This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json) Hash identifier: SEb3E1FOylzOLcZVFq4iukeU7LSmmMV9Zy0svkxxT7U= Subject key identifier: 11:6D:EE:9B:BA:39:F6:8B:06:5F:A3:C7:55:F8:F2:BC:A1:9B:00:FD Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B1A28F2597229065BD169518B5A170B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 00:00:49 +0000 Manifest this update: Sun 14 Dec 2025 00:00:49 +0000 Manifest next update: Mon 15 Dec 2025 00:00:49 +0000 Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=) 2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=) 3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=) 4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=) 5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=) 6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: sqBBzqHTouYv8mUwilikThakzXgd14ZvKipLmIvL+YM=) 7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:f2:59:72:29:06:5b:d1:69:51:8b:5a:17:0b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Dec 14 00:00:49 2025 GMT Not After : Dec 15 00:00:49 2025 GMT Subject: CN=116dee9bba39f68b065fa3c755f8f2bca19b00fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:74:48:d6:c1:f9:20:2d:3c:0b:de:da:b1: 32:b3:25:6f:3b:3e:58:cb:57:f5:9e:8f:42:11:02: 27:1a:56:cc:2a:49:e3:4f:76:3f:29:ee:9c:e0:7d: ad:51:2c:85:72:e0:f7:79:57:f5:c4:18:7b:19:d2: 2b:ce:10:d0:e1:b5:27:d5:99:a8:4c:19:0f:11:b6: f6:27:94:9d:ae:a0:59:12:c2:8c:ea:61:3e:d8:a2: 74:ef:e9:93:ff:7e:bb:88:58:27:0b:6c:6b:60:29: 48:92:11:e0:21:83:1a:bc:e2:ca:e1:e7:0a:67:56: 4c:32:1a:b5:56:59:a1:22:36:3a:df:8e:35:1e:9d: 09:dd:92:31:4e:1b:a3:cd:9a:02:03:92:95:24:d6: 62:d3:fb:ec:15:af:3b:b4:5c:cf:80:1a:68:0d:47: dc:f7:39:64:09:3b:7c:4f:5d:1f:05:7d:72:38:53: a5:4c:20:04:9a:2c:d2:d8:a0:29:5a:d0:80:0d:3f: e7:e0:6b:a7:de:84:89:00:f5:d8:9e:3e:07:5c:eb: 82:c0:8a:4a:2c:26:14:fd:e5:86:c9:d3:16:58:40: b6:ba:fc:c5:65:e8:36:f3:96:e5:c8:fa:d7:9f:67: 47:27:21:70:48:c2:e2:d1:ff:71:c6:4f:c4:40:19: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6D:EE:9B:BA:39:F6:8B:06:5F:A3:C7:55:F8:F2:BC:A1:9B:00:FD X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ba:56:27:25:52:a0:31:d1:cd:5a:67:26:4a:cf:32:30:2f: 74:1b:db:9f:ed:a7:a1:b8:b5:c0:8d:2d:77:dc:b7:64:cc:12: be:48:e1:4f:26:ae:4a:10:9d:9f:47:7f:92:10:d5:e3:c9:e1: a1:3c:ca:3c:f2:e2:d7:aa:11:52:03:4d:9f:8b:63:c9:7b:77: 5d:43:c9:92:de:89:fe:fd:f9:73:fb:ac:8b:d6:87:81:3b:aa: 79:40:ab:31:29:2d:86:fb:30:50:6f:a6:a9:82:67:e5:93:f5: 2d:29:df:7a:4f:b4:84:4c:16:95:72:16:28:9a:79:e2:04:3e: 60:7d:92:60:9d:c1:f3:28:75:a9:83:f6:bc:ce:de:66:4b:ab: c4:43:d8:9e:d1:a9:a3:3f:c4:90:5d:51:cc:2c:84:4d:87:73: 47:c7:e8:ba:d9:8d:54:66:62:88:9a:67:5d:5d:fb:af:be:c2: c8:aa:17:93:81:d7:71:c9:d5:5b:c4:1d:1f:67:21:f1:c1:c4: 6f:ff:0b:76:3d:8f:df:41:91:ea:ff:32:5c:3a:cf:4e:ed:77: f1:26:f2:56:3d:af:0a:08:ea:3d:53:4a:ba:8a:41:18:c6:78: d9:2a:c3:2e:25:99:f5:9a:0f:c2:01:f0:10:f7:dc:b4:76:94: 03:b4:f5:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKPJZcikGW9FpUYtaFwtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjUxMjE0MDAwMDQ5WhcNMjUxMjE1MDAwMDQ5WjAzMTEwLwYDVQQD EygxMTZkZWU5YmJhMzlmNjhiMDY1ZmEzYzc1NWY4ZjJiY2ExOWIwMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEd0SNbB+SAtPAve2rEysyVvOz5Y y1f1no9CEQInGlbMKknjT3Y/Ke6c4H2tUSyFcuD3eVf1xBh7GdIrzhDQ4bUn1Zmo TBkPEbb2J5SdrqBZEsKM6mE+2KJ07+mT/367iFgnC2xrYClIkhHgIYMavOLK4ecK Z1ZMMhq1VlmhIjY63441Hp0J3ZIxThujzZoCA5KVJNZi0/vsFa87tFzPgBpoDUfc 9zlkCTt8T10fBX1yOFOlTCAEmizS2KApWtCADT/n4Gun3oSJAPXYnj4HXOuCwIpK LCYU/eWGydMWWEC2uvzFZeg285blyPrXn2dHJyFwSMLi0f9xxk/EQBl3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFt7pu6OfaLBl+jx1X48ryhmwD9MB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLpWJyVS oDHRzVpnJkrPMjAvdBvbn+2nobi1wI0td9y3ZMwSvkjhTyauShCdn0d/khDV48nh oTzKPPLi16oRUgNNn4tjyXt3XUPJkt6J/v35c/usi9aHgTuqeUCrMSkthvswUG+m qYJn5ZP1LSnfek+0hEwWlXIWKJp54gQ+YH2SYJ3B8yh1qYP2vM7eZkurxEPYntGp oz/EkF1RzCyETYdzR8foutmNVGZiiJpnXV37r77CyKoXk4HXccnVW8QdH2ch8cHE b/8Ldj2P30GR6v8yXDrPTu138SbyVj2vCgjqPVNKuopBGMZ42SrDLiWZ9ZoPwgHw EPfctHaUA7T1bQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:47:02 2025 by rpki-client