This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: b5TwKLtRcmAJJTmNzt/Kcig+VezudLgY2TLsUmYruxU= Subject key identifier: 0F:4B:71:99:99:1E:A4:0E:6F:C2:60:83:60:84:12:FD:90:66:69:9A Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019AF2AD87B8ED7BBD3320872A0220B24CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 08D5 Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: 3ltCFdZy4V3GyE2PWFgAfClRC2E.roa (hash: MvKcHOfmLjkCC6ae2mrrpxSjZGHgMZgVcn/g1k0NPNY=) 2: Hyeufykk73xgcSneHYi8ECCnPYc.roa (hash: 5VqCSOjA5bcQ+XGnXlR3yfwEpjMPFBK+PpNlY2M7gXw=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: fJTMMWwByN7hphZb0tv_TE2Yvo4.roa (hash: angDRpJs0fbux+XYuzP3Y/VKJHLeYhAHfy7qvUCjIek=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: jR5nZkaLfLBwvCMhSX7IG0MMfFDKSW+QKizIRMj7o/Q=) 11: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 12: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 13: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:87:b8:ed:7b:bd:33:20:87:2a:02:20:b2:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=0f4b7199991ea40e6fc26083608412fd9066699a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:b8:4c:8b:cf:c0:11:fe:e1:ba:fd:65:e1: 94:25:40:90:ea:7b:81:50:b9:75:1d:03:50:f8:6f: 19:c6:81:96:95:a2:5f:d4:08:9d:ae:79:f2:a8:16: 45:fc:90:f8:21:39:6b:38:10:56:f5:3d:f5:93:5c: 88:cd:f9:aa:03:b1:0a:7d:23:69:54:fa:11:6d:e1: b5:65:65:5c:85:c8:52:24:c8:b1:12:43:ad:e8:49: 7c:92:98:5a:fb:68:55:3e:22:6c:fe:b7:39:a9:6e: 8e:02:4e:59:f6:d7:2b:db:be:bb:9b:e2:46:39:7a: 9a:db:78:aa:e8:8f:a0:a3:4f:01:56:ff:ad:03:a8: ba:37:f1:aa:12:50:11:0b:1c:b7:3c:c5:7b:b6:fb: 6f:81:7e:54:fe:2f:45:0d:a2:65:6a:d2:a4:45:e2: 3e:29:f0:42:69:c4:f1:6a:25:c1:40:ed:50:11:64: c4:60:dc:75:c7:e8:14:68:3f:45:f7:8f:9c:46:fa: 70:25:11:c4:10:94:e4:44:ad:b1:f8:71:dd:91:87: a3:66:e6:00:51:6a:a9:d9:20:af:65:9f:24:b0:f0: 14:fe:25:0b:ef:92:e5:38:84:27:e0:9b:50:5d:a0: b1:64:3f:91:b5:70:84:07:ec:c9:03:4f:f2:dd:3e: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:71:99:99:1E:A4:0E:6F:C2:60:83:60:84:12:FD:90:66:69:9A X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:68:3d:d0:4d:fb:34:d0:bf:20:be:38:4b:a8:f6:ad:2c: 60:6e:cc:a9:27:c4:40:ef:9e:d3:4d:da:3a:0e:32:5a:4c:01: 15:23:84:f7:6c:90:00:b5:57:9f:e3:63:b9:22:9e:04:f9:cf: 72:1c:e7:bd:82:53:91:11:6d:12:52:c6:fe:41:c8:6b:ff:cb: 23:d2:d2:0e:26:08:e8:9c:41:db:53:27:24:20:c3:ba:af:94: 38:c8:87:e6:68:5e:e6:d4:ac:ab:04:cf:0d:ae:af:4b:06:e2: 3d:40:c6:fb:7f:83:77:24:14:3f:d6:9f:08:bb:a2:e7:d5:25: 60:71:8c:28:e5:8f:32:b9:0d:28:5f:9e:72:14:ca:0b:bd:96: 17:a8:6b:40:d9:22:82:2f:25:99:83:0a:65:4b:c2:66:fb:86: b1:ed:0d:9f:73:d2:d6:c4:14:79:cc:ba:97:3f:b0:56:c7:3c: 3c:60:0f:cd:4b:64:52:7d:09:6b:e0:fc:ff:e1:a8:89:99:18: 09:0e:75:d8:d2:e3:b7:66:89:47:98:49:8d:40:52:ce:b4:80: c0:4e:6e:e5:ee:ba:f8:ff:aa:33:54:8f:66:de:80:95:22:b4: 40:46:10:53:1a:fb:2a:9b:2a:75:2a:38:5f:b9:de:23:73:c3: 7a:03:81:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYe47Xu9MyCHKgIgskymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EygwZjRiNzE5OTk5MWVhNDBlNmZjMjYwODM2MDg0MTJmZDkwNjY2OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5e4TIvPwBH+4br9ZeGUJUCQ6nuB ULl1HQNQ+G8ZxoGWlaJf1AidrnnyqBZF/JD4ITlrOBBW9T31k1yIzfmqA7EKfSNp VPoRbeG1ZWVchchSJMixEkOt6El8kpha+2hVPiJs/rc5qW6OAk5Z9tcr2767m+JG OXqa23iq6I+go08BVv+tA6i6N/GqElARCxy3PMV7tvtvgX5U/i9FDaJlatKkReI+ KfBCacTxaiXBQO1QEWTEYNx1x+gUaD9F94+cRvpwJRHEEJTkRK2x+HHdkYejZuYA UWqp2SCvZZ8ksPAU/iUL75LlOIQn4JtQXaCxZD+RtXCEB+zJA0/y3T6+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9LcZmZHqQOb8Jgg2CEEv2QZmmaMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifxoPdBN +zTQvyC+OEuo9q0sYG7MqSfEQO+e003aOg4yWkwBFSOE92yQALVXn+NjuSKeBPnP chznvYJTkRFtElLG/kHIa//LI9LSDiYI6JxB21MnJCDDuq+UOMiH5mhe5tSsqwTP Da6vSwbiPUDG+3+DdyQUP9afCLui59UlYHGMKOWPMrkNKF+echTKC72WF6hrQNki gi8lmYMKZUvCZvuGse0Nn3PS1sQUecy6lz+wVsc8PGAPzUtkUn0Ja+D8/+GoiZkY CQ512NLjt2aJR5hJjUBSzrSAwE5u5e66+P+qM1SPZt6AlSK0QEYQUxr7KpsqdSo4 X7neI3PDegOB3w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:14 2025 by rpki-client