This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json) Hash identifier: vMPcc4v4NSf4tbtTmee7mGlqZchAWTnfeyp4B42zuFI= Subject key identifier: 70:BF:07:88:B0:2D:2E:6F:4C:58:09:76:C5:95:02:BC:6F:2E:1F:BF Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52 Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52 Certificate serial: 019AF3C06BD6340A9AD5F05C807F3C2DF537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=) 2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: qXCuHawjP7cy/XsJd0+ebCC6NcwQoSvGIab/d6xsvCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6b:d6:34:0a:9a:d5:f0:5c:80:7f:3c:2d:f5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=70bf0788b02d2e6f4c580976c59502bc6f2e1fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:92:30:d2:e0:0c:06:3e:21:d9:be:a1:76:af: 8c:5d:75:42:77:e7:ea:48:e4:25:06:52:12:94:6e: b8:cd:98:6a:01:df:5f:a8:c9:f2:8c:88:2c:71:fd: 68:71:b5:3a:15:99:40:42:c4:61:46:ae:dc:31:20: 27:64:c5:5d:8b:00:71:19:a8:ec:20:0e:2c:9c:87: 83:b8:bf:73:d8:6d:f9:e7:e9:fa:0e:d7:05:f0:3d: b0:8a:6c:08:51:b3:59:8a:13:42:06:88:79:29:1b: 50:11:c3:96:7a:e5:73:48:76:f7:5d:83:71:28:20: 65:a4:95:74:b3:d8:93:25:21:b9:da:d7:fa:0a:cf: e7:b3:7b:d7:5c:bb:95:37:44:d0:93:e4:45:45:bb: 9d:ac:b4:94:41:e9:c3:5e:42:a7:63:7b:2a:55:b9: d7:5b:03:37:c3:4c:e1:1f:df:9a:62:4b:32:5f:2a: 24:9f:c9:62:be:ce:3b:bf:d0:d6:6a:2d:75:dc:12: b1:f7:ab:24:41:43:83:20:b3:84:29:e1:c8:03:75: ba:9f:31:84:df:84:5f:d9:fa:66:d3:5f:67:bd:65: 2f:18:6a:00:a3:db:c1:2f:d6:67:79:3f:c0:6c:74: 2d:08:79:57:a2:ea:de:7a:80:47:29:15:f5:2f:d8: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:07:88:B0:2D:2E:6F:4C:58:09:76:C5:95:02:BC:6F:2E:1F:BF X509v3 Authority Key Identifier: keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:74:38:59:93:9b:40:43:2e:5a:45:af:70:b1:97:b8:9b:99: e5:68:cf:ea:fc:99:b1:06:88:87:13:e1:4e:54:27:2b:9e:a9: 9b:d4:b6:a6:01:45:54:9b:6a:e1:c8:22:19:70:f7:fb:d5:f9: fa:54:9e:61:82:92:09:a8:63:f7:ec:8a:e7:e0:35:94:2f:56: d3:dc:e4:48:49:f1:6c:71:b6:0f:13:f2:e4:81:7f:ce:50:26: 80:2c:cc:9b:dc:87:f3:1a:3e:1b:8b:33:22:b7:90:da:b5:3f: 32:f2:ae:36:fe:72:51:18:1f:ea:46:4c:10:55:f3:bf:1e:bc: 78:5c:7a:8b:10:e0:2c:87:ef:80:62:6e:c3:d8:89:06:73:22: e9:03:62:1c:5e:20:b5:84:b4:81:3e:bd:3a:66:52:c0:89:73: ca:d4:3a:b3:b7:03:c7:dd:89:29:fc:50:22:8e:77:32:c8:55: b8:d3:4c:df:c5:e5:8b:8a:09:71:8b:78:f2:c3:b9:24:a0:1f: 36:26:fd:95:5d:ef:48:57:2e:36:9f:38:70:ba:5e:5d:10:9f: fc:a8:06:d0:46:6a:78:2c:19:33:79:7f:7e:c0:4e:63:47:6f: 56:b8:c9:d4:49:59:b8:e8:a9:dc:f8:0b:19:8e:3e:3f:c5:8d: b2:ca:5e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGvWNAqa1fBcgH88LfU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNDM0NDcyMjY0NWRhMjVlY2UzYjE3YzdhODM3NjJlZDQy ZGRhNTIwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD Eyg3MGJmMDc4OGIwMmQyZTZmNGM1ODA5NzZjNTk1MDJiYzZmMmUxZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJIw0uAMBj4h2b6hdq+MXXVCd+fq SOQlBlISlG64zZhqAd9fqMnyjIgscf1ocbU6FZlAQsRhRq7cMSAnZMVdiwBxGajs IA4snIeDuL9z2G355+n6DtcF8D2wimwIUbNZihNCBoh5KRtQEcOWeuVzSHb3XYNx KCBlpJV0s9iTJSG52tf6Cs/ns3vXXLuVN0TQk+RFRbudrLSUQenDXkKnY3sqVbnX WwM3w0zhH9+aYksyXyokn8livs47v9DWai113BKx96skQUODILOEKeHIA3W6nzGE 34Rf2fpm019nvWUvGGoAo9vBL9ZneT/AbHQtCHlXoureeoBHKRX1L9j45QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC/B4iwLS5vTFgJdsWVArxvLh+/MB8GA1UdIwQY MBaAFCxDRHImRdol7OOxfHqDdi7ULdpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUt ODY2ZjFkMjMyN2FhLzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUtODY2ZjFkMjMyN2Fh LzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3Q4WZOb QEMuWkWvcLGXuJuZ5WjP6vyZsQaIhxPhTlQnK56pm9S2pgFFVJtq4cgiGXD3+9X5 +lSeYYKSCahj9+yK5+A1lC9W09zkSEnxbHG2DxPy5IF/zlAmgCzMm9yH8xo+G4sz IreQ2rU/MvKuNv5yURgf6kZMEFXzvx68eFx6ixDgLIfvgGJuw9iJBnMi6QNiHF4g tYS0gT69OmZSwIlzytQ6s7cDx92JKfxQIo53MshVuNNM38Xli4oJcYt48sO5JKAf Nib9lV3vSFcuNp84cLpeXRCf/KgG0EZqeCwZM3l/fsBOY0dvVrjJ1ElZuOip3PgL GY4+P8WNsspegQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:09:02 2025 by rpki-client