This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json) Hash identifier: 27pmOBK3OvEJvP/1+hn4MsvBKO2zqBVd0QCzyD1ufvU= Subject key identifier: 70:8A:36:C5:05:F5:3C:7F:5C:0D:9F:B1:19:44:7A:C8:34:C7:12:0E Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806 Certificate serial: 019AF2AD64ADB17638B06BA83E80CFE9C3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=) 2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: MrXL0yGbnh54VlkNp/uBhSsTUYWYKXNEvP0Z/VKGhWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:64:ad:b1:76:38:b0:6b:a8:3e:80:cf:e9:c3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806 Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=708a36c505f53c7f5c0d9fb119447ac834c7120e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:f6:e2:c2:ab:25:c7:1d:dd:27:fa:5d:44: fb:ce:14:e4:63:79:90:a8:06:f3:fe:58:ed:79:e3: 43:a4:03:3c:08:bb:88:94:60:72:2e:93:52:75:2d: 87:b5:61:b1:19:13:82:13:6d:1c:2f:52:51:fc:0c: 45:99:0c:36:2c:26:31:00:f7:ed:56:de:e0:64:cd: d9:89:4e:8a:4a:e8:81:00:cf:2d:5c:49:df:9e:b6: 30:ce:60:69:96:f0:c8:d8:17:71:d9:14:ca:04:13: d3:b8:f3:f7:f0:ff:3d:46:e2:91:cc:e2:c1:61:cd: 85:1c:fc:ba:b0:dc:4b:22:5b:e8:04:7e:0c:47:2e: 34:d8:a8:24:bc:81:5a:fb:73:91:8f:60:20:f3:71: c3:5d:55:26:be:96:20:86:5d:88:26:fe:ee:90:70: 80:0e:1e:3d:20:ea:a1:fa:67:55:fa:15:73:fc:05: 9e:13:0b:1d:bb:bf:3b:d9:9a:66:ae:2b:79:71:01: 6b:b7:98:a0:4c:25:f0:2f:9f:c2:6d:26:ae:29:fb: d0:ed:d8:3f:6f:d9:3f:fd:8e:0d:55:bc:47:48:de: c5:2c:32:e4:96:6c:30:70:25:e0:57:d3:00:03:cd: 63:d5:d9:3a:09:f7:49:5c:d1:33:c0:fe:99:31:8e: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:36:C5:05:F5:3C:7F:5C:0D:9F:B1:19:44:7A:C8:34:C7:12:0E X509v3 Authority Key Identifier: keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:10:06:94:ce:ad:e2:09:1e:d0:d6:e6:02:b2:e0:d3:dd:f7: c3:07:f7:28:42:bd:cf:1d:4b:41:ec:fb:83:f1:7a:8d:ae:fc: e3:86:90:6e:e2:c8:f1:b4:8c:46:a6:1a:4e:df:08:39:43:71: d3:db:8a:45:3e:f4:31:9c:2c:c1:f4:ba:54:2f:7e:c5:72:c6: e0:75:07:c1:08:71:17:85:c2:e4:08:60:ec:57:55:c6:42:ef: 40:d8:ee:42:78:b9:51:6d:20:74:ce:9a:5f:4c:2c:ae:63:72: c6:d5:0d:6e:80:f4:fb:07:d2:9c:d1:ce:88:99:44:1b:51:62: 97:84:11:72:8d:61:45:16:6d:71:89:11:ec:a0:da:e0:1c:5b: 87:2e:3b:5e:1f:3b:0d:c6:0a:71:71:e4:13:81:5a:60:2b:73: 45:ff:b7:5e:48:72:8a:83:9b:5f:23:cf:bf:83:c9:53:3c:62: 11:d5:17:b4:32:42:68:e5:18:50:1f:bc:0a:5d:ef:51:c9:bf: 7a:f2:cb:5d:80:ee:25:9b:b1:2d:19:87:74:62:e5:40:72:ff: e7:7a:e4:5a:57:5c:38:f7:d4:90:8c:a1:8f:87:ca:2c:c2:af: ac:f7:f7:58:08:b7:d5:5e:f2:d5:12:12:9d:f8:1b:9b:1a:43: cf:f9:1c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWStsXY4sGuoPoDP6cPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzI5YWFlMDJiMzY2ZWQxYTAxYjUyYWMzM2FiZTc2MDU5 M2E4MDYwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD Eyg3MDhhMzZjNTA1ZjUzYzdmNWMwZDlmYjExOTQ0N2FjODM0YzcxMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF/24sKrJccd3Sf6XUT7zhTkY3mQ qAbz/ljteeNDpAM8CLuIlGByLpNSdS2HtWGxGROCE20cL1JR/AxFmQw2LCYxAPft Vt7gZM3ZiU6KSuiBAM8tXEnfnrYwzmBplvDI2Bdx2RTKBBPTuPP38P89RuKRzOLB Yc2FHPy6sNxLIlvoBH4MRy402KgkvIFa+3ORj2Ag83HDXVUmvpYghl2IJv7ukHCA Dh49IOqh+mdV+hVz/AWeEwsdu7872Zpmrit5cQFrt5igTCXwL5/CbSauKfvQ7dg/ b9k//Y4NVbxHSN7FLDLklmwwcCXgV9MAA81j1dk6CfdJXNEzwP6ZMY4PoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCKNsUF9Tx/XA2fsRlEesg0xxIOMB8GA1UdIwQY MBaAFJYymq4Cs2btGgG1KsM6vnYFk6gGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMt YWU5M2RlZjUxMGMyLzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMtYWU5M2RlZjUxMGMy LzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRAGlM6t 4gke0NbmArLg0933wwf3KEK9zx1LQez7g/F6ja7844aQbuLI8bSMRqYaTt8IOUNx 09uKRT70MZwswfS6VC9+xXLG4HUHwQhxF4XC5Ahg7FdVxkLvQNjuQni5UW0gdM6a X0wsrmNyxtUNboD0+wfSnNHOiJlEG1Fil4QRco1hRRZtcYkR7KDa4Bxbhy47Xh87 DcYKcXHkE4FaYCtzRf+3XkhyioObXyPPv4PJUzxiEdUXtDJCaOUYUB+8Cl3vUcm/ evLLXYDuJZuxLRmHdGLlQHL/53rkWldcOPfUkIyhj4fKLMKvrPf3WAi31V7y1RIS nfgbmxpDz/kcAA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:02 2025 by rpki-client