This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json) Hash identifier: nGNF2KQcSkTNzXYZLbLHIXkjyz9nemJ+RaZh9ATqsWY= Subject key identifier: E5:57:23:C2:44:99:FB:50:FA:8C:50:E9:2C:33:79:BD:7A:FE:29:D1 Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6 Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6 Certificate serial: 019AF5097D3B12FEA87824EA544DE5C7815E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft Manifest number: 13FD Signing time: Sat 06 Dec 2025 19:00:31 +0000 Manifest this update: Sat 06 Dec 2025 19:00:31 +0000 Manifest next update: Sun 07 Dec 2025 19:00:31 +0000 Files and hashes: 1: GkmNRez_B8q96uaVOleqThEPoEs.roa (hash: aNQGHPeLClAe2Gmzc0jqm+MRXJ2xuLHjsljQiK1K4qw=) 2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: yM3WNMGaeueeBQDO/S+PrChQ373QOl+wTVH+mumH+Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:7d:3b:12:fe:a8:78:24:ea:54:4d:e5:c7:81:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6 Validity Not Before: Dec 6 19:00:31 2025 GMT Not After : Dec 7 19:00:31 2025 GMT Subject: CN=e55723c24499fb50fa8c50e92c3379bd7afe29d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:73:a3:3e:32:cb:7e:eb:12:dc:1b:5e:5a: 72:0c:89:18:eb:a1:b3:f9:1f:41:ec:73:ed:a1:6c: 4f:f4:57:2e:ef:8d:15:f0:6f:ef:cf:01:2f:7e:1d: c7:6c:9a:76:5b:0d:da:90:ad:ee:1c:54:c7:2b:d3: 34:3a:21:72:b0:51:15:e6:1e:92:fc:a2:3b:8f:da: 28:da:05:ce:83:f5:3e:89:e2:a9:56:ef:96:6a:5e: 82:78:91:e2:67:5f:12:a7:e0:ca:bb:58:db:f7:c0: b6:d4:34:a6:68:96:49:f3:e2:ca:f6:1d:6f:b3:af: 7d:c0:35:49:a8:98:f0:a4:65:e1:57:60:8f:22:af: dc:4d:ea:ef:1f:21:00:d6:5c:c2:94:4c:95:a9:27: 89:e8:31:77:61:ac:49:7a:67:80:7e:18:e3:8a:92: cf:5d:f1:0e:55:af:1f:30:cd:2a:04:c3:84:d9:96: 7e:ae:ed:dd:68:f3:6c:15:f2:b1:57:93:16:9e:22: bf:7f:9c:4d:dd:15:69:71:63:0d:09:d4:a8:91:6f: a4:8d:b2:a3:20:ed:ed:50:c6:4b:0f:06:91:18:b6: e5:71:17:67:da:09:0c:61:4e:99:13:46:c1:83:ac: 32:93:41:d3:ed:62:58:6a:ec:6a:59:f2:4f:c9:e5: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:57:23:C2:44:99:FB:50:FA:8C:50:E9:2C:33:79:BD:7A:FE:29:D1 X509v3 Authority Key Identifier: keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:d5:20:78:6c:11:32:48:62:51:8a:39:c3:30:15:17:df: ea:65:60:96:65:67:9d:91:dc:cf:bc:57:03:6d:50:42:61:73: c9:3a:86:a6:bc:d3:74:91:0b:f3:71:ab:fa:c6:6c:af:96:34: 21:f0:a8:a2:86:64:ef:df:4f:5d:a5:83:1b:fa:19:8f:d8:8c: 7f:84:73:8b:44:91:0e:c6:d1:0a:e2:e4:f2:68:7a:57:15:c1: 8d:ad:23:05:d7:66:09:d1:b0:2a:a5:85:70:95:fa:a9:96:90: 2b:b0:2a:99:a4:a5:85:81:05:1f:65:f6:07:9c:16:73:2a:34: de:f5:e7:92:1f:b4:ac:98:11:77:46:0a:8a:8f:ba:ea:af:b0: 0f:66:ba:dd:c9:9c:a2:05:b7:5e:ca:1a:58:c5:0e:6f:cc:fd: 52:26:a8:80:8b:d1:75:e1:4d:f2:37:1d:a5:6e:82:06:03:f8: 9a:47:00:73:ce:9a:e6:f5:60:c4:7e:6a:ed:4b:4a:53:1a:f9: 97:ad:e1:0c:90:64:11:3d:ab:61:ec:e3:7b:b6:0e:00:aa:18: 3e:bd:97:9d:f0:c8:bb:e6:98:03:c2:1b:58:af:d6:a7:9b:d8: bd:f2:48:e4:63:e5:68:91:bc:90:60:85:f1:54:6b:82:d5:0a: d7:d2:fb:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CX07Ev6oeCTqVE3lx4FeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZmE2YzQyOTkzMjFkYzVmYzkxZmM3OTYzYWE1MTQ4N2U0 YWY1ZTYwHhcNMjUxMjA2MTkwMDMxWhcNMjUxMjA3MTkwMDMxWjAzMTEwLwYDVQQD EyhlNTU3MjNjMjQ0OTlmYjUwZmE4YzUwZTkyYzMzNzliZDdhZmUyOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Zzoz4yy37rEtwbXlpyDIkY66Gz +R9B7HPtoWxP9Fcu740V8G/vzwEvfh3HbJp2Ww3akK3uHFTHK9M0OiFysFEV5h6S /KI7j9oo2gXOg/U+ieKpVu+Wal6CeJHiZ18Sp+DKu1jb98C21DSmaJZJ8+LK9h1v s699wDVJqJjwpGXhV2CPIq/cTervHyEA1lzClEyVqSeJ6DF3YaxJemeAfhjjipLP XfEOVa8fMM0qBMOE2ZZ+ru3daPNsFfKxV5MWniK/f5xN3RVpcWMNCdSokW+kjbKj IO3tUMZLDwaRGLblcRdn2gkMYU6ZE0bBg6wyk0HT7WJYauxqWfJPyeXGGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVXI8JEmftQ+oxQ6Swzeb16/inRMB8GA1UdIwQY MBaAFJT6bEKZMh3F/JH8eWOqUUh+SvXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80M2QyNTUtMjg0YS00NjhmLThiNmUt ZmIxZTlkYjBjMzg4LzEvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80M2QyNTUtMjg0YS00NjhmLThiNmUtZmIxZTlkYjBjMzg4 LzEvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVnVIHhs ETJIYlGKOcMwFRff6mVglmVnnZHcz7xXA21QQmFzyTqGprzTdJEL83Gr+sZsr5Y0 IfCoooZk799PXaWDG/oZj9iMf4Rzi0SRDsbRCuLk8mh6VxXBja0jBddmCdGwKqWF cJX6qZaQK7AqmaSlhYEFH2X2B5wWcyo03vXnkh+0rJgRd0YKio+66q+wD2a63cmc ogW3XsoaWMUOb8z9UiaogIvRdeFN8jcdpW6CBgP4mkcAc86a5vVgxH5q7UtKUxr5 l63hDJBkET2rYezje7YOAKoYPr2XnfDIu+aYA8IbWK/Wp5vYvfJI5GPlaJG8kGCF 8VRrgtUK19L7/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:44 2025 by rpki-client