This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json) Hash identifier: 2TATcTmrOR5HcZhfnA/0obYcY4x0hKHacpCefnz/c28= Subject key identifier: 9E:4F:47:6B:B3:D2:86:B4:04:79:55:41:4A:FC:71:88:86:E4:6A:3C Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff Certificate serial: 019B3A910688A1A601BCF8E6BC092C28E18E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft Manifest number: 1565 Signing time: Sat 20 Dec 2025 07:02:21 +0000 Manifest this update: Sat 20 Dec 2025 07:02:21 +0000 Manifest next update: Sun 21 Dec 2025 07:02:21 +0000 Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=) 2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=) 3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: TOfij8+teFjQt5GKU+dVdF1Mgo4d2lVY5/yrk/zySYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:06:88:a1:a6:01:bc:f8:e6:bc:09:2c:28:e1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff Validity Not Before: Dec 20 07:02:21 2025 GMT Not After : Dec 21 07:02:21 2025 GMT Subject: CN=9e4f476bb3d286b4047955414afc718886e46a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:e4:55:70:ec:33:3f:00:7d:10:ef:6f:bd: 0b:fd:14:ab:3d:0e:c3:20:1a:7b:eb:0d:96:e5:48: e3:eb:92:ba:fc:b7:90:f5:ad:bf:45:45:7a:32:f9: 20:fc:73:59:8b:74:1f:91:b4:a0:a7:64:f1:c1:aa: f0:bc:1b:ec:36:df:c1:1d:46:4e:0f:2e:4f:0e:05: f1:55:b5:45:64:01:a8:80:6b:47:99:65:5b:92:06: a1:15:62:dc:8a:e5:e6:48:54:f4:2c:3d:ab:ac:df: ef:03:28:05:47:b0:71:3f:36:bf:11:90:91:35:dd: e5:05:c9:c2:eb:be:7f:23:b0:31:af:19:e8:b6:9f: 9a:85:58:ce:96:d0:52:31:46:61:8f:f9:82:b5:20: 7b:e8:a2:db:32:b9:e1:fd:75:aa:37:42:b4:83:15: 2b:37:b2:d2:81:8f:46:9d:26:47:8b:fc:5d:84:95: 6d:e2:7c:78:f6:90:2d:a9:0a:ef:eb:32:a8:47:0f: 54:2a:6a:30:be:43:0d:e2:40:b7:f8:31:b5:56:96: 71:63:b7:84:e8:10:93:51:ad:b3:ef:34:d9:9f:c7: d4:5c:59:e8:d1:4f:2b:ea:f6:e0:f1:04:35:78:76: 9e:c1:e1:7e:eb:56:11:ab:2c:a7:d7:00:7e:97:82: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4F:47:6B:B3:D2:86:B4:04:79:55:41:4A:FC:71:88:86:E4:6A:3C X509v3 Authority Key Identifier: keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fc:5e:03:e8:bb:ff:db:56:01:d5:de:68:cb:20:b9:c4:90: 39:9c:b0:79:7f:88:51:77:46:f4:d0:50:94:0c:e2:e3:49:ba: af:de:56:c5:72:68:c4:ea:63:1b:10:d0:ac:75:e3:85:cc:dc: 3c:90:d2:cc:d1:67:5d:cf:47:3b:60:6d:cc:3c:62:34:2a:26: bb:b3:89:c9:0c:8d:11:6c:a7:0c:d9:c3:6d:8c:70:96:da:77: 88:8e:4e:3d:07:29:2e:27:a4:19:af:57:60:67:3b:81:91:18: 0a:52:e5:14:82:8b:6d:94:6e:38:3d:c3:8b:43:f8:c5:44:38: b8:c2:ee:63:5b:d5:8a:af:79:3a:3a:65:81:65:f2:7e:4d:92: bd:45:94:61:93:35:82:5d:bf:7b:51:53:e7:25:c0:44:9a:46: ef:68:57:c2:01:f1:9f:b4:19:18:59:8e:cc:4e:1c:80:1c:3c: 54:aa:dd:16:1b:f1:2b:df:ee:1b:5f:5f:b7:ec:67:5a:c8:e1: e8:54:aa:5c:9d:34:c7:11:39:35:f8:a4:5c:19:72:00:ea:3a: 14:65:c9:9d:8d:07:09:44:d6:af:ad:fe:e9:92:ed:6e:5b:e0: 4a:5c:f9:a1:e7:71:a4:d5:a3:4b:2f:d8:f9:84:bd:32:72:31: 31:78:7d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kQaIoaYBvPjmvAksKOGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl Y2QxZmYwHhcNMjUxMjIwMDcwMjIxWhcNMjUxMjIxMDcwMjIxWjAzMTEwLwYDVQQD Eyg5ZTRmNDc2YmIzZDI4NmI0MDQ3OTU1NDE0YWZjNzE4ODg2ZTQ2YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+HkVXDsMz8AfRDvb70L/RSrPQ7D IBp76w2W5Ujj65K6/LeQ9a2/RUV6Mvkg/HNZi3QfkbSgp2TxwarwvBvsNt/BHUZO Dy5PDgXxVbVFZAGogGtHmWVbkgahFWLciuXmSFT0LD2rrN/vAygFR7BxPza/EZCR Nd3lBcnC675/I7Axrxnotp+ahVjOltBSMUZhj/mCtSB76KLbMrnh/XWqN0K0gxUr N7LSgY9GnSZHi/xdhJVt4nx49pAtqQrv6zKoRw9UKmowvkMN4kC3+DG1VpZxY7eE 6BCTUa2z7zTZn8fUXFno0U8r6vbg8QQ1eHaeweF+61YRqyyn1wB+l4JI9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5PR2uz0oa0BHlVQUr8cYiG5Go8MB8GA1UdIwQY MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfxeA+i7 /9tWAdXeaMsgucSQOZyweX+IUXdG9NBQlAzi40m6r95WxXJoxOpjGxDQrHXjhczc PJDSzNFnXc9HO2BtzDxiNComu7OJyQyNEWynDNnDbYxwltp3iI5OPQcpLiekGa9X YGc7gZEYClLlFIKLbZRuOD3Di0P4xUQ4uMLuY1vViq95OjplgWXyfk2SvUWUYZM1 gl2/e1FT5yXARJpG72hXwgHxn7QZGFmOzE4cgBw8VKrdFhvxK9/uG19ft+xnWsjh 6FSqXJ00xxE5NfikXBlyAOo6FGXJnY0HCUTWr63+6ZLtblvgSlz5oedxpNWjSy/Y +YS9MnIxMXh95w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:23:09 2025 by rpki-client