This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json) Hash identifier: ssMfBdcr0CpI2GwT4m6GFTOJaqQE3+fSduusM7uTdts= Subject key identifier: 4B:6F:D6:55:84:EE:54:A5:55:8F:8A:2F:B2:C9:2E:89:CD:B5:B2:7E Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Certificate serial: 019AF20921CE05325473BC27D838BEBDC4FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft Manifest number: 0134 Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (hash: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=) 2: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: +NEPZzVgF/sYIjN7FmS0MlAnPGJmQIpxBdYKs9BlJ0Q=) 3: RpIHAkjNePBkljRPnB1JIyBSnvw.roa (hash: qyk9tqBXRznFnx7BG2DU1S+w/7N7AXbDrx47mo90s+Y=) 4: TnQBnRgF1Fd44NNajn0aU2c4k-U.roa (hash: bygzgFDHIVUQArLZudG2dlgz5CAq7YfyRAQZ0W8ymG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:21:ce:05:32:54:73:bc:27:d8:38:be:bd:c4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=4b6fd65584ee54a5558f8a2fb2c92e89cdb5b27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:39:bb:9c:e0:1b:a1:19:38:75:c2:fd:19: fd:8e:98:24:50:66:5b:15:28:2a:a6:5e:da:2a:4b: 58:e8:d3:2d:a6:b7:a4:da:98:c1:ad:27:d6:b7:41: 54:37:2b:a1:ff:cc:31:85:5a:98:99:fd:22:5c:23: b3:8f:88:c9:63:ed:15:4f:f8:e5:6e:30:09:34:11: d0:61:99:44:1d:aa:ac:d7:bd:69:51:f9:2a:d9:d1: 9e:18:34:66:fc:ae:49:fd:5e:65:fa:eb:c6:49:b4: 47:b8:00:f4:f1:1f:f2:10:00:6a:9d:30:d6:8f:07: 9a:7c:a6:55:34:75:19:3c:9f:ad:cc:c9:15:75:db: c3:4f:11:25:98:5a:60:3f:ff:1a:d8:9b:6b:bc:a4: 96:a4:a3:03:05:72:1f:6e:6b:8f:1b:3e:a3:cf:ef: a7:d7:45:43:e8:cc:3c:d6:d1:2e:65:1f:2c:b6:ec: f4:ee:1e:03:d1:fe:ef:bb:d1:d0:31:0f:d4:e7:08: 3e:c9:b7:b5:97:77:5f:8f:b6:db:6f:ab:7c:f1:48: 53:9e:07:18:14:fe:6d:51:3e:c7:10:6c:57:4b:7e: d3:68:6e:b3:a7:12:84:6a:e7:56:f7:8e:1a:c3:cc: e5:8d:90:1c:aa:8a:ab:5a:bf:26:9c:f3:50:ae:9a: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6F:D6:55:84:EE:54:A5:55:8F:8A:2F:B2:C9:2E:89:CD:B5:B2:7E X509v3 Authority Key Identifier: keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d7:e8:3e:46:06:46:73:84:89:c4:ec:60:2d:40:20:5a:cb: fd:8c:34:d5:56:7f:63:9b:26:8c:8b:64:c0:73:01:56:a9:95: a0:e3:d4:cf:99:b0:ba:ab:22:92:70:c9:fe:10:63:62:4a:2e: 38:5f:66:73:19:d0:a6:38:4a:ef:8c:40:b6:53:aa:9c:e4:88: dd:3f:85:46:70:5c:20:5c:08:bb:91:8a:6b:0b:cd:8d:6b:c1: 93:cc:33:28:fc:b2:80:29:30:fa:47:6b:e2:e8:36:fc:e4:63: b6:7d:8e:8f:0e:64:06:3f:d8:c4:e7:6c:8f:7f:12:a9:9d:24: fe:b5:95:c9:4c:cf:4d:41:bd:6c:4f:8f:ba:4c:b2:51:1b:8f: e0:db:cb:58:59:60:ff:ac:b2:1d:71:34:03:8e:38:f1:f0:23: bf:bd:b5:8a:43:8b:43:61:de:b2:e9:01:9c:28:e3:a1:cd:0d: 76:e4:22:d1:fa:60:91:19:9f:46:9d:4c:24:bd:ab:82:a1:ad: 90:84:1c:9d:5b:cc:66:8a:1b:85:d9:17:45:16:81:d8:97:d0: dd:ea:c5:f4:30:9c:00:fd:85:62:ac:22:50:c2:31:92:8e:79: ea:f0:de:4d:3d:ca:94:f0:8c:70:f6:20:9c:ca:f2:44:95:21: ee:78:21:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSHOBTJUc7wn2Di+vcT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2Q1YWRiMWQwNjQzNjliN2U0MWJhZWJkYjBlOGUxMzVk NjU3NjMwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD Eyg0YjZmZDY1NTg0ZWU1NGE1NTU4ZjhhMmZiMmM5MmU4OWNkYjViMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcg5u5zgG6EZOHXC/Rn9jpgkUGZb FSgqpl7aKktY6NMtprek2pjBrSfWt0FUNyuh/8wxhVqYmf0iXCOzj4jJY+0VT/jl bjAJNBHQYZlEHaqs171pUfkq2dGeGDRm/K5J/V5l+uvGSbRHuAD08R/yEABqnTDW jweafKZVNHUZPJ+tzMkVddvDTxElmFpgP/8a2JtrvKSWpKMDBXIfbmuPGz6jz++n 10VD6Mw81tEuZR8stuz07h4D0f7vu9HQMQ/U5wg+ybe1l3dfj7bbb6t88UhTngcY FP5tUT7HEGxXS37TaG6zpxKEaudW944aw8zljZAcqoqrWr8mnPNQrpoYRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtv1lWE7lSlVY+KL7LJLonNtbJ+MB8GA1UdIwQY MBaAFC49WtsdBkNpt+Qbrr2w6OE11ldjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMt YmViZjQyZmJlODQ2LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84NzYxNWEtM2NhMy00YjViLTgxMGMtYmViZjQyZmJlODQ2 LzEvTGoxYTJ4MEdRMm0zNUJ1dXZiRG80VFhXVjJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtfoPkYG RnOEicTsYC1AIFrL/Yw01VZ/Y5smjItkwHMBVqmVoOPUz5mwuqsiknDJ/hBjYkou OF9mcxnQpjhK74xAtlOqnOSI3T+FRnBcIFwIu5GKawvNjWvBk8wzKPyygCkw+kdr 4ug2/ORjtn2Ojw5kBj/YxOdsj38SqZ0k/rWVyUzPTUG9bE+PukyyURuP4NvLWFlg /6yyHXE0A4448fAjv721ikOLQ2HesukBnCjjoc0NduQi0fpgkRmfRp1MJL2rgqGt kIQcnVvMZoobhdkXRRaB2JfQ3erF9DCcAP2FYqwiUMIxko556vDeTT3KlPCMcPYg nMryRJUh7nghOA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:09 2025 by rpki-client