This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json) Hash identifier: 20Ij3xM1L+IU+QA3YPrupkpAqQvrPqSn2X7ntej4n/M= Subject key identifier: 56:3C:8B:4E:00:DA:D5:9E:2D:37:4B:BC:65:A4:70:92:84:47:90:30 Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Certificate serial: 019B292F7BE39C5D3FEF30E795BBE556CC43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft Manifest number: 06 Signing time: Tue 16 Dec 2025 22:02:16 +0000 Manifest this update: Tue 16 Dec 2025 22:02:16 +0000 Manifest next update: Wed 17 Dec 2025 22:02:16 +0000 Files and hashes: 1: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: c+dhSSxUm3a8sicJC7WSB/ekB14JCvNHW9cUM88Dn4E=) 2: uBox9AzNI9c48CWd4Lti5PIQUMU.asa (hash: Ctcd+bK7ShvhArOI9ROeTpxR23PaesF/wshOIbvWvS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:7b:e3:9c:5d:3f:ef:30:e7:95:bb:e5:56:cc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Validity Not Before: Dec 16 22:02:16 2025 GMT Not After : Dec 17 22:02:16 2025 GMT Subject: CN=563c8b4e00dad59e2d374bbc65a4709284479030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:08:c8:d5:22:5e:9a:04:ab:3b:e7:68:a0: 15:aa:0b:c7:47:78:34:0b:64:71:a9:02:bd:58:3e: a8:69:19:d3:c3:0a:e3:04:e5:c9:b3:15:fe:6d:48: 61:6c:03:ac:be:75:c0:4e:c9:c1:9b:ee:75:30:d1: 83:6d:15:ce:ad:4e:c4:41:dc:2f:49:83:35:1b:14: 56:da:10:84:8e:cd:3d:b8:d3:b0:18:ed:36:a6:bd: 91:76:32:9f:fc:96:f3:66:07:ab:3b:e3:c3:40:6b: 15:a2:4c:98:55:78:c1:35:46:f7:c5:b3:91:c6:97: c7:8a:70:6c:32:55:46:26:af:a3:45:85:33:61:ff: 6b:11:9d:76:b3:a1:2d:ad:db:9b:2e:fb:c1:b3:49: 3e:39:99:79:61:bc:f9:d3:ed:12:10:30:f4:1e:91: 7d:20:fa:9b:37:32:ef:9a:68:6f:4e:fc:3f:ea:6a: f2:65:2a:f4:5f:7f:45:c6:28:5f:d2:8b:9c:51:a2: 7c:0d:98:37:89:4b:2f:18:c8:6e:d8:49:de:1b:5c: 90:32:0a:d4:cd:55:f6:f8:35:e8:61:2a:8b:24:6d: 13:a5:54:d3:f2:94:23:a4:e5:31:20:b3:97:6c:c0: f0:fb:24:89:5f:80:83:42:79:55:bd:b7:1c:77:65: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:8B:4E:00:DA:D5:9E:2D:37:4B:BC:65:A4:70:92:84:47:90:30 X509v3 Authority Key Identifier: keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a7:55:40:5a:ae:0b:c9:b0:ce:48:4b:fc:e0:d3:94:62:4a: 6e:e2:32:be:b7:86:47:20:7e:b9:2a:b7:5a:13:7c:28:a9:09: 30:e0:9c:ce:db:6e:64:cf:33:de:2a:91:16:59:13:6a:a7:d9: 4a:89:10:f4:8a:32:64:d7:65:5c:e5:79:d5:09:49:f8:78:d9: 5a:39:da:ce:af:bb:cf:06:47:2b:b0:8a:58:d1:07:f6:34:c4: 1d:4f:e5:4a:f9:a1:43:e8:67:ee:5e:b0:1f:11:09:d5:9f:42: 56:1b:3e:dc:09:3e:73:7b:f5:af:ef:f5:47:2d:65:cd:ec:e6: 1d:22:ea:32:49:68:c3:af:66:1e:49:93:fc:06:9e:32:e4:50: de:ab:4c:10:71:7b:e6:b4:76:65:bf:80:c7:01:f4:3d:36:91: 70:55:39:1c:66:41:f6:c2:18:ce:af:a6:a6:63:d6:2f:36:c3: 51:49:09:31:f5:df:6e:55:49:b5:fd:34:55:77:76:70:8a:41: 4c:8e:07:8d:79:57:35:b1:a8:41:5f:ed:b6:99:aa:80:a0:24: 61:05:0b:89:21:9f:34:49:83:58:b8:84:ec:a6:53:0e:36:82: 0c:f6:7b:ec:f0:08:e8:76:d0:63:d2:50:9e:2a:1e:f0:6a:7e: e4:91:9f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL3vjnF0/7zDnlbvlVsxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2VlMThkMDk3NDhmNDZkYzUzYWQ5NGI3MjlmMzExMTBh Y2FjMzQwHhcNMjUxMjE2MjIwMjE2WhcNMjUxMjE3MjIwMjE2WjAzMTEwLwYDVQQD Eyg1NjNjOGI0ZTAwZGFkNTllMmQzNzRiYmM2NWE0NzA5Mjg0NDc5MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmwIyNUiXpoEqzvnaKAVqgvHR3g0 C2RxqQK9WD6oaRnTwwrjBOXJsxX+bUhhbAOsvnXATsnBm+51MNGDbRXOrU7EQdwv SYM1GxRW2hCEjs09uNOwGO02pr2RdjKf/JbzZgerO+PDQGsVokyYVXjBNUb3xbOR xpfHinBsMlVGJq+jRYUzYf9rEZ12s6EtrdubLvvBs0k+OZl5Ybz50+0SEDD0HpF9 IPqbNzLvmmhvTvw/6mryZSr0X39Fxihf0oucUaJ8DZg3iUsvGMhu2EneG1yQMgrU zVX2+DXoYSqLJG0TpVTT8pQjpOUxILOXbMDw+ySJX4CDQnlVvbccd2WJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY8i04A2tWeLTdLvGWkcJKER5AwMB8GA1UdIwQY MBaAFC4+4Y0JdI9G3FOtlLcp8xEQrKw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTkt ZDg0ODY5ZmY5NTYxLzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTktZDg0ODY5ZmY5NTYx LzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6dVQFqu C8mwzkhL/ODTlGJKbuIyvreGRyB+uSq3WhN8KKkJMOCczttuZM8z3iqRFlkTaqfZ SokQ9IoyZNdlXOV51QlJ+HjZWjnazq+7zwZHK7CKWNEH9jTEHU/lSvmhQ+hn7l6w HxEJ1Z9CVhs+3Ak+c3v1r+/1Ry1lzezmHSLqMklow69mHkmT/AaeMuRQ3qtMEHF7 5rR2Zb+AxwH0PTaRcFU5HGZB9sIYzq+mpmPWLzbDUUkJMfXfblVJtf00VXd2cIpB TI4HjXlXNbGoQV/ttpmqgKAkYQULiSGfNEmDWLiE7KZTDjaCDPZ77PAI6HbQY9JQ nioe8Gp+5JGfmA== -----END CERTIFICATE-----Generated at Wed Dec 17 06:28:45 2025 by rpki-client