This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json) Hash identifier: +LtsM/AdH6zMH288gjf2uq3+usAprsPxiCen4NNGbVU= Subject key identifier: 9A:C0:C4:2A:A6:4C:F1:78:E8:F6:C2:D5:F7:27:6B:22:C8:E5:22:7E Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019AABA6EF4A7B2AFA00CB92E983D84DBFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft Manifest number: 0459 Signing time: Sat 22 Nov 2025 13:00:35 +0000 Manifest this update: Sat 22 Nov 2025 13:00:35 +0000 Manifest next update: Sun 23 Nov 2025 13:00:35 +0000 Files and hashes: 1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=) 2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=) 3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=) 4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: YtjI6utBxKXXajaxV1ZE4N1S1e7/pKqWaMyJ+tgKk/8=) 5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a6:ef:4a:7b:2a:fa:00:cb:92:e9:83:d8:4d:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Nov 22 13:00:35 2025 GMT Not After : Nov 23 13:00:35 2025 GMT Subject: CN=9ac0c42aa64cf178e8f6c2d5f7276b22c8e5227e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:d7:95:81:ff:46:8b:e9:cd:70:97:e4:05: a5:39:7f:8c:9d:72:04:12:ed:9f:25:4e:ac:c8:f5: 16:61:34:63:4f:34:4d:05:9a:2d:d0:7b:af:7f:df: 7d:5d:8d:32:d5:4e:5b:b8:95:b0:5f:c1:b6:71:a8: bd:a8:a5:2f:bb:1d:d1:a5:b6:15:a1:78:d7:b7:36: 41:05:3a:3a:7c:34:e6:90:da:2e:35:49:f9:05:f7: f6:19:0d:05:2e:74:7a:80:18:84:f4:b3:e8:13:26: 05:ab:b2:ea:9f:20:16:6d:b0:e2:70:76:87:06:40: 04:b2:4e:c3:11:1f:6c:5b:94:f4:d2:4a:ad:e7:4c: de:91:b1:c9:7c:62:ef:71:cf:a6:8a:cf:46:e6:42: 63:da:5d:91:43:ef:82:bb:36:c4:26:1c:71:e3:c5: 8b:09:76:52:5d:3e:b9:01:b8:f2:d6:1a:f2:d4:9f: 8e:48:f5:4a:ac:b6:ee:f9:fa:f3:e0:7f:f7:4b:e9: 55:ff:83:52:1d:0c:4c:02:7d:cf:7d:7e:76:6a:4d: cc:90:57:5d:9f:43:14:94:d0:0d:77:01:53:c2:3c: 4e:f2:9a:53:07:b2:2b:bb:6b:4d:67:91:22:7c:34: 77:35:20:6f:2c:d0:8d:80:b0:85:1c:74:a1:58:b7: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:C4:2A:A6:4C:F1:78:E8:F6:C2:D5:F7:27:6B:22:C8:E5:22:7E X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:49:7d:ed:ab:83:2d:dd:16:17:0b:a0:d7:9f:eb:f8:d3:67: 57:9d:cb:97:ad:fb:59:5d:d5:38:5e:e9:7d:30:a6:48:2f:8b: 0f:49:89:dc:29:82:f0:54:68:3a:40:ae:9e:4c:00:3b:68:31: ed:f3:c7:e7:ed:0e:f7:2a:2d:dc:f1:d1:ca:18:1a:34:f5:8c: 2c:26:c7:9f:b9:6e:09:da:a0:e9:c5:b0:aa:32:5d:4a:0d:f8: ce:37:05:63:53:7b:fb:03:06:f4:29:d3:f1:78:e3:41:bb:f1: 3f:21:31:a1:47:a1:f4:9d:d8:80:44:76:98:49:e3:b1:3f:73: c4:8c:21:46:c8:5d:6b:d6:90:fc:5b:02:a0:ec:49:7b:c9:23: 81:50:bf:15:3a:28:1b:08:08:90:a8:87:81:1a:49:1b:87:a5: 0a:4c:a5:13:9f:d8:56:85:e2:75:d1:96:1c:dc:62:8b:ae:f8: d5:72:83:6d:76:af:99:2e:4a:3e:f8:05:dd:9c:7b:4d:7f:d3: 0c:3a:ff:9e:05:78:a5:b7:45:66:ab:ad:2e:b3:d7:e2:21:33: cd:80:40:27:6b:09:b3:7e:dc:4f:7e:03:93:cd:cc:f0:78:d8: 9f:90:ff:57:01:81:24:da:ee:2f:f2:d8:91:59:48:89:49:ce: 66:73:3f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpu9Keyr6AMuS6YPYTb/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjUxMTIyMTMwMDM1WhcNMjUxMTIzMTMwMDM1WjAzMTEwLwYDVQQD Eyg5YWMwYzQyYWE2NGNmMTc4ZThmNmMyZDVmNzI3NmIyMmM4ZTUyMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0PXlYH/RovpzXCX5AWlOX+MnXIE Eu2fJU6syPUWYTRjTzRNBZot0Huvf999XY0y1U5buJWwX8G2cai9qKUvux3RpbYV oXjXtzZBBTo6fDTmkNouNUn5Bff2GQ0FLnR6gBiE9LPoEyYFq7LqnyAWbbDicHaH BkAEsk7DER9sW5T00kqt50zekbHJfGLvcc+mis9G5kJj2l2RQ++CuzbEJhxx48WL CXZSXT65Abjy1hry1J+OSPVKrLbu+frz4H/3S+lV/4NSHQxMAn3PfX52ak3MkFdd n0MUlNANdwFTwjxO8ppTB7Iru2tNZ5EifDR3NSBvLNCNgLCFHHShWLduHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrAxCqmTPF46PbC1fcnayLI5SJ+MB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUl97auD Ld0WFwug15/r+NNnV53Ll637WV3VOF7pfTCmSC+LD0mJ3CmC8FRoOkCunkwAO2gx 7fPH5+0O9yot3PHRyhgaNPWMLCbHn7luCdqg6cWwqjJdSg34zjcFY1N7+wMG9CnT 8XjjQbvxPyExoUeh9J3YgER2mEnjsT9zxIwhRshda9aQ/FsCoOxJe8kjgVC/FToo GwgIkKiHgRpJG4elCkylE5/YVoXiddGWHNxii6741XKDbXavmS5KPvgF3Zx7TX/T DDr/ngV4pbdFZqutLrPX4iEzzYBAJ2sJs37cT34Dk83M8HjYn5D/VwGBJNruL/LY kVlIiUnOZnM/sA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:25 2025 by rpki-client