This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json) Hash identifier: f+Dq617WbgAYl4xXcwB4Jq4W5QtmmaufEE52zc0yGlg= Subject key identifier: EC:0F:FF:C8:04:61:3E:06:82:7B:D4:5C:DF:FE:EA:27:8B:05:21:45 Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f Certificate serial: 019B23649596B385EF726073EB8C94FE0E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft Manifest number: 170F Signing time: Mon 15 Dec 2025 19:02:32 +0000 Manifest this update: Mon 15 Dec 2025 19:02:32 +0000 Manifest next update: Tue 16 Dec 2025 19:02:32 +0000 Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=) 2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: u5pP9lu6N3TrjbuLqgWgg6IKEkbLDIT1b92Pz+rWSzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:95:96:b3:85:ef:72:60:73:eb:8c:94:fe:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f Validity Not Before: Dec 15 19:02:32 2025 GMT Not After : Dec 16 19:02:32 2025 GMT Subject: CN=ec0fffc804613e06827bd45cdffeea278b052145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:50:0b:be:4a:1a:63:3d:3b:1c:6f:49:23: 2a:23:cf:98:f9:a7:05:8c:1d:52:8d:31:db:9a:fe: d9:12:f6:3b:d2:e3:de:3d:e7:5a:b8:20:17:1b:7f: 46:25:93:fd:7f:48:3e:05:10:ff:a3:6a:19:b1:94: aa:76:29:9b:3a:6f:59:7e:b3:5a:e7:b1:d5:5b:0d: 33:4f:af:66:9b:1c:e9:1c:8c:72:5b:c2:81:0e:6a: 49:31:36:0a:5d:77:63:48:5b:36:18:38:bd:83:7c: 57:f3:fc:c9:da:92:99:88:aa:32:ad:ec:6a:2e:21: c1:26:d6:94:19:db:cf:7e:47:25:3a:e5:af:de:6e: f2:6a:c7:cd:fd:b4:50:08:98:34:39:b1:04:bf:4b: b0:fe:7d:33:64:e7:5f:00:35:fb:ee:99:3c:54:06: f6:b0:0e:df:e7:25:53:85:b6:fd:2e:7c:19:b6:29: 23:38:b4:7a:73:94:b7:c3:53:69:67:b1:9f:ce:9f: 98:96:32:ca:9e:b5:51:fb:cd:ca:fe:d6:c9:f1:bd: 0c:c7:4e:35:d7:be:7b:08:9f:7a:2b:ad:e4:71:ed: df:77:95:ab:5e:33:91:0b:a7:09:d1:2c:08:10:74: e9:e1:2b:99:01:1c:d0:ff:e1:eb:92:9d:03:05:03: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:FF:C8:04:61:3E:06:82:7B:D4:5C:DF:FE:EA:27:8B:05:21:45 X509v3 Authority Key Identifier: keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:74:eb:8f:cc:b7:37:c4:80:5d:7c:d2:f0:7d:da:ce:65:da: 14:00:62:d3:6d:88:45:94:e7:fc:19:43:d9:b4:50:89:7a:6c: 8d:62:4b:95:a3:34:b9:7b:98:0a:ca:f4:a8:75:5c:af:43:b0: 4b:41:b3:a8:92:ba:c3:5f:a8:32:74:1f:75:15:a2:a9:c6:ca: cf:9c:e2:b6:87:99:a4:19:84:25:91:70:a3:32:0d:4f:fe:0e: 06:9a:c6:2e:4c:6d:9b:e0:0a:8b:93:91:20:51:7c:24:31:e6: f7:96:a4:4f:5e:d1:be:47:d5:51:5b:94:b7:ed:37:62:b2:28: ca:95:f9:e0:c3:e2:fc:a4:67:3c:4a:5e:24:1f:87:83:d0:30: f6:94:83:19:3e:30:18:8d:6d:3e:20:1e:ad:ac:19:f6:e5:5b: f7:83:eb:37:3b:82:f4:8d:3a:9a:81:d0:e2:88:a0:03:d6:19: 80:86:cc:8d:0c:70:94:b1:79:c0:8d:f5:60:37:5f:05:db:ff: 0f:1a:ee:de:e9:54:1c:a8:3d:d1:f5:cb:ec:51:af:dc:8a:30: ff:27:ab:62:d7:02:ed:ab:a8:81:97:8e:57:b8:85:fd:57:ea: a1:b3:c7:fc:e6:16:2f:53:be:9c:ae:f8:f4:b8:e1:f0:8c:66: 07:81:ae:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZJWWs4XvcmBz64yU/g4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi MTg2OGYwHhcNMjUxMjE1MTkwMjMyWhcNMjUxMjE2MTkwMjMyWjAzMTEwLwYDVQQD EyhlYzBmZmZjODA0NjEzZTA2ODI3YmQ0NWNkZmZlZWEyNzhiMDUyMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrhQC75KGmM9OxxvSSMqI8+Y+acF jB1SjTHbmv7ZEvY70uPePedauCAXG39GJZP9f0g+BRD/o2oZsZSqdimbOm9ZfrNa 57HVWw0zT69mmxzpHIxyW8KBDmpJMTYKXXdjSFs2GDi9g3xX8/zJ2pKZiKoyrexq LiHBJtaUGdvPfkclOuWv3m7yasfN/bRQCJg0ObEEv0uw/n0zZOdfADX77pk8VAb2 sA7f5yVThbb9LnwZtikjOLR6c5S3w1NpZ7Gfzp+YljLKnrVR+83K/tbJ8b0Mx041 1757CJ96K63kce3fd5WrXjORC6cJ0SwIEHTp4SuZARzQ/+Hrkp0DBQP4lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwP/8gEYT4GgnvUXN/+6ieLBSFFMB8GA1UdIwQY MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnTrj8y3 N8SAXXzS8H3azmXaFABi022IRZTn/BlD2bRQiXpsjWJLlaM0uXuYCsr0qHVcr0Ow S0GzqJK6w1+oMnQfdRWiqcbKz5zitoeZpBmEJZFwozINT/4OBprGLkxtm+AKi5OR IFF8JDHm95akT17RvkfVUVuUt+03YrIoypX54MPi/KRnPEpeJB+Hg9Aw9pSDGT4w GI1tPiAerawZ9uVb94PrNzuC9I06moHQ4oigA9YZgIbMjQxwlLF5wI31YDdfBdv/ Dxru3ulUHKg90fXL7FGv3Iow/yerYtcC7auogZeOV7iF/VfqobPH/OYWL1O+nK74 9Ljh8IxmB4GuTA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:40:08 2025 by rpki-client