This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft File: Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json) Hash identifier: uXiQ87N5ezdwCjm/dL/7rQy90STb60k+GZqON8KuJCI= Subject key identifier: E8:87:EA:2B:D5:69:8F:41:4E:C8:1E:09:71:CA:3C:09:8B:8A:05:8D Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Certificate serial: 019B593EEACA75DC8B937AA0C7C6BDA0E54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft Manifest number: 06C0 Signing time: Fri 26 Dec 2025 06:00:54 +0000 Manifest this update: Fri 26 Dec 2025 06:00:54 +0000 Manifest next update: Sat 27 Dec 2025 06:00:54 +0000 Files and hashes: 1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=) 2: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (hash: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=) 3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: NgWcKB3Oq1Ej1FNMqrImT1j0MteYh67HaqL37SdHjZ4=) 4: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (hash: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:ea:ca:75:dc:8b:93:7a:a0:c7:c6:bd:a0:e5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Validity Not Before: Dec 26 06:00:54 2025 GMT Not After : Dec 27 06:00:54 2025 GMT Subject: CN=e887ea2bd5698f414ec81e0971ca3c098b8a058d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:3c:36:ab:9d:6c:89:43:8e:26:51:7d:3c: 62:14:07:36:cd:7d:81:2c:a2:a1:09:57:5e:bc:81: 50:6e:19:de:74:0b:11:66:45:4d:1f:61:f3:a1:6e: fa:35:e5:07:93:dc:81:da:c5:58:25:64:3f:b0:6a: e9:71:16:02:9d:05:91:11:3d:eb:45:45:af:f2:05: c6:77:c3:77:45:68:90:76:11:5b:89:2a:30:fa:c8: 5b:4b:64:e4:c6:5e:e5:8f:25:a9:7b:bb:04:c9:c6: e2:f5:36:a4:a7:f4:7f:cf:42:01:a4:c3:90:f0:11: b1:7d:41:70:ba:c8:35:18:9c:16:5b:87:52:7d:f3: 02:76:27:b5:45:8f:99:ec:bf:9d:00:13:04:49:a9: fb:04:51:2e:e7:df:4a:07:30:d2:b2:67:97:e4:32: ee:7a:ff:67:24:dd:47:33:7d:a1:31:16:02:53:89: dc:d3:32:3d:c2:ba:3e:46:c1:fe:b7:79:2b:fd:13: fe:b3:60:f5:72:fc:62:70:cf:83:4b:e3:ab:67:0c: e4:4c:a4:e5:6d:08:d4:fc:6c:5f:4a:73:eb:ff:69: fd:e8:bd:91:58:3b:97:da:54:b9:b6:65:e3:bc:48: 24:ed:5d:39:b5:54:6a:04:d2:f7:1c:ee:ff:37:54: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:87:EA:2B:D5:69:8F:41:4E:C8:1E:09:71:CA:3C:09:8B:8A:05:8D X509v3 Authority Key Identifier: keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d7:29:b6:27:fc:c0:91:84:41:78:cc:92:05:90:d2:62:c4: 89:9b:e3:c4:27:c0:e3:c6:97:33:48:1c:2e:06:ae:37:fa:50: ba:e2:83:03:12:07:eb:1e:de:15:fe:99:e8:78:e0:56:37:46: ec:fb:3c:fa:37:89:b2:f5:71:70:26:bd:36:d6:d2:16:86:f6: 72:d1:3e:1f:92:fb:9b:a3:a4:f1:7c:71:bc:c6:dd:17:1f:31: 75:a1:08:65:48:d7:72:27:d1:bd:44:4e:3a:33:33:e3:f1:57: 83:7a:60:50:ac:9e:25:7e:75:31:82:ba:33:7e:70:e3:ed:33: 9c:51:ec:dd:1a:42:8b:b5:12:5f:d5:76:05:7e:c4:d2:a1:a6: d0:a2:a5:76:78:f2:78:69:43:c0:e1:e2:42:6b:d6:f4:33:10: 99:38:d5:21:5f:69:d3:1b:87:ad:90:1b:65:4c:b6:d8:0c:d5: a0:06:44:48:50:46:48:be:25:1e:7e:5a:ca:b8:68:56:ec:0a: 79:57:68:0d:fe:94:eb:c8:8f:9f:be:37:44:47:f1:e7:0e:68: e7:5a:cb:66:c6:dc:19:12:5a:e3:08:b9:d2:f6:69:18:40:8d: b0:66:e3:f9:8c:c1:4c:b9:81:48:4e:4f:c5:5e:e6:ae:b6:37: 00:fd:18:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPurKddyLk3qgx8a9oOVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGVjOWEyMDk2ZGVjMTAzYmFlMmQ3YzM3OTZlMGQ0NzA4 NWMyMDIwHhcNMjUxMjI2MDYwMDU0WhcNMjUxMjI3MDYwMDU0WjAzMTEwLwYDVQQD EyhlODg3ZWEyYmQ1Njk4ZjQxNGVjODFlMDk3MWNhM2MwOThiOGEwNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvo8NqudbIlDjiZRfTxiFAc2zX2B LKKhCVdevIFQbhnedAsRZkVNH2HzoW76NeUHk9yB2sVYJWQ/sGrpcRYCnQWRET3r RUWv8gXGd8N3RWiQdhFbiSow+shbS2Tkxl7ljyWpe7sEycbi9Takp/R/z0IBpMOQ 8BGxfUFwusg1GJwWW4dSffMCdie1RY+Z7L+dABMESan7BFEu599KBzDSsmeX5DLu ev9nJN1HM32hMRYCU4nc0zI9wro+RsH+t3kr/RP+s2D1cvxicM+DS+OrZwzkTKTl bQjU/GxfSnPr/2n96L2RWDuX2lS5tmXjvEgk7V05tVRqBNL3HO7/N1QnrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiH6ivVaY9BTsgeCXHKPAmLigWNMB8GA1UdIwQY MBaAFC7eyaIJbewQO64tfDeW4NRwhcICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEt MDU3ZDdhZjBhZWY0LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEtMDU3ZDdhZjBhZWY0 LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNcptif8 wJGEQXjMkgWQ0mLEiZvjxCfA48aXM0gcLgauN/pQuuKDAxIH6x7eFf6Z6HjgVjdG 7Ps8+jeJsvVxcCa9NtbSFob2ctE+H5L7m6Ok8XxxvMbdFx8xdaEIZUjXcifRvURO OjMz4/FXg3pgUKyeJX51MYK6M35w4+0znFHs3RpCi7USX9V2BX7E0qGm0KKldnjy eGlDwOHiQmvW9DMQmTjVIV9p0xuHrZAbZUy22AzVoAZESFBGSL4lHn5ayrhoVuwK eVdoDf6U68iPn743REfx5w5o51rLZsbcGRJa4wi50vZpGECNsGbj+YzBTLmBSE5P xV7mrrY3AP0YiA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:41 2025 by rpki-client