This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json) Hash identifier: XyGrgzZaNcKyRWDaQpJ6ew41nDPKQKwh+59c61+4KMk= Subject key identifier: 4B:6D:CD:C3:63:3F:44:89:15:A4:22:C1:0F:EB:FF:6E:F7:26:4D:0D Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Certificate serial: 019AACB9F61B9D69D759066F7B76D3A1EB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft Manifest number: 066B Signing time: Sat 22 Nov 2025 18:00:59 +0000 Manifest this update: Sat 22 Nov 2025 18:00:59 +0000 Manifest next update: Sun 23 Nov 2025 18:00:59 +0000 Files and hashes: 1: DhJdlSXGg4nwo43i-3hsY3C4PiQ.roa (hash: OLFOl5avnYQnKlew3nA3PZbHQQyKutwAJUJzm6ztUrI=) 2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: Sv4Ip0e0Zb6pdUHdrRxbBNQSI1ak9T9d9DUtJkl6MyY=) 3: ear6glms6xQEx-sJzJyz2U-vwUo.roa (hash: myzxilbkgn8eg20yO8piaw6MM2eVN5CUHaMGcHJd8U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:f6:1b:9d:69:d7:59:06:6f:7b:76:d3:a1:eb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Validity Not Before: Nov 22 18:00:59 2025 GMT Not After : Nov 23 18:00:59 2025 GMT Subject: CN=4b6dcdc3633f448915a422c10febff6ef7264d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:51:6c:15:d5:cc:54:60:50:08:58:e0:85: 8d:29:de:1e:e7:b2:48:5b:c6:bd:94:0c:8d:5e:55: e5:36:f8:e9:39:01:61:68:41:2b:e6:3b:ab:81:8c: ea:78:8b:50:f0:c9:26:dd:d7:d5:ba:6e:8a:8f:8f: ba:de:5e:b2:4c:b0:44:59:c4:7d:ce:7a:51:0b:a1: e0:9f:2e:cb:bf:0e:46:fd:97:9f:eb:b9:53:49:f6: 89:d8:3b:1a:f3:38:fa:56:c2:73:fc:06:b4:db:c3: 6c:17:c2:ef:97:81:8d:86:c7:c3:98:64:f5:83:35: 4a:63:09:a7:4e:b5:90:b7:8e:1c:80:30:07:e8:5d: 6d:38:ae:ac:16:d9:7e:6c:3f:f2:de:5c:9c:9e:32: 83:f3:54:71:12:67:f0:b3:9f:6a:71:93:6a:c5:6a: 33:7d:a8:44:8e:6b:cc:38:b1:ae:42:0b:5e:d5:1b: 74:d7:19:aa:4d:77:89:0c:e5:73:95:de:5d:d7:3e: 46:e9:1d:d9:ae:9a:19:f2:00:ee:c9:24:17:21:0a: 5a:2e:b6:48:c2:fe:6b:c5:6a:66:58:3b:4d:05:f7: da:a1:8f:73:b6:8d:18:0a:53:1d:a7:8a:ed:63:ae: 6e:07:8a:31:01:2f:9d:f1:9a:fc:35:a2:49:18:2e: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:CD:C3:63:3F:44:89:15:A4:22:C1:0F:EB:FF:6E:F7:26:4D:0D X509v3 Authority Key Identifier: keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:74:fa:7b:a9:77:be:ae:eb:8c:06:11:51:c0:73:fb:23:af: ab:31:a6:47:f8:82:27:23:85:06:ee:d1:a1:83:62:8e:6f:b2: 94:91:20:86:3d:14:87:4f:45:a1:87:b3:b1:3d:70:ec:9e:a8: 58:96:ac:33:58:84:90:4d:f8:7f:9f:40:d9:fc:8a:5b:44:49: 72:d6:fd:0d:30:b3:9b:e6:86:09:30:0f:cd:a9:52:a0:f7:35: b0:67:92:ee:6a:04:91:0f:03:7e:31:1b:2d:ff:20:c7:99:00: 5d:1f:3b:da:b8:f4:07:e5:1a:cc:0b:48:6c:2b:08:be:2b:c3: 1b:05:61:ce:7e:71:94:3b:41:1c:bb:20:9c:0a:1a:7a:cf:33: 8c:e2:27:86:a4:8c:81:0b:ce:0d:d7:89:7c:e1:a5:da:73:cb: 16:51:5e:ca:b7:d0:4c:c1:74:26:04:7f:f8:9f:d1:c9:8d:82: 1f:83:74:3a:41:65:c8:7d:f1:e1:e7:9f:b5:fc:87:cc:3d:26: 8a:5c:92:3b:5d:85:71:9e:bc:6a:8d:d7:31:6d:91:74:32:15: 2f:7d:89:fa:0c:29:57:91:22:3b:13:e6:25:b5:82:20:48:03: 56:c0:1c:33:62:87:30:81:91:13:49:94:c1:be:2d:90:36:ee: fa:6b:bd:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsufYbnWnXWQZve3bToetHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl Zjk3NjMwHhcNMjUxMTIyMTgwMDU5WhcNMjUxMTIzMTgwMDU5WjAzMTEwLwYDVQQD Eyg0YjZkY2RjMzYzM2Y0NDg5MTVhNDIyYzEwZmViZmY2ZWY3MjY0ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyxRbBXVzFRgUAhY4IWNKd4e57JI W8a9lAyNXlXlNvjpOQFhaEEr5jurgYzqeItQ8Mkm3dfVum6Kj4+63l6yTLBEWcR9 znpRC6Hgny7Lvw5G/Zef67lTSfaJ2Dsa8zj6VsJz/Aa028NsF8Lvl4GNhsfDmGT1 gzVKYwmnTrWQt44cgDAH6F1tOK6sFtl+bD/y3lycnjKD81RxEmfws59qcZNqxWoz fahEjmvMOLGuQgte1Rt01xmqTXeJDOVzld5d1z5G6R3ZrpoZ8gDuySQXIQpaLrZI wv5rxWpmWDtNBffaoY9zto0YClMdp4rtY65uB4oxAS+d8Zr8NaJJGC4XwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEttzcNjP0SJFaQiwQ/r/273Jk0NMB8GA1UdIwQY MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnT6e6l3 vq7rjAYRUcBz+yOvqzGmR/iCJyOFBu7RoYNijm+ylJEghj0Uh09FoYezsT1w7J6o WJasM1iEkE34f59A2fyKW0RJctb9DTCzm+aGCTAPzalSoPc1sGeS7moEkQ8DfjEb Lf8gx5kAXR872rj0B+UazAtIbCsIvivDGwVhzn5xlDtBHLsgnAoaes8zjOInhqSM gQvODdeJfOGl2nPLFlFeyrfQTMF0JgR/+J/RyY2CH4N0OkFlyH3x4eeftfyHzD0m ilySO12FcZ68ao3XMW2RdDIVL32J+gwpV5EiOxPmJbWCIEgDVsAcM2KHMIGRE0mU wb4tkDbu+mu9ZA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:01 2025 by rpki-client