This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json) Hash identifier: ShLoVzvMVQs6tUn/EHRSQZCUS7el5WqLmjFvkKZqxnc= Subject key identifier: 76:EC:5A:C0:ED:D0:AC:26:A1:68:D8:87:22:7F:33:91:AF:F6:58:27 Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98 Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98 Certificate serial: 019AF2ADDC7924F5DF25FC0BB5F734A36A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft Manifest number: 0BCE Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=) 2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: 5vgf6Bz9b6UK7ew4qOO4u+Uyufo6HoXDlXms8YdMp9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:dc:79:24:f5:df:25:fc:0b:b5:f7:34:a3:6a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98 Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=76ec5ac0edd0ac26a168d887227f3391aff65827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:87:74:20:14:33:ec:5c:19:64:c1:9d:98: bb:17:a6:5b:01:0b:bf:3b:5c:4c:a4:94:5c:ce:ee: 72:8d:a9:c8:70:1f:85:6c:49:b6:33:3a:b2:c0:87: 9a:98:81:e7:40:6c:df:f0:cf:f8:39:74:49:cb:53: ff:14:48:f6:31:fd:da:a1:ca:f8:34:6e:0d:02:79: dd:63:31:4d:57:33:fd:4b:aa:86:2b:ae:23:b8:1d: d6:83:95:05:c4:d6:d4:c0:09:d9:fd:14:37:1b:11: 6b:04:b1:18:ad:9e:24:cc:d8:e7:80:3e:f4:f6:87: 85:45:bc:85:80:35:ba:05:af:ea:1b:49:fc:42:02: 75:0a:7f:ca:93:1a:c1:e5:31:d0:59:c8:84:88:74: ea:0d:8b:63:21:1f:83:e3:34:16:73:dc:54:31:07: dc:95:bb:24:84:9a:e9:64:c0:7d:bb:ee:b5:1a:64: 43:bb:98:37:83:93:70:32:b8:23:ae:6b:93:92:6c: 91:8d:9d:3b:2e:36:e2:db:1d:40:ca:91:4b:af:eb: ad:cb:a4:b3:9b:ba:7a:0b:08:38:20:5a:36:57:8e: 85:fc:33:bb:31:64:60:ff:85:d2:63:b9:19:3f:8b: c4:5e:b2:29:4b:30:48:e1:58:85:ac:1d:f4:07:e7: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EC:5A:C0:ED:D0:AC:26:A1:68:D8:87:22:7F:33:91:AF:F6:58:27 X509v3 Authority Key Identifier: keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2a:aa:6a:8f:36:27:84:4e:fb:5e:93:ab:35:e1:67:a1:bf: cb:04:4c:bc:e9:b3:72:a0:40:cd:c3:1e:3a:be:69:7e:27:b9: 3a:36:61:e9:13:05:32:b4:d6:0b:19:28:18:64:9a:ff:11:62: 51:1f:52:50:0d:64:14:ab:7c:c0:7c:93:d9:5a:7f:73:1a:d0: 0b:50:de:a5:27:2b:f7:f2:f7:0b:56:48:43:6e:d5:08:54:07: 45:34:78:4c:cc:d1:cc:21:dc:02:2f:29:f8:97:7d:f7:fb:b7: 5a:1e:36:eb:11:32:f9:02:5b:09:0a:03:56:f7:ed:5f:21:6d: a0:12:29:82:92:43:da:bd:9b:10:5e:f3:d6:39:37:cc:97:1f: 96:14:05:77:3d:fc:3c:48:c4:a8:9f:8c:3b:7a:05:43:58:e2: 3a:bc:e1:8a:73:c1:d0:7c:f5:cd:08:b5:bb:92:2e:9f:f5:b7: a4:96:41:a2:fd:95:d0:a5:48:24:fd:d3:13:05:e9:1a:fc:e6: dc:bc:26:1c:f8:64:02:0b:83:ee:8b:b0:5e:65:46:87:3d:55: fd:b1:79:64:a2:a3:3c:eb:2b:7a:e9:df:bb:db:15:25:d6:f2: 8a:e6:7c:35:06:de:fa:23:66:5c:41:81:71:98:9f:3d:ca:7e: cb:a9:f9:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdx5JPXfJfwLtfc0o2ohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzU2YzVlYTU0NzhmNGQzN2IzMGYzNjgyZTQzYjdlMmVm OTBkOTgwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD Eyg3NmVjNWFjMGVkZDBhYzI2YTE2OGQ4ODcyMjdmMzM5MWFmZjY1ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6HdCAUM+xcGWTBnZi7F6ZbAQu/ O1xMpJRczu5yjanIcB+FbEm2MzqywIeamIHnQGzf8M/4OXRJy1P/FEj2Mf3aocr4 NG4NAnndYzFNVzP9S6qGK64juB3Wg5UFxNbUwAnZ/RQ3GxFrBLEYrZ4kzNjngD70 9oeFRbyFgDW6Ba/qG0n8QgJ1Cn/KkxrB5THQWciEiHTqDYtjIR+D4zQWc9xUMQfc lbskhJrpZMB9u+61GmRDu5g3g5NwMrgjrmuTkmyRjZ07Ljbi2x1AypFLr+uty6Sz m7p6Cwg4IFo2V46F/DO7MWRg/4XSY7kZP4vEXrIpSzBI4ViFrB30B+exSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbsWsDt0KwmoWjYhyJ/M5Gv9lgnMB8GA1UdIwQY MBaAFJbFbF6lR49NN7MPNoLkO34u+Q2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMt MzVjNzhlNzAxOTllLzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMtMzVjNzhlNzAxOTll LzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiqqao82 J4RO+16TqzXhZ6G/ywRMvOmzcqBAzcMeOr5pfie5OjZh6RMFMrTWCxkoGGSa/xFi UR9SUA1kFKt8wHyT2Vp/cxrQC1DepScr9/L3C1ZIQ27VCFQHRTR4TMzRzCHcAi8p +Jd99/u3Wh426xEy+QJbCQoDVvftXyFtoBIpgpJD2r2bEF7z1jk3zJcflhQFdz38 PEjEqJ+MO3oFQ1jiOrzhinPB0Hz1zQi1u5Iun/W3pJZBov2V0KVIJP3TEwXpGvzm 3LwmHPhkAguD7ouwXmVGhz1V/bF5ZKKjPOsreunfu9sVJdbyiuZ8NQbe+iNmXEGB cZifPcp+y6n5xw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:33 2025 by rpki-client