This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft File: lTSP97COo_n-Ii1_e6E9on3LaJU.mft (raw, json) Hash identifier: G+jgbpXFNbhawR1gthtKN+3hoUJ7B/WMI4eFmhGozPY= Subject key identifier: F9:A7:C9:A3:F2:D1:AD:B8:B9:12:14:E0:5B:F7:97:D2:B9:F7:8B:63 Authority key identifier: 95:34:8F:F7:B0:8E:A3:F9:FE:22:2D:7F:7B:A1:3D:A2:7D:CB:68:95 Certificate issuer: /CN=95348ff7b08ea3f9fe222d7f7ba13da27dcb6895 Certificate serial: 019B59AC95DA154830AC8648ECD9F12591BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft Manifest number: 16 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: ja6QsZo8G4SIR-DSVuqNt9DUl8s.roa (hash: 4SebM2+i/WgcNMUOS4jWmYeei2fHyS3VDo3N7Z/ZBvw=) 2: lTSP97COo_n-Ii1_e6E9on3LaJU.crl (hash: CEAE4QLGPFA7ZCRtiW7/ivE6zvM6/ZyZOCX2bUCE2DY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft rsync://rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:95:da:15:48:30:ac:86:48:ec:d9:f1:25:91:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95348ff7b08ea3f9fe222d7f7ba13da27dcb6895 Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=f9a7c9a3f2d1adb8b91214e05bf797d2b9f78b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:10:7c:e2:e5:66:d8:d7:e9:fa:04:d2:ca: da:6c:b5:51:fc:55:b0:62:8a:10:28:e8:b2:bc:0d: 9c:64:58:9c:9e:bf:29:9a:9b:18:21:cd:2b:9b:cf: 3e:af:4a:95:eb:94:dc:8f:85:66:08:7c:0e:0e:db: 6e:91:4b:ef:11:27:a6:a5:32:ee:d8:f1:39:c0:84: 8a:0d:1e:a8:40:45:3f:1d:b9:a0:cf:50:df:b3:8a: 37:cf:6e:80:b7:d0:aa:49:a2:5f:1a:c2:c6:7a:f8: 53:a5:ab:b1:20:5f:4d:75:00:47:c2:ca:7b:e1:80: 00:24:2a:c4:59:30:ce:d5:2b:e8:57:cc:39:37:d5: 55:39:72:f2:bd:36:ac:34:7d:c3:1f:70:2a:fe:90: 3d:5c:e7:24:b8:76:3f:23:15:20:1e:09:05:81:f8: dd:42:00:6d:9a:84:88:27:f4:66:a1:f4:15:07:d8: 41:83:c5:ce:ce:c6:71:79:05:70:7b:49:91:ca:d6: 06:38:ba:3c:32:e8:9b:96:99:fd:44:b3:75:a2:43: 30:04:f9:2f:f4:94:aa:b5:8b:87:be:3b:3e:aa:91: 75:f1:fa:ae:23:9b:ce:d8:1d:04:2a:8b:56:86:42: fb:7f:c5:79:2d:7d:a9:64:fa:bf:43:16:a3:1d:b9: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:C9:A3:F2:D1:AD:B8:B9:12:14:E0:5B:F7:97:D2:B9:F7:8B:63 X509v3 Authority Key Identifier: keyid:95:34:8F:F7:B0:8E:A3:F9:FE:22:2D:7F:7B:A1:3D:A2:7D:CB:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ba:2f:67:19:de:a9:d9:4a:69:a6:97:e0:bb:44:fb:ae:3b: c9:23:8d:62:39:22:ac:0c:8d:b1:7c:37:5f:ed:d3:55:d3:78: fc:8d:f3:bb:3d:a2:0a:2f:f5:ec:4e:3b:46:b1:fa:82:93:16: f2:82:f9:cb:41:70:fc:87:59:85:f4:f6:b8:f4:fe:da:17:ec: 37:7a:a5:1d:0e:69:79:e9:a7:84:9c:53:8b:f2:24:68:4a:bc: cd:83:e3:d7:98:85:3c:51:fa:c5:9f:11:e2:6b:67:80:bc:12: f2:1c:3d:81:ca:73:42:02:1d:6d:70:58:d3:36:78:af:89:1b: 12:03:83:b0:ce:f0:84:9a:0b:3f:0f:2d:a3:ff:1b:d5:9e:e1: b6:9d:76:d4:c9:e4:5c:4f:4c:c3:07:d1:41:fa:8e:19:19:b9: 45:9b:6e:e0:84:e6:43:b0:dd:a7:76:14:d3:74:64:5e:f2:00: 46:58:d9:ad:10:ee:85:a1:e2:96:9a:cd:19:4c:ae:dd:32:6a: fd:f3:e2:e9:00:9d:70:b0:98:db:e2:ac:cc:c9:da:2f:3f:22: bc:bc:88:09:1e:70:60:fb:d1:76:ee:b8:30:e5:a6:2c:7d:4c: 6e:cd:71:70:77:af:de:df:fb:c6:e9:b1:72:b3:e2:10:96:b0: 34:ee:33:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJXaFUgwrIZI7NnxJZG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzQ4ZmY3YjA4ZWEzZjlmZTIyMmQ3ZjdiYTEzZGEyN2Rj YjY4OTUwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD EyhmOWE3YzlhM2YyZDFhZGI4YjkxMjE0ZTA1YmY3OTdkMmI5Zjc4YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMkQfOLlZtjX6foE0srabLVR/FWw YooQKOiyvA2cZFicnr8pmpsYIc0rm88+r0qV65Tcj4VmCHwODttukUvvESempTLu 2PE5wISKDR6oQEU/Hbmgz1Dfs4o3z26At9CqSaJfGsLGevhTpauxIF9NdQBHwsp7 4YAAJCrEWTDO1SvoV8w5N9VVOXLyvTasNH3DH3Aq/pA9XOckuHY/IxUgHgkFgfjd QgBtmoSIJ/RmofQVB9hBg8XOzsZxeQVwe0mRytYGOLo8Muiblpn9RLN1okMwBPkv 9JSqtYuHvjs+qpF18fquI5vO2B0EKotWhkL7f8V5LX2pZPq/QxajHbk3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmnyaPy0a24uRIU4Fv3l9K594tjMB8GA1UdIwQY MBaAFJU0j/ewjqP5/iItf3uhPaJ9y2iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRTUDk3Q09vX24tSWkxX2U2RTlvbjNMYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iNDFlOWQtYWZiYi00NWZlLWJjNjIt ZmQ1ZjNmM2IzOTVlLzEvbFRTUDk3Q09vX24tSWkxX2U2RTlvbjNMYUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9iNDFlOWQtYWZiYi00NWZlLWJjNjItZmQ1ZjNmM2IzOTVl LzEvbFRTUDk3Q09vX24tSWkxX2U2RTlvbjNMYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbovZxne qdlKaaaX4LtE+647ySONYjkirAyNsXw3X+3TVdN4/I3zuz2iCi/17E47RrH6gpMW 8oL5y0Fw/IdZhfT2uPT+2hfsN3qlHQ5peemnhJxTi/IkaEq8zYPj15iFPFH6xZ8R 4mtngLwS8hw9gcpzQgIdbXBY0zZ4r4kbEgODsM7whJoLPw8to/8b1Z7htp121Mnk XE9MwwfRQfqOGRm5RZtu4ITmQ7Ddp3YU03RkXvIARljZrRDuhaHilprNGUyu3TJq /fPi6QCdcLCY2+KszMnaLz8ivLyICR5wYPvRdu64MOWmLH1Mbs1xcHev3t/7xumx crPiEJawNO4zzQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client