This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json) Hash identifier: Oqh8/vElVh1A+Ut2P+amfqDb8uaa88R8SfOG4e1sIso= Subject key identifier: 3E:5C:DA:7F:E0:CF:89:A8:C1:52:BF:F2:DA:C2:15:77:76:21:E9:5B Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B1E05BE6DF764633F48112F3E6F9A6E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 18:00:51 +0000 Manifest this update: Sun 14 Dec 2025 18:00:51 +0000 Manifest next update: Mon 15 Dec 2025 18:00:51 +0000 Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=) 2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=) 3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=) 4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=) 5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=) 6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: Dv38YFoZ8JoNfX8zfACgb75+rJvNTPQOydUo1FpayWc=) 7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:be:6d:f7:64:63:3f:48:11:2f:3e:6f:9a:6e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Dec 14 18:00:51 2025 GMT Not After : Dec 15 18:00:51 2025 GMT Subject: CN=3e5cda7fe0cf89a8c152bff2dac215777621e95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:77:1b:f3:47:64:da:a3:6e:75:d3:ea:d9: 8d:e7:cc:0a:00:50:b0:0e:54:d8:fd:6d:bb:ba:7a: 05:a1:20:9b:d9:44:05:54:4c:84:fd:f6:3d:44:da: 1f:7f:be:54:55:67:59:f9:a0:99:d4:34:17:f1:49: 6e:ba:16:6e:4b:0c:b1:a9:f5:ff:8e:c5:a0:59:bb: 59:a7:0b:2f:e0:29:17:1f:8c:0b:85:aa:a9:fb:6a: 04:58:17:96:32:67:00:b4:37:78:36:df:f0:43:75: a1:e6:3a:0e:2d:93:21:2a:b4:15:ab:2d:77:12:6d: cf:55:ba:98:01:8d:59:11:b2:b3:19:31:bd:9e:a2: b1:2f:00:c5:e1:a7:dd:9e:b6:1d:13:a1:75:2c:7d: f0:5a:bc:d2:8a:dc:f8:8d:90:2c:aa:7f:77:9c:8a: ce:77:5e:30:a3:98:8c:fc:8d:50:d5:c4:92:1a:9d: 82:8b:9c:54:63:ec:b2:3d:93:e8:39:92:55:5e:91: 78:5e:3b:2c:bf:4c:9b:83:16:a8:ae:a9:3a:e4:c4: 6d:eb:c1:c7:1e:ba:81:48:15:29:d8:68:ab:c2:ca: 1b:d1:f6:78:6c:d0:b0:ac:7c:66:c0:41:07:f3:c7: f9:dc:d1:c9:44:db:9c:95:aa:d0:12:5c:ce:93:20: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:DA:7F:E0:CF:89:A8:C1:52:BF:F2:DA:C2:15:77:76:21:E9:5B X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:67:5e:03:03:49:be:2d:a5:91:75:c6:d0:d8:70:16:31:65: 98:36:9a:00:7e:33:a9:91:98:f0:5e:bf:73:4c:35:63:bd:64: 9b:6f:22:64:a0:82:23:76:5c:32:7e:78:9d:4a:b2:46:73:ed: f7:10:43:f7:14:a9:42:46:6c:eb:23:30:50:be:13:33:be:a7: db:c4:4a:04:01:c7:9b:e2:b5:8b:84:09:90:24:53:a7:a4:ad: 1b:b0:82:91:3d:24:ec:f4:e9:cf:d7:63:72:01:e0:a3:d3:b5: 24:af:3e:ff:aa:07:d6:33:00:4c:9c:43:14:ac:64:ac:d4:dd: 38:f2:90:e3:4a:be:f3:29:a3:b0:5b:a1:b6:b4:9a:4e:2f:a7: 34:7f:ca:31:28:9e:82:43:b0:f9:d0:c9:42:04:7a:08:aa:3d: f9:82:0c:07:1c:4f:bd:10:de:9d:29:fc:5d:6c:2e:e3:a5:59: ce:17:51:8f:30:67:d0:a9:79:b4:fe:36:73:1d:2a:2d:36:c7: ae:7d:aa:17:46:08:6d:1e:a1:d2:75:90:a2:e6:2d:67:21:a6: a3:64:59:22:8d:c5:8a:b8:2d:80:9b:d5:c1:27:f8:16:9a:66: a0:3f:c8:d6:8a:44:34:b9:29:df:e2:d1:bc:60:c2:a2:9c:80: a0:04:31:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBb5t92RjP0gRLz5vmm6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjUxMjE0MTgwMDUxWhcNMjUxMjE1MTgwMDUxWjAzMTEwLwYDVQQD EygzZTVjZGE3ZmUwY2Y4OWE4YzE1MmJmZjJkYWMyMTU3Nzc2MjFlOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7J3G/NHZNqjbnXT6tmN58wKAFCw DlTY/W27unoFoSCb2UQFVEyE/fY9RNoff75UVWdZ+aCZ1DQX8UluuhZuSwyxqfX/ jsWgWbtZpwsv4CkXH4wLhaqp+2oEWBeWMmcAtDd4Nt/wQ3Wh5joOLZMhKrQVqy13 Em3PVbqYAY1ZEbKzGTG9nqKxLwDF4afdnrYdE6F1LH3wWrzSitz4jZAsqn93nIrO d14wo5iM/I1Q1cSSGp2Ci5xUY+yyPZPoOZJVXpF4Xjssv0ybgxaorqk65MRt68HH HrqBSBUp2Girwsob0fZ4bNCwrHxmwEEH88f53NHJRNuclarQElzOkyAoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5c2n/gz4mowVK/8trCFXd2IelbMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2deAwNJ vi2lkXXG0NhwFjFlmDaaAH4zqZGY8F6/c0w1Y71km28iZKCCI3ZcMn54nUqyRnPt 9xBD9xSpQkZs6yMwUL4TM76n28RKBAHHm+K1i4QJkCRTp6StG7CCkT0k7PTpz9dj cgHgo9O1JK8+/6oH1jMATJxDFKxkrNTdOPKQ40q+8ymjsFuhtrSaTi+nNH/KMSie gkOw+dDJQgR6CKo9+YIMBxxPvRDenSn8XWwu46VZzhdRjzBn0Kl5tP42cx0qLTbH rn2qF0YIbR6h0nWQouYtZyGmo2RZIo3FirgtgJvVwSf4FppmoD/I1opENLkp3+LR vGDCopyAoAQxAg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:44 2025 by rpki-client