This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft File: lajACQMBmVVkqiE4tDA4nviM13s.mft (raw, json) Hash identifier: AyJkQiZvBIbEFRx2gVAnjgqXI6FrLF2jYfDf4d4Vrvs= Subject key identifier: 3C:A7:41:B7:8F:08:C9:EC:2F:24:23:D1:FC:6E:F2:3A:7D:4C:40:D4 Authority key identifier: 95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B Certificate issuer: /CN=95a8c0090301995564aa2138b430389ef88cd77b Certificate serial: 019B5ABF8E89B6695B959A233F57F2521143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft Manifest number: 67 Signing time: Fri 26 Dec 2025 13:01:01 +0000 Manifest this update: Fri 26 Dec 2025 13:01:01 +0000 Manifest next update: Sat 27 Dec 2025 13:01:01 +0000 Files and hashes: 1: 6r2Bj1mIQGip_1ctL1k_iWQiYYY.roa (hash: 1qHrwUKa7XCtms4nI+bnhKQKhVNrn1iunF0LD7+2ioo=) 2: lajACQMBmVVkqiE4tDA4nviM13s.crl (hash: Xe1riRV+QOx2kMTyu9y3K6uxRFhXZ8k2lmrxBREK9f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:8e:89:b6:69:5b:95:9a:23:3f:57:f2:52:11:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a8c0090301995564aa2138b430389ef88cd77b Validity Not Before: Dec 26 13:01:01 2025 GMT Not After : Dec 27 13:01:01 2025 GMT Subject: CN=3ca741b78f08c9ec2f2423d1fc6ef23a7d4c40d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:91:2d:ee:b9:1c:29:5c:da:ef:b0:3d:51: 42:63:00:92:d1:41:11:44:4d:b2:62:99:ce:e5:ea: 3f:2e:50:17:bc:95:fb:49:ee:ad:76:ef:ae:f3:9d: c4:4d:c8:8a:61:f6:10:a6:d6:54:fd:53:5e:39:d2: 49:89:45:f0:9f:5f:77:c2:da:e5:bb:36:84:3d:52: 34:08:c6:ee:7d:58:79:70:30:2d:96:1d:c7:94:17: 5a:e6:63:f3:20:c7:5e:d9:d8:8b:28:94:59:3d:26: 05:3e:bb:a9:c8:74:95:3d:f0:25:0e:18:7d:35:3e: 6e:b0:e9:c3:e1:dc:af:bb:e7:b7:d4:69:01:d7:38: d6:a5:61:2f:41:36:1f:e8:48:14:bf:57:cb:e5:c8: d5:55:92:7b:c6:9f:09:1f:c4:df:cf:70:27:92:e5: 9d:e7:11:72:16:56:b9:bd:d4:ee:13:a4:6c:ea:29: f0:4d:5e:a2:73:bd:6a:be:ac:f5:97:f9:13:b2:72: dc:66:84:02:37:86:80:6a:16:dc:41:08:17:5f:3f: a5:a4:6e:67:fe:6f:27:0d:8e:eb:2f:5c:60:17:c2: da:5a:11:62:71:da:c5:62:a5:fd:c5:c0:ed:74:22: 08:04:28:7b:63:96:74:a1:44:66:9d:5f:c4:bd:a2: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A7:41:B7:8F:08:C9:EC:2F:24:23:D1:FC:6E:F2:3A:7D:4C:40:D4 X509v3 Authority Key Identifier: keyid:95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8f:18:14:8a:7f:a3:c5:9f:62:1f:70:ff:ac:26:3c:3a:e0: 81:7a:fe:95:82:75:21:47:4c:24:bf:dd:aa:46:48:a0:aa:1a: 2f:80:9e:91:a1:3c:88:c1:4b:8d:ba:68:1f:4c:4b:de:b7:3f: 4a:c5:c9:7f:1a:fe:b4:0d:77:d6:31:db:5a:38:1c:09:ea:5d: 82:a4:c7:3f:20:0f:f8:35:8e:0b:29:3e:da:82:b8:b9:f9:d2: 06:b1:a0:61:b6:66:a1:89:11:0a:3a:09:8f:f7:e5:a5:91:18: 58:2a:90:71:f8:a6:b4:22:35:3d:d9:9b:0f:a8:77:46:e8:11: fd:f0:bf:e4:2f:1a:1f:a4:32:ed:2c:c9:2d:5a:27:59:0f:88: d7:1f:53:f8:25:49:6b:a6:22:bb:2a:a8:96:7a:b2:46:a1:4b: e4:e1:dc:fb:cc:37:43:93:36:e7:ce:9b:ee:c0:25:66:06:b5: 1a:35:41:a1:5f:39:d9:56:0a:11:4a:41:30:8a:8d:86:c1:84: bc:01:a2:42:7b:8e:4c:28:b1:47:1b:36:83:dc:65:eb:b6:18: b1:32:3f:5b:50:cb:9f:5e:4b:72:d6:8a:09:75:cd:db:73:4f: db:96:04:5a:15:94:27:6e:9e:28:7e:28:b2:d4:b8:54:c7:d7: 80:02:eb:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav46JtmlblZojP1fyUhFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YThjMDA5MDMwMTk5NTU2NGFhMjEzOGI0MzAzODllZjg4 Y2Q3N2IwHhcNMjUxMjI2MTMwMTAxWhcNMjUxMjI3MTMwMTAxWjAzMTEwLwYDVQQD EygzY2E3NDFiNzhmMDhjOWVjMmYyNDIzZDFmYzZlZjIzYTdkNGM0MGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6iRLe65HClc2u+wPVFCYwCS0UER RE2yYpnO5eo/LlAXvJX7Se6tdu+u853ETciKYfYQptZU/VNeOdJJiUXwn193wtrl uzaEPVI0CMbufVh5cDAtlh3HlBda5mPzIMde2diLKJRZPSYFPrupyHSVPfAlDhh9 NT5usOnD4dyvu+e31GkB1zjWpWEvQTYf6EgUv1fL5cjVVZJ7xp8JH8Tfz3AnkuWd 5xFyFla5vdTuE6Rs6inwTV6ic71qvqz1l/kTsnLcZoQCN4aAahbcQQgXXz+lpG5n /m8nDY7rL1xgF8LaWhFicdrFYqX9xcDtdCIIBCh7Y5Z0oURmnV/EvaL9ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDynQbePCMnsLyQj0fxu8jp9TEDUMB8GA1UdIwQY MBaAFJWowAkDAZlVZKohOLQwOJ74jNd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFqQUNRTUJtVlZrcWlFNHREQTRudmlNMTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85Y2FlMTAtMTYxMy00YjllLWJiYTQt MjRkNDJhMTUxYzBhLzEvbGFqQUNRTUJtVlZrcWlFNHREQTRudmlNMTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85Y2FlMTAtMTYxMy00YjllLWJiYTQtMjRkNDJhMTUxYzBh LzEvbGFqQUNRTUJtVlZrcWlFNHREQTRudmlNMTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY8YFIp/ o8WfYh9w/6wmPDrggXr+lYJ1IUdMJL/dqkZIoKoaL4CekaE8iMFLjbpoH0xL3rc/ SsXJfxr+tA131jHbWjgcCepdgqTHPyAP+DWOCyk+2oK4ufnSBrGgYbZmoYkRCjoJ j/flpZEYWCqQcfimtCI1PdmbD6h3RugR/fC/5C8aH6Qy7SzJLVonWQ+I1x9T+CVJ a6YiuyqolnqyRqFL5OHc+8w3Q5M2586b7sAlZga1GjVBoV852VYKEUpBMIqNhsGE vAGiQnuOTCixRxs2g9xl67YYsTI/W1DLn15LctaKCXXN23NP25YEWhWUJ26eKH4o stS4VMfXgALrww== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client