This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json) Hash identifier: 9c65533HFldlFQoWDuJiC4O/kuuus9Zq5477ETibSrk= Subject key identifier: 79:6E:4B:9D:EC:91:E9:25:8B:FF:D0:A2:61:E0:35:17:51:BE:53:C3 Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60 Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960 Certificate serial: 019B24763A036CF42281E6883ABC4F71ECD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft Manifest number: 0354 Signing time: Tue 16 Dec 2025 00:01:26 +0000 Manifest this update: Tue 16 Dec 2025 00:01:26 +0000 Manifest next update: Wed 17 Dec 2025 00:01:26 +0000 Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=) 2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=) 3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: TXYchi+3w0/YA4Qpk0QibWMcH/w6E381zDYjYaU7rD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:3a:03:6c:f4:22:81:e6:88:3a:bc:4f:71:ec:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960 Validity Not Before: Dec 16 00:01:26 2025 GMT Not After : Dec 17 00:01:26 2025 GMT Subject: CN=796e4b9dec91e9258bffd0a261e0351751be53c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:f9:4f:be:bf:b7:0c:8e:88:6a:6b:e8:e6: df:b2:72:fd:ab:b6:a4:cf:c4:0f:bc:3b:30:e8:99: fe:58:79:85:6a:16:a9:df:8f:73:63:b5:85:3d:76: 7f:b1:a5:81:63:62:31:77:1d:69:e2:7f:27:9e:8a: c7:d1:56:83:62:1c:08:f2:34:2f:cc:85:83:97:3f: 3a:20:ab:79:83:74:8d:60:1e:0e:5c:64:18:c3:a7: 01:7e:21:81:2e:f4:31:73:0d:47:49:b8:36:7d:52: e3:59:c2:b7:7d:b4:62:d1:dd:41:6a:1f:75:1d:14: 5e:8f:da:23:15:fb:5d:ab:c1:24:1b:cb:bb:e4:cd: 09:95:3e:74:5c:36:65:16:c3:29:b7:43:d7:9d:81: 66:52:b2:f7:f2:3f:14:ca:5d:52:93:6f:db:37:4c: e4:2a:99:8b:1b:76:d3:6b:a6:83:06:ee:fa:29:c5: a3:7f:d9:ad:2f:5e:6a:c4:a7:62:95:e9:45:25:7d: 27:af:9f:95:bb:56:29:7a:79:9a:9f:8b:a3:6b:4c: 6e:93:2f:60:97:31:bd:a4:e0:38:87:e9:70:48:2b: ef:d0:6e:30:8e:26:a5:14:c9:53:1b:2d:48:48:41: 17:ac:13:e3:63:2f:06:df:a2:16:bb:c2:2f:80:12: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:4B:9D:EC:91:E9:25:8B:FF:D0:A2:61:E0:35:17:51:BE:53:C3 X509v3 Authority Key Identifier: keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:60:31:b0:e7:dd:ae:ae:bc:c3:91:5f:0e:75:93:5e:cd: ed:bf:8b:6c:a0:f5:9e:e9:0c:31:a3:b9:50:3b:76:53:b3:32: 90:7f:e1:6d:57:50:21:a6:51:7e:3d:48:cb:8c:0f:3d:a9:66: 3f:ac:0b:66:c7:4a:71:e4:1b:85:1b:c3:3e:81:67:9f:e7:35: 05:d2:e9:91:01:c6:08:7d:5e:a4:5e:e0:e8:3b:6c:84:f9:5e: 87:44:92:12:de:2f:6a:30:8a:c6:81:54:84:94:ea:fc:8b:d7: 6b:67:f7:ee:ce:b0:8c:af:b4:29:91:74:20:c1:f3:6f:f2:5d: d3:5b:cc:98:b6:c7:d1:02:ba:e8:07:63:48:c7:b2:83:83:17: d1:e3:3d:56:4e:64:da:a2:13:d3:01:d7:cd:77:b3:28:ad:52: c9:06:59:0e:66:e6:d9:33:98:e2:61:d9:6d:92:5a:07:41:ad: 2e:49:cd:21:7e:de:d3:9d:79:1b:1f:ce:de:4e:fb:1b:32:5c: d6:e5:2b:f3:d0:9d:a1:a6:de:1e:c1:c3:6b:c9:0f:c7:96:fe: 35:ef:21:31:5f:c5:d0:e9:49:09:b1:9a:0a:ca:05:a3:c4:85: 93:60:ae:a4:5b:5c:a6:9d:e1:be:67:3b:82:4a:86:11:3a:b5: 5b:6c:a1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdjoDbPQigeaIOrxPcezYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm MTM5NjAwHhcNMjUxMjE2MDAwMTI2WhcNMjUxMjE3MDAwMTI2WjAzMTEwLwYDVQQD Eyg3OTZlNGI5ZGVjOTFlOTI1OGJmZmQwYTI2MWUwMzUxNzUxYmU1M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4n5T76/twyOiGpr6ObfsnL9q7ak z8QPvDsw6Jn+WHmFahap349zY7WFPXZ/saWBY2Ixdx1p4n8nnorH0VaDYhwI8jQv zIWDlz86IKt5g3SNYB4OXGQYw6cBfiGBLvQxcw1HSbg2fVLjWcK3fbRi0d1Bah91 HRRej9ojFftdq8EkG8u75M0JlT50XDZlFsMpt0PXnYFmUrL38j8Uyl1Sk2/bN0zk KpmLG3bTa6aDBu76KcWjf9mtL15qxKdilelFJX0nr5+Vu1Ypenman4uja0xuky9g lzG9pOA4h+lwSCvv0G4wjialFMlTGy1ISEEXrBPjYy8G36IWu8IvgBIgVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHluS53skekli//QomHgNRdRvlPDMB8GA1UdIwQY MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt NWIzMThjMzQ5OWZiLzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgctgMbDn 3a6uvMORXw51k17N7b+LbKD1nukMMaO5UDt2U7MykH/hbVdQIaZRfj1Iy4wPPalm P6wLZsdKceQbhRvDPoFnn+c1BdLpkQHGCH1epF7g6DtshPleh0SSEt4vajCKxoFU hJTq/IvXa2f37s6wjK+0KZF0IMHzb/Jd01vMmLbH0QK66AdjSMeyg4MX0eM9Vk5k 2qIT0wHXzXezKK1SyQZZDmbm2TOY4mHZbZJaB0GtLknNIX7e0515Gx/O3k77GzJc 1uUr89CdoabeHsHDa8kPx5b+Ne8hMV/F0OlJCbGaCsoFo8SFk2CupFtcpp3hvmc7 gkqGETq1W2yhAw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:45 2025 by rpki-client