This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json) Hash identifier: gCHxoWlICHZxZm3Lqw0Yk+/oEJls46J7HMebY5fhZEs= Subject key identifier: B9:73:83:ED:5E:E8:AD:9F:23:77:AE:34:29:47:04:EB:0D:FF:D6:EC Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73 Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773 Certificate serial: 019B2C6693BA428969E494D8D858B741E61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft Manifest number: 05C6 Signing time: Wed 17 Dec 2025 13:01:18 +0000 Manifest this update: Wed 17 Dec 2025 13:01:18 +0000 Manifest next update: Thu 18 Dec 2025 13:01:18 +0000 Files and hashes: 1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=) 2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: hcrQMj6p7VqT2ollDA2v6jF328oggSk3N3bJ41ica3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:93:ba:42:89:69:e4:94:d8:d8:58:b7:41:e6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9514d5a840049d442df377445394df719201a773 Validity Not Before: Dec 17 13:01:18 2025 GMT Not After : Dec 18 13:01:18 2025 GMT Subject: CN=b97383ed5ee8ad9f2377ae34294704eb0dffd6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:78:bc:e5:7b:f1:37:03:95:35:7e:fc:2a: 55:17:cb:99:64:7c:ba:3d:c5:b1:d3:11:0e:1d:b6: 3e:09:46:8f:c7:f4:c3:5a:cc:2b:f5:40:76:c0:24: d3:de:f0:1c:3e:5a:09:29:cf:61:42:d0:66:40:fe: de:8d:2c:46:e6:1d:5f:3b:94:77:ce:06:db:ea:d9: bb:00:b7:48:ab:d3:3d:3b:8d:02:a7:9a:31:e5:68: 12:b0:de:5b:51:4e:90:c6:bb:26:63:ec:37:ac:71: e7:cd:c9:af:58:f6:a3:cd:6f:cd:b8:87:cb:58:73: 79:3f:13:2f:09:37:83:1a:60:ac:b3:f4:d4:b9:42: 3c:48:e1:56:7e:d2:f1:c1:44:1d:8e:65:84:96:59: 5d:cc:71:63:2f:83:7b:d8:a3:3b:5f:3a:a2:0e:da: 78:b1:06:a8:a0:a3:2e:9f:48:81:26:34:f3:b4:56: 9e:35:1e:9a:d9:a4:3a:a8:d7:1a:d8:08:5f:86:c8: 32:e8:d0:09:9c:24:8d:00:01:49:fb:67:b9:66:ef: 55:5c:e5:d3:08:78:bc:42:0e:c8:7a:41:f4:c3:8d: e2:1f:ef:ef:9f:8c:6b:23:74:d1:d7:af:15:85:22: c8:23:18:c7:63:05:b9:da:12:63:9b:15:4c:df:7d: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:83:ED:5E:E8:AD:9F:23:77:AE:34:29:47:04:EB:0D:FF:D6:EC X509v3 Authority Key Identifier: keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:58:5c:32:71:49:e6:a0:94:e0:93:92:12:0e:86:74:82: 28:e1:b8:47:ac:cb:e5:c0:08:8d:4d:9b:60:55:73:4f:2d:d5: 41:5b:1f:98:45:5b:57:ce:45:59:35:ed:a8:6d:68:21:e9:56: 5f:aa:ea:3d:c3:74:83:22:79:42:8c:89:bd:07:ea:39:dd:a0: 68:48:37:24:4a:65:4a:23:9f:29:4d:e9:6e:db:5b:9e:83:cf: b4:91:e6:02:01:8e:c9:be:53:aa:77:1b:44:75:21:93:5e:ec: a5:8d:4c:96:d7:48:4e:28:e8:92:69:5d:79:ec:ad:01:24:de: ca:2c:af:3c:cb:32:c7:8f:6b:e2:a6:96:6e:b0:a9:74:0b:22: ee:c9:8b:35:f9:10:09:4d:ab:f9:b4:fc:76:48:52:ad:58:18: 9e:ef:55:d8:41:43:1c:fd:34:9b:60:4d:69:68:05:0a:f8:bb: 02:09:fe:0a:c2:41:17:e9:f9:29:0e:44:56:5c:76:81:f1:35: a0:18:5b:b1:f9:c0:85:c2:f1:a8:d5:05:92:71:93:cd:16:9b: f1:e3:45:da:9a:d8:44:57:82:76:77:a1:65:a5:34:85:1f:3e: fb:8f:04:a8:7e:cc:a3:db:8c:a6:65:e2:74:77:69:3d:b9:78: 69:c0:44:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZpO6Qolp5JTY2Fi3QeYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTRkNWE4NDAwNDlkNDQyZGYzNzc0NDUzOTRkZjcxOTIw MWE3NzMwHhcNMjUxMjE3MTMwMTE4WhcNMjUxMjE4MTMwMTE4WjAzMTEwLwYDVQQD EyhiOTczODNlZDVlZThhZDlmMjM3N2FlMzQyOTQ3MDRlYjBkZmZkNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpN4vOV78TcDlTV+/CpVF8uZZHy6 PcWx0xEOHbY+CUaPx/TDWswr9UB2wCTT3vAcPloJKc9hQtBmQP7ejSxG5h1fO5R3 zgbb6tm7ALdIq9M9O40Cp5ox5WgSsN5bUU6QxrsmY+w3rHHnzcmvWPajzW/NuIfL WHN5PxMvCTeDGmCss/TUuUI8SOFWftLxwUQdjmWEllldzHFjL4N72KM7XzqiDtp4 sQaooKMun0iBJjTztFaeNR6a2aQ6qNca2Ahfhsgy6NAJnCSNAAFJ+2e5Zu9VXOXT CHi8Qg7IekH0w43iH+/vn4xrI3TR168VhSLIIxjHYwW52hJjmxVM331Z4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlzg+1e6K2fI3euNClHBOsN/9bsMB8GA1UdIwQY MBaAFJUU1ahABJ1ELfN3RFOU33GSAadzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWUyNDItZTdkMy00OTFmLWJhNjUt NTdkMTU4NDNmN2YwLzEvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84MWUyNDItZTdkMy00OTFmLWJhNjUtNTdkMTU4NDNmN2Yw LzEvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM1YXDJx SeaglOCTkhIOhnSCKOG4R6zL5cAIjU2bYFVzTy3VQVsfmEVbV85FWTXtqG1oIelW X6rqPcN0gyJ5QoyJvQfqOd2gaEg3JEplSiOfKU3pbttbnoPPtJHmAgGOyb5Tqncb RHUhk17spY1MltdITijokmldeeytASTeyiyvPMsyx49r4qaWbrCpdAsi7smLNfkQ CU2r+bT8dkhSrVgYnu9V2EFDHP00m2BNaWgFCvi7Agn+CsJBF+n5KQ5EVlx2gfE1 oBhbsfnAhcLxqNUFknGTzRab8eNF2prYRFeCdnehZaU0hR8++48EqH7Mo9uMpmXi dHdpPbl4acBE9w== -----END CERTIFICATE-----Generated at Wed Dec 17 19:36:52 2025 by rpki-client