This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json) Hash identifier: SVOBFApyRU6fiIqOOXAWgc3t8O4LzCSgUXGV5L4beg8= Subject key identifier: 9D:02:AD:5B:CD:6C:96:F2:93:5F:90:FC:6E:62:FE:C3:F7:D7:8B:F9 Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556 Certificate serial: 019B2B53DC609B11AFCBC6F178B10DD6334D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft Manifest number: 178D Signing time: Wed 17 Dec 2025 08:01:14 +0000 Manifest this update: Wed 17 Dec 2025 08:01:14 +0000 Manifest next update: Thu 18 Dec 2025 08:01:14 +0000 Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=) 2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=) 3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=) 4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: caVtnvIgLms+nkARuVUISlAEcrEtgATU+ovnzmTzG9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:dc:60:9b:11:af:cb:c6:f1:78:b1:0d:d6:33:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556 Validity Not Before: Dec 17 08:01:14 2025 GMT Not After : Dec 18 08:01:14 2025 GMT Subject: CN=9d02ad5bcd6c96f2935f90fc6e62fec3f7d78bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:7f:97:50:d9:a9:66:7a:fc:90:b5:cf:8f: 6c:7c:3e:61:0b:9a:94:11:e3:f2:c9:47:96:6a:67: ba:46:9e:d3:eb:2f:6b:b9:3e:59:7f:21:d5:b6:25: c9:5e:ef:2d:2a:d4:f2:8c:70:9e:86:00:ed:9a:b7: db:34:93:80:f3:b0:56:ad:96:d5:22:df:f0:08:a5: 93:6b:1b:74:e3:25:b1:07:72:db:70:9b:25:08:bb: ea:bf:d7:d1:34:e5:c3:06:ab:e7:c2:e8:f2:a3:d4: 9f:33:24:b4:51:b8:7f:25:7c:f7:4d:85:51:68:13: a0:a3:06:c2:41:b1:ac:46:47:1f:da:4a:21:46:36: c3:22:4d:c2:36:41:e6:4b:49:e0:9c:0e:e1:bd:25: a4:aa:75:f0:4e:5c:af:d1:c8:a7:ed:56:1d:c4:44: 4d:4e:5e:83:6d:3e:51:74:7c:b0:de:57:14:48:b8: bd:8d:be:2e:69:eb:30:af:40:37:b3:ae:fa:e0:43: fb:93:34:dc:72:29:dd:6b:eb:95:f5:85:b7:de:f5: 23:5b:d6:0a:18:c2:0d:8a:de:40:25:f6:81:e3:f4: 86:c3:e8:75:cd:56:21:d0:9a:84:41:61:5b:90:16: d5:64:e6:c4:77:0d:9e:db:f3:ed:5e:76:ee:5d:a1: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:02:AD:5B:CD:6C:96:F2:93:5F:90:FC:6E:62:FE:C3:F7:D7:8B:F9 X509v3 Authority Key Identifier: keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b1:f7:8f:f0:1b:07:a6:97:0a:d6:15:0a:27:3f:a6:b0:4a: 73:51:8b:82:2c:3a:19:07:03:7c:e4:60:d9:06:5f:33:9a:b8: 07:16:37:e7:f6:42:c5:08:59:b5:ec:ca:73:48:75:8a:75:ed: 67:81:65:71:cb:ff:d6:fc:c2:4a:eb:86:2f:9f:ed:5d:a3:00: f5:a1:dd:6e:08:07:02:76:d0:fd:e0:fb:04:03:bb:c8:62:c0: 15:3f:25:d2:9a:a6:6f:cb:b6:ba:95:6a:db:59:84:9e:09:ef: 55:24:0c:7d:5f:c2:85:05:7a:cb:60:2b:17:df:3a:4f:0c:90: 69:9a:87:db:05:31:60:51:29:e5:34:84:a2:9e:3a:0f:c6:41: 65:d0:fa:b8:b5:0e:be:ab:e8:8b:e6:ad:50:f9:da:1c:17:1e: 56:f5:32:85:fa:cb:6f:d2:43:e3:c0:f7:fc:19:9b:04:01:5e: 7e:e8:4f:c5:88:32:a9:6d:19:88:ec:a8:06:d9:94:13:04:b6: c5:4f:94:4b:8e:fe:e4:84:92:91:a5:1c:f8:9f:df:a9:60:bc: fc:e2:86:0c:a7:e3:04:4b:58:98:e9:17:15:35:2b:41:4d:0f: 98:1b:5b:88:51:37:08:b0:3a:18:46:ca:6f:e6:55:4c:16:0e: 6c:1b:82:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU9xgmxGvy8bxeLEN1jNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1 MzE1NTYwHhcNMjUxMjE3MDgwMTE0WhcNMjUxMjE4MDgwMTE0WjAzMTEwLwYDVQQD Eyg5ZDAyYWQ1YmNkNmM5NmYyOTM1ZjkwZmM2ZTYyZmVjM2Y3ZDc4YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ft/l1DZqWZ6/JC1z49sfD5hC5qU EePyyUeWame6Rp7T6y9ruT5ZfyHVtiXJXu8tKtTyjHCehgDtmrfbNJOA87BWrZbV It/wCKWTaxt04yWxB3LbcJslCLvqv9fRNOXDBqvnwujyo9SfMyS0Ubh/JXz3TYVR aBOgowbCQbGsRkcf2kohRjbDIk3CNkHmS0ngnA7hvSWkqnXwTlyv0cin7VYdxERN Tl6DbT5RdHyw3lcUSLi9jb4uaeswr0A3s6764EP7kzTccinda+uV9YW33vUjW9YK GMINit5AJfaB4/SGw+h1zVYh0JqEQWFbkBbVZObEdw2e2/PtXnbuXaGZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0CrVvNbJbyk1+Q/G5i/sP314v5MB8GA1UdIwQY MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7H3j/Ab B6aXCtYVCic/prBKc1GLgiw6GQcDfORg2QZfM5q4BxY35/ZCxQhZtezKc0h1inXt Z4Flccv/1vzCSuuGL5/tXaMA9aHdbggHAnbQ/eD7BAO7yGLAFT8l0pqmb8u2upVq 21mEngnvVSQMfV/ChQV6y2ArF986TwyQaZqH2wUxYFEp5TSEop46D8ZBZdD6uLUO vqvoi+atUPnaHBceVvUyhfrLb9JD48D3/BmbBAFefuhPxYgyqW0ZiOyoBtmUEwS2 xU+US47+5ISSkaUc+J/fqWC8/OKGDKfjBEtYmOkXFTUrQU0PmBtbiFE3CLA6GEbK b+ZVTBYObBuCGQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:30:32 2025 by rpki-client