This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json) Hash identifier: /DzGnc8twX9bxmVEZWM68LcVMIXmJhcjuGjcVa+5Ewk= Subject key identifier: D0:9A:71:83:0C:41:0A:38:FF:AF:C9:A4:C6:BB:A1:FB:60:A9:4F:46 Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b Certificate serial: 019AF42DD3B08B35E759E1D4C4475F39670F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 15:00:35 +0000 Manifest this update: Sat 06 Dec 2025 15:00:35 +0000 Manifest next update: Sun 07 Dec 2025 15:00:35 +0000 Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: OzcP4yTMts2epvjN+B9ox4eyhR/Ifn9s7H+PCg/uSLA=) 2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d3:b0:8b:35:e7:59:e1:d4:c4:47:5f:39:67:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b Validity Not Before: Dec 6 15:00:35 2025 GMT Not After : Dec 7 15:00:35 2025 GMT Subject: CN=d09a71830c410a38ffafc9a4c6bba1fb60a94f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:78:e0:24:19:6a:53:10:31:c3:0f:bb:8a: 01:0c:cf:5a:72:1b:2d:08:ce:4c:83:4f:21:11:dc: 4a:36:43:0e:8d:b2:69:f8:f9:86:5f:80:ee:29:6b: 5e:2a:79:01:b7:26:fe:0d:58:51:ec:c3:b6:7d:e5: f1:cf:87:1c:d7:1a:3b:f0:ad:74:af:3e:27:eb:ee: c8:b3:b2:a6:c0:e4:42:6a:8c:0a:e9:81:ba:1e:f0: 67:3d:13:b4:35:72:06:d3:74:db:64:92:8f:ae:3f: 6e:e5:87:cb:de:fc:ef:93:18:28:eb:9c:6f:01:1a: fc:0e:22:e8:ca:0d:ef:55:89:9c:78:95:33:1e:b4: b9:a5:43:5c:5e:bd:1a:2a:fe:1d:2d:8b:2e:4b:1f: 7a:14:52:e0:6b:a5:45:82:df:e6:9a:9d:e6:11:4d: 7c:dc:2d:ae:25:9b:b4:b4:df:6b:0b:fc:dc:e6:58: d0:17:b6:09:a6:22:2c:7f:20:f0:82:84:a8:2b:da: 98:d8:1b:2f:a7:2d:fd:b7:f1:e9:7f:a8:5c:a1:20: 5d:fb:60:2a:95:3f:68:44:7e:e8:43:15:ac:bd:7a: fd:45:db:e1:c9:2f:3c:f2:2d:5b:ed:fe:1b:d1:a8: 94:fe:de:d0:6c:d2:ba:05:bb:b3:fd:65:6f:99:39: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:71:83:0C:41:0A:38:FF:AF:C9:A4:C6:BB:A1:FB:60:A9:4F:46 X509v3 Authority Key Identifier: keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:55:61:dc:3c:53:b5:63:72:ad:55:70:c2:84:e6:f7:c2:01: 57:1e:c1:48:31:96:3a:de:6c:33:15:e2:af:da:0a:95:2f:64: 35:fe:f3:f7:6b:6d:f9:2d:f0:00:8f:78:2c:57:ed:8d:ec:83: bf:f6:02:c9:6f:e5:22:ea:22:85:1c:de:74:de:93:44:84:3b: 02:20:5e:26:a4:42:08:e3:7a:76:e2:57:a1:77:a8:da:86:78: 4f:bb:a1:93:ff:0c:bd:85:dc:da:a7:75:7f:23:49:74:c7:28: 00:f1:d5:ca:20:05:ac:95:c6:c3:9b:7e:89:5d:0e:8f:f6:f8: 21:f7:5c:5a:02:85:f8:da:87:e7:f8:1b:f3:b5:b6:16:e2:ca: e2:d3:be:b1:b3:96:35:c2:5c:d5:2c:85:42:06:00:45:7c:cd: c7:c1:b0:06:bf:9c:ea:50:ad:1b:ac:31:f0:87:35:f6:3c:16: 3f:1e:24:23:ae:76:d3:0a:b3:64:00:08:ad:11:1b:c6:d8:ce: 80:6f:d9:a0:0b:58:45:96:bd:04:a4:8c:8b:ee:56:0c:88:0f: 01:ce:dd:67:0b:88:65:7c:f2:a7:5d:61:6a:14:85:1c:1c:88: e5:46:0d:af:a1:9e:24:48:65:b3:5c:fe:78:a4:c0:36:44:e2: cd:c2:51:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdOwizXnWeHUxEdfOWcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzBiNGY1MjIyYTQ2ODVjNTRjZDI1YzRjYjhkNmY5MzIz M2FjN2IwHhcNMjUxMjA2MTUwMDM1WhcNMjUxMjA3MTUwMDM1WjAzMTEwLwYDVQQD EyhkMDlhNzE4MzBjNDEwYTM4ZmZhZmM5YTRjNmJiYTFmYjYwYTk0ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE944CQZalMQMcMPu4oBDM9achst CM5Mg08hEdxKNkMOjbJp+PmGX4DuKWteKnkBtyb+DVhR7MO2feXxz4cc1xo78K10 rz4n6+7Is7KmwORCaowK6YG6HvBnPRO0NXIG03TbZJKPrj9u5YfL3vzvkxgo65xv ARr8DiLoyg3vVYmceJUzHrS5pUNcXr0aKv4dLYsuSx96FFLga6VFgt/mmp3mEU18 3C2uJZu0tN9rC/zc5ljQF7YJpiIsfyDwgoSoK9qY2Bsvpy39t/Hpf6hcoSBd+2Aq lT9oRH7oQxWsvXr9RdvhyS888i1b7f4b0aiU/t7QbNK6Bbuz/WVvmTl5CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCacYMMQQo4/6/JpMa7oftgqU9GMB8GA1UdIwQY MBaAFC4wtPUiKkaFxUzSXEy41vkyM6x7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWIt ODYxNmEzMTBlODAzLzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWItODYxNmEzMTBlODAz LzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFVh3DxT tWNyrVVwwoTm98IBVx7BSDGWOt5sMxXir9oKlS9kNf7z92tt+S3wAI94LFftjeyD v/YCyW/lIuoihRzedN6TRIQ7AiBeJqRCCON6duJXoXeo2oZ4T7uhk/8MvYXc2qd1 fyNJdMcoAPHVyiAFrJXGw5t+iV0Oj/b4IfdcWgKF+NqH5/gb87W2FuLK4tO+sbOW NcJc1SyFQgYARXzNx8GwBr+c6lCtG6wx8Ic19jwWPx4kI6520wqzZAAIrREbxtjO gG/ZoAtYRZa9BKSMi+5WDIgPAc7dZwuIZXzyp11hahSFHByI5UYNr6GeJEhls1z+ eKTANkTizcJRuQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:57 2025 by rpki-client