This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json) Hash identifier: Tsjo9mVRIq4GDcQ5ud2X/kEumc3kjQlEs9TFqcKt9Vw= Subject key identifier: C7:C0:E5:D1:A7:00:3A:FC:48:00:EA:30:AC:92:82:C2:49:22:20:EC Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556 Certificate serial: 019B34FB7678CA2FC68E721D865F0501E084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft Manifest number: 1792 Signing time: Fri 19 Dec 2025 05:00:53 +0000 Manifest this update: Fri 19 Dec 2025 05:00:53 +0000 Manifest next update: Sat 20 Dec 2025 05:00:53 +0000 Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=) 2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=) 3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=) 4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: Y398p4N4g/TcskZDSzgpyixa8tdx2xgLT9SxDz85jU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:76:78:ca:2f:c6:8e:72:1d:86:5f:05:01:e0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556 Validity Not Before: Dec 19 05:00:53 2025 GMT Not After : Dec 20 05:00:53 2025 GMT Subject: CN=c7c0e5d1a7003afc4800ea30ac9282c2492220ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:14:ed:5b:1b:2b:c8:d7:20:e3:c0:99:72: ba:31:b8:be:48:e2:01:9d:57:9b:05:f1:e5:ee:32: ef:13:a8:de:9f:be:e1:d8:b5:eb:4a:6e:96:b1:81: c7:24:e3:5d:d4:f2:67:c9:86:de:b4:86:f6:20:ae: 26:50:86:28:ea:4d:2a:45:34:88:c9:2a:ba:3f:47: 53:c5:9e:6e:c2:c6:f6:a9:03:dc:6d:45:b3:e1:75: d6:e7:2e:ab:1d:af:ba:6f:a2:1d:d5:b3:72:c6:8a: b3:fc:7a:31:df:aa:d4:c2:97:95:1b:f6:b4:15:f1: 8d:ce:db:09:fe:e8:fc:af:d9:bd:28:f9:68:75:f1: 21:93:6d:f7:77:61:42:e2:3a:23:0b:ec:95:32:f1: 0c:74:ad:25:8f:79:51:c9:fd:ab:d7:48:ec:a8:42: b6:7a:2b:37:e2:81:d9:b6:60:f7:fa:af:7b:c0:91: 02:17:c5:8e:c2:32:c8:59:0f:5d:b3:92:19:aa:6a: 27:0e:64:92:7e:82:7b:de:46:be:33:c5:fa:5f:c4: bb:80:9e:4e:bb:05:b2:b2:be:d8:2d:e5:bb:3b:1d: 10:a9:8a:21:75:d1:32:76:5e:10:6a:53:c8:3c:14: 87:3e:1a:ac:e7:73:a8:5b:94:b2:a9:66:1e:f8:17: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C0:E5:D1:A7:00:3A:FC:48:00:EA:30:AC:92:82:C2:49:22:20:EC X509v3 Authority Key Identifier: keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6f:83:50:35:90:b1:c7:87:e9:c2:57:50:28:8b:e4:85:af: 1c:b2:f2:9c:5c:ce:92:af:68:20:6a:c8:60:2d:26:1d:47:93: cc:6e:97:2a:97:33:e9:77:6e:74:f1:84:65:a0:40:8e:f8:7d: 6d:a5:22:5e:d3:c9:2c:47:d3:d0:ec:a4:0b:08:d4:9a:fd:80: 25:e9:9f:8d:39:f8:d1:ee:f6:cb:75:19:ae:77:5d:78:ac:a6: a6:93:69:eb:5c:4a:e8:41:42:fd:22:90:9e:d1:78:38:c5:f0: 8f:d1:39:07:20:e3:da:ab:f9:c0:c1:a3:8a:9a:3c:6f:29:fa: d2:ed:c4:81:d8:01:7d:2d:f5:be:f8:4d:7a:ca:4d:8e:57:d9: 59:35:5b:ed:9c:6f:3a:27:2c:78:e4:ac:fc:96:db:f3:4b:d1: 58:20:94:22:cd:52:d8:c4:1e:03:45:df:89:cf:17:07:3f:47: 1e:17:c8:67:d0:bd:72:20:06:41:69:03:a2:30:4a:03:ed:66: 65:b4:46:0d:61:02:df:28:d5:61:63:d3:c1:a9:71:9c:ea:7f: ab:b5:d5:6e:dd:5b:c3:22:b9:0b:c0:66:08:bd:3e:6f:9e:26: da:80:4c:0a:7c:98:09:88:5a:23:6e:98:06:98:55:fa:48:3e: a3:b5:66:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+3Z4yi/GjnIdhl8FAeCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1 MzE1NTYwHhcNMjUxMjE5MDUwMDUzWhcNMjUxMjIwMDUwMDUzWjAzMTEwLwYDVQQD EyhjN2MwZTVkMWE3MDAzYWZjNDgwMGVhMzBhYzkyODJjMjQ5MjIyMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvMU7VsbK8jXIOPAmXK6Mbi+SOIB nVebBfHl7jLvE6jen77h2LXrSm6WsYHHJONd1PJnyYbetIb2IK4mUIYo6k0qRTSI ySq6P0dTxZ5uwsb2qQPcbUWz4XXW5y6rHa+6b6Id1bNyxoqz/Hox36rUwpeVG/a0 FfGNztsJ/uj8r9m9KPlodfEhk233d2FC4jojC+yVMvEMdK0lj3lRyf2r10jsqEK2 eis34oHZtmD3+q97wJECF8WOwjLIWQ9ds5IZqmonDmSSfoJ73ka+M8X6X8S7gJ5O uwWysr7YLeW7Ox0QqYohddEydl4QalPIPBSHPhqs53OoW5SyqWYe+BdZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfA5dGnADr8SADqMKySgsJJIiDsMB8GA1UdIwQY MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG+DUDWQ sceH6cJXUCiL5IWvHLLynFzOkq9oIGrIYC0mHUeTzG6XKpcz6XdudPGEZaBAjvh9 baUiXtPJLEfT0OykCwjUmv2AJemfjTn40e72y3UZrnddeKymppNp61xK6EFC/SKQ ntF4OMXwj9E5ByDj2qv5wMGjipo8byn60u3EgdgBfS31vvhNespNjlfZWTVb7Zxv OicseOSs/Jbb80vRWCCUIs1S2MQeA0Xfic8XBz9HHhfIZ9C9ciAGQWkDojBKA+1m ZbRGDWEC3yjVYWPTwalxnOp/q7XVbt1bwyK5C8BmCL0+b54m2oBMCnyYCYhaI26Y BphV+kg+o7Vm/g== -----END CERTIFICATE-----Generated at Fri Dec 19 14:01:23 2025 by rpki-client