This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json) Hash identifier: +kYRbhDYGKp2O+2430Xd9K00RzIr4zR7I70ud8uOSZM= Subject key identifier: 37:0E:EA:76:09:68:3A:05:CA:1F:83:7B:C3:43:76:55:29:29:84:1E Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466 Certificate serial: 019B5A519474224ADACD025F432D7E5F78B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft Manifest number: 153C Signing time: Fri 26 Dec 2025 11:00:54 +0000 Manifest this update: Fri 26 Dec 2025 11:00:54 +0000 Manifest next update: Sat 27 Dec 2025 11:00:54 +0000 Files and hashes: 1: 1Q5iHdzKxf8MNemcT1RBOOzIIJ0.roa (hash: dhLNFKd+PfuuwcD6QJZQdI1MnPf4yhnne4cWUKHT2mc=) 2: BI16eSxubERsxjczNTuD1FKYiqI.roa (hash: 5RSrabZNzAP6tOwmOjiW5WIGJ28xp22z5+HfxDxqq2o=) 3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: k5y75Nv3/ottmcgMgN4bg/W6DJc8Oz9BwmxH46SaIZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:94:74:22:4a:da:cd:02:5f:43:2d:7e:5f:78:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466 Validity Not Before: Dec 26 11:00:54 2025 GMT Not After : Dec 27 11:00:54 2025 GMT Subject: CN=370eea7609683a05ca1f837bc34376552929841e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a7:66:76:4d:f9:9d:7e:4b:d4:7a:6a:de:49: 40:66:a3:fd:88:fe:23:a5:ad:e0:a6:d2:4b:9e:92: 18:dc:5c:6f:8f:0a:cc:8e:97:ac:46:63:99:ef:5e: 81:b5:ae:ad:dc:73:cc:e8:10:8c:d2:8c:63:6b:95: d6:a5:9b:2b:80:a1:80:16:7f:47:08:a5:54:82:b9: 20:fe:5f:3b:d5:b0:36:d1:89:40:64:28:e2:98:6b: 3d:f5:2f:dd:82:6a:da:aa:cc:5d:6b:0c:22:39:87: 33:cf:f5:b8:52:16:4a:2a:c5:7e:34:ac:03:e8:d4: f0:94:c2:91:af:41:68:7d:d5:e5:f9:08:c7:cc:3c: 8f:5b:b7:87:82:83:d0:b4:1a:3e:e7:a3:2f:ec:c1: ad:1e:b5:24:68:00:19:3c:86:6c:17:74:79:58:bb: d9:3b:3c:32:e2:cd:84:83:da:64:e2:66:e6:89:c7: e2:42:af:0e:f0:d2:e7:27:16:cf:82:c0:10:57:d3: 81:eb:b3:97:93:55:27:cc:6e:c3:5e:8c:a9:86:76: df:54:12:72:98:a4:0d:6f:73:20:3d:da:be:52:4f: 69:3b:b7:95:88:16:3d:51:60:ba:9f:14:4a:df:0b: 40:34:b6:0e:5a:65:73:4f:d2:2d:d5:2f:6d:11:d6: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:EA:76:09:68:3A:05:CA:1F:83:7B:C3:43:76:55:29:29:84:1E X509v3 Authority Key Identifier: keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:77:3c:8f:4a:84:89:3a:4c:00:e5:e5:8c:b1:51:01:81:38: 5a:a6:35:42:a9:b6:5b:42:ab:aa:10:84:e4:36:73:5e:e9:1e: 6f:a7:55:b7:d7:66:ee:72:88:a2:37:5f:d7:56:31:a2:91:fe: d2:50:22:e9:b9:c0:cc:db:46:9b:db:85:04:84:5d:ed:9f:b1: b0:08:92:7d:98:af:1f:90:0e:85:ad:1a:49:29:02:76:23:cd: e0:82:eb:f0:79:92:67:47:08:8f:11:c0:0e:f3:a2:d1:a1:af: 86:ad:2f:fd:30:18:4a:24:e0:e6:be:fc:db:b9:7a:4e:ed:61: 6a:ec:e6:ad:09:53:c5:1a:21:3c:cc:b0:8d:2b:c6:84:05:48: d4:ba:0c:04:89:43:cd:b9:fe:ed:ee:10:92:8e:79:a0:ef:e3: a2:4e:b5:ef:36:23:56:a4:aa:5d:9e:06:33:db:3d:e2:c1:90: ab:16:15:94:81:06:50:6f:97:b4:bb:a1:db:c1:4e:3d:4c:c1: b9:c4:3d:d3:9b:99:a6:a5:ac:83:c5:b4:23:77:90:4e:2c:e4: 0e:29:19:22:69:52:62:f0:73:ac:5e:80:38:39:14:0e:f5:45: c6:bf:e2:df:41:d7:9e:e2:66:2d:1c:57:d0:23:14:4d:68:a3: ed:d5:9b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZR0IkrazQJfQy1+X3ixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl NzI0NjYwHhcNMjUxMjI2MTEwMDU0WhcNMjUxMjI3MTEwMDU0WjAzMTEwLwYDVQQD EygzNzBlZWE3NjA5NjgzYTA1Y2ExZjgzN2JjMzQzNzY1NTI5Mjk4NDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6admdk35nX5L1Hpq3klAZqP9iP4j pa3gptJLnpIY3FxvjwrMjpesRmOZ716Bta6t3HPM6BCM0oxja5XWpZsrgKGAFn9H CKVUgrkg/l871bA20YlAZCjimGs99S/dgmraqsxdawwiOYczz/W4UhZKKsV+NKwD 6NTwlMKRr0FofdXl+QjHzDyPW7eHgoPQtBo+56Mv7MGtHrUkaAAZPIZsF3R5WLvZ Ozwy4s2Eg9pk4mbmicfiQq8O8NLnJxbPgsAQV9OB67OXk1UnzG7DXoyphnbfVBJy mKQNb3MgPdq+Uk9pO7eViBY9UWC6nxRK3wtANLYOWmVzT9It1S9tEdZ7vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcO6nYJaDoFyh+De8NDdlUpKYQeMB8GA1UdIwQY MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXc8j0qE iTpMAOXljLFRAYE4WqY1Qqm2W0KrqhCE5DZzXukeb6dVt9dm7nKIojdf11YxopH+ 0lAi6bnAzNtGm9uFBIRd7Z+xsAiSfZivH5AOha0aSSkCdiPN4ILr8HmSZ0cIjxHA DvOi0aGvhq0v/TAYSiTg5r7827l6Tu1hauzmrQlTxRohPMywjSvGhAVI1LoMBIlD zbn+7e4Qko55oO/jok617zYjVqSqXZ4GM9s94sGQqxYVlIEGUG+XtLuh28FOPUzB ucQ905uZpqWsg8W0I3eQTizkDikZImlSYvBzrF6AODkUDvVFxr/i30HXnuJmLRxX 0CMUTWij7dWbrQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:58 2025 by rpki-client