This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json) Hash identifier: UBPazDTFDc1DHRKnYh32VjWW2u1L9a4aBWRIT1Xb+NA= Subject key identifier: 67:C0:DB:35:26:97:0F:FC:09:85:0F:2D:EB:EA:A9:53:06:37:E2:92 Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Certificate serial: 019B4091B2617BDE7DF8F28CF2D9B3DD0305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft Manifest number: 0743 Signing time: Sun 21 Dec 2025 11:00:48 +0000 Manifest this update: Sun 21 Dec 2025 11:00:48 +0000 Manifest next update: Mon 22 Dec 2025 11:00:48 +0000 Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=) 2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 0Hfb1jy+bqtTQyzBoNoN/srEjr5Kf7PymgqAvRA5AVA=) 3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=) 4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:b2:61:7b:de:7d:f8:f2:8c:f2:d9:b3:dd:03:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Validity Not Before: Dec 21 11:00:48 2025 GMT Not After : Dec 22 11:00:48 2025 GMT Subject: CN=67c0db3526970ffc09850f2debeaa9530637e292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:a3:c6:cb:03:1b:20:5f:b2:0c:0d:b8:60: 3d:dc:54:72:09:14:5a:dc:1b:b4:4e:a1:8d:9c:01: 33:5e:af:98:3e:3c:36:b6:25:77:90:2b:2f:98:d8: d5:32:c7:85:60:6e:d9:0e:56:05:69:5b:66:2b:c7: e8:04:0d:8d:79:3a:cb:b5:43:40:35:6a:6e:83:5a: 2c:79:08:f6:e7:f8:bb:7c:90:bc:38:b3:72:77:06: 13:c8:95:9d:f7:14:2e:00:b5:5e:3a:6e:71:c6:de: 2f:f4:c4:0e:28:ae:db:3a:05:c7:27:34:57:d3:d8: 15:94:a2:cc:08:e9:f8:0c:7f:37:96:29:2a:05:0f: c3:11:5e:33:f8:71:72:6c:5a:a9:06:a2:64:ed:a2: 30:00:61:fe:07:26:1b:dc:6a:69:b5:ee:6b:d3:2e: f4:d3:ce:84:55:d4:c8:96:9e:70:f7:93:1f:b3:92: 36:8d:eb:86:97:df:ca:2f:29:c4:6a:8d:ba:76:b8: 2c:fa:f2:94:ec:ad:45:b0:dd:98:cb:2a:8b:cd:de: cf:c1:03:fe:d2:14:00:d0:1e:88:77:bd:89:d7:6e: df:38:98:40:29:c4:e1:a6:5e:44:a6:b6:42:41:f2: fb:06:3a:a5:c8:c1:e9:62:50:13:32:3a:a2:31:b6: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C0:DB:35:26:97:0F:FC:09:85:0F:2D:EB:EA:A9:53:06:37:E2:92 X509v3 Authority Key Identifier: keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:93:8f:ef:ac:27:fc:e6:77:1a:f2:11:fb:f8:d2:09:db:e2: 74:59:41:7f:03:47:3d:ba:c0:de:2c:12:b9:69:0b:a3:cc:fa: fd:f0:ab:06:3e:f5:73:a9:4c:b4:7e:f1:61:30:af:6a:a0:d4: 4f:ff:0e:fa:14:d3:19:de:e8:02:ab:c0:d4:2a:e1:00:74:ed: 17:c1:0b:7f:fa:15:fb:36:a4:5a:02:40:16:e8:ad:30:36:0b: c4:48:e2:22:94:8b:70:26:c7:a5:f1:80:b6:00:e4:57:d3:b1: f2:02:5d:09:3c:59:a1:9c:cf:58:71:cd:a0:63:54:81:e2:1d: ef:eb:54:2c:53:ec:3b:cd:a5:55:da:d2:97:a7:3f:60:12:90: 05:4f:bd:f3:c3:2d:80:df:53:dd:b5:5e:1e:2b:21:3a:3e:1b: d1:52:31:29:22:67:04:78:55:68:1c:c9:bb:a2:38:0d:a4:79: c7:65:96:a0:6d:34:bb:65:fd:88:01:45:8e:52:4f:0b:24:2c: a4:6c:32:82:f2:63:c4:ef:d4:8c:80:e7:50:a8:88:3a:4c:1a: 8e:0d:a7:e8:35:f6:3a:64:69:3e:b5:45:35:1c:8c:cd:16:51: 1f:a0:7e:55:5b:c8:bd:ba:90:8d:84:cc:f3:71:ab:e1:63:67: 8b:7f:fe:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkbJhe959+PKM8tmz3QMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5 NTZjYWEwHhcNMjUxMjIxMTEwMDQ4WhcNMjUxMjIyMTEwMDQ4WjAzMTEwLwYDVQQD Eyg2N2MwZGIzNTI2OTcwZmZjMDk4NTBmMmRlYmVhYTk1MzA2MzdlMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVKjxssDGyBfsgwNuGA93FRyCRRa 3Bu0TqGNnAEzXq+YPjw2tiV3kCsvmNjVMseFYG7ZDlYFaVtmK8foBA2NeTrLtUNA NWpug1oseQj25/i7fJC8OLNydwYTyJWd9xQuALVeOm5xxt4v9MQOKK7bOgXHJzRX 09gVlKLMCOn4DH83likqBQ/DEV4z+HFybFqpBqJk7aIwAGH+ByYb3Gppte5r0y70 086EVdTIlp5w95Mfs5I2jeuGl9/KLynEao26drgs+vKU7K1FsN2YyyqLzd7PwQP+ 0hQA0B6Id72J127fOJhAKcThpl5EprZCQfL7BjqlyMHpYlATMjqiMbYkswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfA2zUmlw/8CYUPLevqqVMGN+KSMB8GA1UdIwQY MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJOP76wn /OZ3GvIR+/jSCdvidFlBfwNHPbrA3iwSuWkLo8z6/fCrBj71c6lMtH7xYTCvaqDU T/8O+hTTGd7oAqvA1CrhAHTtF8ELf/oV+zakWgJAFuitMDYLxEjiIpSLcCbHpfGA tgDkV9Ox8gJdCTxZoZzPWHHNoGNUgeId7+tULFPsO82lVdrSl6c/YBKQBU+988Mt gN9T3bVeHishOj4b0VIxKSJnBHhVaBzJu6I4DaR5x2WWoG00u2X9iAFFjlJPCyQs pGwygvJjxO/UjIDnUKiIOkwajg2n6DX2OmRpPrVFNRyMzRZRH6B+VVvIvbqQjYTM 83Gr4WNni3/+Ew== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:38 2025 by rpki-client