This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json) Hash identifier: g0APFOb33Lu8mdMhe16Zr6HHhJjPC/qoBvYaM+44rOQ= Subject key identifier: 0E:51:3B:C7:A9:F1:75:A2:AB:72:F5:D1:13:8E:87:87:7D:C9:C4:80 Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806 Certificate serial: 019B3079C8C9FE253603116850B16AEB8F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 08:00:46 +0000 Manifest this update: Thu 18 Dec 2025 08:00:46 +0000 Manifest next update: Fri 19 Dec 2025 08:00:46 +0000 Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=) 2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: Wei1YWAZKomKEYGQkTkNZccWo12Xe8dqt0PodUqKRLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:c8:c9:fe:25:36:03:11:68:50:b1:6a:eb:8f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806 Validity Not Before: Dec 18 08:00:46 2025 GMT Not After : Dec 19 08:00:46 2025 GMT Subject: CN=0e513bc7a9f175a2ab72f5d1138e87877dc9c480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:e7:a6:60:97:f5:0c:8a:84:70:89:30:ee: cd:3b:2e:3c:2f:c0:fd:b5:56:3b:d2:2b:e6:53:15: 80:57:48:3e:75:b6:e0:8b:b6:3b:47:e4:6f:30:e8: d1:1d:51:28:64:83:ce:ba:5f:41:74:04:76:5b:c7: 80:99:ec:e5:75:9b:c6:85:54:2a:91:5f:cd:94:c8: da:00:7c:a6:a6:6e:92:1d:03:4e:ce:0a:c3:aa:8f: cb:1c:8c:dc:21:f4:9d:d8:14:d5:ef:b2:44:0f:3e: 4d:af:95:37:bd:61:92:3c:b1:98:21:5f:e9:b6:b4: 20:47:59:5c:b7:54:11:00:8a:32:e5:c1:59:e9:16: 40:5f:07:34:84:de:93:9d:b1:7c:69:ec:64:f3:48: c0:e6:ee:1f:6e:57:c2:9c:c4:8a:26:bc:74:6e:49: a8:1f:aa:cb:d7:38:82:98:15:ed:cd:21:14:54:73: c0:24:ec:0a:05:98:36:d8:f2:20:21:82:f6:83:9b: f8:90:5b:96:3e:5f:7f:29:ca:c5:3a:02:17:ea:3e: f2:38:f2:9e:54:6e:f2:88:7e:2a:5e:50:c9:50:b2: 0e:10:54:61:8e:ae:3f:b4:be:97:24:cf:5e:9c:af: 22:19:44:7a:2d:06:5b:66:ea:7e:4e:1f:f7:5b:17: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:3B:C7:A9:F1:75:A2:AB:72:F5:D1:13:8E:87:87:7D:C9:C4:80 X509v3 Authority Key Identifier: keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:67:49:c4:82:0c:82:f4:8a:15:27:b1:a6:e1:50:70:fa:42: 92:f1:71:14:a2:5c:78:7c:ee:e2:3d:d5:1e:20:08:7f:6d:38: 74:b7:13:24:7a:33:86:48:30:95:90:a8:3f:be:b2:91:c7:e4: af:7c:d0:ff:d4:d0:6e:ce:1f:4d:de:89:ea:fb:94:a7:a2:8b: 4b:91:6c:32:09:e8:4b:cb:c1:db:8a:c6:a1:51:b4:eb:e2:8a: 65:93:f1:56:9b:76:62:4d:36:11:c7:79:c6:0b:df:3e:89:8b: e0:6a:67:84:eb:d9:7b:90:68:10:04:48:4d:a0:b0:15:f7:f4: 7a:f2:f4:eb:67:01:75:9d:95:cf:eb:69:63:21:69:f3:ab:ff: c2:88:3f:76:12:37:c3:95:4f:ef:38:1b:fd:3a:73:6c:dd:09: d1:ff:ad:76:32:e2:3f:f2:49:47:bb:2e:db:ee:c4:36:8a:f9: c4:ed:67:d5:06:23:1f:32:05:48:5e:de:8e:16:a7:82:1a:63: 53:ce:5f:91:62:bf:38:81:c9:d2:56:ab:d4:7d:d8:04:82:45: b8:24:38:14:21:cd:e3:88:ec:d4:27:82:ea:3d:e0:7c:d6:7e: a3:bb:50:c6:8b:10:d8:68:33:e4:e6:63:95:23:47:75:7d:24: 75:1c:f9:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswecjJ/iU2AxFoULFq649pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzI5YWFlMDJiMzY2ZWQxYTAxYjUyYWMzM2FiZTc2MDU5 M2E4MDYwHhcNMjUxMjE4MDgwMDQ2WhcNMjUxMjE5MDgwMDQ2WjAzMTEwLwYDVQQD EygwZTUxM2JjN2E5ZjE3NWEyYWI3MmY1ZDExMzhlODc4NzdkYzljNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77npmCX9QyKhHCJMO7NOy48L8D9 tVY70ivmUxWAV0g+dbbgi7Y7R+RvMOjRHVEoZIPOul9BdAR2W8eAmezldZvGhVQq kV/NlMjaAHympm6SHQNOzgrDqo/LHIzcIfSd2BTV77JEDz5Nr5U3vWGSPLGYIV/p trQgR1lct1QRAIoy5cFZ6RZAXwc0hN6TnbF8aexk80jA5u4fblfCnMSKJrx0bkmo H6rL1ziCmBXtzSEUVHPAJOwKBZg22PIgIYL2g5v4kFuWPl9/KcrFOgIX6j7yOPKe VG7yiH4qXlDJULIOEFRhjq4/tL6XJM9enK8iGUR6LQZbZup+Th/3WxdS2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5RO8ep8XWiq3L10ROOh4d9ycSAMB8GA1UdIwQY MBaAFJYymq4Cs2btGgG1KsM6vnYFk6gGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMt YWU5M2RlZjUxMGMyLzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMtYWU5M2RlZjUxMGMy LzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2dJxIIM gvSKFSexpuFQcPpCkvFxFKJceHzu4j3VHiAIf204dLcTJHozhkgwlZCoP76ykcfk r3zQ/9TQbs4fTd6J6vuUp6KLS5FsMgnoS8vB24rGoVG06+KKZZPxVpt2Yk02Ecd5 xgvfPomL4GpnhOvZe5BoEARITaCwFff0evL062cBdZ2Vz+tpYyFp86v/wog/dhI3 w5VP7zgb/TpzbN0J0f+tdjLiP/JJR7su2+7ENor5xO1n1QYjHzIFSF7ejhanghpj U85fkWK/OIHJ0lar1H3YBIJFuCQ4FCHN44js1CeC6j3gfNZ+o7tQxosQ2Ggz5OZj lSNHdX0kdRz58A== -----END CERTIFICATE-----Generated at Thu Dec 18 16:11:54 2025 by rpki-client