This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json) Hash identifier: QxebX8u52QC6FXKQTAqQmYeXLukLhWUxty95t5r7Cis= Subject key identifier: C2:3A:49:15:A3:3A:98:74:2C:C9:4B:35:40:6B:0F:BB:10:36:FA:AA Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5 Certificate serial: 019AF0882055852E6A1F502B7EB604BD1413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:44 +0000 Manifest this update: Fri 05 Dec 2025 22:00:44 +0000 Manifest next update: Sat 06 Dec 2025 22:00:44 +0000 Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: tFrJfTN94hNHZNAOlvHnTvOB+5/gZ9FhHMZQDAIBH5s=) 2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:20:55:85:2e:6a:1f:50:2b:7e:b6:04:bd:14:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5 Validity Not Before: Dec 5 22:00:44 2025 GMT Not After : Dec 6 22:00:44 2025 GMT Subject: CN=c23a4915a33a98742cc94b35406b0fbb1036faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:e4:61:d5:17:a3:06:ef:ba:9c:cf:3d:c2: c9:9c:56:7c:2d:a3:80:f5:26:46:52:19:81:72:ad: de:61:4b:71:63:6f:ba:28:7b:35:78:09:08:c3:24: 59:ac:22:3f:c2:08:56:b7:60:98:2f:b6:c3:17:31: 8b:98:b5:f9:5e:95:1f:25:fa:52:4c:36:75:22:11: fa:a0:7c:88:6d:54:9c:cb:01:e3:1b:26:68:c3:79: d0:9f:90:15:b0:61:2d:7f:1b:3a:5f:52:06:2e:6a: 8c:03:4d:30:5a:88:a0:7b:0c:62:73:59:f0:79:5f: c7:c5:da:5a:36:5d:1f:09:f2:b3:63:80:bb:79:e3: cd:c3:57:39:12:13:12:65:97:cd:13:c7:53:5f:d8: 68:d6:cd:26:d0:99:db:9b:45:24:ea:b2:b3:3a:01: 0a:40:fb:17:9f:ca:52:0f:a3:eb:81:3a:2e:d5:9b: 6c:98:c8:ce:01:fd:41:d3:5a:23:3d:04:12:ee:c2: 2b:d1:3f:b6:37:21:93:7b:b5:d6:9b:b3:77:8b:86: 61:73:9d:f8:62:52:8a:52:0a:71:5c:af:26:8f:20: 95:ac:cb:36:ce:ed:d1:c8:5c:7a:ab:2f:d4:ef:e8: f1:59:9a:be:00:41:e0:f2:2f:8c:e2:42:47:bd:76: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:49:15:A3:3A:98:74:2C:C9:4B:35:40:6B:0F:BB:10:36:FA:AA X509v3 Authority Key Identifier: keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:44:61:8a:72:30:5e:68:84:32:32:9d:86:fb:f8:f5:ae:fc: 77:02:b6:07:24:be:d2:66:58:88:92:15:34:40:0a:9d:3b:08: 26:ee:96:c8:80:d8:cd:b4:0d:33:19:16:ab:07:b3:7a:5b:7d: 84:22:16:e6:39:e8:b8:20:77:ac:81:03:94:95:d2:61:32:e4: 94:e1:b5:b7:c1:f8:34:7a:d3:df:e0:82:4a:1f:3c:04:51:91: 33:f5:1d:46:b3:03:ce:e1:a9:1d:b0:4b:ac:8c:ce:52:2a:d9: a7:08:5f:d0:c0:4e:a5:4b:c2:c6:a3:86:1d:4a:4f:11:f3:f1: e5:db:03:54:8a:07:fd:59:a7:76:c9:39:c5:10:a3:fd:3f:21: 03:d9:ff:94:de:e1:d2:30:e2:fb:f6:9e:df:b3:0c:78:9e:81: 8f:58:48:9f:00:dc:82:b0:db:e3:91:b8:17:e0:23:bb:5c:5f: 7f:ff:0b:63:80:1f:72:9f:13:14:66:fb:8c:53:7d:66:bd:76: 50:88:6b:39:94:5d:41:73:13:a0:70:10:17:2c:4b:64:53:ca: b9:72:94:bb:3b:21:60:71:fa:2b:5a:b1:a9:ab:64:fb:60:32: a3:75:f3:fb:e7:93:c2:15:96:f6:5e:c5:da:ac:19:af:ca:0d: cc:2d:d1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCBVhS5qH1ArfrYEvRQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz MTIzYjUwHhcNMjUxMjA1MjIwMDQ0WhcNMjUxMjA2MjIwMDQ0WjAzMTEwLwYDVQQD EyhjMjNhNDkxNWEzM2E5ODc0MmNjOTRiMzU0MDZiMGZiYjEwMzZmYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4rkYdUXowbvupzPPcLJnFZ8LaOA 9SZGUhmBcq3eYUtxY2+6KHs1eAkIwyRZrCI/wghWt2CYL7bDFzGLmLX5XpUfJfpS TDZ1IhH6oHyIbVScywHjGyZow3nQn5AVsGEtfxs6X1IGLmqMA00wWoigewxic1nw eV/HxdpaNl0fCfKzY4C7eePNw1c5EhMSZZfNE8dTX9ho1s0m0Jnbm0Uk6rKzOgEK QPsXn8pSD6PrgTou1ZtsmMjOAf1B01ojPQQS7sIr0T+2NyGTe7XWm7N3i4Zhc534 YlKKUgpxXK8mjyCVrMs2zu3RyFx6qy/U7+jxWZq+AEHg8i+M4kJHvXZr5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI6SRWjOph0LMlLNUBrD7sQNvqqMB8GA1UdIwQY MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0RhinIw XmiEMjKdhvv49a78dwK2ByS+0mZYiJIVNEAKnTsIJu6WyIDYzbQNMxkWqwezelt9 hCIW5jnouCB3rIEDlJXSYTLklOG1t8H4NHrT3+CCSh88BFGRM/UdRrMDzuGpHbBL rIzOUirZpwhf0MBOpUvCxqOGHUpPEfPx5dsDVIoH/Vmndsk5xRCj/T8hA9n/lN7h 0jDi+/ae37MMeJ6Bj1hInwDcgrDb45G4F+Aju1xff/8LY4Afcp8TFGb7jFN9Zr12 UIhrOZRdQXMToHAQFyxLZFPKuXKUuzshYHH6K1qxqatk+2Ayo3Xz++eTwhWW9l7F 2qwZr8oNzC3RzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:50 2025 by rpki-client