This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json) Hash identifier: CkdFh2VYrfDQfLVQbZKWuzqZoGXf/Y3k74ZiWHdCzoQ= Subject key identifier: 3B:3C:4D:B7:A8:F6:C9:1E:65:62:3F:57:D0:48:89:29:2B:BB:15:64 Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Certificate serial: 019AF1D25806B7C9CFE32A1B2073667C8C6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=) 2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: Z5Uxf+clIcpZPSHUVh8LWJfib56MzrmgqrRUVQ1lzwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:58:06:b7:c9:cf:e3:2a:1b:20:73:66:7c:8c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=3b3c4db7a8f6c91e65623f57d04889292bbb1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:f1:6a:69:8c:a2:e0:f9:78:ec:3d:c8:23: 3b:39:86:c9:34:c3:19:88:11:6b:f4:dc:25:01:a5: 4e:a4:90:fa:b3:e2:6b:7c:65:73:ef:28:1a:b3:15: cd:fa:10:6c:a4:69:a2:40:e4:6e:50:d9:f4:43:60: b0:b9:89:22:ef:60:e6:7e:c2:a7:14:fc:c4:e2:72: 14:b0:f9:3c:22:ca:f9:cd:3b:e6:b1:a0:33:59:41: db:10:65:9c:7b:e2:f3:f2:ad:bb:6c:5d:bf:a3:b3: be:aa:17:78:ba:24:4a:3f:73:be:75:c1:cc:f2:c5: 33:b3:b3:e1:d9:08:52:75:03:06:4c:40:28:e2:f1: d1:97:83:fa:d3:a9:ed:92:74:36:e3:60:3c:9f:c0: e8:1f:ba:3d:47:70:11:29:8f:4f:b1:aa:7d:49:ff: 7e:f8:12:82:63:e5:6d:ba:b6:9c:80:54:0c:d0:14: 90:a7:ff:61:3e:20:cf:e3:d0:71:db:2b:7a:dc:8f: d0:fd:f0:fb:08:1d:49:3a:ed:7b:f7:13:5e:96:19: e1:df:53:89:5b:1b:06:03:e8:c3:2a:59:42:3b:a4: c0:4c:ef:3d:57:b4:5a:21:81:cd:af:3f:97:e9:a2: 1b:a2:40:80:50:df:87:72:77:b2:48:0a:7b:3c:ec: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:4D:B7:A8:F6:C9:1E:65:62:3F:57:D0:48:89:29:2B:BB:15:64 X509v3 Authority Key Identifier: keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:74:4f:52:14:29:b8:7b:5b:26:0e:a5:78:a6:82:77:15:47: 44:97:18:04:59:bc:83:c0:47:2e:e7:76:49:ec:8f:56:65:49: 7a:94:1d:01:db:b7:74:7a:e1:cf:21:76:28:63:c7:28:38:a8: b3:5a:b9:8e:eb:0e:0a:a4:45:cf:e1:0f:61:85:46:f1:1e:f9: 92:b5:ff:62:49:20:4c:34:88:7b:a1:64:4e:62:c7:62:7c:35: bb:74:25:51:1a:ab:11:ec:cf:be:1c:f8:ca:60:eb:59:a1:f0: 9b:de:d2:29:e0:c4:4b:ad:0b:87:5d:36:1c:c5:29:e6:78:94: 17:90:fa:d4:8d:95:43:51:24:ec:19:a0:9f:3b:59:62:a9:6c: 2a:59:f6:51:e6:13:28:2d:d7:7c:ac:92:07:3f:ce:10:04:18: ad:62:26:e1:e3:9a:2b:d9:4b:bf:5c:9b:05:dc:26:4d:7d:a0: 62:67:c5:06:f4:73:7c:51:16:bb:ed:c6:9d:d1:57:46:49:f0: 7c:f3:0d:93:a3:7f:7f:0d:48:d6:cc:6a:2b:a2:f6:77:39:8b: 82:93:66:a0:0f:aa:03:ab:32:fd:6a:bf:4b:ae:4d:e2:54:9c: 2b:9d:d0:08:89:1e:ec:16:7b:a2:5e:4d:94:ea:81:84:84:01: 9c:31:7a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lgGt8nP4yobIHNmfIxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3 YjBiMDkwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EygzYjNjNGRiN2E4ZjZjOTFlNjU2MjNmNTdkMDQ4ODkyOTJiYmIxNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzDxammMouD5eOw9yCM7OYbJNMMZ iBFr9NwlAaVOpJD6s+JrfGVz7ygasxXN+hBspGmiQORuUNn0Q2CwuYki72DmfsKn FPzE4nIUsPk8Isr5zTvmsaAzWUHbEGWce+Lz8q27bF2/o7O+qhd4uiRKP3O+dcHM 8sUzs7Ph2QhSdQMGTEAo4vHRl4P606ntknQ242A8n8DoH7o9R3ARKY9Psap9Sf9+ +BKCY+VturacgFQM0BSQp/9hPiDP49Bx2yt63I/Q/fD7CB1JOu179xNelhnh31OJ WxsGA+jDKllCO6TATO89V7RaIYHNrz+X6aIbokCAUN+HcneySAp7POzohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs8Tbeo9skeZWI/V9BIiSkruxVkMB8GA1UdIwQY MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt YTgyZjY1OGEyYWExLzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3RPUhQp uHtbJg6leKaCdxVHRJcYBFm8g8BHLud2SeyPVmVJepQdAdu3dHrhzyF2KGPHKDio s1q5jusOCqRFz+EPYYVG8R75krX/YkkgTDSIe6FkTmLHYnw1u3QlURqrEezPvhz4 ymDrWaHwm97SKeDES60Lh102HMUp5niUF5D61I2VQ1Ek7BmgnztZYqlsKln2UeYT KC3XfKySBz/OEAQYrWIm4eOaK9lLv1ybBdwmTX2gYmfFBvRzfFEWu+3GndFXRknw fPMNk6N/fw1I1sxqK6L2dzmLgpNmoA+qA6sy/Wq/S65N4lScK53QCIke7BZ7ol5N lOqBhIQBnDF6GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:17 2025 by rpki-client