This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json) Hash identifier: fdpjt5V/idPmU/GUXIHn+nDMB5OrbRjCGqhij9R7aTg= Subject key identifier: 2B:1A:07:E9:8F:DC:F7:D8:D4:21:7D:BF:FC:C9:38:AA:00:E8:4E:2C Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Certificate serial: 019B34FB734D172140F8F34747317299BA44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft Manifest number: 020D Signing time: Fri 19 Dec 2025 05:00:52 +0000 Manifest this update: Fri 19 Dec 2025 05:00:52 +0000 Manifest next update: Sat 20 Dec 2025 05:00:52 +0000 Files and hashes: 1: aE6W_12we24MrX4UESfc-orZJK0.roa (hash: Tn+H21K97sLydc4eo5ghf77e2fc70nABLBDtYTFdsDQ=) 2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: yjjgUgbdI8bGDAddAWPQFZgjKPv+bjzUiGdZ/JcHwjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:73:4d:17:21:40:f8:f3:47:47:31:72:99:ba:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Validity Not Before: Dec 19 05:00:52 2025 GMT Not After : Dec 20 05:00:52 2025 GMT Subject: CN=2b1a07e98fdcf7d8d4217dbffcc938aa00e84e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:a7:8a:03:01:70:a2:2b:a4:08:d6:63:fc: 71:7c:cb:41:26:0b:9c:53:1e:bc:51:72:04:e8:28: ec:4d:4e:0f:ff:45:7e:c0:2b:74:7f:ee:79:31:25: 38:76:92:15:1d:fa:d2:15:4e:c6:48:74:fe:9c:e7: 32:22:fd:1c:18:5c:7f:ba:b9:d8:cc:99:9b:06:2e: 8e:1d:0f:2a:13:8e:b9:f2:7f:5b:c6:6a:ec:02:e4: e1:d5:f7:aa:93:40:30:33:16:54:33:6e:25:5b:41: 19:aa:35:78:c8:69:d0:0b:92:13:aa:66:5e:d0:04: c3:9b:e1:ff:b9:b8:91:0c:34:44:5b:da:73:92:47: e1:22:02:4d:7a:95:60:6e:be:8c:7b:03:91:e9:5d: 7f:d6:c6:2f:5c:5a:74:90:fe:a8:96:a8:b9:85:33: 3f:31:72:12:59:7e:77:db:50:68:bd:37:fa:2a:5e: e4:d8:eb:34:06:ef:05:6f:4e:82:e3:95:26:4f:55: 42:b4:e7:90:b0:88:41:f9:a5:07:5a:ac:99:15:82: 39:d4:5f:5b:51:b2:44:c1:f7:d9:02:00:9e:da:ab: 06:1a:a5:4a:2b:ff:4c:21:30:8c:60:c4:07:d3:b7: 29:41:1a:28:6c:e8:f6:7a:29:cb:6c:98:07:a7:dc: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:07:E9:8F:DC:F7:D8:D4:21:7D:BF:FC:C9:38:AA:00:E8:4E:2C X509v3 Authority Key Identifier: keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fd:5f:c6:25:16:af:79:af:2e:cf:01:b7:5f:ae:30:a6:6d: f9:7b:2e:c4:19:ee:50:92:ef:29:c2:bc:af:cc:98:30:07:01: d1:cf:6f:9e:63:15:15:53:e9:12:4a:30:fd:de:b0:7a:79:cd: ca:5e:7c:d7:0f:60:cf:cf:bd:47:70:53:0a:48:1b:c0:0c:62: 0b:1c:0e:eb:4f:51:2f:db:13:cd:0a:1d:d6:d9:70:08:7e:0f: a5:f5:e9:7a:2f:fd:06:e0:41:67:a3:06:6b:92:8c:55:34:c1: 44:e7:4c:cb:1d:28:7e:f4:d4:0b:69:42:85:68:b1:df:1b:45: c1:b8:52:5b:aa:85:db:9d:4b:98:5c:bd:82:d8:d6:28:6a:5c: 58:27:d6:8b:86:94:7a:e2:44:46:7d:19:f9:e4:24:17:b2:d4: 71:66:13:9f:86:e2:f3:73:4d:8d:3b:82:c3:a8:fb:7a:ef:45: 28:ab:2c:3f:dd:4c:9c:4b:43:3d:3c:a1:99:66:ad:4a:ee:3a: 11:12:cf:b4:39:44:c7:f5:83:d8:c7:8e:43:7e:8a:08:bb:64: ab:44:9e:82:2c:21:2e:00:b1:d8:b4:d9:19:96:10:0f:ea:96: c6:18:ca:0d:ae:63:bb:25:f8:b0:93:4b:bd:ca:e7:80:2d:3e: a0:c0:c1:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+3NNFyFA+PNHRzFymbpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj OGM1NTAwHhcNMjUxMjE5MDUwMDUyWhcNMjUxMjIwMDUwMDUyWjAzMTEwLwYDVQQD EygyYjFhMDdlOThmZGNmN2Q4ZDQyMTdkYmZmY2M5MzhhYTAwZTg0ZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fCnigMBcKIrpAjWY/xxfMtBJguc Ux68UXIE6CjsTU4P/0V+wCt0f+55MSU4dpIVHfrSFU7GSHT+nOcyIv0cGFx/urnY zJmbBi6OHQ8qE4658n9bxmrsAuTh1feqk0AwMxZUM24lW0EZqjV4yGnQC5ITqmZe 0ATDm+H/ubiRDDREW9pzkkfhIgJNepVgbr6MewOR6V1/1sYvXFp0kP6olqi5hTM/ MXISWX5321BovTf6Kl7k2Os0Bu8Fb06C45UmT1VCtOeQsIhB+aUHWqyZFYI51F9b UbJEwffZAgCe2qsGGqVKK/9MITCMYMQH07cpQRoobOj2einLbJgHp9zeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsaB+mP3PfY1CF9v/zJOKoA6E4sMB8GA1UdIwQY MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt YjBlNjA1OGQ0ZGQ3LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3 LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqf1fxiUW r3mvLs8Bt1+uMKZt+XsuxBnuUJLvKcK8r8yYMAcB0c9vnmMVFVPpEkow/d6wennN yl581w9gz8+9R3BTCkgbwAxiCxwO609RL9sTzQod1tlwCH4PpfXpei/9BuBBZ6MG a5KMVTTBROdMyx0ofvTUC2lChWix3xtFwbhSW6qF251LmFy9gtjWKGpcWCfWi4aU euJERn0Z+eQkF7LUcWYTn4bi83NNjTuCw6j7eu9FKKssP91MnEtDPTyhmWatSu46 ERLPtDlEx/WD2MeOQ36KCLtkq0SegiwhLgCx2LTZGZYQD+qWxhjKDa5juyX4sJNL vcrngC0+oMDB5w== -----END CERTIFICATE-----Generated at Fri Dec 19 14:00:05 2025 by rpki-client