This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json) Hash identifier: UMm+N2wdz2bXQ/gsFUgKeU3xYBu6KbtlBl5Gdu5+IME= Subject key identifier: 45:7C:EB:BD:F9:92:B0:A6:8D:C0:B3:A4:DC:21:CB:DB:03:B3:E0:A5 Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Certificate serial: 019B2287FA304E64D22853F34E1E21C63250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft Manifest number: 06A8 Signing time: Mon 15 Dec 2025 15:01:35 +0000 Manifest this update: Mon 15 Dec 2025 15:01:35 +0000 Manifest next update: Tue 16 Dec 2025 15:01:35 +0000 Files and hashes: 1: DhJdlSXGg4nwo43i-3hsY3C4PiQ.roa (hash: OLFOl5avnYQnKlew3nA3PZbHQQyKutwAJUJzm6ztUrI=) 2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: hiiy7d3PkA+m+YT1tFhu7apvtK1+708cUMC/XDkDhOw=) 3: ear6glms6xQEx-sJzJyz2U-vwUo.roa (hash: myzxilbkgn8eg20yO8piaw6MM2eVN5CUHaMGcHJd8U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:fa:30:4e:64:d2:28:53:f3:4e:1e:21:c6:32:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763 Validity Not Before: Dec 15 15:01:35 2025 GMT Not After : Dec 16 15:01:35 2025 GMT Subject: CN=457cebbdf992b0a68dc0b3a4dc21cbdb03b3e0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:6b:99:6f:98:8a:af:c9:49:05:34:87:79: 89:1c:7c:80:0f:7a:0f:96:64:66:6e:b6:7a:60:e2: 71:3e:82:59:b6:cb:65:67:e9:bf:09:56:7c:62:2a: 63:c3:b7:f0:b9:d8:06:af:a8:d9:29:6e:99:7b:b4: b1:52:cf:a9:5c:d1:b1:b9:9c:72:bc:4b:6f:a4:08: 9d:ea:16:8c:a5:5d:eb:cd:0d:be:b5:35:38:9c:7b: 86:cb:24:75:18:1a:72:e1:bd:52:39:47:68:71:d2: 1e:5e:bc:88:db:f6:45:39:24:ab:92:81:eb:1a:e9: 27:a8:91:1f:2e:52:7e:a8:d9:c5:37:11:e8:4f:cf: 1f:65:21:36:15:29:da:e7:a7:52:4e:a9:13:c4:1a: 14:c0:41:aa:0f:ae:d3:c5:06:a8:48:32:dd:0e:96: 5c:67:89:07:20:b6:3c:3e:a0:82:cd:90:21:da:68: 4d:af:a9:3d:20:71:04:00:37:37:09:4c:dc:c3:7e: 9f:3e:2e:3a:1e:15:ca:c8:9c:e5:eb:0f:67:62:0e: 1c:c0:b2:12:8e:28:90:40:7d:f3:8e:1b:15:cf:90: ef:38:96:95:70:21:3e:9a:5f:39:fa:3c:5c:98:47: 4f:0c:80:12:fa:bd:9d:5e:8f:7a:a0:0f:34:9d:df: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7C:EB:BD:F9:92:B0:A6:8D:C0:B3:A4:DC:21:CB:DB:03:B3:E0:A5 X509v3 Authority Key Identifier: keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:aa:e4:f7:11:c3:10:cb:77:05:50:88:4e:19:d9:af:19: cb:95:f4:e7:68:ca:bf:26:31:64:45:b5:0c:38:60:5d:af:81: 10:0a:d0:77:8f:27:14:e9:d8:7a:2f:4d:92:a7:03:24:c9:28: af:77:4e:24:2d:c7:87:f9:84:59:ab:2f:b0:80:85:a0:62:21: 87:09:e2:5b:0d:25:1a:ea:f9:0f:c6:7f:a0:0a:0c:32:84:c8: c2:1b:11:57:84:36:f2:93:fa:be:f5:63:4f:9b:2f:bf:91:1c: 12:ad:c9:d3:82:7e:b8:3f:fb:0e:70:dc:57:43:17:7c:f2:06: e3:59:18:9a:76:d1:60:87:d2:aa:45:21:99:5a:92:94:75:eb: 59:93:11:35:3b:66:32:04:bf:11:43:7d:cb:7a:bd:9e:03:ae: 4c:fb:23:ad:9e:ff:68:58:e2:21:93:c2:80:dc:ad:84:a1:28: 82:23:ac:e3:49:5c:8f:b0:f2:e9:98:f6:46:96:f7:74:ac:82: 76:c3:0e:a8:ec:07:08:ef:0e:1a:1f:04:a5:c1:4e:af:c4:f7: bf:42:23:13:9d:47:a8:cc:9e:87:70:30:06:64:33:38:7f:7a: a3:ba:16:93:63:ef:4f:61:c1:70:65:0f:55:39:a6:5e:b3:df: b4:21:8b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih/owTmTSKFPzTh4hxjJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl Zjk3NjMwHhcNMjUxMjE1MTUwMTM1WhcNMjUxMjE2MTUwMTM1WjAzMTEwLwYDVQQD Eyg0NTdjZWJiZGY5OTJiMGE2OGRjMGIzYTRkYzIxY2JkYjAzYjNlMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QNrmW+Yiq/JSQU0h3mJHHyAD3oP lmRmbrZ6YOJxPoJZtstlZ+m/CVZ8Yipjw7fwudgGr6jZKW6Ze7SxUs+pXNGxuZxy vEtvpAid6haMpV3rzQ2+tTU4nHuGyyR1GBpy4b1SOUdocdIeXryI2/ZFOSSrkoHr GuknqJEfLlJ+qNnFNxHoT88fZSE2FSna56dSTqkTxBoUwEGqD67TxQaoSDLdDpZc Z4kHILY8PqCCzZAh2mhNr6k9IHEEADc3CUzcw36fPi46HhXKyJzl6w9nYg4cwLIS jiiQQH3zjhsVz5DvOJaVcCE+ml85+jxcmEdPDIAS+r2dXo96oA80nd9uvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV86735krCmjcCzpNwhy9sDs+ClMB8GA1UdIwQY MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBCq5PcR wxDLdwVQiE4Z2a8Zy5X052jKvyYxZEW1DDhgXa+BEArQd48nFOnYei9NkqcDJMko r3dOJC3Hh/mEWasvsICFoGIhhwniWw0lGur5D8Z/oAoMMoTIwhsRV4Q28pP6vvVj T5svv5EcEq3J04J+uD/7DnDcV0MXfPIG41kYmnbRYIfSqkUhmVqSlHXrWZMRNTtm MgS/EUN9y3q9ngOuTPsjrZ7/aFjiIZPCgNythKEogiOs40lcj7Dy6Zj2Rpb3dKyC dsMOqOwHCO8OGh8EpcFOr8T3v0IjE51HqMyeh3AwBmQzOH96o7oWk2PvT2HBcGUP VTmmXrPftCGLFg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:46 2025 by rpki-client