This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft File: LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json) Hash identifier: EIjMnmUEzkgS8zysNeWN+8ynesw6UYRpt7wf0iPiPjI= Subject key identifier: 75:71:6C:09:62:EE:A3:0B:45:35:FF:15:69:C3:8D:E5:FD:FE:D0:9A Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98 Certificate serial: 019B0F00BA65787100C474083BA7DBBE76B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft Manifest number: 1780 Signing time: Thu 11 Dec 2025 20:01:04 +0000 Manifest this update: Thu 11 Dec 2025 20:01:04 +0000 Manifest next update: Fri 12 Dec 2025 20:01:04 +0000 Files and hashes: 1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=) 2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=) 3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=) 4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=) 5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=) 6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: 15GfPT5B/NYCyYumKLHE0nSVgqR8RzqyzxJ6RkrMIng=) 7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ba:65:78:71:00:c4:74:08:3b:a7:db:be:76:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Validity Not Before: Dec 11 20:01:04 2025 GMT Not After : Dec 12 20:01:04 2025 GMT Subject: CN=75716c0962eea30b4535ff1569c38de5fdfed09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:bc:b3:e0:3d:6e:d2:0d:35:39:c5:16:8a: a4:a2:78:74:7c:d3:a8:c7:35:81:4d:95:46:80:cb: 00:bc:51:48:cb:ac:c0:eb:d7:f6:04:64:73:7e:eb: 86:b8:fe:b0:8a:64:6c:5f:ed:20:f1:db:3d:8a:80: a4:d3:4b:39:3f:64:8a:69:b4:64:03:4a:c3:e7:1e: 70:95:32:4b:47:1b:34:36:d0:20:f6:40:64:d4:f0: 92:ac:79:0f:3f:b2:d7:91:3b:05:d8:5f:c6:da:06: 6b:b1:9f:8d:03:a3:d5:53:67:13:10:09:86:5a:9b: f6:9a:f4:2c:bb:dc:5e:14:74:0c:d1:25:22:7d:60: 81:a8:a7:3c:d0:71:ad:a9:ab:fa:30:06:ed:11:43: 2e:c7:5d:af:32:dd:17:46:9a:8d:15:38:7c:72:f6: 8d:e1:fd:6c:94:0a:d1:aa:7f:f0:db:49:4c:65:46: 80:c4:b3:b9:8b:8b:1b:90:f1:ba:1e:b6:5d:3d:28: e0:3b:c2:4f:bd:27:62:ac:1c:2e:92:30:12:9f:69: cd:14:b1:fa:b6:07:b2:75:bd:f5:15:4b:2b:4b:bf: 4f:c8:ce:3d:09:bb:6c:b3:e4:89:cd:a6:5c:97:f1: 1a:0c:3b:c0:c7:d1:99:c4:e1:47:5e:a0:5b:b9:c7: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:71:6C:09:62:EE:A3:0B:45:35:FF:15:69:C3:8D:E5:FD:FE:D0:9A X509v3 Authority Key Identifier: keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:90:a9:f4:2d:33:6a:f6:43:67:d2:cc:90:da:d5:4f:ce:8e: c3:40:90:1b:e9:2e:10:1d:2e:54:97:72:9d:ce:9e:c8:2c:ed: b6:3f:24:cb:99:f2:32:7d:ba:75:e6:0b:8e:58:b0:4d:39:b2: a7:b2:8a:31:c4:ee:41:e4:d5:07:0b:0b:c1:4c:5e:ae:70:5f: 67:57:e2:e7:3c:b0:b6:50:8a:ca:99:6d:48:49:f3:0e:5a:77: 21:d7:39:65:b5:3b:da:67:2e:98:39:3f:c7:43:15:4f:b4:c1: ea:8e:25:da:29:5b:c2:87:5b:f3:cd:91:f5:37:02:b4:5f:bf: d6:13:31:26:4b:ee:b9:d9:63:55:22:be:ec:51:7d:06:c2:d5: b6:a9:21:64:cd:24:4f:85:64:f4:f0:da:91:e2:d2:fa:64:fd: d8:92:6c:f6:10:5a:9c:3c:44:d4:85:e1:65:5a:b3:79:0c:35: 3d:e8:a6:f7:cb:ac:86:80:52:e8:19:ab:5b:1c:b6:88:b3:d1: ac:a3:77:9e:75:a8:e1:53:21:5a:96:2e:60:d0:fe:d7:31:13: 69:c2:8d:5b:d2:8c:7d:5a:bb:1d:f3:b0:16:34:23:28:9a:82: a8:7b:18:83:1e:26:6a:1d:92:6f:f0:4b:28:c2:52:fb:67:bf: 86:16:ea:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPALpleHEAxHQIO6fbvna4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2 ZmFjOTgwHhcNMjUxMjExMjAwMTA0WhcNMjUxMjEyMjAwMTA0WjAzMTEwLwYDVQQD Eyg3NTcxNmMwOTYyZWVhMzBiNDUzNWZmMTU2OWMzOGRlNWZkZmVkMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvca8s+A9btINNTnFFoqkonh0fNOo xzWBTZVGgMsAvFFIy6zA69f2BGRzfuuGuP6wimRsX+0g8ds9ioCk00s5P2SKabRk A0rD5x5wlTJLRxs0NtAg9kBk1PCSrHkPP7LXkTsF2F/G2gZrsZ+NA6PVU2cTEAmG Wpv2mvQsu9xeFHQM0SUifWCBqKc80HGtqav6MAbtEUMux12vMt0XRpqNFTh8cvaN 4f1slArRqn/w20lMZUaAxLO5i4sbkPG6HrZdPSjgO8JPvSdirBwukjASn2nNFLH6 tgeydb31FUsrS79PyM49Cbtss+SJzaZcl/EaDDvAx9GZxOFHXqBbucfIuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVxbAli7qMLRTX/FWnDjeX9/tCaMB8GA1UdIwQY MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt N2Y5NzBhM2FmOWNkLzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJCp9C0z avZDZ9LMkNrVT86Ow0CQG+kuEB0uVJdync6eyCzttj8ky5nyMn26deYLjliwTTmy p7KKMcTuQeTVBwsLwUxernBfZ1fi5zywtlCKypltSEnzDlp3Idc5ZbU72mcumDk/ x0MVT7TB6o4l2ilbwodb882R9TcCtF+/1hMxJkvuudljVSK+7FF9BsLVtqkhZM0k T4Vk9PDakeLS+mT92JJs9hBanDxE1IXhZVqzeQw1Peim98ushoBS6BmrWxy2iLPR rKN3nnWo4VMhWpYuYND+1zETacKNW9KMfVq7HfOwFjQjKJqCqHsYgx4mah2Sb/BL KMJS+2e/hhbq1Q== -----END CERTIFICATE-----Generated at Fri Dec 12 02:44:19 2025 by rpki-client