This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json) Hash identifier: VmtjP7LBffw6YIK9SNYfYUhN4FD6eSYxbvpdDTqGwak= Subject key identifier: 14:CB:9F:0A:CC:23:BD:5E:67:8B:6C:D0:95:C6:0B:19:B7:55:5D:09 Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Certificate serial: 019B32D777293B39C26F6558CB812AF2B347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:02:20 +0000 Manifest this update: Thu 18 Dec 2025 19:02:20 +0000 Manifest next update: Fri 19 Dec 2025 19:02:20 +0000 Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=) 2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: FydqF5yKaWfDkgPixQpKrYAugWGmLvJtZ3Hf0rRRLe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:77:29:3b:39:c2:6f:65:58:cb:81:2a:f2:b3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Validity Not Before: Dec 18 19:02:20 2025 GMT Not After : Dec 19 19:02:20 2025 GMT Subject: CN=14cb9f0acc23bd5e678b6cd095c60b19b7555d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:65:8d:0a:5c:e9:6b:79:ef:9a:a2:61:14: 53:c7:0a:43:a1:cd:8c:60:a0:9f:9e:85:91:79:6c: 7f:06:7c:44:39:a2:ac:51:15:48:3f:7b:5f:ef:e6: ab:49:e5:48:29:3d:e1:ae:80:f7:cb:17:10:f5:00: 65:7f:74:c0:63:2c:3b:4d:b2:60:26:27:e0:6d:62: 5e:5b:20:6d:ac:69:54:25:c8:2a:65:0a:22:44:ac: 46:9e:e3:83:3b:e1:93:3c:fd:ab:9e:16:65:93:b8: 8a:71:84:4d:be:e8:2a:e6:d1:48:1d:be:3e:af:e2: d2:ee:61:56:99:25:02:ce:3f:84:b9:ac:3b:ec:53: 54:93:42:1d:2c:63:4c:0e:37:28:fa:f1:ae:8f:38: 50:91:07:61:fc:f4:0f:7a:a9:29:9e:9a:be:59:df: 92:82:f8:1a:03:22:31:ac:63:8b:98:aa:d1:dc:21: 82:c5:24:db:c4:6f:24:cd:11:83:59:1b:db:77:22: 2c:e9:65:34:fc:21:b6:95:de:df:9b:db:2b:43:7c: b1:e8:8f:09:a5:4e:68:8d:d3:22:7f:40:22:c9:83: 49:3a:49:b2:ce:b7:19:d8:65:70:1e:cd:47:21:d7: f6:7d:cf:9f:05:95:fa:22:78:43:c0:0c:e9:fb:2a: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CB:9F:0A:CC:23:BD:5E:67:8B:6C:D0:95:C6:0B:19:B7:55:5D:09 X509v3 Authority Key Identifier: keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cd:7b:be:ac:81:56:c0:3e:a7:45:6d:02:28:fb:1b:48:10: bf:37:eb:43:0d:ac:a2:d2:e3:cc:45:5c:5f:2c:be:14:d6:cc: af:3f:4a:3f:34:f3:bb:e0:ea:6a:a8:6b:51:a7:96:01:79:59: c2:ff:fa:01:e7:72:ca:29:b5:42:72:e4:65:77:1d:53:ba:11: 76:c4:3f:f4:90:36:96:f5:ca:de:29:f3:3d:ed:f9:b1:6e:13: 51:e4:34:4b:99:99:f9:90:a8:8d:6f:40:67:b4:17:75:e9:2e: bd:33:1a:70:34:0f:7c:84:1d:b6:31:34:00:ed:64:9e:19:7f: 32:6d:18:e6:4a:24:fa:78:38:96:2c:29:e7:2b:e2:91:fb:a5: 38:f8:2c:24:dd:4a:87:35:2a:a6:36:7e:8a:b9:cb:19:36:75: 48:9a:90:32:d9:60:71:8d:47:16:8f:30:5c:ec:20:32:69:6c: ac:b9:ee:34:33:20:67:cf:6c:d6:09:53:54:d9:9a:30:8d:13: 94:d1:cb:40:2d:28:4a:e8:09:f3:b4:7b:08:79:e9:33:5d:8e: c5:b1:a7:ef:b8:cc:b8:fe:59:89:a4:64:e8:c9:f4:e2:4c:0c: ab:a4:33:9d:3f:cb:18:ab:9e:d0:2d:54:ad:43:dd:a8:86:3b: b0:ba:11:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy13cpOznCb2VYy4Eq8rNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmI1ZTJlMGZkOTgzMmQ3M2IxZWY4ZjllNDg2ZmZkMDBi M2Q3ODkwHhcNMjUxMjE4MTkwMjIwWhcNMjUxMjE5MTkwMjIwWjAzMTEwLwYDVQQD EygxNGNiOWYwYWNjMjNiZDVlNjc4YjZjZDA5NWM2MGIxOWI3NTU1ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rhljQpc6Wt575qiYRRTxwpDoc2M YKCfnoWReWx/BnxEOaKsURVIP3tf7+arSeVIKT3hroD3yxcQ9QBlf3TAYyw7TbJg JifgbWJeWyBtrGlUJcgqZQoiRKxGnuODO+GTPP2rnhZlk7iKcYRNvugq5tFIHb4+ r+LS7mFWmSUCzj+Euaw77FNUk0IdLGNMDjco+vGujzhQkQdh/PQPeqkpnpq+Wd+S gvgaAyIxrGOLmKrR3CGCxSTbxG8kzRGDWRvbdyIs6WU0/CG2ld7fm9srQ3yx6I8J pU5ojdMif0AiyYNJOkmyzrcZ2GVwHs1HIdf2fc+fBZX6InhDwAzp+ypO5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTLnwrMI71eZ4ts0JXGCxm3VV0JMB8GA1UdIwQY MBaAFPy7Xi4P2YMtc7Hvj55Ib/0As9eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTkt NWU2YTkyZTdmNjhmLzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTktNWU2YTkyZTdmNjhm LzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqc17vqyB VsA+p0VtAij7G0gQvzfrQw2sotLjzEVcXyy+FNbMrz9KPzTzu+DqaqhrUaeWAXlZ wv/6Aedyyim1QnLkZXcdU7oRdsQ/9JA2lvXK3inzPe35sW4TUeQ0S5mZ+ZCojW9A Z7QXdekuvTMacDQPfIQdtjE0AO1knhl/Mm0Y5kok+ng4liwp5yvikfulOPgsJN1K hzUqpjZ+irnLGTZ1SJqQMtlgcY1HFo8wXOwgMmlsrLnuNDMgZ89s1glTVNmaMI0T lNHLQC0oSugJ87R7CHnpM12OxbGn77jMuP5ZiaRk6Mn04kwMq6QznT/LGKue0C1U rUPdqIY7sLoR0A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:00:09 2025 by rpki-client