This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json) Hash identifier: u7Yo3kv6k5/qgk3viBno//uZwwQBEWVt/eWYsQ+V3k0= Subject key identifier: 8A:6E:E7:0F:3E:43:1D:03:48:81:2B:08:58:DE:55:BA:A5:6B:6F:9C Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Certificate serial: 019B1C17B4ED9E7A79999AB556038B825F89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 09:01:14 +0000 Manifest this update: Sun 14 Dec 2025 09:01:14 +0000 Manifest next update: Mon 15 Dec 2025 09:01:14 +0000 Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=) 2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: wTCHzXEyfPrvDjxBmFI2zh++Y/rqyriJOXqXcIgmEzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:b4:ed:9e:7a:79:99:9a:b5:56:03:8b:82:5f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Validity Not Before: Dec 14 09:01:14 2025 GMT Not After : Dec 15 09:01:14 2025 GMT Subject: CN=8a6ee70f3e431d0348812b0858de55baa56b6f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:4b:b5:d8:64:7b:e7:a1:8a:51:b1:77:93: 0b:65:a4:12:f7:66:17:10:ee:39:b5:25:4e:c0:48: 23:47:cd:1a:1b:95:c4:e8:07:8d:9f:10:d7:f5:8a: 9f:67:f9:7a:fd:01:6f:34:3d:d2:2e:df:f3:b5:e5: 73:d1:c9:31:08:8d:14:ba:df:01:bd:2a:d3:55:75: ae:9f:34:9b:88:a3:b8:f6:6e:fb:28:b5:c6:de:69: af:ef:30:37:b2:e9:1f:4d:6e:a2:c4:f5:8f:aa:4c: 5e:14:8b:50:f9:c4:0c:55:d3:57:ba:0e:db:bd:19: 02:87:88:d3:0e:8b:4c:94:2f:2c:9c:03:f3:c0:c6: 5a:1e:0f:1b:30:47:5d:54:24:a6:94:5d:a1:e9:69: df:6b:82:b6:dc:d8:82:42:4d:d4:22:9b:e3:7f:18: 4d:55:d2:74:8a:c8:08:8f:d7:71:4f:20:90:1d:f8: 8c:7a:e7:45:24:bf:3a:3f:90:0b:ff:f6:af:f7:68: 34:01:65:62:e2:9e:1e:7d:08:11:81:e2:60:2f:74: 0a:fd:5d:d4:ad:b7:5a:a5:b0:ae:8b:c1:d8:6e:b3: 1c:13:4a:a5:0d:a8:d3:c7:9c:f5:7c:0d:f2:df:e2: 9a:22:cc:d0:00:c9:d8:01:f3:ab:7c:38:b9:f3:66: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6E:E7:0F:3E:43:1D:03:48:81:2B:08:58:DE:55:BA:A5:6B:6F:9C X509v3 Authority Key Identifier: keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c9:92:44:63:ab:9e:08:7c:92:14:ad:3a:d1:0c:54:dc:00: 9a:90:12:7f:e5:63:ab:b3:47:8e:c5:23:0d:ca:1f:a4:22:72: 90:3a:a4:4b:d7:95:ae:70:7c:a3:78:10:b0:e9:e0:7d:95:ac: bd:a8:25:73:e1:5b:00:92:fd:bd:b7:a6:d2:17:46:2d:1c:e8: dd:90:43:91:be:51:b2:78:6d:92:e4:e3:1a:dd:b9:8a:58:63: f3:ab:f6:8e:b1:f0:3f:87:ad:c7:62:f4:5d:50:cf:6c:7c:bc: 09:06:ea:29:dd:af:fa:86:15:24:e8:10:2a:65:bc:85:63:6e: c8:6a:83:a8:83:5b:47:08:b2:a3:65:f0:51:33:c3:a6:16:3e: 37:81:cf:c3:5c:58:81:93:5b:8a:61:01:ea:f5:42:ca:d9:5a: 0e:c5:e9:df:86:f4:c7:a2:db:9e:9a:9a:df:d8:d7:19:fa:fa: fb:c6:8b:8d:40:80:a2:91:68:c9:5c:fe:6f:ce:d1:79:54:96: e1:a5:d8:22:aa:1e:39:a3:92:1f:ae:7a:b9:04:1c:b8:c4:a6: f3:c7:a6:68:fc:6d:cb:44:3d:48:11:6b:61:a4:96:76:de:be: 3f:87:76:dc:3c:ad:dc:4f:d6:6a:e9:1d:da:33:20:a5:40:07: 09:05:4f:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF7Ttnnp5mZq1VgOLgl+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZTEyMDNhY2Q5YjA3YTExZWEzN2U4MmY2YzI0MWZmODQw Mjk3NWEwHhcNMjUxMjE0MDkwMTE0WhcNMjUxMjE1MDkwMTE0WjAzMTEwLwYDVQQD Eyg4YTZlZTcwZjNlNDMxZDAzNDg4MTJiMDg1OGRlNTViYWE1NmI2ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3NLtdhke+ehilGxd5MLZaQS92YX EO45tSVOwEgjR80aG5XE6AeNnxDX9YqfZ/l6/QFvND3SLt/zteVz0ckxCI0Uut8B vSrTVXWunzSbiKO49m77KLXG3mmv7zA3sukfTW6ixPWPqkxeFItQ+cQMVdNXug7b vRkCh4jTDotMlC8snAPzwMZaHg8bMEddVCSmlF2h6Wnfa4K23NiCQk3UIpvjfxhN VdJ0isgIj9dxTyCQHfiMeudFJL86P5AL//av92g0AWVi4p4efQgRgeJgL3QK/V3U rbdapbCui8HYbrMcE0qlDajTx5z1fA3y3+KaIszQAMnYAfOrfDi582Y5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpu5w8+Qx0DSIErCFjeVbqla2+cMB8GA1UdIwQY MBaAFC3hIDrNmwehHqN+gvbCQf+EApdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMt ZjI4Y2QyNzY0OTA0LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMtZjI4Y2QyNzY0OTA0 LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8mSRGOr ngh8khStOtEMVNwAmpASf+Vjq7NHjsUjDcofpCJykDqkS9eVrnB8o3gQsOngfZWs vaglc+FbAJL9vbem0hdGLRzo3ZBDkb5RsnhtkuTjGt25ilhj86v2jrHwP4etx2L0 XVDPbHy8CQbqKd2v+oYVJOgQKmW8hWNuyGqDqINbRwiyo2XwUTPDphY+N4HPw1xY gZNbimEB6vVCytlaDsXp34b0x6Lbnpqa39jXGfr6+8aLjUCAopFoyVz+b87ReVSW 4aXYIqoeOaOSH656uQQcuMSm88emaPxty0Q9SBFrYaSWdt6+P4d23Dyt3E/Waukd 2jMgpUAHCQVPDA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:54 2025 by rpki-client