This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json) Hash identifier: vlidvLzh4bxvegra8n1bx801jLZLQR6KU8je39y820Y= Subject key identifier: FE:9E:13:A1:48:82:1A:34:04:2E:0B:3E:FD:33:07:9F:D9:C6:2F:17 Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Certificate serial: 019B40FFD3D549C6BA807E54F8B7DCFEF1AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft Manifest number: 0E69 Signing time: Sun 21 Dec 2025 13:01:06 +0000 Manifest this update: Sun 21 Dec 2025 13:01:06 +0000 Manifest next update: Mon 22 Dec 2025 13:01:06 +0000 Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: Mj3RFtTsK57X18Rzm3hqyPksVNs2iXvODyzq0pwujeM=) 2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:d3:d5:49:c6:ba:80:7e:54:f8:b7:dc:fe:f1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Validity Not Before: Dec 21 13:01:06 2025 GMT Not After : Dec 22 13:01:06 2025 GMT Subject: CN=fe9e13a148821a34042e0b3efd33079fd9c62f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:ad:55:f8:30:69:78:2b:99:a0:40:2a:23: fe:c6:2a:f0:4b:6c:a8:7b:0a:30:f8:00:32:87:7d: 06:97:2e:47:2c:cf:77:f8:be:c8:fd:95:c6:91:6d: ff:44:7c:84:2e:84:2d:5e:fe:34:8a:f8:e7:f5:4d: ab:79:29:8f:e1:8a:be:51:53:0e:28:7c:13:a4:70: ee:f9:20:0b:fe:d9:79:9e:99:68:b7:d8:fe:3c:3e: f2:09:b7:e4:63:45:be:54:bb:1b:3b:10:64:ee:60: b5:30:20:e5:de:ce:64:38:32:ae:18:7b:1c:67:22: c1:78:3e:ad:92:64:0c:52:5b:e2:6c:4c:74:60:1e: af:ee:30:02:1c:41:e1:cc:bd:67:92:11:ba:34:e5: 7f:87:36:c7:8a:9b:de:93:5c:5f:0c:fa:86:de:03: 84:d2:75:1b:31:f5:0a:9c:79:ed:a1:ca:83:b9:02: 9d:7c:6a:05:d4:db:1c:e0:13:af:99:46:d7:07:78: 0f:ae:54:c6:8d:98:1c:8f:57:d6:c1:58:a6:13:f3: 9c:05:eb:b5:5c:40:40:75:fd:6d:87:5f:81:2a:fb: cc:dd:c5:d6:38:7b:3b:28:0f:3d:63:21:53:e7:2b: b7:d7:e4:42:ba:1e:2f:39:5f:14:5f:e4:2e:43:92: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9E:13:A1:48:82:1A:34:04:2E:0B:3E:FD:33:07:9F:D9:C6:2F:17 X509v3 Authority Key Identifier: keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d5:72:ef:7f:b4:4c:1a:ff:35:d5:85:33:e8:19:3f:3c:6f: 01:fe:2f:8f:9d:92:6a:c9:12:bb:c5:18:50:ea:0c:5b:b4:9b: fd:00:a2:93:c4:e1:2a:89:22:9b:78:06:f4:13:a7:5f:74:b4: 27:e8:9e:60:4d:9f:98:06:ec:03:27:74:db:7a:fd:f2:5f:b3: 3d:e8:70:36:04:79:36:60:f1:70:da:18:c0:d1:54:24:be:42: 16:f1:c4:87:cd:8f:20:4c:39:b8:51:7e:3f:91:14:6e:0b:9e: d2:1e:51:46:ba:92:0b:fd:ef:5b:4b:93:bd:2d:2a:4a:8a:5e: b6:c5:2a:20:eb:20:2d:0c:b3:4a:40:2a:f4:3d:0b:39:df:b8: cc:86:71:43:12:39:5e:d0:b0:53:65:e6:a0:2f:80:ce:2e:95: 69:bc:d8:c5:14:ab:01:e1:44:cf:94:61:a7:ea:ca:8f:2a:51: e2:f3:29:b7:06:13:cc:93:ca:b5:8f:a0:2d:30:17:9e:ee:bb: d8:5c:fc:9a:cc:ee:71:38:f9:c0:bb:bc:52:99:c2:b8:f1:59: b4:4a:11:24:f3:ea:66:72:8d:68:86:e1:4e:bd:f2:47:1a:a7: 56:73:84:15:90:9e:bf:33:9b:28:c0:b2:e4:d8:2e:95:59:24: ff:ea:a0:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/9PVSca6gH5U+Lfc/vGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MGRkN2NkY2U1ODhiZGFhMmI3YThjYjA1NmQ0ZGIwMTY3 MDE1MzIwHhcNMjUxMjIxMTMwMTA2WhcNMjUxMjIyMTMwMTA2WjAzMTEwLwYDVQQD EyhmZTllMTNhMTQ4ODIxYTM0MDQyZTBiM2VmZDMzMDc5ZmQ5YzYyZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71WtVfgwaXgrmaBAKiP+xirwS2yo ewow+AAyh30Gly5HLM93+L7I/ZXGkW3/RHyELoQtXv40ivjn9U2reSmP4Yq+UVMO KHwTpHDu+SAL/tl5nplot9j+PD7yCbfkY0W+VLsbOxBk7mC1MCDl3s5kODKuGHsc ZyLBeD6tkmQMUlvibEx0YB6v7jACHEHhzL1nkhG6NOV/hzbHipvek1xfDPqG3gOE 0nUbMfUKnHntocqDuQKdfGoF1Nsc4BOvmUbXB3gPrlTGjZgcj1fWwVimE/OcBeu1 XEBAdf1th1+BKvvM3cXWOHs7KA89YyFT5yu31+RCuh4vOV8UX+QuQ5J8SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6eE6FIgho0BC4LPv0zB5/Zxi8XMB8GA1UdIwQY MBaAFJYN183OWIvaoreoywVtTbAWcBUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzIt OTAyZmYxN2JjNDk0LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0 LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntVy73+0 TBr/NdWFM+gZPzxvAf4vj52SaskSu8UYUOoMW7Sb/QCik8ThKokim3gG9BOnX3S0 J+ieYE2fmAbsAyd023r98l+zPehwNgR5NmDxcNoYwNFUJL5CFvHEh82PIEw5uFF+ P5EUbgue0h5RRrqSC/3vW0uTvS0qSopetsUqIOsgLQyzSkAq9D0LOd+4zIZxQxI5 XtCwU2XmoC+Azi6VabzYxRSrAeFEz5Rhp+rKjypR4vMptwYTzJPKtY+gLTAXnu67 2Fz8mszucTj5wLu8UpnCuPFZtEoRJPPqZnKNaIbhTr3yRxqnVnOEFZCevzObKMCy 5NgulVkk/+qgTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:50:24 2025 by rpki-client