This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json) Hash identifier: msyNeLsFHmMR3PGGIwy5Sl/UDe3pug82irIt8sns/XM= Subject key identifier: 0A:35:9F:5E:88:35:B8:B4:F0:CC:B3:95:DC:CA:D6:53:A6:56:FE:2B Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb Certificate serial: 019B5976923C26FD73E720FF83EE846C1626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft Manifest number: 0D94 Signing time: Fri 26 Dec 2025 07:01:41 +0000 Manifest this update: Fri 26 Dec 2025 07:01:41 +0000 Manifest next update: Sat 27 Dec 2025 07:01:41 +0000 Files and hashes: 1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=) 2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: YKJneN8nr7AakPW2A3rLIE7S/sPbRnHGnso53lM1fmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:92:3c:26:fd:73:e7:20:ff:83:ee:84:6c:16:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb Validity Not Before: Dec 26 07:01:41 2025 GMT Not After : Dec 27 07:01:41 2025 GMT Subject: CN=0a359f5e8835b8b4f0ccb395dccad653a656fe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:6a:29:68:27:7c:3a:cc:b8:02:df:2f:78: b4:c5:af:d4:89:09:55:9e:9b:68:95:a5:85:91:ab: c4:f2:1d:6e:53:f7:98:49:f7:77:c9:98:53:10:f4: 28:92:a2:3f:f5:e9:4a:d7:77:be:f9:5e:ef:be:86: 81:6a:08:0a:f1:a9:3e:86:93:a3:dd:c3:82:73:17: a0:7d:b8:eb:8c:b8:36:cc:a4:bf:a1:7a:bf:bc:3f: 95:b9:5c:ad:6a:bc:cf:d4:e7:4c:31:2c:c2:79:a0: 26:25:b0:9f:60:20:7a:27:ab:eb:c5:0f:31:d5:6b: 31:3d:81:30:ea:ad:f5:1d:39:ac:70:3e:5f:34:b9: 06:56:f8:b1:7a:08:d6:bc:de:9f:a3:c8:1d:6e:b7: 0a:d9:83:ef:a7:a7:da:50:59:00:df:37:c6:a2:90: 97:75:9b:09:a9:03:df:79:e0:4e:d0:38:b2:eb:ec: db:fe:d7:1c:51:26:e1:75:5d:cb:fc:be:d5:6f:31: 33:a2:a4:bd:08:cd:be:cb:48:22:87:0a:ff:50:19: ef:97:12:d8:f2:26:4b:1d:03:92:d1:b9:b5:09:30: 4a:91:78:6a:62:5b:84:f0:21:70:3d:36:ca:6f:65: 3b:e5:99:bf:9d:fc:fa:e8:37:b1:03:4a:10:c4:d5: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:35:9F:5E:88:35:B8:B4:F0:CC:B3:95:DC:CA:D6:53:A6:56:FE:2B X509v3 Authority Key Identifier: keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:55:03:22:7c:d1:d9:07:49:59:ed:16:b2:d2:c0:da:4a:e7: ff:70:7e:9c:4e:84:77:cb:3b:cf:dd:6f:6c:7f:bf:0e:0a:38: 1c:66:5e:54:64:fc:57:42:63:a5:f0:c6:44:7f:b1:47:9d:da: 66:8e:ec:a7:45:c5:e8:38:f0:26:8d:f0:93:16:09:ee:ce:22: 2d:d1:f6:e2:f2:b2:84:fe:17:3f:2b:8e:f4:04:a2:0a:c3:1f: 79:d4:cc:90:30:fb:98:d6:25:c1:1e:65:3e:d3:c6:01:4f:f3: 62:e2:60:10:4e:6a:1d:02:b2:41:07:fe:10:bb:27:1d:41:74: 4e:69:69:15:ce:0f:34:69:e7:f3:de:fe:41:37:50:34:1f:d2: d2:93:f7:3b:8a:44:c1:c8:00:7c:b2:f1:f4:a1:b6:95:89:86: 37:91:a9:a8:b8:c0:cf:db:35:27:2b:1f:b0:0e:ad:d4:e6:fb: d5:c0:5c:91:08:80:06:ce:ca:72:de:89:f9:a7:2c:b2:8a:99: b5:e2:0a:1c:1d:94:06:87:f2:da:01:32:94:9a:d5:7f:e9:57: 91:20:7b:33:cb:f0:a8:c5:e7:36:e7:f3:48:94:7a:50:5b:b6: be:dd:70:2d:0c:73:17:85:77:59:06:9e:71:f8:be:cb:5f:15: 97:a4:5d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpI8Jv1z5yD/g+6EbBYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2M2EwZmM0N2E3YWRmNjI4NDVhZDZkY2Q3ZmI3NjFhNmMx OWZlZGIwHhcNMjUxMjI2MDcwMTQxWhcNMjUxMjI3MDcwMTQxWjAzMTEwLwYDVQQD EygwYTM1OWY1ZTg4MzViOGI0ZjBjY2IzOTVkY2NhZDY1M2E2NTZmZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV9qKWgnfDrMuALfL3i0xa/UiQlV nptolaWFkavE8h1uU/eYSfd3yZhTEPQokqI/9elK13e++V7vvoaBaggK8ak+hpOj 3cOCcxegfbjrjLg2zKS/oXq/vD+VuVytarzP1OdMMSzCeaAmJbCfYCB6J6vrxQ8x 1WsxPYEw6q31HTmscD5fNLkGVvixegjWvN6fo8gdbrcK2YPvp6faUFkA3zfGopCX dZsJqQPfeeBO0Diy6+zb/tccUSbhdV3L/L7VbzEzoqS9CM2+y0gihwr/UBnvlxLY 8iZLHQOS0bm1CTBKkXhqYluE8CFwPTbKb2U75Zm/nfz66DexA0oQxNUfUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo1n16INbi08MyzldzK1lOmVv4rMB8GA1UdIwQY MBaAFJY6D8R6et9ihFrW3Nf7dhpsGf7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUt ZTQwNDVkOGNmZThmLzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUtZTQwNDVkOGNmZThm LzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFUDInzR 2QdJWe0WstLA2krn/3B+nE6Ed8s7z91vbH+/Dgo4HGZeVGT8V0JjpfDGRH+xR53a Zo7sp0XF6DjwJo3wkxYJ7s4iLdH24vKyhP4XPyuO9ASiCsMfedTMkDD7mNYlwR5l PtPGAU/zYuJgEE5qHQKyQQf+ELsnHUF0TmlpFc4PNGnn897+QTdQNB/S0pP3O4pE wcgAfLLx9KG2lYmGN5GpqLjAz9s1JysfsA6t1Ob71cBckQiABs7Kct6J+acssoqZ teIKHB2UBofy2gEylJrVf+lXkSB7M8vwqMXnNufzSJR6UFu2vt1wLQxzF4V3WQae cfi+y18Vl6RdMw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:39 2025 by rpki-client