This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json) Hash identifier: Nb6yYNwqyppOt/fqmT5QhG8Q+x4XlaFNWJWk8nYUKp4= Subject key identifier: 7A:7D:30:D6:DB:69:5D:54:B1:AA:09:27:A8:E7:44:39:4C:09:94:EE Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Certificate serial: 019B0E931FE6EC493A3E9ABC774A22669B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft Manifest number: 1711 Signing time: Thu 11 Dec 2025 18:01:21 +0000 Manifest this update: Thu 11 Dec 2025 18:01:21 +0000 Manifest next update: Fri 12 Dec 2025 18:01:21 +0000 Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: 32mg15mNEk1vpBcWYIclK6MxBlLCJIvphTPYh0FZ+TI=) 2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:1f:e6:ec:49:3a:3e:9a:bc:77:4a:22:66:9b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Validity Not Before: Dec 11 18:01:21 2025 GMT Not After : Dec 12 18:01:21 2025 GMT Subject: CN=7a7d30d6db695d54b1aa0927a8e744394c0994ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:6d:f4:f1:04:2b:85:1b:37:39:a9:d3:c9: c5:c9:ab:b9:f8:99:4a:7c:a9:c1:12:ec:5a:21:13: 46:49:d7:6d:6d:9f:69:6f:f9:bf:29:92:3a:9e:4a: c2:d3:6d:3f:1c:ae:45:fc:b2:bd:23:09:16:7f:51: 91:c6:1b:41:f7:10:f2:c6:c1:43:30:7c:24:32:92: 9f:0c:75:2e:53:cc:34:09:bc:68:32:9f:1d:4a:25: f6:62:3c:e7:f6:5f:d2:5b:da:14:4d:08:1a:78:91: be:ae:68:26:c6:c2:ac:42:3b:7a:56:52:c1:e9:d0: 04:af:32:fc:05:d1:53:12:c8:68:b1:e4:09:ab:1d: 83:71:55:e8:0d:fc:83:9a:09:02:99:e9:75:bf:b7: 5c:e1:e2:f7:7b:d4:df:62:30:c1:75:75:f6:21:93: 81:85:cb:98:d9:e4:12:bc:16:4e:d7:ab:9a:ee:38: d9:b5:a1:c7:47:0e:09:00:6c:25:1e:f2:7f:83:19: f2:6f:b8:08:80:f3:83:c7:4a:f0:6a:19:cc:5f:04: 04:58:20:dd:52:d7:f0:31:5e:58:2a:7d:93:3a:c6: 91:d3:75:7f:27:76:f1:9b:be:ff:ff:78:0d:61:0b: 42:f4:ef:ee:49:f1:74:03:06:9e:df:a6:6b:a6:c1: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:30:D6:DB:69:5D:54:B1:AA:09:27:A8:E7:44:39:4C:09:94:EE X509v3 Authority Key Identifier: keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1f:c8:92:3d:51:14:8d:53:95:77:70:3f:a7:64:ba:e5:3d: f6:d7:a1:1b:6d:ef:ac:2b:e6:9a:ac:25:3d:93:a4:ad:c6:90: 13:df:8f:4b:de:18:61:ed:ce:52:e6:35:0a:78:36:7e:de:24: b3:fd:3b:14:95:c7:ee:e8:d6:b3:84:8c:7c:8c:af:ea:cd:13: 24:bf:72:b6:27:1d:ba:f5:9d:dc:b6:37:6f:4a:b9:b2:79:b8: 02:2b:8a:d1:18:56:39:86:81:98:cf:b4:c1:0e:c1:4e:65:c8: 91:07:f0:6d:dc:d2:8c:fc:29:73:01:08:d8:10:72:c4:0e:4d: d4:1f:21:11:0f:9e:c2:c9:a8:2f:b8:b5:ab:65:c9:80:1c:31: 8a:0a:3a:ed:5a:56:08:b7:e0:b1:d2:64:d0:82:86:73:fe:c7: 8a:b5:c4:f3:49:3c:3f:56:8d:1b:23:9b:bb:b3:a7:8b:40:4b: cc:52:7f:f8:ed:ba:0f:7d:8b:d3:97:fe:4e:d9:fd:53:50:cc: a5:cb:0b:37:dd:99:b3:bf:9b:27:25:6a:7d:4e:d1:2a:53:2d: d8:b2:b9:bf:aa:73:eb:bf:1b:ab:c0:ec:f9:39:bc:6a:fa:31: 8a:22:4f:a1:38:d2:1d:44:af:6c:a0:7c:d3:79:84:b9:dd:03: 38:61:b2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkx/m7Ek6Ppq8d0oiZpsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy Nzg1MjEwHhcNMjUxMjExMTgwMTIxWhcNMjUxMjEyMTgwMTIxWjAzMTEwLwYDVQQD Eyg3YTdkMzBkNmRiNjk1ZDU0YjFhYTA5MjdhOGU3NDQzOTRjMDk5NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlult9PEEK4UbNzmp08nFyau5+JlK fKnBEuxaIRNGSddtbZ9pb/m/KZI6nkrC020/HK5F/LK9IwkWf1GRxhtB9xDyxsFD MHwkMpKfDHUuU8w0CbxoMp8dSiX2Yjzn9l/SW9oUTQgaeJG+rmgmxsKsQjt6VlLB 6dAErzL8BdFTEshoseQJqx2DcVXoDfyDmgkCmel1v7dc4eL3e9TfYjDBdXX2IZOB hcuY2eQSvBZO16ua7jjZtaHHRw4JAGwlHvJ/gxnyb7gIgPODx0rwahnMXwQEWCDd UtfwMV5YKn2TOsaR03V/J3bxm77//3gNYQtC9O/uSfF0Awae36ZrpsFkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp9MNbbaV1UsaoJJ6jnRDlMCZTuMB8GA1UdIwQY MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3 LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih/Ikj1R FI1TlXdwP6dkuuU99tehG23vrCvmmqwlPZOkrcaQE9+PS94YYe3OUuY1Cng2ft4k s/07FJXH7ujWs4SMfIyv6s0TJL9yticduvWd3LY3b0q5snm4AiuK0RhWOYaBmM+0 wQ7BTmXIkQfwbdzSjPwpcwEI2BByxA5N1B8hEQ+ewsmoL7i1q2XJgBwxigo67VpW CLfgsdJk0IKGc/7HirXE80k8P1aNGyObu7Oni0BLzFJ/+O26D32L05f+Ttn9U1DM pcsLN92Zs7+bJyVqfU7RKlMt2LK5v6pz678bq8Ds+Tm8avoxiiJPoTjSHUSvbKB8 03mEud0DOGGygg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:30 2025 by rpki-client