This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json) Hash identifier: JfPUY2Eap1iYJ6Qu0WOcBcmFofUr/kyrNZuKyhPOFZk= Subject key identifier: 8B:56:D3:43:0F:0B:5E:00:F6:25:B9:89:08:C3:63:A9:2E:73:59:4B Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Certificate serial: 019B39EAF2098EE01958EF6B9A04028DB0BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft Manifest number: 04A7 Signing time: Sat 20 Dec 2025 04:00:57 +0000 Manifest this update: Sat 20 Dec 2025 04:00:57 +0000 Manifest next update: Sun 21 Dec 2025 04:00:57 +0000 Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=) 2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: 1efPFUXnNE68QHSCKkBrgRia26lF3ddbFC+rf97uYnc=) 3: mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa (hash: SRjDoFDtCZGIa81wKDyuCO8n9PzLXPSishWYuw7XCOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:f2:09:8e:e0:19:58:ef:6b:9a:04:02:8d:b0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Validity Not Before: Dec 20 04:00:57 2025 GMT Not After : Dec 21 04:00:57 2025 GMT Subject: CN=8b56d3430f0b5e00f625b98908c363a92e73594b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:10:c5:44:29:ae:e9:cb:9b:31:5b:b0:b9: e4:bf:e7:c1:fa:38:2f:16:ff:9d:97:c4:e0:3d:0b: 1e:19:e7:a2:b1:bb:f5:49:80:e8:f7:23:fb:c4:2f: 15:be:2e:8d:bd:e9:3e:68:c2:02:19:8b:4b:0b:d3: a3:54:2a:d3:26:d8:f6:34:de:55:0f:45:3f:27:af: a9:a9:04:6d:da:26:84:fb:e9:4e:d2:f7:0b:89:f8: 2b:ca:6a:fb:d7:a7:e3:05:f9:e9:e6:2a:5c:6a:e2: b1:82:22:14:19:9e:87:06:9e:5b:ef:78:0a:98:3e: 74:07:90:33:76:d5:b9:12:dc:82:67:ab:8c:c8:61: c1:c5:43:c8:91:4d:4c:46:d3:bf:c3:96:30:e7:ad: 8a:20:94:a4:96:22:7e:83:4a:8b:4c:37:6f:97:1a: ee:c8:c9:48:29:c4:0f:3a:9d:5a:cf:3c:10:f1:f0: 49:84:79:d8:7b:4c:06:01:0c:c8:cc:0c:d7:82:7f: 19:07:91:61:bc:35:c6:40:9b:ad:7d:53:93:da:8b: a1:89:bc:77:d8:53:82:99:19:5e:b7:56:c1:c3:1c: 4c:ed:5c:8e:6e:d4:04:1b:43:ce:99:5e:7f:f8:96: c1:7b:69:b9:31:71:b3:de:99:da:bb:91:f1:5b:86: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:D3:43:0F:0B:5E:00:F6:25:B9:89:08:C3:63:A9:2E:73:59:4B X509v3 Authority Key Identifier: keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ce:49:54:36:3b:03:85:46:11:04:80:22:1f:44:d4:36:82: 10:38:99:5a:0c:ef:b7:73:7a:62:e0:16:80:5a:bb:50:b0:43: 45:86:66:08:bc:cc:2f:ff:83:e2:54:fe:6b:3f:16:f4:2c:04: 1a:2f:d5:ee:a4:12:25:5a:7e:78:11:87:66:fb:ed:70:6b:7e: ad:59:6f:da:31:7a:86:ea:23:01:f8:71:3d:62:cf:2e:2e:f8: 81:82:08:5b:95:2f:43:a2:e8:13:d6:92:0f:f0:7f:89:98:86: 96:ee:e8:42:4a:cb:5e:a5:b4:96:a4:6d:c2:b5:ae:95:fa:24: 58:f8:a6:93:bf:cd:46:4b:b7:5a:f8:ce:b0:27:75:42:1b:d4: 1f:d5:4b:ab:e5:90:c3:d7:bf:9a:b5:de:39:01:44:e3:3e:55: df:b8:18:c5:f4:b5:4b:2b:60:9d:11:03:82:6f:4a:92:4e:82: 2e:29:67:82:43:59:e0:a3:2a:24:ee:56:47:ae:9d:df:da:65: 37:24:37:8d:6d:94:fc:54:85:4f:33:ef:84:a5:35:38:94:6d: b9:64:03:75:c8:b3:85:46:f1:6e:4d:f1:38:a8:71:af:fc:50: 32:f1:86:62:9c:39:97:62:67:c3:fa:93:ac:6e:43:69:f8:88: 18:fe:15:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56vIJjuAZWO9rmgQCjbC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4 OGExZTQwHhcNMjUxMjIwMDQwMDU3WhcNMjUxMjIxMDQwMDU3WjAzMTEwLwYDVQQD Eyg4YjU2ZDM0MzBmMGI1ZTAwZjYyNWI5ODkwOGMzNjNhOTJlNzM1OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu4QxUQprunLmzFbsLnkv+fB+jgv Fv+dl8TgPQseGeeisbv1SYDo9yP7xC8Vvi6Nvek+aMICGYtLC9OjVCrTJtj2NN5V D0U/J6+pqQRt2iaE++lO0vcLifgrymr716fjBfnp5ipcauKxgiIUGZ6HBp5b73gK mD50B5AzdtW5EtyCZ6uMyGHBxUPIkU1MRtO/w5Yw562KIJSkliJ+g0qLTDdvlxru yMlIKcQPOp1azzwQ8fBJhHnYe0wGAQzIzAzXgn8ZB5FhvDXGQJutfVOT2ouhibx3 2FOCmRlet1bBwxxM7VyObtQEG0POmV5/+JbBe2m5MXGz3pnau5HxW4YjewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItW00MPC14A9iW5iQjDY6kuc1lLMB8GA1UdIwQY MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgM5JVDY7 A4VGEQSAIh9E1DaCEDiZWgzvt3N6YuAWgFq7ULBDRYZmCLzML/+D4lT+az8W9CwE Gi/V7qQSJVp+eBGHZvvtcGt+rVlv2jF6huojAfhxPWLPLi74gYIIW5UvQ6LoE9aS D/B/iZiGlu7oQkrLXqW0lqRtwrWulfokWPimk7/NRku3WvjOsCd1QhvUH9VLq+WQ w9e/mrXeOQFE4z5V37gYxfS1SytgnREDgm9Kkk6CLilngkNZ4KMqJO5WR66d39pl NyQ3jW2U/FSFTzPvhKU1OJRtuWQDdcizhUbxbk3xOKhxr/xQMvGGYpw5l2Jnw/qT rG5DafiIGP4VAA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:16:27 2025 by rpki-client