This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json) Hash identifier: EGJRIE/wy8iYj+2D9CkoR5yPF0XV6q4G/+kx50+N7eE= Subject key identifier: 13:76:BF:CA:56:B9:A9:F4:BA:0E:BD:B4:68:15:F2:35:F4:A6:03:8D Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2 Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2 Certificate serial: 019AF42DF25603B21C3F1558C7A79E0619F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft Manifest number: 0100 Signing time: Sat 06 Dec 2025 15:00:43 +0000 Manifest this update: Sat 06 Dec 2025 15:00:43 +0000 Manifest next update: Sun 07 Dec 2025 15:00:43 +0000 Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: GsCqsgsALEr+OzxRX4k/LlLH+BC43ks6Gi26ReJnKRA=) 2: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (hash: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f2:56:03:b2:1c:3f:15:58:c7:a7:9e:06:19:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2 Validity Not Before: Dec 6 15:00:43 2025 GMT Not After : Dec 7 15:00:43 2025 GMT Subject: CN=1376bfca56b9a9f4ba0ebdb46815f235f4a6038d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:c4:93:95:4d:35:32:06:a4:43:f6:d2:2c: 78:e8:c4:8b:d0:ed:af:ac:ed:31:fc:a0:d1:0b:69: 27:93:a0:b2:f1:c0:25:85:cd:c9:79:d5:b5:74:fc: 50:a2:45:5e:75:de:32:f2:65:fb:8e:2d:2b:5b:33: 3e:7d:bd:35:f7:59:82:c1:bc:af:a1:00:2e:56:96: c3:f5:58:a3:1f:79:7c:07:bf:d7:1c:68:ac:89:2c: e4:24:6a:92:55:4e:b1:53:a8:03:0a:f2:8a:f9:87: a7:a1:ae:4a:49:c0:f4:b3:cc:55:6b:91:88:52:cd: 68:b9:69:f3:b0:65:d6:13:b9:6a:2f:86:db:87:07: 3e:86:06:be:ba:e3:0b:fc:7e:47:88:5f:1d:f8:16: 56:b4:b9:4f:f3:f3:55:86:2f:24:b2:40:e5:89:ed: f7:12:36:97:3c:78:73:8b:14:1a:90:2e:00:e7:c9: 0d:d0:81:5e:8e:a8:c9:d1:d0:2b:95:6b:1a:3a:b9: e8:77:6d:17:eb:67:a8:b6:95:2b:3a:87:38:25:8a: ee:a0:c4:8a:99:74:f7:1a:80:42:00:e3:7c:8f:a7: bc:8a:45:6b:62:03:44:76:41:fd:5d:cd:20:95:66: 9a:e1:f9:be:52:af:21:16:8f:4a:5e:fa:0c:0a:ba: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:BF:CA:56:B9:A9:F4:BA:0E:BD:B4:68:15:F2:35:F4:A6:03:8D X509v3 Authority Key Identifier: keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b5:02:96:0d:05:16:31:5a:07:d7:7e:0f:89:cd:f1:22:bf: 9c:e3:56:e6:20:02:bf:7b:83:31:52:fe:b2:e4:21:7a:98:73: da:5a:ad:74:30:5b:0f:2f:a6:d7:1f:b8:a0:ec:50:f5:f4:1e: 75:ab:dc:56:61:d8:44:1d:f7:8e:8f:86:83:d3:17:57:58:97: f6:b8:b2:24:21:d8:89:0a:8b:04:6b:0e:46:af:8a:7a:53:5c: b3:c0:46:2f:90:bd:23:6f:a7:b2:8d:1f:bd:2b:a1:41:a1:9b: 3e:b7:92:db:e3:0e:7a:08:f2:14:7f:7e:53:b2:63:b5:da:d6: 4c:d4:1c:c7:15:f1:de:13:b0:e8:55:b3:12:26:f5:74:37:d3: 15:7b:cf:1d:15:2a:fc:77:39:3e:ad:40:5e:5e:ec:71:a3:66: 4e:0c:fa:7e:fb:b3:5f:b7:97:64:f9:8f:aa:49:f3:7a:cf:74: 92:61:48:8b:80:83:27:b0:d8:56:99:b5:1f:47:b5:d7:1f:21: e1:0d:af:b3:af:23:bf:ac:75:ec:74:a8:2e:23:e2:a9:8a:6d: 3f:11:97:29:e7:9e:6e:36:f2:fd:bc:40:86:de:d4:9e:c2:15: 28:7e:86:70:ff:d2:ce:ec:46:70:52:2e:73:d8:25:39:18:31: 77:d9:c4:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfJWA7IcPxVYx6eeBhnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZDQwODdhMzcyN2YwNDdlMDk2ZGI2OTJlMDAzZDZjMDEx M2YxZTIwHhcNMjUxMjA2MTUwMDQzWhcNMjUxMjA3MTUwMDQzWjAzMTEwLwYDVQQD EygxMzc2YmZjYTU2YjlhOWY0YmEwZWJkYjQ2ODE1ZjIzNWY0YTYwMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkzEk5VNNTIGpEP20ix46MSL0O2v rO0x/KDRC2knk6Cy8cAlhc3JedW1dPxQokVedd4y8mX7ji0rWzM+fb0191mCwbyv oQAuVpbD9VijH3l8B7/XHGisiSzkJGqSVU6xU6gDCvKK+Yenoa5KScD0s8xVa5GI Us1ouWnzsGXWE7lqL4bbhwc+hga+uuML/H5HiF8d+BZWtLlP8/NVhi8kskDlie33 EjaXPHhzixQakC4A58kN0IFejqjJ0dArlWsaOrnod20X62eotpUrOoc4JYruoMSK mXT3GoBCAON8j6e8ikVrYgNEdkH9Xc0glWaa4fm+Uq8hFo9KXvoMCro1mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBN2v8pWuan0ug69tGgV8jX0pgONMB8GA1UdIwQY MBaAFC7UCHo3J/BH4JbbaS4APWwBE/HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzIt Y2M4NGViNDJhYzM5LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzItY2M4NGViNDJhYzM5 LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerUClg0F FjFaB9d+D4nN8SK/nONW5iACv3uDMVL+suQhephz2lqtdDBbDy+m1x+4oOxQ9fQe davcVmHYRB33jo+Gg9MXV1iX9riyJCHYiQqLBGsORq+KelNcs8BGL5C9I2+nso0f vSuhQaGbPreS2+MOegjyFH9+U7JjtdrWTNQcxxXx3hOw6FWzEib1dDfTFXvPHRUq /Hc5Pq1AXl7scaNmTgz6fvuzX7eXZPmPqknzes90kmFIi4CDJ7DYVpm1H0e11x8h 4Q2vs68jv6x17HSoLiPiqYptPxGXKeeebjby/bxAht7UnsIVKH6GcP/SzuxGcFIu c9glORgxd9nESA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:52 2025 by rpki-client