This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json) Hash identifier: PCRtd2NlXQ8TqSO1uGSb3N9q5icCSL1kmt1ivpsZ4yg= Subject key identifier: 99:6D:67:17:91:BD:E5:60:ED:29:D0:DE:4D:4A:54:E5:9E:F1:AD:A8 Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52 Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52 Certificate serial: 019B5A1B061D73F42252A1080C051654DC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 10:01:18 +0000 Manifest this update: Fri 26 Dec 2025 10:01:18 +0000 Manifest next update: Sat 27 Dec 2025 10:01:18 +0000 Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=) 2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: sJOKMQoF4DTUm3iO6HqqoJ5kA8DAMrDM5sNcImmNTmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:06:1d:73:f4:22:52:a1:08:0c:05:16:54:dc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52 Validity Not Before: Dec 26 10:01:18 2025 GMT Not After : Dec 27 10:01:18 2025 GMT Subject: CN=996d671791bde560ed29d0de4d4a54e59ef1ada8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:7d:da:96:e9:54:ee:f6:39:4f:b8:23:d1: ef:0d:64:83:ff:69:e9:61:ea:d2:18:28:73:1c:87: b4:ae:84:55:a1:67:d5:63:6c:e0:fb:ed:a8:b7:4c: 91:86:02:2c:53:10:6d:f1:2b:94:31:4b:2b:98:f2: 3e:12:8e:5a:29:8e:8c:49:8f:8d:8f:b6:42:2d:bc: 39:3c:34:db:0e:11:14:7a:90:51:7d:3f:99:92:bc: c0:8b:c0:1b:26:85:c6:fd:70:12:3e:d6:b1:c6:3b: 7c:f6:f6:cb:e9:3f:1d:ff:28:32:a1:fe:9d:40:b0: 0c:8a:36:e5:f5:e6:d6:8f:f6:f4:60:27:63:2d:d5: 91:46:37:51:63:43:b7:92:eb:7a:3d:40:29:ee:17: 01:3c:ff:f1:e2:4e:71:e8:3f:44:5b:a5:ef:53:62: 15:ea:e1:71:a0:ff:e2:d6:3d:1c:f8:84:1a:8f:49: 38:de:1a:9f:85:03:a9:9e:40:be:c5:25:61:1d:14: 5e:cf:21:a2:d6:d2:4e:e9:8a:ce:86:1f:3c:6c:41: ae:cf:d8:b9:f8:c2:77:a4:84:09:a1:89:3f:f0:d4: 5e:94:b0:8a:06:e7:fa:4b:60:a7:a6:7c:fb:95:88: 3c:bb:f4:58:14:34:94:3e:9f:d9:2f:2b:c0:2b:b1: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6D:67:17:91:BD:E5:60:ED:29:D0:DE:4D:4A:54:E5:9E:F1:AD:A8 X509v3 Authority Key Identifier: keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:01:15:94:bd:a4:08:13:bf:bb:88:69:03:f0:45:10:56: 47:6d:c8:5c:7f:03:06:b9:1c:05:d5:16:21:fa:70:a2:e0:b4: f2:f2:6b:5d:e3:94:bd:8d:a6:23:cc:79:9b:9d:d4:71:11:06: bb:a5:b3:24:3f:f0:2e:0f:7d:16:b3:99:2a:7f:88:5f:58:ae: 94:18:63:4d:ba:3c:cb:d2:78:a9:d9:21:63:7b:60:40:05:f0: 46:49:00:c7:70:7b:37:f2:d6:14:d8:40:cf:59:2c:a4:ff:16: 7a:04:12:91:14:d6:3e:2a:e7:d7:a3:9d:46:6f:c8:12:5d:7d: ad:76:1b:da:5c:ba:7a:54:7b:79:df:d4:1f:30:24:bc:aa:56: b6:50:1a:6d:b3:ab:bf:93:83:f9:e9:f6:56:b2:cc:2e:c2:4b: 34:1a:52:9b:73:82:0b:c0:5f:0b:93:d7:16:56:d1:d6:cd:ca: ae:13:09:b3:56:29:c5:84:36:11:a5:ab:0f:34:7c:0f:4d:f9: 05:a7:46:55:da:51:6e:88:44:75:c1:49:ff:40:34:77:3c:90: ff:cf:2f:12:98:1c:fa:4c:1d:5c:0f:96:70:fe:d4:8c:ba:5f: 23:87:67:b0:02:f0:0e:7d:dd:45:22:40:cc:d2:3a:a5:b4:f5: 94:2f:72:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwYdc/QiUqEIDAUWVNwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNDM0NDcyMjY0NWRhMjVlY2UzYjE3YzdhODM3NjJlZDQy ZGRhNTIwHhcNMjUxMjI2MTAwMTE4WhcNMjUxMjI3MTAwMTE4WjAzMTEwLwYDVQQD Eyg5OTZkNjcxNzkxYmRlNTYwZWQyOWQwZGU0ZDRhNTRlNTllZjFhZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJp92pbpVO72OU+4I9HvDWSD/2np YerSGChzHIe0roRVoWfVY2zg++2ot0yRhgIsUxBt8SuUMUsrmPI+Eo5aKY6MSY+N j7ZCLbw5PDTbDhEUepBRfT+ZkrzAi8AbJoXG/XASPtaxxjt89vbL6T8d/ygyof6d QLAMijbl9ebWj/b0YCdjLdWRRjdRY0O3kut6PUAp7hcBPP/x4k5x6D9EW6XvU2IV 6uFxoP/i1j0c+IQaj0k43hqfhQOpnkC+xSVhHRRezyGi1tJO6YrOhh88bEGuz9i5 +MJ3pIQJoYk/8NRelLCKBuf6S2Cnpnz7lYg8u/RYFDSUPp/ZLyvAK7F6jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJltZxeRveVg7SnQ3k1KVOWe8a2oMB8GA1UdIwQY MBaAFCxDRHImRdol7OOxfHqDdi7ULdpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUt ODY2ZjFkMjMyN2FhLzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUtODY2ZjFkMjMyN2Fh LzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0wBFZS9 pAgTv7uIaQPwRRBWR23IXH8DBrkcBdUWIfpwouC08vJrXeOUvY2mI8x5m53UcREG u6WzJD/wLg99FrOZKn+IX1iulBhjTbo8y9J4qdkhY3tgQAXwRkkAx3B7N/LWFNhA z1kspP8WegQSkRTWPirn16OdRm/IEl19rXYb2ly6elR7ed/UHzAkvKpWtlAabbOr v5OD+en2VrLMLsJLNBpSm3OCC8BfC5PXFlbR1s3KrhMJs1YpxYQ2EaWrDzR8D035 BadGVdpRbohEdcFJ/0A0dzyQ/88vEpgc+kwdXA+WcP7UjLpfI4dnsALwDn3dRSJA zNI6pbT1lC9yww== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:26 2025 by rpki-client