This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json) Hash identifier: zVvKhnAyQTnrKxMJ7rFq9D9/zpG5CnMis/GguKA2MTQ= Subject key identifier: 34:79:98:07:28:97:BE:BD:25:36:EB:E7:69:1E:A3:44:1D:F8:34:06 Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Certificate serial: 019AF1647D45366A6C19B0FCF40652D99D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft Manifest number: 0ACA Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=) 2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: 2aB6xVRBTaovRmV8dfS9JjmcsSdSepJux/hoSM+EQXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7d:45:36:6a:6c:19:b0:fc:f4:06:52:d9:9d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=347998072897bebd2536ebe7691ea3441df83406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:0d:15:f7:68:db:09:dc:f6:c5:0f:c9:64: 26:08:3f:73:d5:e2:60:8a:10:3a:17:db:ee:e0:16: 53:48:90:ba:cc:3e:64:e1:e8:0e:cd:7b:0a:1c:37: 92:84:70:a8:57:40:1a:f1:46:43:44:1b:65:f7:95: 7d:f5:14:71:d3:d1:7d:dc:3a:c7:df:1f:b5:0c:31: 25:11:d8:e5:bb:1f:3c:fa:68:81:6d:97:ea:e5:30: b8:62:86:44:79:af:85:b6:76:20:01:c2:74:82:f3: 7d:b9:e0:0a:3f:10:ff:3a:4a:f6:d8:38:bf:da:3b: 2c:f6:d1:f9:b2:fd:d6:5e:e0:69:eb:35:12:00:98: f7:8f:7f:ae:89:5a:b2:31:b7:b4:6f:d1:c2:5e:b7: e5:c4:84:ea:d8:17:f7:48:23:a6:ed:91:e5:ff:e1: 60:e0:13:cc:ac:b9:24:1d:76:a7:69:2b:b2:ac:1e: 01:fc:46:2f:c2:82:75:02:af:ca:96:4f:b4:2f:71: d4:1b:f3:a6:b5:69:4d:ff:17:26:e3:6d:4e:6b:55: fd:e4:93:2c:67:7b:da:0c:bf:95:62:3b:14:af:1c: 31:21:b5:df:ff:98:26:5c:48:6e:1a:10:f2:cf:63: 23:2c:ba:81:70:2b:de:4e:9a:e7:df:f4:56:41:c9: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:98:07:28:97:BE:BD:25:36:EB:E7:69:1E:A3:44:1D:F8:34:06 X509v3 Authority Key Identifier: keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:a2:59:82:17:89:78:38:f0:9f:d1:44:89:33:d4:41:be: 54:3b:7b:45:f7:f8:bb:de:5f:18:32:33:9a:67:f2:51:02:6e: fb:84:88:08:c6:c7:45:f7:f9:fb:bf:d4:b4:98:54:6b:26:07: 11:24:08:06:d7:9b:3e:78:95:7b:45:a3:63:33:9d:52:a6:58: 79:b9:d2:84:e9:92:94:3c:e7:d5:70:05:99:d9:91:a0:d0:f5: a3:80:07:a6:a7:74:ef:08:63:bb:51:b5:fb:be:bc:99:7a:e6: 0b:72:be:c4:d7:94:9a:83:47:37:3d:dc:bc:3c:72:0c:2f:81: 32:ca:b7:55:2a:dc:4c:4f:19:0f:47:94:e9:d0:ad:5e:b4:b6: 17:f2:78:c4:c1:87:74:88:bb:b0:65:55:ce:b8:0a:15:56:66: f6:98:f4:f5:ee:ae:20:45:cb:4e:b4:3e:95:4e:94:99:09:8b: 54:87:12:d9:e3:e2:62:5b:bd:22:5d:90:33:5b:52:3e:83:86: 97:f7:5a:9d:43:a4:61:93:af:51:98:7f:09:d0:5e:9f:4e:2a: fc:5d:90:ed:00:e3:94:bb:4d:ac:19:c5:28:48:b6:94:b9:59: a0:31:e0:2d:71:f2:c9:0a:04:15:19:b2:39:39:93:7b:36:1a: 3f:8d:dc:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH1FNmpsGbD89AZS2Z0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj ZDkyYWUwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EygzNDc5OTgwNzI4OTdiZWJkMjUzNmViZTc2OTFlYTM0NDFkZjgzNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmugNFfdo2wnc9sUPyWQmCD9z1eJg ihA6F9vu4BZTSJC6zD5k4egOzXsKHDeShHCoV0Aa8UZDRBtl95V99RRx09F93DrH 3x+1DDElEdjlux88+miBbZfq5TC4YoZEea+FtnYgAcJ0gvN9ueAKPxD/Okr22Di/ 2jss9tH5sv3WXuBp6zUSAJj3j3+uiVqyMbe0b9HCXrflxITq2Bf3SCOm7ZHl/+Fg 4BPMrLkkHXanaSuyrB4B/EYvwoJ1Aq/Klk+0L3HUG/OmtWlN/xcm421Oa1X95JMs Z3vaDL+VYjsUrxwxIbXf/5gmXEhuGhDyz2MjLLqBcCveTprn3/RWQckAwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDR5mAcol769JTbr52keo0Qd+DQGMB8GA1UdIwQY MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2 LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXSiWYIX iXg48J/RRIkz1EG+VDt7Rff4u95fGDIzmmfyUQJu+4SICMbHRff5+7/UtJhUayYH ESQIBtebPniVe0WjYzOdUqZYebnShOmSlDzn1XAFmdmRoND1o4AHpqd07whju1G1 +768mXrmC3K+xNeUmoNHNz3cvDxyDC+BMsq3VSrcTE8ZD0eU6dCtXrS2F/J4xMGH dIi7sGVVzrgKFVZm9pj09e6uIEXLTrQ+lU6UmQmLVIcS2ePiYlu9Il2QM1tSPoOG l/danUOkYZOvUZh/CdBen04q/F2Q7QDjlLtNrBnFKEi2lLlZoDHgLXHyyQoEFRmy OTmTezYaP43cCg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:38 2025 by rpki-client