This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json) Hash identifier: had0hbcCR99/TyjJKolSt09tT9ZWCSsWrHT7cw3/K5s= Subject key identifier: 5A:3A:A4:1E:D2:09:C6:19:0E:35:93:C6:6B:5E:A7:90:14:F0:F0:56 Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2 Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2 Certificate serial: 019B1CBC0A4AEAC3C48FA2F72EFEC8EE3F94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft Manifest number: 0115 Signing time: Sun 14 Dec 2025 12:00:43 +0000 Manifest this update: Sun 14 Dec 2025 12:00:43 +0000 Manifest next update: Mon 15 Dec 2025 12:00:43 +0000 Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: jRjgHygwzJTT+bs2zteLOvKiJZmRWiPufe9JJWj71us=) 2: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (hash: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:0a:4a:ea:c3:c4:8f:a2:f7:2e:fe:c8:ee:3f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2 Validity Not Before: Dec 14 12:00:43 2025 GMT Not After : Dec 15 12:00:43 2025 GMT Subject: CN=5a3aa41ed209c6190e3593c66b5ea79014f0f056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:e7:68:61:01:e5:34:9f:87:6c:39:8b:4d: 9d:25:0d:80:fe:a7:02:4b:93:85:78:37:d4:bc:e2: fe:96:cd:01:00:b7:24:a6:09:08:70:dc:c2:f5:d8: e4:a3:46:53:40:f3:0c:18:2b:e4:68:24:c0:ab:42: 0f:46:09:b6:62:94:5c:19:63:d0:32:a2:7e:bd:81: 39:e3:36:98:6c:c6:94:94:79:db:7e:c2:4c:3f:a8: 33:09:ca:d5:39:8c:86:d9:aa:64:9b:8e:22:57:f9: 66:c8:d5:59:91:dc:e4:21:d4:e4:ab:f2:da:17:80: 31:e4:9b:19:26:4a:dc:95:f5:fe:d0:ec:df:2f:b4: 72:b9:4d:a9:0c:78:09:57:a7:b6:1c:54:ed:f7:5b: 89:3d:68:7c:ed:a7:3a:11:40:d4:ac:99:19:46:7e: 49:29:2f:fa:62:5f:41:ef:39:6e:2b:ab:3c:70:f2: a5:2a:ae:90:e7:9c:d4:6b:22:8e:f0:1a:29:4c:9d: d6:93:32:3c:e5:e5:40:c1:ce:42:83:5c:b2:5a:97: e2:35:8d:f5:15:ee:9b:1e:f0:a6:82:0b:4a:cc:96: f6:dc:8a:3c:b1:d3:9b:85:f5:2e:08:08:36:c7:00: a6:87:c0:4c:a5:a6:40:50:c4:cb:73:f5:0d:4d:fb: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:A4:1E:D2:09:C6:19:0E:35:93:C6:6B:5E:A7:90:14:F0:F0:56 X509v3 Authority Key Identifier: keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f1:ca:a2:ee:26:72:57:82:eb:38:66:8c:ec:2c:eb:e9:b8: 88:55:dd:cc:7e:ef:dd:92:6d:a9:99:b4:9d:3a:ee:2d:52:b5: 75:0f:23:b5:dd:d8:3a:50:3a:42:35:45:d1:a5:18:cd:0a:db: 96:4d:05:3f:6b:28:d4:14:f7:bf:66:a9:71:f4:a0:f2:93:fa: 62:23:96:12:54:7d:c5:e8:70:cc:b8:9d:aa:dc:bc:36:7d:7e: 75:b7:c5:c3:03:32:7c:39:46:dd:3e:f8:7d:ae:57:a8:f9:a8: 42:3c:f1:a5:c9:f3:b0:c0:b3:73:c3:5c:4a:66:16:e7:18:d5: 2b:d9:fa:e1:c3:70:04:c1:5c:3b:9a:3c:d0:1a:61:d1:1d:ab: 74:f3:73:30:bd:6d:d0:6f:70:90:98:55:23:18:5b:18:2a:99: 51:f4:59:ce:10:6f:ec:10:b8:62:c0:de:72:40:81:41:42:52: 8e:f9:5a:eb:ef:55:07:3a:80:4d:6a:da:79:8c:83:71:d6:34: 92:cf:23:35:29:de:1e:82:11:e4:06:27:09:07:cc:71:f5:32: e6:79:37:cd:83:af:fa:df:b4:e1:0c:81:1d:89:ee:bb:cc:38: 42:24:8e:89:68:65:78:50:c7:fb:b3:66:c7:9f:49:3a:b6:e8: c9:d6:a5:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvApK6sPEj6L3Lv7I7j+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZDQwODdhMzcyN2YwNDdlMDk2ZGI2OTJlMDAzZDZjMDEx M2YxZTIwHhcNMjUxMjE0MTIwMDQzWhcNMjUxMjE1MTIwMDQzWjAzMTEwLwYDVQQD Eyg1YTNhYTQxZWQyMDljNjE5MGUzNTkzYzY2YjVlYTc5MDE0ZjBmMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kTnaGEB5TSfh2w5i02dJQ2A/qcC S5OFeDfUvOL+ls0BALckpgkIcNzC9djko0ZTQPMMGCvkaCTAq0IPRgm2YpRcGWPQ MqJ+vYE54zaYbMaUlHnbfsJMP6gzCcrVOYyG2apkm44iV/lmyNVZkdzkIdTkq/La F4Ax5JsZJkrclfX+0OzfL7RyuU2pDHgJV6e2HFTt91uJPWh87ac6EUDUrJkZRn5J KS/6Yl9B7zluK6s8cPKlKq6Q55zUayKO8BopTJ3WkzI85eVAwc5Cg1yyWpfiNY31 Fe6bHvCmggtKzJb23Io8sdObhfUuCAg2xwCmh8BMpaZAUMTLc/UNTfsghQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo6pB7SCcYZDjWTxmtep5AU8PBWMB8GA1UdIwQY MBaAFC7UCHo3J/BH4JbbaS4APWwBE/HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzIt Y2M4NGViNDJhYzM5LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzItY2M4NGViNDJhYzM5 LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvHKou4m cleC6zhmjOws6+m4iFXdzH7v3ZJtqZm0nTruLVK1dQ8jtd3YOlA6QjVF0aUYzQrb lk0FP2so1BT3v2apcfSg8pP6YiOWElR9xehwzLidqty8Nn1+dbfFwwMyfDlG3T74 fa5XqPmoQjzxpcnzsMCzc8NcSmYW5xjVK9n64cNwBMFcO5o80Bph0R2rdPNzML1t 0G9wkJhVIxhbGCqZUfRZzhBv7BC4YsDeckCBQUJSjvla6+9VBzqATWraeYyDcdY0 ks8jNSneHoIR5AYnCQfMcfUy5nk3zYOv+t+04QyBHYnuu8w4QiSOiWhleFDH+7Nm x59JOrboydalVQ== -----END CERTIFICATE-----Generated at Sun Dec 14 18:58:09 2025 by rpki-client