:CA:6F:27:54 X509v3 Authority Key Identifier: keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1a:fa:6a:2a:8e:c8:31:23:51:93:f2:cb:24:56:37:18:b0: 1b:55:c3:ff:29:a7:63:e8:2a:fc:c0:1f:fe:c7:7b:42:60:1c: 65:9c:6a:5d:cc:ca:60:8a:02:7c:b4:4a:4a:ea:cc:a7:90:4e: 74:18:6d:af:82:40:5e:05:4b:96:40:19:17:30:09:ca:14:f5: 70:19:03:ed:15:ec:ad:82:24:ff:87:71:a3:64:89:68:66:ea: 7c:8e:cf:88:20:80:8f:c7:24:f1:cd:6d:0b:2e:2b:03:bb:1b: d7:c7:55:0b:a6:66:ff:bf:cd:28:63:11:10:67:58:45:f1:bd: e4:bd:bc:d3:15:a7:10:c2:a8:f0:85:84:76:da:1f:59:2f:45: 51:da:ad:ac:f5:b8:0b:65:98:db:35:4a:a5:de:6c:48:f4:09: 25:eb:6e:b9:41:a0:a0:13:e0:67:9e:38:91:be:c5:f1:55:77: 56:8b:d8:be:75:f9:d7:01:5e:62:f1:9a:d6:10:8d:ca:28:a8: a0:f3:c8:7b:84:74:50:50:44:1b:e4:62:50:a3:64:cd:e6:2d: 3f:b2:84:93:4c:cf:78:6b:fc:fd:1e:b0:23:3d:77:58:87:00: 0f:c2:8e:3a:56:84:4d:43:37:c1:eb:d3:3e:b5:53:85:86:81: 2c:0a:f2:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKIZ1vOvV19W1I39r0lmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey ODc2ODAwHhcNMjUxMjE4MDkwMDQwWhcNMjUxMjE5MDkwMDQwWjAzMTEwLwYDVQQD Eyg0NTIwZWRjOGI3YTJmNDFkZGI5NzI5ZTViZjJkNmFiZWNhNmYyNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN0QWwaPqIqR/WBUfc5VMm9d8oVC LwwgEEeAM/ZjC5NNBaqkBoF3ibonSEiYpAw71AcQ2ZAPhYySfwbBRVyHpeTkU7IS eYUHHqURw1WtQuTS7BBAwAGG2c1tpE6KOoE0jgSg9jN7+6XhAWAUWwXgJWdsVbE1 GDS4PsffvH/laFWBdbKQij9rqvVAlkuLYGZ/IO/Qh250WZC2IGMYKs607ANlK2AN cXmWkLR1utADvSzHgFlpjUKxaSRT04U2qDks8/P4xaJ9K4/MaCZMlIwFS0uIDHD1 orchFoW4y4z0Zn2609EYDQ3gO1GX7ZwGoccwr2BHImnCk0ql1zh+W9IB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUg7ci3ovQd25cp5b8tar7KbydUMB8GA1UdIwQY MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5 LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohr6aiqO yDEjUZPyyyRWNxiwG1XD/ymnY+gq/MAf/sd7QmAcZZxqXczKYIoCfLRKSurMp5BO dBhtr4JAXgVLlkAZFzAJyhT1cBkD7RXsrYIk/4dxo2SJaGbqfI7PiCCAj8ck8c1t Cy4rA7sb18dVC6Zm/7/NKGMREGdYRfG95L280xWnEMKo8IWEdtofWS9FUdqtrPW4 C2WY2zVKpd5sSPQJJetuuUGgoBPgZ544kb7F8VV3VovYvnX51wFeYvGa1hCNyiio oPPIe4R0UFBEG+RiUKNkzeYtP7KEk0zPeGv8/R6wIz13WIcAD8KOOlaETUM3wevT PrVThYaBLArydQ== -----END CERTIFICATE-----Generated at Thu Dec 18 15:27:19 2025 by rpki-client