This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft File: Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json) Hash identifier: XODQ1slolidJwBkYOPuQDHJsSJx8UbjnseoDebCsqF0= Subject key identifier: 8C:A1:EF:26:20:DD:68:79:79:DE:C8:A2:C7:A4:1D:0D:D7:6D:D5:F1 Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Certificate serial: 019AF0F5F1245398AFCB2B3A026955D4C65D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft Manifest number: 068A Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=) 2: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (hash: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=) 3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: GXd8dXXxDM0r8SgVKpP1AlkbYm+gd0bPTMiYwljL4yw=) 4: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (hash: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f1:24:53:98:af:cb:2b:3a:02:69:55:d4:c6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=8ca1ef2620dd687979dec8a2c7a41d0dd76dd5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:df:9c:e5:78:71:9f:15:b7:83:7f:eb:d1: d0:be:8e:2a:01:58:75:54:32:c9:14:96:1b:ff:b9: fe:1e:f3:b6:fb:a9:94:4b:ff:05:2e:81:b1:76:ba: c3:75:15:d4:33:5b:97:05:4f:73:3b:94:6e:e2:41: de:1f:84:9b:b3:20:cf:19:f6:02:1c:24:4f:26:c5: 22:3b:a8:2b:fb:03:d5:9a:57:c3:ed:61:21:4e:d8: 85:db:56:cf:48:e1:d3:d1:76:f5:43:13:83:56:70: 7b:09:63:3a:a8:86:bc:2a:0b:08:d7:cc:d0:99:95: 0d:04:34:91:29:e0:be:ee:fd:ea:59:5e:83:e1:20: 36:c2:f1:c6:ec:ed:fd:1a:44:37:8a:95:1a:b7:57: 51:9d:1d:1f:4d:0d:55:bd:a2:68:ce:f8:22:82:97: 0d:61:47:78:6c:fa:14:1e:58:95:16:50:60:0c:9f: b8:95:c5:fe:de:db:c9:9b:1e:71:b7:38:cf:4f:dd: 71:b3:e7:6d:e7:39:c1:bd:a0:41:3a:5c:65:41:e5: 97:0c:e8:08:c3:76:46:a4:bc:de:c9:c0:6f:99:f3: b5:af:78:db:e0:86:56:88:dd:7b:ea:de:04:5a:21: 4d:b5:b1:1e:4a:85:cf:d4:96:0d:e3:38:ef:a8:2a: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A1:EF:26:20:DD:68:79:79:DE:C8:A2:C7:A4:1D:0D:D7:6D:D5:F1 X509v3 Authority Key Identifier: keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:2d:fe:b2:1d:8d:49:a8:1b:6c:9c:bc:69:e6:0f:7a:41: e6:7f:dd:41:45:d5:a2:87:30:6f:16:23:df:23:d4:e6:44:87: 7e:64:e2:ad:ea:82:8a:43:a9:95:e8:a4:9f:e7:35:af:ea:ec: 9b:d1:95:f4:e8:17:20:af:5b:de:89:22:7c:da:65:85:c6:6c: 44:a8:c7:e4:37:02:98:88:04:a3:32:a3:c0:9f:d2:4e:a1:54: 92:ce:74:74:58:9e:fe:aa:01:60:95:ee:5d:66:4d:9c:52:87: 12:8e:a1:dd:6c:c7:2d:ae:3e:db:b0:4d:80:e1:48:3a:f8:ae: 13:d9:b4:72:40:43:98:a1:f3:76:0b:5f:20:e5:fa:8c:ca:be: f4:9a:b5:6e:a7:0b:f4:2f:3d:ef:31:94:58:50:46:bb:08:50: c5:87:fe:3b:03:83:e3:40:e9:08:d0:de:87:95:30:fe:d1:91: db:16:a1:f7:39:67:b2:9a:57:65:77:99:f8:93:87:24:c1:fc: 68:ce:8b:f7:6e:e3:ca:ac:f3:d9:22:ad:73:cc:b5:bc:01:08: 8b:2c:bc:c7:e1:50:4a:4c:3a:c2:39:39:c1:ce:ad:c3:76:3c: 02:d5:c1:55:1c:f9:1a:a5:90:63:67:96:6d:0f:2a:65:f8:29: c4:e9:6c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fEkU5ivyys6AmlV1MZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGVjOWEyMDk2ZGVjMTAzYmFlMmQ3YzM3OTZlMGQ0NzA4 NWMyMDIwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD Eyg4Y2ExZWYyNjIwZGQ2ODc5NzlkZWM4YTJjN2E0MWQwZGQ3NmRkNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBffnOV4cZ8Vt4N/69HQvo4qAVh1 VDLJFJYb/7n+HvO2+6mUS/8FLoGxdrrDdRXUM1uXBU9zO5Ru4kHeH4SbsyDPGfYC HCRPJsUiO6gr+wPVmlfD7WEhTtiF21bPSOHT0Xb1QxODVnB7CWM6qIa8KgsI18zQ mZUNBDSRKeC+7v3qWV6D4SA2wvHG7O39GkQ3ipUat1dRnR0fTQ1VvaJozvgigpcN YUd4bPoUHliVFlBgDJ+4lcX+3tvJmx5xtzjPT91xs+dt5znBvaBBOlxlQeWXDOgI w3ZGpLzeycBvmfO1r3jb4IZWiN176t4EWiFNtbEeSoXP1JYN4zjvqCpqmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyh7yYg3Wh5ed7IosekHQ3XbdXxMB8GA1UdIwQY MBaAFC7eyaIJbewQO64tfDeW4NRwhcICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEt MDU3ZDdhZjBhZWY0LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEtMDU3ZDdhZjBhZWY0 LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceMt/rId jUmoG2ycvGnmD3pB5n/dQUXVoocwbxYj3yPU5kSHfmTireqCikOpleikn+c1r+rs m9GV9OgXIK9b3okifNplhcZsRKjH5DcCmIgEozKjwJ/STqFUks50dFie/qoBYJXu XWZNnFKHEo6h3WzHLa4+27BNgOFIOviuE9m0ckBDmKHzdgtfIOX6jMq+9Jq1bqcL 9C897zGUWFBGuwhQxYf+OwOD40DpCNDeh5Uw/tGR2xah9zlnsppXZXeZ+JOHJMH8 aM6L927jyqzz2SKtc8y1vAEIiyy8x+FQSkw6wjk5wc6tw3Y8AtXBVRz5GqWQY2eW bQ8qZfgpxOlsxA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:27 2025 by rpki-client