This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json) Hash identifier: pdU8qwhW1cVtAfyIwZ1LQY1eqmGZD9ZKYzpnaMPW9NM= Subject key identifier: 2B:AF:88:63:95:AA:87:12:F1:DC:B0:BB:87:A4:F5:91:92:7C:D6:9F Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54 Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454 Certificate serial: 019B0FDBF6917B67F1A151C4DEC9492667B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft Manifest number: 01FC Signing time: Fri 12 Dec 2025 00:00:32 +0000 Manifest this update: Fri 12 Dec 2025 00:00:32 +0000 Manifest next update: Sat 13 Dec 2025 00:00:32 +0000 Files and hashes: 1: gpSFuAfs-49fboUul0as1hNOe7s.roa (hash: a1c1k2V4AvypPkcspZ9MdLob1wApcJ4k2MzGZWzvoow=) 2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: UKlc1bPKjNvgyywGTJu8anKS+OnpuoZBHbShEz+E3BQ=) 3: vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa (hash: keZjBn73pIW4PKlhodbog2eBUEbjStbSn55ErmksOpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:db:f6:91:7b:67:f1:a1:51:c4:de:c9:49:26:67:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454 Validity Not Before: Dec 12 00:00:32 2025 GMT Not After : Dec 13 00:00:32 2025 GMT Subject: CN=2baf886395aa8712f1dcb0bb87a4f591927cd69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:26:87:1f:70:ca:fe:ff:20:2d:17:a8:84: 17:5d:6e:a5:df:11:06:82:eb:db:51:d5:07:e3:3c: 67:7e:9f:f3:ea:bf:13:c6:0b:15:be:9d:a9:fb:b8: ea:12:fb:2f:22:8f:d2:8b:98:88:66:f3:06:d2:d7: 26:2e:70:2e:1e:e7:e5:13:c8:52:54:c9:1b:27:32: 39:6f:f7:79:79:a7:2a:2b:cc:37:ed:4a:93:ba:d3: dd:14:32:1e:b6:ab:5b:2f:9e:bf:01:6c:e9:a0:d0: 4e:d4:2d:26:8e:0d:b3:5e:63:f3:57:04:64:08:17: 83:29:90:2c:aa:40:14:09:1d:23:7c:eb:3c:ac:7e: c1:37:6c:37:2b:db:07:2f:72:b0:23:50:38:d6:41: ad:92:43:27:f9:65:cb:8c:04:1e:29:41:13:f6:78: d7:f1:12:73:25:a6:a9:4c:d4:b2:92:8c:09:8c:ca: 2e:0b:be:c4:da:be:77:7c:bf:4b:bb:f9:79:41:3e: b8:88:b2:0d:43:7f:2e:cb:3d:f3:83:e3:f9:19:ec: fc:45:bf:86:86:49:85:67:bf:e6:7e:34:8f:f9:06: e5:08:68:43:0a:07:23:13:76:7b:ba:07:c0:a0:c9: d4:9c:53:8d:03:75:41:46:78:4c:38:4b:6f:15:f3: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AF:88:63:95:AA:87:12:F1:DC:B0:BB:87:A4:F5:91:92:7C:D6:9F X509v3 Authority Key Identifier: keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:11:1d:1a:54:0c:b4:4b:f2:a7:4d:7f:77:38:0e:56:27:f0: b6:ef:c9:ba:af:1e:dc:42:e3:01:f1:23:42:6f:d6:b2:97:13: 87:2a:3b:f4:a9:71:9f:9e:92:5c:d9:89:c5:ef:57:d7:7a:b4: 48:b7:4b:10:86:89:eb:2c:9d:fd:3a:ed:0e:ea:75:58:78:44: d6:82:15:3a:41:c2:b4:b5:ee:8d:37:b9:5d:04:e5:03:3a:10: 6a:f4:e2:ef:2f:83:43:f0:9a:59:94:8c:a9:94:33:5e:8f:a2: f2:0d:81:c6:a0:cf:28:68:dc:6b:9d:6c:d5:57:15:55:29:a4: d0:09:33:60:98:09:fe:c8:82:26:ef:69:ef:23:ca:5f:31:c8: 40:f9:af:33:24:68:38:af:75:e4:f5:08:e2:b8:66:7a:c2:3f: e7:0d:df:c9:ae:94:2a:37:d7:f3:1e:cd:be:63:77:de:c3:43: 4e:7a:52:f2:2a:be:bb:4a:40:a6:19:13:0c:5f:0c:80:bb:ee: a1:98:89:8f:e5:11:19:26:f3:5b:dc:b5:fe:b4:2d:61:9e:94: bf:f0:76:05:a9:84:8d:9d:f8:05:a5:db:b3:87:3b:d8:d0:a9: 8f:ab:20:59:15:ef:18:e8:5f:5f:d4:fd:89:d6:d6:e8:f3:bc: 03:ff:fe:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP2/aRe2fxoVHE3slJJme5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh MTg0NTQwHhcNMjUxMjEyMDAwMDMyWhcNMjUxMjEzMDAwMDMyWjAzMTEwLwYDVQQD EygyYmFmODg2Mzk1YWE4NzEyZjFkY2IwYmI4N2E0ZjU5MTkyN2NkNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdAmhx9wyv7/IC0XqIQXXW6l3xEG guvbUdUH4zxnfp/z6r8TxgsVvp2p+7jqEvsvIo/Si5iIZvMG0tcmLnAuHuflE8hS VMkbJzI5b/d5eacqK8w37UqTutPdFDIetqtbL56/AWzpoNBO1C0mjg2zXmPzVwRk CBeDKZAsqkAUCR0jfOs8rH7BN2w3K9sHL3KwI1A41kGtkkMn+WXLjAQeKUET9njX 8RJzJaapTNSykowJjMouC77E2r53fL9Lu/l5QT64iLINQ38uyz3zg+P5Gez8Rb+G hkmFZ7/mfjSP+QblCGhDCgcjE3Z7ugfAoMnUnFONA3VBRnhMOEtvFfPdkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuviGOVqocS8dywu4ek9ZGSfNafMB8GA1UdIwQY MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt YTdiODU0NjBmMzY2LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2 LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJREdGlQM tEvyp01/dzgOVifwtu/Juq8e3ELjAfEjQm/WspcThyo79Klxn56SXNmJxe9X13q0 SLdLEIaJ6yyd/TrtDup1WHhE1oIVOkHCtLXujTe5XQTlAzoQavTi7y+DQ/CaWZSM qZQzXo+i8g2BxqDPKGjca51s1VcVVSmk0AkzYJgJ/siCJu9p7yPKXzHIQPmvMyRo OK915PUI4rhmesI/5w3fya6UKjfX8x7NvmN33sNDTnpS8iq+u0pAphkTDF8MgLvu oZiJj+URGSbzW9y1/rQtYZ6Uv/B2BamEjZ34BaXbs4c72NCpj6sgWRXvGOhfX9T9 idbW6PO8A//+pg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:08 2025 by rpki-client