This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json) Hash identifier: CpwDL1wBIyu2/0fE8gpBCVSqTe1knoqq3qV7G4PMLuo= Subject key identifier: 86:AA:18:F8:6B:53:E7:CA:FE:A4:B8:2E:2E:85:5A:C5:FA:98:09:AD Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d Certificate serial: 019B0E25673F7AD6E3874469C634FFFDF55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft Manifest number: 01C8 Signing time: Thu 11 Dec 2025 16:01:30 +0000 Manifest this update: Thu 11 Dec 2025 16:01:30 +0000 Manifest next update: Fri 12 Dec 2025 16:01:30 +0000 Files and hashes: 1: hdbgy59MRssZX30bGqV8gIYXM48.roa (hash: g1IyZ0aHYMFjjiI9SIYZwd4GtNo/PD9i0KvcrdPt5KQ=) 2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: CErEmKnZ0QSGv3q8uF+sbIF0cy5V4DGHgf5hznpP0Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:67:3f:7a:d6:e3:87:44:69:c6:34:ff:fd:f5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d Validity Not Before: Dec 11 16:01:30 2025 GMT Not After : Dec 12 16:01:30 2025 GMT Subject: CN=86aa18f86b53e7cafea4b82e2e855ac5fa9809ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:91:56:2b:d4:08:1f:ee:d2:e2:54:ba:44: 84:39:70:cc:1e:56:dc:98:87:75:99:d7:c6:db:4c: bf:0b:78:fa:fb:2d:85:96:7d:4a:a0:7e:85:65:cd: 1b:d6:73:e9:2e:75:19:26:63:ae:aa:81:0a:1c:aa: 25:ec:9d:f5:6a:02:f3:7b:a1:db:1d:3e:e7:d3:43: b6:68:65:a2:44:b9:e1:72:2b:05:1f:08:de:3d:70: 12:57:32:05:b0:5b:91:e5:6c:24:b5:8d:ff:bc:cf: 44:78:5d:fa:9f:bf:17:14:2a:7b:a8:04:e7:95:f2: 9a:a9:4a:8d:fb:a1:90:12:e4:68:6a:c0:5f:e0:d4: 36:b7:32:16:ad:0c:da:88:53:85:f4:ad:cc:10:ed: 03:dc:56:98:93:b8:5b:3e:a4:6c:e8:a5:7f:28:17: 7d:99:ba:ad:11:24:b5:e7:58:0c:a2:93:e7:c8:01: fa:72:8a:f2:87:f9:87:1c:86:10:81:bf:6b:d6:1c: 48:df:ae:fd:6c:ee:d4:6b:99:b7:9a:94:aa:14:70: 70:45:1d:26:92:ed:03:03:02:bd:4d:97:19:e1:72: b9:77:42:44:34:0e:86:7d:eb:22:14:b9:02:0c:59: c1:0b:03:46:50:b1:9b:05:2d:51:81:56:74:f9:bc: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:18:F8:6B:53:E7:CA:FE:A4:B8:2E:2E:85:5A:C5:FA:98:09:AD X509v3 Authority Key Identifier: keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1d:cb:dc:6c:b3:87:41:3c:47:a4:4a:3a:6f:0f:99:0f:11: 1d:e7:c6:03:7a:eb:99:46:92:d2:49:bc:10:74:c7:e5:6e:1c: 15:a4:87:3b:a7:41:c1:51:65:73:ba:c4:48:f8:89:dd:a3:50: 05:4f:c5:4b:34:5a:f3:87:a8:bd:ef:57:ee:54:63:fa:11:dc: 6e:a3:c3:c7:8b:ac:07:27:4e:5f:c8:7b:3e:0d:b2:a6:f9:90: fd:89:71:be:4c:ef:4e:2a:9b:69:57:74:9d:a3:46:91:d9:6b: 2c:bd:22:32:d4:63:bb:eb:31:bd:54:0d:a9:fd:e3:a4:c1:d0: 9b:19:d8:5c:64:f8:a4:60:25:8b:f2:28:9f:15:7d:8e:ed:b8: 49:8f:ef:9f:b3:28:92:80:ba:6c:6b:dd:9b:95:0f:ef:f6:36: b3:1b:ff:bd:f0:18:f0:0f:bf:73:9d:72:71:03:f5:b3:cf:61: c3:91:ff:d1:f4:20:57:75:68:c2:1e:e8:41:f2:b3:36:90:eb: 3f:23:b8:8b:f4:37:df:57:0c:ee:d5:e2:19:4f:16:60:86:5e: ab:29:ef:da:74:6d:24:56:d5:13:57:c0:45:d7:ad:ec:20:51: 3c:ba:13:33:ef:ce:3c:bc:c2:2c:c3:a6:82:0c:70:b2:82:81: fd:93:e8:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJWc/etbjh0RpxjT//fVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj YmE2MGQwHhcNMjUxMjExMTYwMTMwWhcNMjUxMjEyMTYwMTMwWjAzMTEwLwYDVQQD Eyg4NmFhMThmODZiNTNlN2NhZmVhNGI4MmUyZTg1NWFjNWZhOTgwOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjeRVivUCB/u0uJUukSEOXDMHlbc mId1mdfG20y/C3j6+y2Fln1KoH6FZc0b1nPpLnUZJmOuqoEKHKol7J31agLze6Hb HT7n00O2aGWiRLnhcisFHwjePXASVzIFsFuR5WwktY3/vM9EeF36n78XFCp7qATn lfKaqUqN+6GQEuRoasBf4NQ2tzIWrQzaiFOF9K3MEO0D3FaYk7hbPqRs6KV/KBd9 mbqtESS151gMopPnyAH6coryh/mHHIYQgb9r1hxI3679bO7Ua5m3mpSqFHBwRR0m ku0DAwK9TZcZ4XK5d0JENA6GfesiFLkCDFnBCwNGULGbBS1RgVZ0+bx11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaqGPhrU+fK/qS4Li6FWsX6mAmtMB8GA1UdIwQY MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR3L3Gyz h0E8R6RKOm8PmQ8RHefGA3rrmUaS0km8EHTH5W4cFaSHO6dBwVFlc7rESPiJ3aNQ BU/FSzRa84eove9X7lRj+hHcbqPDx4usBydOX8h7Pg2ypvmQ/YlxvkzvTiqbaVd0 naNGkdlrLL0iMtRju+sxvVQNqf3jpMHQmxnYXGT4pGAli/IonxV9ju24SY/vn7Mo koC6bGvdm5UP7/Y2sxv/vfAY8A+/c51ycQP1s89hw5H/0fQgV3Vowh7oQfKzNpDr PyO4i/Q331cM7tXiGU8WYIZeqynv2nRtJFbVE1fARdet7CBRPLoTM+/OPLzCLMOm ggxwsoKB/ZPoRw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:29 2025 by rpki-client