This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json) Hash identifier: CcdSE/APgKctTx9ynu0thCilyhKLTkseza/T1itqFTo= Subject key identifier: FF:9A:B0:F3:EC:45:9F:BC:90:C4:FE:52:86:20:C7:6D:FF:FC:E4:44 Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Certificate serial: 019B26645E32C18F0A2F47DC8D5A1FE873A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft Manifest number: 1536 Signing time: Tue 16 Dec 2025 09:01:10 +0000 Manifest this update: Tue 16 Dec 2025 09:01:10 +0000 Manifest next update: Wed 17 Dec 2025 09:01:10 +0000 Files and hashes: 1: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=) 2: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=) 3: _c0pJJZ7zU5EHB0txGdfoaZUuHE.roa (hash: JBEJnTbk0DUkFdoYHdzISJaKoNBjc9m3vJ4DFADUl0E=) 4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: 3v1lRuVIFHeNAHxvuX91Mat5YWvJ4fKOimRsG6Iy1Q0=) 5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:5e:32:c1:8f:0a:2f:47:dc:8d:5a:1f:e8:73:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Validity Not Before: Dec 16 09:01:10 2025 GMT Not After : Dec 17 09:01:10 2025 GMT Subject: CN=ff9ab0f3ec459fbc90c4fe528620c76dfffce444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:13:27:a9:70:06:f5:80:6a:b7:f0:d3:ad: ec:77:d3:5c:5e:fb:78:96:f6:e7:5e:7d:d5:46:70: 17:71:30:1a:58:bf:58:84:8c:b3:e2:7f:9e:60:7f: cb:11:de:2a:b2:34:b3:9a:8b:ca:ad:6c:7b:57:aa: 8e:4f:ae:b0:a9:07:17:ab:0e:29:c0:2b:17:42:66: 76:40:08:63:4d:b7:32:61:43:fb:a9:30:29:3a:69: 5c:10:f9:a9:f0:c8:fb:16:1b:6d:94:37:db:09:89: 33:89:a1:e9:27:73:80:1d:1a:41:15:33:c4:22:2c: 96:1e:eb:70:6f:7c:8a:19:f1:d5:49:08:b3:16:5e: 77:f6:08:44:0d:4a:76:f3:d0:4d:2e:86:1f:d2:02: be:7b:b4:1f:92:12:00:25:b1:8a:60:b1:74:b8:a6: 95:c1:e9:da:76:83:35:8a:ce:52:d9:f4:83:a8:e5: 72:61:9a:b4:60:fe:7f:94:b6:26:7f:31:76:c0:ce: a5:22:eb:6a:66:71:d6:83:ca:d0:4f:a0:67:f0:3e: ec:42:f0:6a:da:35:40:23:10:91:1b:a8:64:e6:34: 29:77:54:f9:03:1b:ed:d2:82:9e:ac:95:32:e7:24: 72:3d:4a:cd:9a:58:32:63:38:de:4c:6f:69:00:f1: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:B0:F3:EC:45:9F:BC:90:C4:FE:52:86:20:C7:6D:FF:FC:E4:44 X509v3 Authority Key Identifier: keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:74:07:5c:cc:2b:ca:bc:7f:e0:51:24:12:6d:1e:37:a3:7d: 80:fd:7e:b4:28:48:ab:b4:c1:59:aa:30:bb:c1:ea:ee:7f:7a: 42:36:e3:cf:41:45:92:59:8b:32:f2:67:23:91:fa:e9:24:ae: ae:c8:7f:4c:76:7b:1f:ec:bb:2d:8c:d5:96:ab:d6:08:df:55: ed:19:72:99:3c:d0:f9:25:5b:33:eb:f8:be:c8:99:c0:1d:db: e2:20:01:6f:5e:38:d2:1b:a9:8d:07:0a:26:83:e3:94:31:f8: 35:a7:2d:06:cb:2f:d6:8c:d7:ce:10:c4:db:44:0c:58:77:91: 64:4d:22:f1:3d:eb:41:86:ac:af:15:5e:a4:a0:7a:dd:e3:77: e0:dd:1b:70:cf:df:50:91:c1:79:4e:88:34:18:2f:44:17:ca: b7:6d:02:f3:4c:5c:de:08:15:0d:1c:e1:e5:18:a7:9a:6d:67: 51:b9:ab:e3:38:5c:eb:6b:04:94:04:25:17:39:6b:f3:c1:ff: bc:41:1f:3f:7f:61:74:f4:be:9a:a2:12:86:96:8e:c1:7b:fc: 0d:51:57:59:b2:e1:0f:54:84:f2:94:57:18:e7:0c:1e:09:02: bc:1b:61:94:a6:77:cc:61:d7:a9:a6:c8:41:df:a2:46:79:ce: 51:8e:e3:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZF4ywY8KL0fcjVof6HOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh NGFlNDEwHhcNMjUxMjE2MDkwMTEwWhcNMjUxMjE3MDkwMTEwWjAzMTEwLwYDVQQD EyhmZjlhYjBmM2VjNDU5ZmJjOTBjNGZlNTI4NjIwYzc2ZGZmZmNlNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO0TJ6lwBvWAarfw063sd9NcXvt4 lvbnXn3VRnAXcTAaWL9YhIyz4n+eYH/LEd4qsjSzmovKrWx7V6qOT66wqQcXqw4p wCsXQmZ2QAhjTbcyYUP7qTApOmlcEPmp8Mj7FhttlDfbCYkziaHpJ3OAHRpBFTPE IiyWHutwb3yKGfHVSQizFl539ghEDUp289BNLoYf0gK+e7QfkhIAJbGKYLF0uKaV wenadoM1is5S2fSDqOVyYZq0YP5/lLYmfzF2wM6lIutqZnHWg8rQT6Bn8D7sQvBq 2jVAIxCRG6hk5jQpd1T5Axvt0oKerJUy5yRyPUrNmlgyYzjeTG9pAPEvzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+asPPsRZ+8kMT+UoYgx23//OREMB8GA1UdIwQY MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHQHXMwr yrx/4FEkEm0eN6N9gP1+tChIq7TBWaowu8Hq7n96Qjbjz0FFklmLMvJnI5H66SSu rsh/THZ7H+y7LYzVlqvWCN9V7RlymTzQ+SVbM+v4vsiZwB3b4iABb1440hupjQcK JoPjlDH4NactBssv1ozXzhDE20QMWHeRZE0i8T3rQYasrxVepKB63eN34N0bcM/f UJHBeU6INBgvRBfKt20C80xc3ggVDRzh5Rinmm1nUbmr4zhc62sElAQlFzlr88H/ vEEfP39hdPS+mqIShpaOwXv8DVFXWbLhD1SE8pRXGOcMHgkCvBthlKZ3zGHXqabI Qd+iRnnOUY7jOQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:48:53 2025 by rpki-client