This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json) Hash identifier: qVTMHlGDCSaS4dITdnOze7A2vrEZZFOy/JtWorhu6FY= Subject key identifier: 01:35:CD:4C:66:D9:0A:1E:9D:F4:97:47:43:29:D3:22:E5:E3:9E:67 Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Certificate serial: 019B115CC1D077C6F35C4968C400DEE13453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 07:00:50 +0000 Manifest this update: Fri 12 Dec 2025 07:00:50 +0000 Manifest next update: Sat 13 Dec 2025 07:00:50 +0000 Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=) 2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: eKm1L5edzTaGfksE5/VtSgwBCs0lW07S5KGBzDKSZjs=) 3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:c1:d0:77:c6:f3:5c:49:68:c4:00:de:e1:34:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Validity Not Before: Dec 12 07:00:50 2025 GMT Not After : Dec 13 07:00:50 2025 GMT Subject: CN=0135cd4c66d90a1e9df497474329d322e5e39e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:c3:7b:9b:28:9f:c2:16:6f:51:89:58:01: de:11:58:47:2f:19:ae:88:c2:87:f3:fe:d9:a8:b9: f9:fd:64:bc:ce:80:9f:4c:59:02:a0:48:2f:da:ea: 6e:1a:01:34:8b:ae:63:27:75:c8:2e:98:3e:a1:4e: 55:cb:97:2d:e0:8c:9f:66:30:3a:69:ab:0e:4b:3e: 54:ed:4f:01:b9:7b:cd:c0:1a:10:f7:67:1b:9b:29: 10:a1:f7:6d:04:fb:56:f6:f4:a9:a2:c3:65:5e:da: 47:20:e7:a7:f8:63:24:54:e4:a8:f3:53:02:70:88: b6:cd:f8:9d:35:07:56:17:76:63:0f:cd:55:f5:8f: 0e:30:a8:7f:33:fb:c1:fd:72:cc:b7:5b:61:fd:b4: e2:f8:21:35:64:8a:79:b2:70:41:ab:de:6d:5b:56: 03:62:c9:a7:46:b8:32:6a:c6:b5:b8:87:6d:78:9f: 14:cf:73:af:6d:9e:f4:53:11:77:70:c8:e1:c5:52: 20:57:77:24:41:02:e8:9b:f6:45:5c:cf:48:21:71: e4:6e:a3:75:bb:9a:19:88:ef:fb:5b:4e:aa:c4:c8: 6c:99:f9:52:d8:02:b7:43:2b:4e:61:76:97:88:70: 4f:0f:a2:5b:75:be:16:bf:10:51:1d:92:2d:2e:52: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:35:CD:4C:66:D9:0A:1E:9D:F4:97:47:43:29:D3:22:E5:E3:9E:67 X509v3 Authority Key Identifier: keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:75:e0:0a:6b:4d:06:3d:85:90:37:ed:b2:1a:30:76:f2:71: 2b:0d:a9:33:56:a0:61:36:0f:98:d4:a5:d4:55:bf:2e:b5:3a: 9f:21:6e:2d:f1:cc:a2:41:6e:61:fc:df:01:f3:57:17:de:d6: ce:a6:69:d6:dd:f5:ca:e7:1b:48:ce:40:aa:5a:3e:8d:1b:00: 74:76:2f:cb:28:70:0b:fd:56:67:1d:85:34:aa:93:08:3c:7a: 81:6b:35:d2:04:76:02:b2:4c:84:88:ce:d2:a8:a6:28:4a:1b: a5:16:e6:73:1e:9c:61:28:e9:d0:f0:24:93:dc:ee:bb:f4:e7: a7:5b:78:08:b7:f1:7f:d5:95:e6:82:3a:d1:7b:84:92:fa:d8: 5b:7b:69:aa:86:c9:5e:79:70:6a:30:56:14:9a:8e:1a:06:bb: e7:f3:a7:82:5c:8b:3c:7b:be:89:6f:0a:98:eb:18:1c:f6:d1: 7f:f2:1a:02:70:6b:ac:c3:35:f1:6c:9c:07:54:5a:c5:74:b5: f2:b9:2d:69:67:ed:07:dc:49:4e:97:fb:9f:ae:9e:86:4c:9e: 79:ae:77:6d:49:ad:87:6f:1c:99:f1:a8:74:64:15:a3:61:45: 26:ea:2b:b8:62:37:7e:8c:92:5d:91:9a:db:ba:03:a7:83:fd: 71:c0:ea:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXMHQd8bzXEloxADe4TRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj NTlkNDQwHhcNMjUxMjEyMDcwMDUwWhcNMjUxMjEzMDcwMDUwWjAzMTEwLwYDVQQD EygwMTM1Y2Q0YzY2ZDkwYTFlOWRmNDk3NDc0MzI5ZDMyMmU1ZTM5ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOnDe5son8IWb1GJWAHeEVhHLxmu iMKH8/7ZqLn5/WS8zoCfTFkCoEgv2upuGgE0i65jJ3XILpg+oU5Vy5ct4IyfZjA6 aasOSz5U7U8BuXvNwBoQ92cbmykQofdtBPtW9vSposNlXtpHIOen+GMkVOSo81MC cIi2zfidNQdWF3ZjD81V9Y8OMKh/M/vB/XLMt1th/bTi+CE1ZIp5snBBq95tW1YD YsmnRrgyasa1uIdteJ8Uz3OvbZ70UxF3cMjhxVIgV3ckQQLom/ZFXM9IIXHkbqN1 u5oZiO/7W06qxMhsmflS2AK3QytOYXaXiHBPD6Jbdb4WvxBRHZItLlI2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE1zUxm2QoenfSXR0Mp0yLl455nMB8GA1UdIwQY MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt M2ZjMzk0ODc4MDdjLzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenXgCmtN Bj2FkDftshowdvJxKw2pM1agYTYPmNSl1FW/LrU6nyFuLfHMokFuYfzfAfNXF97W zqZp1t31yucbSM5Aqlo+jRsAdHYvyyhwC/1WZx2FNKqTCDx6gWs10gR2ArJMhIjO 0qimKEobpRbmcx6cYSjp0PAkk9zuu/Tnp1t4CLfxf9WV5oI60XuEkvrYW3tpqobJ XnlwajBWFJqOGga75/OnglyLPHu+iW8KmOsYHPbRf/IaAnBrrMM18WycB1RaxXS1 8rktaWftB9xJTpf7n66ehkyeea53bUmth28cmfGodGQVo2FFJuoruGI3foySXZGa 27oDp4P9ccDq9Q== -----END CERTIFICATE-----Generated at Fri Dec 12 13:36:10 2025 by rpki-client