This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json) Hash identifier: 4pco3gnDhMNMngzbIyszKlyX5OVJAIBf+ckHUzoTQqM= Subject key identifier: 8C:B8:50:04:A3:90:D7:3F:46:83:01:88:8D:9A:D6:9A:AC:90:7E:A2 Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e Certificate serial: 019AF31C6821B7BFD1F910E3BEB1343F5DC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft Manifest number: 1010 Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=) 2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: OlCn81CXyfliKTyEjKl9U4VNGfRrs1Ym7vrQa8ENUsI=) 3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:68:21:b7:bf:d1:f9:10:e3:be:b1:34:3f:5d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=8cb85004a390d73f468301888d9ad69aac907ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:07:58:2f:67:1f:f4:22:a6:0c:7a:38:a7: 84:cc:85:e0:ac:37:26:53:1b:1e:0a:01:7e:01:09: 0e:1a:cf:ae:e8:bb:57:ea:52:4f:c0:df:9c:91:a8: a2:6c:1e:a5:70:fb:b4:8d:9e:90:48:3e:78:47:ec: ab:a9:59:84:3f:7c:3d:fb:dc:39:b5:4f:14:34:cd: 6a:a0:91:58:ba:d1:72:e2:bf:b1:e4:3c:f8:3f:b2: af:99:8a:ad:5f:0e:2d:ab:1e:91:1f:e2:f6:b0:36: 6d:a5:33:04:ad:59:ea:ce:85:af:51:86:91:cb:bb: 03:69:ab:1a:69:54:96:25:95:05:d0:68:60:51:b1: c9:82:fe:7b:fc:c0:88:5a:bd:6f:66:36:67:a7:4c: fc:37:af:03:ca:07:ab:8a:9c:2b:89:fc:9f:14:b2: 11:62:c4:39:4c:e6:79:45:64:52:c8:f0:fc:c4:82: cd:ec:bb:58:16:d3:65:0b:52:78:90:63:72:30:f6: ef:63:96:38:55:56:1c:37:df:41:6e:d1:94:ad:c3: ce:c8:27:2c:ac:5a:ac:a2:06:1f:c9:e4:65:1b:23: af:b8:ce:83:b0:83:ae:ce:fb:7c:c8:5d:f9:78:c4: fb:56:1a:48:a2:3a:9e:e8:64:38:a8:55:f3:58:0d: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B8:50:04:A3:90:D7:3F:46:83:01:88:8D:9A:D6:9A:AC:90:7E:A2 X509v3 Authority Key Identifier: keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:3b:55:ec:ae:3d:83:1b:34:21:c8:79:2c:a4:61:0e:9a:15: 65:a1:83:f8:f0:97:36:10:4d:27:b8:6d:bb:ee:35:2e:09:07: 4d:1d:fd:c4:da:88:32:b3:94:e2:12:ae:17:64:cf:bf:a2:cb: 37:d9:34:16:b2:1b:44:01:a0:c0:3b:57:2a:a8:44:39:93:fe: 57:e2:14:09:43:6b:0e:c0:e5:78:08:99:fa:3a:c7:da:a9:74: 0d:0d:46:52:fa:04:88:46:c9:eb:0f:55:ce:c7:0d:7d:b0:3a: d6:6a:12:46:c0:83:3b:3f:f1:29:65:59:5d:98:38:8a:73:68: 3a:65:68:bf:2a:da:4a:06:db:2a:bc:9f:23:14:9b:22:38:30: 1a:69:4e:75:23:25:b7:6f:41:d8:cd:2a:a2:8a:9a:52:b1:00: ee:0c:2b:45:a8:98:86:21:39:21:77:e8:f7:1a:70:8d:c6:74: 06:3d:a7:f8:1c:63:65:c1:73:65:6a:4c:7e:5b:19:5e:a8:79: 3c:0a:24:e0:5a:22:74:e3:9e:36:e5:68:17:66:3b:f3:f1:75: 4d:78:ac:39:82:53:e9:8e:3f:e2:65:e5:92:d6:f5:8c:23:74: 1a:7f:bc:91:f2:c3:18:55:c1:d3:2e:7d:a4:24:68:09:16:e8: 26:ee:0b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGght7/R+RDjvrE0P13FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx YWM0N2UwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD Eyg4Y2I4NTAwNGEzOTBkNzNmNDY4MzAxODg4ZDlhZDY5YWFjOTA3ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx4HWC9nH/Qipgx6OKeEzIXgrDcm UxseCgF+AQkOGs+u6LtX6lJPwN+ckaiibB6lcPu0jZ6QSD54R+yrqVmEP3w9+9w5 tU8UNM1qoJFYutFy4r+x5Dz4P7KvmYqtXw4tqx6RH+L2sDZtpTMErVnqzoWvUYaR y7sDaasaaVSWJZUF0GhgUbHJgv57/MCIWr1vZjZnp0z8N68DygeripwrifyfFLIR YsQ5TOZ5RWRSyPD8xILN7LtYFtNlC1J4kGNyMPbvY5Y4VVYcN99BbtGUrcPOyCcs rFqsogYfyeRlGyOvuM6DsIOuzvt8yF35eMT7VhpIojqe6GQ4qFXzWA0XsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy4UASjkNc/RoMBiI2a1pqskH6iMB8GA1UdIwQY MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTtV7K49 gxs0Ich5LKRhDpoVZaGD+PCXNhBNJ7htu+41LgkHTR39xNqIMrOU4hKuF2TPv6LL N9k0FrIbRAGgwDtXKqhEOZP+V+IUCUNrDsDleAiZ+jrH2ql0DQ1GUvoEiEbJ6w9V zscNfbA61moSRsCDOz/xKWVZXZg4inNoOmVovyraSgbbKryfIxSbIjgwGmlOdSMl t29B2M0qooqaUrEA7gwrRaiYhiE5IXfo9xpwjcZ0Bj2n+BxjZcFzZWpMflsZXqh5 PAok4FoidOOeNuVoF2Y78/F1TXisOYJT6Y4/4mXlktb1jCN0Gn+8kfLDGFXB0y59 pCRoCRboJu4LiA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:18:42 2025 by rpki-client