This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json) Hash identifier: b+mmqQYTStQsZDGMSbDQC1Qk225dsEJgUj+WUzm/bqg= Subject key identifier: 4D:8B:C2:5C:04:8B:60:7D:56:30:6B:83:9F:3C:FF:16:52:68:DC:30 Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2 Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2 Certificate serial: 019AF208F6C95682F39C0C4A24A123CD1974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=) 2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: cG1IYE1TEU8VilMxnTXUtMefmqChbtiA/Yn5gHSBh5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f6:c9:56:82:f3:9c:0c:4a:24:a1:23:cd:19:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=4d8bc25c048b607d56306b839f3cff165268dc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:ea:57:91:58:cb:c3:ed:9d:53:fd:5b:0c: 71:6f:29:3b:b5:b5:93:fb:a5:8e:ba:48:dd:2c:e6: 21:a0:2b:95:60:b4:9c:76:7e:4b:0e:16:65:74:0c: b0:e9:a1:84:b2:90:d8:50:2e:36:8e:0c:f0:e0:6d: a7:e3:e9:c7:b7:2d:f0:cd:a5:a3:93:ef:96:f3:b7: e3:4f:65:ba:e6:36:17:11:35:51:3e:c8:45:52:57: ca:5e:2e:cf:3b:d6:e1:5e:fc:75:cd:6d:2f:8a:e1: 9a:e9:b1:2c:b7:98:4f:80:b5:f0:8f:56:5f:d0:58: 22:13:5d:d0:60:25:a7:fb:52:0b:42:32:3c:b9:bf: 0f:1a:14:d8:b4:9a:f8:15:a2:f6:d3:93:82:94:5a: 81:74:3d:a6:27:6a:cf:9f:e7:97:1d:6f:4c:a1:c0: f3:d1:2e:20:27:f7:b3:39:2f:48:09:e5:e4:38:69: 92:6d:7c:25:24:07:44:f3:1b:06:64:b4:c8:f5:0f: 1a:8a:d4:ad:91:c1:6b:de:93:87:9f:66:ca:32:d4: 78:23:64:e0:b6:94:d3:20:1c:86:61:5a:5b:bb:55: d0:00:fd:00:f3:e6:cb:2d:d0:b3:fb:18:ff:94:7f: a8:4e:54:01:a4:81:c0:09:a0:e2:f7:f8:b7:95:61: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8B:C2:5C:04:8B:60:7D:56:30:6B:83:9F:3C:FF:16:52:68:DC:30 X509v3 Authority Key Identifier: keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:0f:ed:0a:f1:cd:62:21:a9:a5:34:bb:bc:db:ef:83:35: ea:e8:bc:6d:22:1a:8a:a5:59:3a:8b:78:9c:c9:25:67:7d:b8: 67:fc:f0:d7:03:f5:d9:3a:3b:51:ab:bd:b8:7b:65:62:f7:f7: 62:e2:6e:7e:13:fe:25:cb:c7:5c:4b:b6:ec:bc:df:ef:00:52: 06:a7:f7:b9:8a:c6:22:53:ab:ee:f2:a3:b8:96:ee:6e:fa:b4: d8:4c:5e:dd:5c:8e:01:ba:e5:d1:9e:4f:a5:ec:f6:48:ca:e8: e9:23:63:fc:6a:71:fb:4e:3e:d7:39:db:f2:59:b8:de:4b:af: d5:97:58:3f:1c:c1:f3:b7:42:5a:77:17:8e:c2:90:8d:4e:07: a9:9c:89:25:fe:8b:b9:be:a8:03:59:76:7c:3f:2c:e4:e8:5c: b6:27:b3:07:5a:86:b2:7e:fa:33:03:d4:0b:ee:58:fc:1b:74: 0f:13:15:55:3b:f5:ef:1b:aa:87:80:c9:75:95:69:58:ca:4f: 15:75:7d:3b:69:de:ed:93:89:d3:a4:74:2d:4a:29:37:0a:21: fe:9d:1f:12:84:11:be:9a:26:a1:c3:64:62:84:92:05:b3:7f: 5b:be:77:71:f6:aa:df:ae:b6:8e:d7:d5:a9:52:d4:f7:18:b1: 1f:f6:0f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPbJVoLznAxKJKEjzRl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzJiNGYyYjQ3YmJlMTkzNGEyMjQwODFjYzM3ZjE3MGQ3 MjQ4ZDIwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD Eyg0ZDhiYzI1YzA0OGI2MDdkNTYzMDZiODM5ZjNjZmYxNjUyNjhkYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPXqV5FYy8PtnVP9Wwxxbyk7tbWT +6WOukjdLOYhoCuVYLScdn5LDhZldAyw6aGEspDYUC42jgzw4G2n4+nHty3wzaWj k++W87fjT2W65jYXETVRPshFUlfKXi7PO9bhXvx1zW0viuGa6bEst5hPgLXwj1Zf 0FgiE13QYCWn+1ILQjI8ub8PGhTYtJr4FaL205OClFqBdD2mJ2rPn+eXHW9MocDz 0S4gJ/ezOS9ICeXkOGmSbXwlJAdE8xsGZLTI9Q8aitStkcFr3pOHn2bKMtR4I2Tg tpTTIByGYVpbu1XQAP0A8+bLLdCz+xj/lH+oTlQBpIHACaDi9/i3lWEFMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2LwlwEi2B9VjBrg588/xZSaNwwMB8GA1UdIwQY MBaAFJUytPK0e74ZNKIkCBzDfxcNckjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjct NDIwNDBkZjNiNmFmLzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjctNDIwNDBkZjNiNmFm LzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNQP7Qrx zWIhqaU0u7zb74M16ui8bSIaiqVZOot4nMklZ324Z/zw1wP12To7Uau9uHtlYvf3 YuJufhP+JcvHXEu27Lzf7wBSBqf3uYrGIlOr7vKjuJbubvq02Exe3VyOAbrl0Z5P pez2SMro6SNj/Gpx+04+1znb8lm43kuv1ZdYPxzB87dCWncXjsKQjU4HqZyJJf6L ub6oA1l2fD8s5OhctiezB1qGsn76MwPUC+5Y/Bt0DxMVVTv17xuqh4DJdZVpWMpP FXV9O2ne7ZOJ06R0LUopNwoh/p0fEoQRvpomocNkYoSSBbN/W753cfaq3662jtfV qVLU9xixH/YP1w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:48 2025 by rpki-client