This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json) Hash identifier: mxMbCpqmNhunDJe08IbRv9ujkLgabaw0eh2IBKKY73o= Subject key identifier: 1B:F2:F0:FF:6D:3B:AD:6D:EC:D4:13:8E:E2:D9:6D:1D:15:D8:90:B8 Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Certificate serial: 019B34C44BC57DD40F63A0417A7F3F5198BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:00:38 +0000 Manifest this update: Fri 19 Dec 2025 04:00:38 +0000 Manifest next update: Sat 20 Dec 2025 04:00:38 +0000 Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=) 2: UOQHKJxMF7C_9axA2ZXFxeIGRa4.roa (hash: 1HCLCUjxNGGDZURuVB2yTjspaXZmBODEBg4gNoMhB8Q=) 3: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: yu67A1h1umWgQCKkRCmUs6zVHNsYNgJinWrX7gAim8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:4b:c5:7d:d4:0f:63:a0:41:7a:7f:3f:51:98:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Validity Not Before: Dec 19 04:00:38 2025 GMT Not After : Dec 20 04:00:38 2025 GMT Subject: CN=1bf2f0ff6d3bad6decd4138ee2d96d1d15d890b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:87:b9:3d:d7:c6:a7:b4:f2:22:33:85:28: 19:5a:10:29:af:cd:7f:b4:f2:59:2e:f4:fa:a3:d5: 13:f7:e3:9a:2b:75:ba:5a:08:38:e3:ac:73:3f:12: b1:8b:f6:56:0d:76:2b:87:18:6b:21:48:d0:ae:49: a0:71:91:f0:34:58:6b:65:c2:e9:23:27:5d:34:c1: 77:ae:bd:cb:bf:ff:fa:e3:9a:4b:84:eb:13:02:9b: fd:3d:e0:89:f8:a5:b4:fe:d9:30:33:ac:f7:21:94: fd:38:08:6b:86:f5:72:41:3b:1e:75:01:b0:49:e7: 19:b2:ff:44:30:f9:13:b9:20:60:4a:34:76:3c:b5: 4c:cd:98:de:b3:f7:bd:1f:80:f2:b3:1a:3c:34:e6: f7:3c:5e:2c:d5:75:8b:fe:c6:1e:ec:0a:86:19:8a: 76:24:bc:8c:2f:c6:fb:35:1b:83:36:2a:94:71:a8: 41:e0:23:eb:4d:14:08:92:e0:7c:4f:71:30:8e:f4: 72:17:a9:dd:cc:83:12:cd:31:7e:c0:9b:36:be:f8: 40:b6:69:84:73:92:58:8d:f2:ad:2b:4f:08:14:fb: 46:27:50:2c:b9:0d:f8:4e:f5:58:80:39:ab:9a:e9: 6b:2c:ef:8e:97:84:94:1b:4f:db:88:e3:0e:15:67: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:F0:FF:6D:3B:AD:6D:EC:D4:13:8E:E2:D9:6D:1D:15:D8:90:B8 X509v3 Authority Key Identifier: keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0a:e9:76:62:e7:42:1e:d7:25:9d:0f:1b:12:c8:97:05:ce: 82:a1:4f:e1:4c:4e:44:71:02:fd:9b:a6:83:88:e3:e9:dd:54: 57:f3:81:c1:ab:b4:91:ae:c1:77:50:6b:3d:92:a9:46:98:a1: a4:d9:b4:fd:29:ad:4d:22:0a:f6:5e:b4:43:03:77:bd:80:48: 1d:eb:4f:02:f6:e2:35:f5:c9:79:8d:fa:0f:23:7d:14:f6:39: 96:5d:95:89:f4:5c:53:2b:e0:54:71:45:96:c6:62:bc:1b:03: cf:c6:80:07:53:f5:3f:5d:74:e7:a1:24:9f:99:c2:0e:6a:cf: 38:7a:24:65:07:b2:f7:93:0d:64:19:f7:3d:ca:41:2a:5b:07: ff:0f:52:8e:7c:ae:60:ba:e2:25:85:cc:9b:9a:a5:f5:21:5d: 5b:57:cd:76:fa:fe:61:6b:64:6d:04:be:ef:47:36:6f:88:15: e3:0f:40:89:6e:03:41:0a:7f:e0:d9:09:a1:64:c8:0b:07:24: a3:e8:76:c1:e1:7e:26:b3:83:b3:89:48:2e:8a:75:5d:9d:1b: b3:8f:9b:fb:6d:c3:02:8f:f1:39:be:f4:aa:69:f7:df:82:4e: e2:a7:c1:fc:f8:a5:92:61:1b:25:1d:3b:8f:a1:bd:e0:d7:00: 28:32:4b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEvFfdQPY6BBen8/UZi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3 YjBiMDkwHhcNMjUxMjE5MDQwMDM4WhcNMjUxMjIwMDQwMDM4WjAzMTEwLwYDVQQD EygxYmYyZjBmZjZkM2JhZDZkZWNkNDEzOGVlMmQ5NmQxZDE1ZDg5MGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMiHuT3Xxqe08iIzhSgZWhApr81/ tPJZLvT6o9UT9+OaK3W6Wgg446xzPxKxi/ZWDXYrhxhrIUjQrkmgcZHwNFhrZcLp IyddNMF3rr3Lv//645pLhOsTApv9PeCJ+KW0/tkwM6z3IZT9OAhrhvVyQTsedQGw SecZsv9EMPkTuSBgSjR2PLVMzZjes/e9H4Dysxo8NOb3PF4s1XWL/sYe7AqGGYp2 JLyML8b7NRuDNiqUcahB4CPrTRQIkuB8T3EwjvRyF6ndzIMSzTF+wJs2vvhAtmmE c5JYjfKtK08IFPtGJ1AsuQ34TvVYgDmrmulrLO+Ol4SUG0/biOMOFWdvDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvy8P9tO61t7NQTjuLZbR0V2JC4MB8GA1UdIwQY MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt YTgyZjY1OGEyYWExLzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgrpdmLn Qh7XJZ0PGxLIlwXOgqFP4UxORHEC/Zumg4jj6d1UV/OBwau0ka7Bd1BrPZKpRpih pNm0/SmtTSIK9l60QwN3vYBIHetPAvbiNfXJeY36DyN9FPY5ll2VifRcUyvgVHFF lsZivBsDz8aAB1P1P11056Ekn5nCDmrPOHokZQey95MNZBn3PcpBKlsH/w9Sjnyu YLriJYXMm5ql9SFdW1fNdvr+YWtkbQS+70c2b4gV4w9AiW4DQQp/4NkJoWTICwck o+h2weF+JrODs4lILop1XZ0bs4+b+23DAo/xOb70qmn334JO4qfB/PilkmEbJR07 j6G94NcAKDJLFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:22:10 2025 by rpki-client