This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json) Hash identifier: +OpjRBv5BOCSMchjHlQbKvALxZUDKIorNRwZWuUK//I= Subject key identifier: D7:9B:81:28:CB:8A:E0:73:3A:77:3E:7D:F8:B3:7E:EF:C1:E2:56:8D Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3 Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3 Certificate serial: 019B5B641E577D6E3EF5C1408FD5F4F346DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 16:00:46 +0000 Manifest this update: Fri 26 Dec 2025 16:00:46 +0000 Manifest next update: Sat 27 Dec 2025 16:00:46 +0000 Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=) 2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: BgRW/Astop7CtSlrLl6daUfC7xiFRx9wr69EAwQzMx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:1e:57:7d:6e:3e:f5:c1:40:8f:d5:f4:f3:46:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3 Validity Not Before: Dec 26 16:00:46 2025 GMT Not After : Dec 27 16:00:46 2025 GMT Subject: CN=d79b8128cb8ae0733a773e7df8b37eefc1e2568d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:55:74:b0:a7:fc:5c:56:e2:84:3d:86:47: 5c:15:bc:c7:01:19:16:ac:26:62:1e:af:07:37:48: ad:35:56:35:64:2f:e5:11:ba:98:ca:13:42:58:ec: c7:a7:8f:67:3c:b1:e5:4b:df:d2:09:d9:87:bc:e1: 92:51:08:ea:ed:ef:ab:ef:01:64:3e:5e:7c:2f:57: 3f:47:80:f9:9b:c2:34:5d:53:2a:56:28:f8:fb:5c: 04:3d:e1:24:dc:b7:ab:fb:5f:88:af:d6:4e:52:91: b0:b3:25:35:ba:ad:84:21:17:68:aa:27:c6:2d:ff: 96:1b:f9:b3:f2:4e:1c:b8:4b:7f:2a:6e:49:bd:20: 25:08:de:8d:1b:12:b5:dc:5c:ab:ac:2f:eb:d6:53: bd:04:d4:fe:7c:5e:84:bf:f6:a4:cf:20:4c:01:1f: 03:ec:fb:98:92:eb:42:46:b2:3a:4d:c9:b5:60:54: 0e:48:01:ff:15:aa:82:20:2e:65:c5:fb:d1:71:e3: 14:a4:05:07:51:c4:20:30:0f:a6:72:6f:6a:5b:47: b4:39:b3:35:26:0e:f1:42:55:a4:12:04:f8:60:81: 46:a7:03:04:22:e4:57:53:00:92:6d:5e:5c:c6:f7: ff:aa:2f:0b:54:ef:74:5e:4d:92:fa:81:60:93:5c: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:81:28:CB:8A:E0:73:3A:77:3E:7D:F8:B3:7E:EF:C1:E2:56:8D X509v3 Authority Key Identifier: keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c1:b0:78:ba:30:07:55:3e:39:b2:ee:f4:7e:15:65:09:c9: 96:a6:3c:09:d7:63:79:43:b3:39:0a:7e:bb:4b:47:10:b6:42: 4f:4e:76:d4:42:b4:d3:11:ce:6c:63:c2:e8:0b:3d:f5:9b:7d: df:f9:c7:bb:96:46:74:9b:0c:33:78:c5:71:58:41:e5:c4:c6: 4f:e3:53:6c:b0:e3:0b:79:d0:b2:c3:3f:af:dd:bf:ee:42:10: 60:80:1a:34:ca:81:3e:a2:59:9c:0c:96:25:e3:8d:3e:66:f0: d4:32:e4:07:80:36:2e:4a:ae:b4:e7:3b:a4:c5:fa:6a:e4:63: 75:1c:b6:24:54:fc:f0:df:12:ad:e1:8c:cb:35:35:0c:9f:c5: f7:a1:fd:be:1d:43:f1:d9:19:f3:b9:93:8d:d9:33:dc:60:94: bb:02:73:25:45:78:1d:82:ee:b0:0c:7f:8f:70:9d:6a:33:58: bf:66:63:76:30:ad:f4:7a:db:ac:bf:f5:5b:06:f9:25:87:9a: b9:08:40:25:98:5c:98:eb:36:68:b0:5e:5d:20:f5:e8:4a:5c: 55:c3:c6:e6:05:d7:3f:81:52:f6:34:83:3e:dd:9a:ac:8c:a7: 17:31:f6:34:b2:0e:31:cc:48:44:c8:86:b5:05:3b:94:23:9c: 63:a5:d1:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZB5XfW4+9cFAj9X080baMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzU0NjJlYmIyMDI5YTgzZDNlZWFiNDYyZmYwNTJlY2Zh MGUxYzMwHhcNMjUxMjI2MTYwMDQ2WhcNMjUxMjI3MTYwMDQ2WjAzMTEwLwYDVQQD EyhkNzliODEyOGNiOGFlMDczM2E3NzNlN2RmOGIzN2VlZmMxZTI1NjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhxVdLCn/FxW4oQ9hkdcFbzHARkW rCZiHq8HN0itNVY1ZC/lEbqYyhNCWOzHp49nPLHlS9/SCdmHvOGSUQjq7e+r7wFk Pl58L1c/R4D5m8I0XVMqVij4+1wEPeEk3Ler+1+Ir9ZOUpGwsyU1uq2EIRdoqifG Lf+WG/mz8k4cuEt/Km5JvSAlCN6NGxK13FyrrC/r1lO9BNT+fF6Ev/akzyBMAR8D 7PuYkutCRrI6Tcm1YFQOSAH/FaqCIC5lxfvRceMUpAUHUcQgMA+mcm9qW0e0ObM1 Jg7xQlWkEgT4YIFGpwMEIuRXUwCSbV5cxvf/qi8LVO90Xk2S+oFgk1z9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNebgSjLiuBzOnc+ffizfu/B4laNMB8GA1UdIwQY MBaAFJU1Ri67ICmoPT7qtGL/BS7PoOHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTct MzhhYmZhNGZhMzUwLzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTctMzhhYmZhNGZhMzUw LzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsGweLow B1U+ObLu9H4VZQnJlqY8CddjeUOzOQp+u0tHELZCT0521EK00xHObGPC6As99Zt9 3/nHu5ZGdJsMM3jFcVhB5cTGT+NTbLDjC3nQssM/r92/7kIQYIAaNMqBPqJZnAyW JeONPmbw1DLkB4A2LkqutOc7pMX6auRjdRy2JFT88N8SreGMyzU1DJ/F96H9vh1D 8dkZ87mTjdkz3GCUuwJzJUV4HYLusAx/j3CdajNYv2ZjdjCt9HrbrL/1Wwb5JYea uQhAJZhcmOs2aLBeXSD16EpcVcPG5gXXP4FS9jSDPt2arIynFzH2NLIOMcxIRMiG tQU7lCOcY6XRWg== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:28 2025 by rpki-client