This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json) Hash identifier: T4cdTITLtG3UdSOTvpFqBLNv/AIvQr3yKLIU11qkubw= Subject key identifier: 49:B8:B5:BA:DA:5A:55:5E:BE:47:4B:BC:E7:3E:9A:A1:ED:AD:F0:C3 Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Certificate serial: 019B3A91397429AE8A52FAF20E53D8D4A179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft Manifest number: 03C9 Signing time: Sat 20 Dec 2025 07:02:34 +0000 Manifest this update: Sat 20 Dec 2025 07:02:34 +0000 Manifest next update: Sun 21 Dec 2025 07:02:34 +0000 Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: AohzD5QEWyW2N6WZUp5o40bl8xeLcXYOvaUvtpc4hB4=) 2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:39:74:29:ae:8a:52:fa:f2:0e:53:d8:d4:a1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Validity Not Before: Dec 20 07:02:34 2025 GMT Not After : Dec 21 07:02:34 2025 GMT Subject: CN=49b8b5bada5a555ebe474bbce73e9aa1edadf0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:e4:d2:80:b2:9f:81:9c:93:b3:b2:41:c6: 95:a3:f4:43:4f:6b:c8:2b:57:2f:30:f3:5c:b4:60: e9:ac:2a:8a:46:15:bd:01:e3:39:3b:49:3f:83:64: 3a:80:a1:2d:fe:f4:2c:ff:d4:a6:df:12:59:c7:6b: ed:3a:02:52:f1:f7:61:ce:55:34:28:6f:98:01:6b: f7:c3:81:48:2b:f8:c6:4e:0b:d2:1b:9d:b2:11:cf: 9a:83:f1:cd:6f:4f:f7:98:cc:0c:49:52:a6:12:fe: 32:f3:7f:35:d1:dc:1a:cd:1f:7d:2b:7b:d6:20:aa: 40:37:db:09:0c:04:b0:61:88:97:82:a1:d4:40:5c: c4:e1:b4:61:63:bd:af:4d:b1:c0:f9:c5:92:55:59: 62:23:6f:b5:5c:03:2c:09:52:83:0c:d5:f1:41:75: 07:ca:15:8f:d1:11:e2:92:c9:f1:1c:a5:ea:1c:8c: 7f:1c:3d:aa:13:28:1b:7d:be:22:86:89:0f:c7:d1: 34:06:7c:88:a9:6f:43:2f:86:7e:4c:8f:84:c8:fc: 88:70:ca:a9:6e:6c:cf:88:f9:37:4b:8c:51:8c:bc: f5:ce:42:4d:06:2a:23:83:c4:be:91:77:a3:02:75: 75:96:6e:b9:14:df:c7:2b:93:ee:eb:11:63:13:04: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B8:B5:BA:DA:5A:55:5E:BE:47:4B:BC:E7:3E:9A:A1:ED:AD:F0:C3 X509v3 Authority Key Identifier: keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:93:21:d0:02:84:58:1a:c0:8c:cf:f2:6e:f0:d7:6b:62:a9: 10:72:94:57:91:ca:c2:9c:90:be:ed:f8:1f:b3:b1:15:64:5f: aa:66:32:c4:00:c6:5f:95:91:b9:91:a8:79:2c:31:63:a6:b3: 39:ea:e3:71:90:89:77:68:05:7c:69:35:e0:1f:96:33:06:e7: 1f:d5:af:4a:50:d7:b0:b3:9a:71:c0:84:a7:5d:1b:b9:7d:2f: e0:93:fc:e7:c5:5d:26:b7:06:14:60:d8:1f:e9:9d:e8:4e:32: 88:7e:c4:33:8d:a5:f2:6e:e8:37:70:c9:59:49:bc:38:b3:e6: c8:c5:96:33:a2:17:f8:43:a7:b8:09:2c:5f:d3:8a:5d:a3:d1: 7d:f9:fa:06:47:c6:91:19:cd:1a:ac:47:74:74:84:1f:0d:66: 06:8a:a7:a5:56:4f:f1:22:23:fe:6e:ac:72:15:52:ed:53:a1: b7:ba:0c:d1:32:13:1d:8a:b9:1b:24:00:3a:4d:b8:a8:b4:93: e4:87:6f:72:0a:88:d5:9c:1b:da:7d:7e:c5:11:f0:bd:aa:a7: a0:1f:7f:73:20:1a:c7:a4:2e:1c:b6:0c:9e:0f:85:f0:20:ce: 02:e6:68:c0:75:11:ca:23:c5:5a:23:67:91:9e:c0:ab:c6:d6: a2:33:1b:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kTl0Ka6KUvryDlPY1KF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1 ZDJhNTEwHhcNMjUxMjIwMDcwMjM0WhcNMjUxMjIxMDcwMjM0WjAzMTEwLwYDVQQD Eyg0OWI4YjViYWRhNWE1NTVlYmU0NzRiYmNlNzNlOWFhMWVkYWRmMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYLk0oCyn4Gck7OyQcaVo/RDT2vI K1cvMPNctGDprCqKRhW9AeM5O0k/g2Q6gKEt/vQs/9Sm3xJZx2vtOgJS8fdhzlU0 KG+YAWv3w4FIK/jGTgvSG52yEc+ag/HNb0/3mMwMSVKmEv4y83810dwazR99K3vW IKpAN9sJDASwYYiXgqHUQFzE4bRhY72vTbHA+cWSVVliI2+1XAMsCVKDDNXxQXUH yhWP0RHiksnxHKXqHIx/HD2qEygbfb4ihokPx9E0BnyIqW9DL4Z+TI+EyPyIcMqp bmzPiPk3S4xRjLz1zkJNBiojg8S+kXejAnV1lm65FN/HK5Pu6xFjEwT+EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm4tbraWlVevkdLvOc+mqHtrfDDMB8GA1UdIwQY MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3 LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5Mh0AKE WBrAjM/ybvDXa2KpEHKUV5HKwpyQvu34H7OxFWRfqmYyxADGX5WRuZGoeSwxY6az OerjcZCJd2gFfGk14B+WMwbnH9WvSlDXsLOaccCEp10buX0v4JP858VdJrcGFGDY H+md6E4yiH7EM42l8m7oN3DJWUm8OLPmyMWWM6IX+EOnuAksX9OKXaPRffn6BkfG kRnNGqxHdHSEHw1mBoqnpVZP8SIj/m6schVS7VOht7oM0TITHYq5GyQAOk24qLST 5IdvcgqI1Zwb2n1+xRHwvaqnoB9/cyAax6QuHLYMng+F8CDOAuZowHURyiPFWiNn kZ7Aq8bWojMbeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:05:37 2025 by rpki-client