This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json) Hash identifier: CbySrd0cMKWl2gGiml+XYLANmht9GVaF0ykxFG+WtJc= Subject key identifier: 56:D1:1E:43:2C:79:75:2B:14:F8:D8:1C:15:6F:43:91:65:8B:2F:10 Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79 Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79 Certificate serial: 019AF35254322D213E49E89BAECA8D084BC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft Manifest number: 0E7C Signing time: Sat 06 Dec 2025 11:00:49 +0000 Manifest this update: Sat 06 Dec 2025 11:00:49 +0000 Manifest next update: Sun 07 Dec 2025 11:00:49 +0000 Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=) 2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: 8QqSUWbj8gqEDAZjSAG3au84bQ3iRE7zFkcf22T6wac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:54:32:2d:21:3e:49:e8:9b:ae:ca:8d:08:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79 Validity Not Before: Dec 6 11:00:49 2025 GMT Not After : Dec 7 11:00:49 2025 GMT Subject: CN=56d11e432c79752b14f8d81c156f4391658b2f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:5e:b5:02:4c:07:34:55:ce:b2:ff:f7:78: 63:12:c3:ca:65:a5:38:c1:30:4d:ed:4c:d0:23:03: 8e:e6:a4:a8:17:2e:68:63:ec:9a:f0:a6:92:fc:f0: a6:94:7f:af:89:e6:f2:e1:88:97:d5:8a:4a:1d:e9: da:27:5b:b1:ce:9b:d7:ae:78:2b:a4:2c:b1:32:04: ae:41:5d:71:8b:d3:36:a1:dd:1c:87:e7:06:74:fd: 6e:ea:0b:32:2a:89:4d:b6:83:4f:97:54:42:01:d7: e3:c4:ec:28:a2:33:ad:ad:db:fa:20:27:22:fd:21: 75:71:39:ac:a5:37:80:f1:1e:5c:78:2d:ec:8d:7b: 94:79:e8:f4:8e:ef:b5:6a:9b:aa:0f:39:9b:1f:ec: e3:6f:b4:bc:7c:5b:73:f8:53:95:e3:b3:fa:ed:89: 73:53:9b:9b:f6:2b:a6:42:24:f8:79:71:2e:ec:41: 5a:76:d3:41:85:72:79:bf:0c:f7:70:9b:9a:e0:6a: de:9e:ab:ee:74:cf:2f:27:da:be:e1:d4:5e:48:78: a4:09:46:a6:43:2f:a7:dc:2e:ba:ab:a6:2c:80:36: 24:44:82:a3:ba:8b:c6:fa:8b:76:e6:92:53:22:33: e0:e6:70:4a:77:f7:60:12:e7:a7:00:e1:51:76:d6: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D1:1E:43:2C:79:75:2B:14:F8:D8:1C:15:6F:43:91:65:8B:2F:10 X509v3 Authority Key Identifier: keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:a0:01:d0:7f:0b:73:b6:6c:66:dc:2e:b5:43:c2:cf:9d: f1:df:98:3c:49:ea:e3:29:47:07:a8:8d:ed:cf:3b:69:59:97: c4:07:24:8f:70:69:8e:80:af:69:9d:c4:f2:05:d4:de:ec:61: 92:33:ff:c8:15:d7:29:07:10:58:6a:a9:c2:b6:15:66:27:46: 54:c0:99:57:88:d7:0d:9f:2b:e6:eb:68:98:cb:18:09:d4:4f: fb:ff:89:5e:ba:85:61:f1:74:a1:61:29:1f:5d:f4:c1:98:22: 43:40:14:83:55:66:90:01:ab:50:e0:db:3f:82:1a:70:2a:6b: 0e:b2:c1:36:b5:26:78:6b:f4:f2:40:6f:c8:0a:66:b9:fd:3c: 12:e6:0e:36:0d:6b:e1:ba:e2:6a:c6:39:ce:8b:de:15:ac:d3: a1:59:73:3b:ff:1c:5b:6e:44:79:13:33:13:b3:b4:6d:12:8a: d8:7e:35:36:f3:b0:a7:95:7c:45:65:e3:0f:91:69:8e:57:31: 7f:09:1b:d2:72:c6:df:23:27:ce:ce:91:fc:f7:b7:1d:50:b0: 96:0d:53:23:99:86:eb:75:4d:0a:10:df:a8:19:67:bb:7b:af: af:46:4b:60:0e:a7:eb:79:ef:76:46:6c:dd:3a:0d:12:f0:2f: 05:c4:c5:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlQyLSE+SeibrsqNCEvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjBiZjhjNzcyMjZhM2ZhODhlYmUxMWNjOGYxMTY5Y2M1 NjBhNzkwHhcNMjUxMjA2MTEwMDQ5WhcNMjUxMjA3MTEwMDQ5WjAzMTEwLwYDVQQD Eyg1NmQxMWU0MzJjNzk3NTJiMTRmOGQ4MWMxNTZmNDM5MTY1OGIyZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D5etQJMBzRVzrL/93hjEsPKZaU4 wTBN7UzQIwOO5qSoFy5oY+ya8KaS/PCmlH+vieby4YiX1YpKHenaJ1uxzpvXrngr pCyxMgSuQV1xi9M2od0ch+cGdP1u6gsyKolNtoNPl1RCAdfjxOwoojOtrdv6ICci /SF1cTmspTeA8R5ceC3sjXuUeej0ju+1apuqDzmbH+zjb7S8fFtz+FOV47P67Ylz U5ub9iumQiT4eXEu7EFadtNBhXJ5vwz3cJua4GrenqvudM8vJ9q+4dReSHikCUam Qy+n3C66q6YsgDYkRIKjuovG+ot25pJTIjPg5nBKd/dgEuenAOFRdtbzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbRHkMseXUrFPjYHBVvQ5Fliy8QMB8GA1UdIwQY MBaAFJUgv4x3Imo/qI6+EcyPEWnMVgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2It MWYzZWQ2ZDg4MWI4LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2ItMWYzZWQ2ZDg4MWI4 LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNagAdB/ C3O2bGbcLrVDws+d8d+YPEnq4ylHB6iN7c87aVmXxAckj3BpjoCvaZ3E8gXU3uxh kjP/yBXXKQcQWGqpwrYVZidGVMCZV4jXDZ8r5utomMsYCdRP+/+JXrqFYfF0oWEp H130wZgiQ0AUg1VmkAGrUODbP4IacCprDrLBNrUmeGv08kBvyApmuf08EuYONg1r 4briasY5zoveFazToVlzO/8cW25EeRMzE7O0bRKK2H41NvOwp5V8RWXjD5Fpjlcx fwkb0nLG3yMnzs6R/Pe3HVCwlg1TI5mG63VNChDfqBlnu3uvr0ZLYA6n63nvdkZs 3ToNEvAvBcTF0A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:51 2025 by rpki-client