This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json) Hash identifier: 7D13Kse1kyX+XCleMRvr9GaWBuRA3cr//t23wwFlcEA= Subject key identifier: 25:1F:87:61:2F:EE:E9:EE:54:B0:81:6D:C7:78:A8:23:7C:5F:AD:CD Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50 Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450 Certificate serial: 019B34C4451F2E7E7E86812EF725D3547BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft Manifest number: 070B Signing time: Fri 19 Dec 2025 04:00:36 +0000 Manifest this update: Fri 19 Dec 2025 04:00:36 +0000 Manifest next update: Sat 20 Dec 2025 04:00:36 +0000 Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: 3eg/3I1NXOeQ71oCtk010Z5A5QKUiBTbRJVKUF7fSQU=) 2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:45:1f:2e:7e:7e:86:81:2e:f7:25:d3:54:7b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450 Validity Not Before: Dec 19 04:00:36 2025 GMT Not After : Dec 20 04:00:36 2025 GMT Subject: CN=251f87612feee9ee54b0816dc778a8237c5fadcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:3e:55:2b:fd:4b:44:b6:7a:cf:ac:1a:ad: 1c:a5:dc:5f:b2:87:eb:18:c8:de:a2:44:dd:20:e5: b8:65:aa:c7:a7:f5:00:47:f2:bb:03:9a:28:94:d4: 89:03:e8:3e:c8:e5:9d:49:7e:3c:1f:e3:21:95:7d: 68:33:6d:ff:70:37:2d:e2:48:08:70:bb:af:8c:d0: 60:30:a6:ad:c6:c7:09:3d:0b:57:16:92:d9:68:27: c2:d4:ed:f7:50:8c:c4:0e:84:84:b2:8c:f7:53:d3: ad:3e:d3:4c:cb:ac:0c:d6:eb:23:67:51:c6:7c:c3: c9:89:85:4a:f5:6c:81:fb:6c:7b:02:83:3a:d6:7f: 92:2c:86:06:5c:d1:0d:3e:d1:1a:20:22:44:8e:71: 13:6a:3f:9f:12:7a:70:b0:42:72:90:c7:c4:72:73: 5a:8c:c4:4d:d5:65:4c:d5:b9:4b:09:57:45:2e:53: 3e:5a:10:f8:b8:b8:2e:57:77:92:c5:2b:fa:4d:4f: 6d:6f:0f:8d:35:17:0c:66:03:af:61:ea:57:56:10: 5b:9e:ee:41:cb:0d:40:0c:b5:bb:66:eb:f2:6b:31: dd:75:fe:11:c0:cb:7c:ce:4d:19:84:26:8b:7f:85: 3d:48:a3:30:ba:30:52:53:68:9f:91:8a:04:f5:c3: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:87:61:2F:EE:E9:EE:54:B0:81:6D:C7:78:A8:23:7C:5F:AD:CD X509v3 Authority Key Identifier: keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fd:0f:98:fc:44:da:cf:7d:60:30:ad:6a:94:39:81:d1:fc: 4b:f7:58:82:c7:6f:a7:83:c8:93:b0:c1:b2:bd:d2:2a:c5:b6: 0d:cb:7e:f5:dc:56:9c:f2:6d:c9:10:15:98:1a:35:a5:de:46: 1b:32:c5:08:a2:9e:eb:7e:b7:74:30:90:1f:29:02:d0:97:94: 58:bd:85:86:be:82:a0:db:a1:72:e3:de:68:fe:6e:4b:13:e7: 8c:83:80:44:2e:a8:ea:46:62:0c:a4:15:86:60:b3:cd:1a:a5: d2:0c:83:0d:ef:b1:8f:3d:0e:8f:c8:5d:69:05:f4:c6:4a:51: 5a:1a:c9:06:a0:ee:8a:02:11:d7:08:8a:6c:97:0e:c4:19:57: bb:c7:37:d0:3e:1f:2a:e1:b0:f4:d1:e5:f5:d1:df:3c:22:1f: fb:c2:18:88:a1:51:41:12:6d:8c:78:0d:e7:33:6c:b2:f5:11: 5e:f6:9b:17:ba:b5:30:db:0b:ed:3a:f8:90:c2:ab:89:d2:df: 5d:a8:ea:66:f0:4c:68:a8:cc:b1:ba:ae:5c:fc:41:2d:97:73: 4a:04:6a:d7:de:d9:c8:5d:76:00:63:f8:95:e1:d1:e5:5b:48: 66:35:ec:b4:94:bc:12:0c:80:c5:7a:66:a6:bd:14:8e:0a:20: 39:55:ef:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEUfLn5+hoEu9yXTVHumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOWU0OTk2MjA3M2Y5ZWZiNjZhNGIzMDM1MDZkYTYzNDE1 Njc0NTAwHhcNMjUxMjE5MDQwMDM2WhcNMjUxMjIwMDQwMDM2WjAzMTEwLwYDVQQD EygyNTFmODc2MTJmZWVlOWVlNTRiMDgxNmRjNzc4YTgyMzdjNWZhZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV0+VSv9S0S2es+sGq0cpdxfsofr GMjeokTdIOW4ZarHp/UAR/K7A5oolNSJA+g+yOWdSX48H+MhlX1oM23/cDct4kgI cLuvjNBgMKatxscJPQtXFpLZaCfC1O33UIzEDoSEsoz3U9OtPtNMy6wM1usjZ1HG fMPJiYVK9WyB+2x7AoM61n+SLIYGXNENPtEaICJEjnETaj+fEnpwsEJykMfEcnNa jMRN1WVM1blLCVdFLlM+WhD4uLguV3eSxSv6TU9tbw+NNRcMZgOvYepXVhBbnu5B yw1ADLW7ZuvyazHddf4RwMt8zk0ZhCaLf4U9SKMwujBSU2ifkYoE9cPWIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUfh2Ev7unuVLCBbcd4qCN8X63NMB8GA1UdIwQY MBaAFCyeSZYgc/nvtmpLMDUG2mNBVnRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEt MjFjZDI5MGMwM2YzLzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEtMjFjZDI5MGMwM2Yz LzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/0PmPxE 2s99YDCtapQ5gdH8S/dYgsdvp4PIk7DBsr3SKsW2Dct+9dxWnPJtyRAVmBo1pd5G GzLFCKKe6363dDCQHykC0JeUWL2Fhr6CoNuhcuPeaP5uSxPnjIOARC6o6kZiDKQV hmCzzRql0gyDDe+xjz0Oj8hdaQX0xkpRWhrJBqDuigIR1wiKbJcOxBlXu8c30D4f KuGw9NHl9dHfPCIf+8IYiKFRQRJtjHgN5zNssvURXvabF7q1MNsL7Tr4kMKridLf XajqZvBMaKjMsbquXPxBLZdzSgRq197ZyF12AGP4leHR5VtIZjXstJS8EgyAxXpm pr0UjgogOVXvHQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:59:05 2025 by rpki-client