This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json) Hash identifier: RJEHRQTEjBsR7lqamMbLhMnDNPB84N5MEvDnS3uZjUg= Subject key identifier: 4F:AF:A2:C1:09:F5:B2:A6:5C:FF:EF:60:78:DA:69:B3:9B:AF:59:29 Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29 Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029 Certificate serial: 019B5A1AC318E7339B630984C2A9FD06408D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft Manifest number: 0BEB Signing time: Fri 26 Dec 2025 10:01:01 +0000 Manifest this update: Fri 26 Dec 2025 10:01:01 +0000 Manifest next update: Sat 27 Dec 2025 10:01:01 +0000 Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: tUxxn6YUHrP8T/7zXYdoqtMGAl4X04JXQJ873SvkS24=) 2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c3:18:e7:33:9b:63:09:84:c2:a9:fd:06:40:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029 Validity Not Before: Dec 26 10:01:01 2025 GMT Not After : Dec 27 10:01:01 2025 GMT Subject: CN=4fafa2c109f5b2a65cffef6078da69b39baf5929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:15:a1:f3:83:50:1f:43:b5:55:08:06:0c: c5:4f:3f:17:c3:af:fc:e4:f1:93:8f:a3:24:79:36: 34:72:6d:7d:7b:e6:2d:5c:89:73:47:c9:75:33:9f: 43:9d:15:0e:84:a6:1a:88:fb:47:90:53:b9:c1:73: db:51:09:e3:b3:fa:bb:16:cc:01:0e:ac:64:f4:1a: f1:75:13:c1:9a:19:68:87:2c:d0:4c:36:f4:45:5e: fb:ee:f6:38:40:d5:9b:47:eb:26:84:8e:86:3e:c1: 06:22:14:6c:2a:c2:20:48:8a:b4:9f:73:ba:f0:1f: 0f:eb:cc:8b:8a:e0:68:c2:fd:e7:77:ec:94:33:b2: 88:b1:3f:8a:e4:e1:a1:1d:cd:e6:b7:6e:c8:08:1c: d5:76:81:6f:dc:12:c7:45:07:ee:25:2e:5b:85:b3: 34:96:75:1b:cd:e5:fb:51:0b:e1:dd:62:bc:28:62: fe:12:e9:68:32:ff:47:ae:4d:64:ca:8b:4b:6f:c1: 35:e9:ab:d5:1a:07:51:a9:7e:7f:13:e9:65:6e:62: 55:e7:9b:5e:c7:4f:c9:1d:dd:82:aa:fb:25:38:0a: cc:df:9d:1c:57:6a:e1:98:fa:dd:49:eb:b9:5f:8e: db:26:e8:46:71:19:7d:8c:8e:0a:06:00:a5:fd:c8: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:A2:C1:09:F5:B2:A6:5C:FF:EF:60:78:DA:69:B3:9B:AF:59:29 X509v3 Authority Key Identifier: keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:89:80:a4:ee:77:d2:e6:bf:d2:8a:f6:f4:26:9a:13:5d:76: 9d:aa:1c:62:af:f5:e8:ef:c6:c8:86:7a:e4:23:b4:b8:c7:fd: 67:47:b4:46:4e:31:fa:63:74:87:74:a1:c4:d3:1e:dd:35:d0: b9:a8:3d:43:79:d1:25:a8:87:d0:69:b8:98:30:e8:08:f0:45: 23:46:89:db:91:24:8e:5a:0c:80:b9:50:69:1d:19:d5:08:68: 34:24:93:01:51:57:f5:ad:fa:4b:23:1a:92:9c:12:72:d8:7e: 50:53:09:e7:f3:aa:ac:40:20:0d:fc:c1:76:f3:01:7e:61:f1: fa:ed:74:ea:89:91:4e:62:54:1e:84:a4:35:6e:61:d2:53:6c: 40:ca:74:a1:ee:24:2a:8c:46:3c:59:36:ce:43:9d:f2:e0:f5: 4f:71:21:08:df:eb:b4:16:8d:d5:cf:59:66:42:03:cd:e9:6b: a4:0f:fe:09:22:de:0e:03:cc:ce:09:fe:5a:02:67:66:cc:09: 77:87:ab:21:70:55:b0:43:59:8b:64:ca:ee:bf:ba:d9:6a:12: 8b:4c:fa:05:92:9e:0f:47:21:ab:88:43:2d:e9:4a:4f:8c:0d: bc:1d:8e:21:e2:6b:5d:2e:28:f6:0a:d3:19:43:a5:d1:c4:26: a5:68:94:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsMY5zObYwmEwqn9BkCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWE3OGIxMmQ0MzViOTdkZWZiZjkyYzc0MjY1YzM0MzNi YmQwMjkwHhcNMjUxMjI2MTAwMTAxWhcNMjUxMjI3MTAwMTAxWjAzMTEwLwYDVQQD Eyg0ZmFmYTJjMTA5ZjViMmE2NWNmZmVmNjA3OGRhNjliMzliYWY1OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTgVofODUB9DtVUIBgzFTz8Xw6/8 5PGTj6MkeTY0cm19e+YtXIlzR8l1M59DnRUOhKYaiPtHkFO5wXPbUQnjs/q7FswB Dqxk9BrxdRPBmhlohyzQTDb0RV777vY4QNWbR+smhI6GPsEGIhRsKsIgSIq0n3O6 8B8P68yLiuBowv3nd+yUM7KIsT+K5OGhHc3mt27ICBzVdoFv3BLHRQfuJS5bhbM0 lnUbzeX7UQvh3WK8KGL+EuloMv9Hrk1kyotLb8E16avVGgdRqX5/E+llbmJV55te x0/JHd2CqvslOArM350cV2rhmPrdSeu5X47bJuhGcRl9jI4KBgCl/cgw1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+vosEJ9bKmXP/vYHjaabObr1kpMB8GA1UdIwQY MBaAFC3qeLEtQ1uX3vv5LHQmXDQzu9ApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NmZhZWQtODdjMC00YjAwLTgxNzgt YTFkY2MzZmI5YTRmLzEvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85NmZhZWQtODdjMC00YjAwLTgxNzgtYTFkY2MzZmI5YTRm LzEvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYmApO53 0ua/0or29CaaE112naocYq/16O/GyIZ65CO0uMf9Z0e0Rk4x+mN0h3ShxNMe3TXQ uag9Q3nRJaiH0Gm4mDDoCPBFI0aJ25EkjloMgLlQaR0Z1QhoNCSTAVFX9a36SyMa kpwScth+UFMJ5/OqrEAgDfzBdvMBfmHx+u106omRTmJUHoSkNW5h0lNsQMp0oe4k KoxGPFk2zkOd8uD1T3EhCN/rtBaN1c9ZZkIDzelrpA/+CSLeDgPMzgn+WgJnZswJ d4erIXBVsENZi2TK7r+62WoSi0z6BZKeD0chq4hDLelKT4wNvB2OIeJrXS4o9grT GUOl0cQmpWiUdg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:27 2025 by rpki-client