This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json) Hash identifier: 7KemZe+yeosGdAgXm0Q2+ofQvHmUiVnDhAW17AEO06g= Subject key identifier: FC:3D:56:38:96:0C:8F:8F:65:E2:15:9E:E0:9F:82:B0:A5:1F:7A:ED Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7 Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7 Certificate serial: 019B36B37BA99BA7A33525EA79981255CF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft Manifest number: 12E7 Signing time: Fri 19 Dec 2025 13:01:30 +0000 Manifest this update: Fri 19 Dec 2025 13:01:30 +0000 Manifest next update: Sat 20 Dec 2025 13:01:30 +0000 Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=) 2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: KrqlB4rY7/iNoUQbuhV1n2G7hc6/IBESsZfHorkSdK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:7b:a9:9b:a7:a3:35:25:ea:79:98:12:55:cf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7 Validity Not Before: Dec 19 13:01:30 2025 GMT Not After : Dec 20 13:01:30 2025 GMT Subject: CN=fc3d5638960c8f8f65e2159ee09f82b0a51f7aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:06:38:d1:a0:46:00:ab:e3:55:fc:aa:74: a8:79:cf:24:0d:36:69:df:4c:57:b1:c4:3b:34:89: c7:c0:8e:2d:03:0c:0a:3b:65:eb:17:a1:84:6b:e3: 7b:52:47:1b:d7:b1:cf:e5:d3:73:51:7e:7a:97:4f: a1:cb:fd:f9:76:d3:8c:af:19:ba:f2:0c:80:4f:ee: a6:ec:a0:e2:c6:03:a6:56:7d:17:2d:9a:ca:61:8d: 10:13:fc:84:f8:38:73:50:a9:5e:f4:e5:40:12:2d: eb:2e:ff:ed:fd:3f:66:90:e1:9e:e3:3c:06:44:e3: b1:a8:c1:73:87:34:fa:14:d6:de:08:58:a6:96:da: fe:64:e8:09:1d:6e:71:06:24:5b:31:b3:9d:4c:20: 5f:15:6e:c5:f1:ad:59:14:9a:74:1a:30:2c:ae:ad: cb:f6:9b:37:9d:7d:0e:bb:a1:22:63:d6:35:ad:03: fc:12:59:81:8a:ff:cf:4c:c9:da:3b:df:be:f8:f8: a7:fd:5a:b6:a5:49:c0:d9:13:08:6c:0f:ce:bc:22: f6:ba:dc:f8:23:c9:42:74:02:83:4c:f0:e5:c1:ef: 17:92:80:90:24:fa:76:c3:5d:e0:f6:f3:d3:ae:99: 69:2d:00:dc:8f:8d:12:46:da:dc:8f:f6:8a:51:43: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3D:56:38:96:0C:8F:8F:65:E2:15:9E:E0:9F:82:B0:A5:1F:7A:ED X509v3 Authority Key Identifier: keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:95:7e:5b:0b:d8:a7:58:4e:2a:14:29:4e:d2:60:5f:6f:28: ab:bd:ba:ae:d0:1d:66:e5:b0:69:59:c2:39:5c:78:ed:cf:fb: 92:82:5c:d4:a2:00:6e:40:0a:50:27:af:cb:1f:68:d4:ef:c0: 2c:ce:3b:0e:53:33:d6:c0:7d:75:d9:4b:86:d8:66:1a:ce:84: 36:1b:2d:20:59:1b:0e:1b:35:a3:e2:04:dc:99:f0:b4:7a:b4: 23:9e:1d:80:d4:07:78:ff:ff:f3:f9:2c:d1:f1:29:7a:e8:12: 11:5d:f5:8f:3c:57:69:c1:23:88:c6:e9:07:13:2b:b8:a9:34: 01:19:3d:36:d9:56:50:50:39:e1:3f:94:21:78:59:da:20:8b: 4d:dd:55:94:ca:3d:6b:48:0f:fa:ff:41:18:e7:a6:c3:55:84: e1:a3:e7:38:da:ac:bb:31:0e:b7:ac:2e:85:2b:43:52:e8:8d: fb:55:64:cc:ed:74:87:4f:b6:de:3c:18:fe:55:62:c5:9f:21: 13:0d:6f:33:94:62:3e:c2:f4:3c:45:61:ab:41:6f:1b:03:2c: d0:eb:7c:ba:52:32:e0:f5:46:2e:44:b0:f4:fd:22:e2:05:f2: 94:f4:12:db:38:48:b9:7a:84:a2:e9:b7:fe:1e:ff:12:3a:80: 9c:88:61:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s3upm6ejNSXqeZgSVc8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1 YjBkZjcwHhcNMjUxMjE5MTMwMTMwWhcNMjUxMjIwMTMwMTMwWjAzMTEwLwYDVQQD EyhmYzNkNTYzODk2MGM4ZjhmNjVlMjE1OWVlMDlmODJiMGE1MWY3YWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDsGONGgRgCr41X8qnSoec8kDTZp 30xXscQ7NInHwI4tAwwKO2XrF6GEa+N7Ukcb17HP5dNzUX56l0+hy/35dtOMrxm6 8gyAT+6m7KDixgOmVn0XLZrKYY0QE/yE+DhzUKle9OVAEi3rLv/t/T9mkOGe4zwG ROOxqMFzhzT6FNbeCFimltr+ZOgJHW5xBiRbMbOdTCBfFW7F8a1ZFJp0GjAsrq3L 9ps3nX0Ou6EiY9Y1rQP8ElmBiv/PTMnaO9+++Pin/Vq2pUnA2RMIbA/OvCL2utz4 I8lCdAKDTPDlwe8XkoCQJPp2w13g9vPTrplpLQDcj40SRtrcj/aKUUN4cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw9VjiWDI+PZeIVnuCfgrClH3rtMB8GA1UdIwQY MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt NzM0ZmFiNmZlYzZmLzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpV+WwvY p1hOKhQpTtJgX28oq726rtAdZuWwaVnCOVx47c/7koJc1KIAbkAKUCevyx9o1O/A LM47DlMz1sB9ddlLhthmGs6ENhstIFkbDhs1o+IE3JnwtHq0I54dgNQHeP//8/ks 0fEpeugSEV31jzxXacEjiMbpBxMruKk0ARk9NtlWUFA54T+UIXhZ2iCLTd1VlMo9 a0gP+v9BGOemw1WE4aPnONqsuzEOt6wuhStDUuiN+1VkzO10h0+23jwY/lVixZ8h Ew1vM5RiPsL0PEVhq0FvGwMs0Ot8ulIy4PVGLkSw9P0i4gXylPQS2zhIuXqEoum3 /h7/EjqAnIhhvw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:18:07 2025 by rpki-client