This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json) Hash identifier: ONkkSm5A4T6j+mUS4gxxCJuk4MSSK92CUa9cfEtRC3A= Subject key identifier: 7A:99:30:0E:EA:22:8A:71:96:CE:10:3C:F1:11:B5:73:76:91:08:B5 Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556 Certificate serial: 019AF5411CC56F9895E8D951FE468E426EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 20:01:16 +0000 Manifest this update: Sat 06 Dec 2025 20:01:16 +0000 Manifest next update: Sun 07 Dec 2025 20:01:16 +0000 Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=) 2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=) 3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=) 4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: TpgyvLLUV4+xkurBL7ZXKzdVQDSVav0qL1XjYl5wn6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:1c:c5:6f:98:95:e8:d9:51:fe:46:8e:42:6e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556 Validity Not Before: Dec 6 20:01:16 2025 GMT Not After : Dec 7 20:01:16 2025 GMT Subject: CN=7a99300eea228a7196ce103cf111b573769108b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:47:fd:fc:f1:41:91:d3:a4:65:17:3f:b1: 58:fb:5d:b6:79:3a:0e:ca:51:53:1a:05:bf:f2:dd: 3c:51:08:97:ca:14:93:51:2c:14:ae:0d:45:ba:7a: 55:27:8f:cf:ae:b1:2b:17:31:73:66:47:07:aa:70: e4:a1:bd:db:17:a0:df:97:2d:c8:76:91:ab:e0:38: ee:7b:28:d6:48:b4:e9:5f:52:22:34:33:33:f9:6b: b8:fb:6c:41:51:88:9f:56:1e:73:89:63:4e:f4:63: 7e:8c:5d:d5:53:68:f3:3a:5a:36:7d:23:d2:65:a6: 48:3d:03:7c:a8:99:aa:02:3d:99:38:5b:56:b6:47: 04:e5:de:a5:28:b4:9d:7c:e0:a7:9a:1a:8b:10:15: a4:59:a2:cd:2f:19:e9:3a:16:84:a5:68:7c:f8:a6: 42:c7:ea:07:51:94:18:b5:6c:4b:a2:19:38:93:e4: fe:4d:29:5f:4d:b8:d9:07:95:db:d8:5e:40:12:fc: 3f:bc:dc:68:28:0e:3d:db:eb:88:c0:c4:ff:8a:e4: d2:db:94:94:5a:05:72:e3:46:b6:bd:d1:0f:d6:c6: b8:60:44:d2:00:2c:3a:2b:d8:e3:c2:d4:be:87:3c: c8:0a:bb:b2:90:da:b0:bd:a6:d5:5a:7b:24:05:49: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:99:30:0E:EA:22:8A:71:96:CE:10:3C:F1:11:B5:73:76:91:08:B5 X509v3 Authority Key Identifier: keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b0:db:cf:71:5b:99:72:fa:10:60:b5:f0:6d:33:f9:0f:c8: 87:c6:e0:f1:73:72:5f:5a:ca:0e:e5:0d:5d:2b:60:a2:6c:92: b5:f0:e5:88:b7:cb:ca:2b:02:a0:85:88:9f:f4:63:f0:67:85: 54:ef:23:d1:d9:3e:97:eb:12:dd:6a:a4:18:64:be:2d:78:66: 6f:e7:f0:4c:c6:d3:05:f3:a4:13:07:30:e6:83:8b:ef:85:02: 2d:45:1c:7a:2b:57:3f:cf:a7:50:9b:62:f6:76:a0:fd:45:ae: 40:8a:f8:19:cc:42:86:ad:fe:62:85:f5:16:15:c7:33:d2:2f: 9d:66:89:fb:b2:3a:44:71:dd:01:dc:e5:3f:47:73:7b:27:3e: ca:14:99:8f:d4:a3:87:65:71:09:47:7d:3b:f9:7b:7c:9c:e6: a3:3f:30:64:de:3f:5d:e4:b4:f5:d8:ec:8e:26:34:b5:2e:59: 84:a7:58:8c:12:16:a1:b0:87:58:f7:bc:39:78:7b:53:a8:11: 30:af:1f:bd:2f:ff:7a:f5:d9:23:07:71:6a:c0:bd:98:42:8a: 2e:ed:09:52:16:43:9e:43:e8:6a:3d:c9:b8:64:8c:12:bb:39: 91:52:b9:88:7b:5c:b6:db:64:35:a4:62:f2:c3:5b:89:78:24: e8:f7:67:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRzFb5iV6NlR/kaOQm79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1 MzE1NTYwHhcNMjUxMjA2MjAwMTE2WhcNMjUxMjA3MjAwMTE2WjAzMTEwLwYDVQQD Eyg3YTk5MzAwZWVhMjI4YTcxOTZjZTEwM2NmMTExYjU3Mzc2OTEwOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tNH/fzxQZHTpGUXP7FY+122eToO ylFTGgW/8t08UQiXyhSTUSwUrg1FunpVJ4/PrrErFzFzZkcHqnDkob3bF6Dfly3I dpGr4DjueyjWSLTpX1IiNDMz+Wu4+2xBUYifVh5ziWNO9GN+jF3VU2jzOlo2fSPS ZaZIPQN8qJmqAj2ZOFtWtkcE5d6lKLSdfOCnmhqLEBWkWaLNLxnpOhaEpWh8+KZC x+oHUZQYtWxLohk4k+T+TSlfTbjZB5Xb2F5AEvw/vNxoKA492+uIwMT/iuTS25SU WgVy40a2vdEP1sa4YETSACw6K9jjwtS+hzzICruykNqwvabVWnskBUmlKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqZMA7qIopxls4QPPERtXN2kQi1MB8GA1UdIwQY MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrDbz3Fb mXL6EGC18G0z+Q/Ih8bg8XNyX1rKDuUNXStgomyStfDliLfLyisCoIWIn/Rj8GeF VO8j0dk+l+sS3WqkGGS+LXhmb+fwTMbTBfOkEwcw5oOL74UCLUUceitXP8+nUJti 9nag/UWuQIr4GcxChq3+YoX1FhXHM9IvnWaJ+7I6RHHdAdzlP0dzeyc+yhSZj9Sj h2VxCUd9O/l7fJzmoz8wZN4/XeS09djsjiY0tS5ZhKdYjBIWobCHWPe8OXh7U6gR MK8fvS//evXZIwdxasC9mEKKLu0JUhZDnkPoaj3JuGSMErs5kVK5iHtctttkNaRi 8sNbiXgk6Pdn9w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:46 2025 by rpki-client