This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json) Hash identifier: Eq2hoyUUJb+9C5w07x+6FH5SMs+zLbiUz+FoQ8WypiM= Subject key identifier: 76:DD:E4:8A:BC:73:92:43:89:1B:CD:09:A4:89:41:97:78:76:0E:CE Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50 Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450 Certificate serial: 019AF12D1C697A7092BFBCAEA08FC9F2C50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft Manifest number: 06E8 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: RtATYHImoNXKPwgLDYf6ddRPA/yA/AXX4r/z96Yg9Sc=) 2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1c:69:7a:70:92:bf:bc:ae:a0:8f:c9:f2:c5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450 Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=76dde48abc739243891bcd09a489419778760ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:e8:f1:65:58:6d:a2:d6:ab:a8:37:4d:a5: 1a:b6:ba:59:47:56:b1:7e:61:ec:e1:c4:a2:72:8e: 1c:1e:41:69:54:41:d1:26:7f:f2:63:d1:a7:99:72: 4c:51:af:11:bc:f5:1d:42:2e:00:eb:57:ef:92:bc: 43:e7:09:0a:f6:11:06:99:31:c8:ac:58:1b:27:d0: 40:04:bf:40:c0:8c:2d:57:76:d1:ee:b8:68:4e:6d: d6:32:55:00:20:57:fd:8a:58:70:43:39:a7:02:19: 4c:70:79:35:8d:4a:37:a0:df:2d:d7:4d:f0:bd:58: b0:b2:77:23:c2:ae:5a:d9:ed:b8:44:09:a1:bf:bf: 60:4c:c3:7e:f6:c0:69:e3:bc:76:f1:1e:33:f5:c7: f4:ef:0c:20:27:df:44:81:2a:e2:e4:f1:31:83:1b: aa:25:f5:d2:be:36:fc:25:95:84:b0:6b:a1:67:2b: d7:6a:58:71:e1:b8:65:6c:a3:c4:ef:d2:8a:b4:df: f2:48:07:d1:8c:f1:11:92:bc:6f:c3:e3:b2:ea:8d: 5e:b3:e0:cb:32:18:0c:99:1e:74:be:0b:4d:98:e5: 58:c4:b8:54:99:56:01:a1:9e:79:39:cf:4f:87:82: 1b:6f:30:da:4d:57:fa:5b:08:6a:d9:d9:0c:96:2a: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:E4:8A:BC:73:92:43:89:1B:CD:09:A4:89:41:97:78:76:0E:CE X509v3 Authority Key Identifier: keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bb:5d:01:56:31:db:5c:07:5e:69:68:0c:32:90:55:0a:1e: 1a:b3:8c:bd:48:93:60:8b:a1:18:48:9f:7d:d6:28:a4:90:5d: b9:54:2c:dc:b9:d7:a3:e6:c3:b5:59:f0:ea:23:c2:cb:2e:5a: b5:cb:8e:6c:e9:1a:b9:08:15:20:29:51:28:82:11:cc:28:d3: ca:cf:31:b7:cf:01:19:c1:0c:a2:d7:74:4f:34:7f:b4:a4:db: 1b:8c:c7:17:85:3b:e3:62:bd:50:5f:45:b1:ed:d0:24:26:4c: 45:ec:33:34:90:47:83:57:0e:69:ad:49:a8:a3:3c:88:a8:f3: 5a:37:fd:24:e1:68:c2:d5:b8:36:eb:54:04:25:84:9d:c7:dd: 8b:6e:19:49:02:99:e7:52:2c:79:e4:12:38:9d:83:a6:26:e9: 2d:c7:d0:47:78:f4:0f:9f:4a:78:d8:59:68:30:3c:0c:56:a6: c4:34:06:f9:5b:a4:f3:16:02:b3:40:de:5a:8c:aa:3d:72:fc: e0:3f:64:4c:18:67:aa:36:3a:c7:66:94:b9:46:9a:af:de:b5: fa:09:5a:e4:ef:aa:e8:4d:6a:4e:9f:78:ab:f8:15:da:62:6b: ec:d1:0b:f3:68:d9:71:af:f2:45:7c:a3:c4:5c:0b:5a:15:eb: 68:48:de:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRxpenCSv7yuoI/J8sUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOWU0OTk2MjA3M2Y5ZWZiNjZhNGIzMDM1MDZkYTYzNDE1 Njc0NTAwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD Eyg3NmRkZTQ4YWJjNzM5MjQzODkxYmNkMDlhNDg5NDE5Nzc4NzYwZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbo8WVYbaLWq6g3TaUatrpZR1ax fmHs4cSico4cHkFpVEHRJn/yY9GnmXJMUa8RvPUdQi4A61fvkrxD5wkK9hEGmTHI rFgbJ9BABL9AwIwtV3bR7rhoTm3WMlUAIFf9ilhwQzmnAhlMcHk1jUo3oN8t103w vViwsncjwq5a2e24RAmhv79gTMN+9sBp47x28R4z9cf07wwgJ99EgSri5PExgxuq JfXSvjb8JZWEsGuhZyvXalhx4bhlbKPE79KKtN/ySAfRjPERkrxvw+Oy6o1es+DL MhgMmR50vgtNmOVYxLhUmVYBoZ55Oc9Ph4IbbzDaTVf6Wwhq2dkMlirxAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbd5Iq8c5JDiRvNCaSJQZd4dg7OMB8GA1UdIwQY MBaAFCyeSZYgc/nvtmpLMDUG2mNBVnRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEt MjFjZDI5MGMwM2YzLzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEtMjFjZDI5MGMwM2Yz LzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLtdAVYx 21wHXmloDDKQVQoeGrOMvUiTYIuhGEiffdYopJBduVQs3LnXo+bDtVnw6iPCyy5a tcuObOkauQgVIClRKIIRzCjTys8xt88BGcEMotd0TzR/tKTbG4zHF4U742K9UF9F se3QJCZMRewzNJBHg1cOaa1JqKM8iKjzWjf9JOFowtW4NutUBCWEncfdi24ZSQKZ 51IseeQSOJ2DpibpLcfQR3j0D59KeNhZaDA8DFamxDQG+Vuk8xYCs0DeWoyqPXL8 4D9kTBhnqjY6x2aUuUaar961+gla5O+q6E1qTp94q/gV2mJr7NEL82jZca/yRXyj xFwLWhXraEjeeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:15 2025 by rpki-client