This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json) Hash identifier: +QduIpvX4t8o+ivWRMJ2dwQNPx2IHFsSp3cpzDk39xE= Subject key identifier: 03:C9:EE:10:80:0D:D5:06:6B:F2:60:E4:5F:75:C3:5F:EC:32:F7:9C Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Certificate serial: 019B3CB52B8978E69EECEC077AA2B6A501B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft Manifest number: 0AF1 Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=) 2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: iWU1lb/+A9UNOPM+Oai55Qj3QMoGUVmioeNIWACR5KM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2b:89:78:e6:9e:ec:ec:07:7a:a2:b6:a5:01:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=03c9ee10800dd5066bf260e45f75c35fec32f79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8c:56:3e:f3:bc:f2:3b:10:6d:d7:35:04:a1: 48:bd:d7:ec:cc:c5:9c:ae:d9:93:f5:b0:a7:34:c0: a2:5c:77:d5:98:9f:40:9e:d1:93:71:55:d9:9e:a0: bd:0c:e1:24:e0:90:56:0b:7f:14:18:48:c7:01:e1: f3:a0:cd:34:f6:b3:c8:c8:6c:d0:84:a9:9f:8d:2b: 09:dd:59:ce:fa:0b:c3:f3:f4:48:cd:f2:4e:09:09: 32:e7:76:b8:81:8f:b0:46:5c:50:12:f1:44:d1:d8: 03:23:ac:3a:39:47:eb:4c:78:48:58:2c:d9:d8:83: 61:ae:a0:5c:ef:25:28:47:63:d1:15:28:78:33:1f: 36:f4:9f:71:2d:20:0c:44:8f:9f:f7:09:c5:a3:2a: 59:94:20:69:9b:0f:c8:ca:58:24:43:b3:96:8d:3a: 04:f2:15:28:dd:f4:d2:54:3c:be:5a:16:a3:d8:3a: e9:38:de:79:ca:90:fd:f6:d8:23:85:ee:26:b3:fd: 51:1d:cf:1d:db:62:40:82:b7:0f:3d:98:57:e4:6e: 10:1d:29:a3:a8:25:fc:2f:ac:0b:13:48:9a:34:b8: 38:72:3e:1f:23:bd:62:29:28:b4:31:25:ac:cf:fe: 60:7b:44:ce:2f:b6:91:b9:76:b9:f1:c1:a2:6d:e9: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C9:EE:10:80:0D:D5:06:6B:F2:60:E4:5F:75:C3:5F:EC:32:F7:9C X509v3 Authority Key Identifier: keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:32:23:a4:21:c2:09:9f:e7:3f:e2:12:4b:59:0d:37:92:19: b4:9a:9c:b9:97:d7:a5:59:db:b8:a0:ad:82:9d:05:ec:18:5d: b1:3d:64:2a:cf:fe:e2:d2:c4:16:02:55:fc:b1:ad:67:c9:5c: 40:41:3c:a4:04:b9:dc:b1:e4:cf:46:d5:f7:35:05:7c:57:55: 07:a0:87:c5:3f:e6:b3:30:40:22:2a:0c:c5:3a:93:1a:c8:4d: 20:86:4a:f9:be:8b:b9:22:39:f5:b2:f1:20:70:90:09:8a:40: 23:35:3f:77:a8:f4:06:8b:8f:f5:65:6d:d0:8c:0e:bb:4a:54: f2:52:61:e9:10:db:d1:e0:23:5e:e6:d5:09:da:e9:6e:99:52: cd:ae:1d:19:19:b0:24:26:81:cf:c5:a3:38:b5:3f:b2:16:9a: 5c:22:29:fb:86:58:21:67:29:1c:46:d1:ef:c3:86:ce:79:cb: 5f:c3:57:87:8f:85:90:b2:15:3d:1c:7c:84:f3:a8:2c:54:7a: 56:98:2f:f6:08:60:c9:70:0a:c6:ec:78:ea:3a:0e:53:b1:c2: a4:1e:e5:88:ac:2a:26:b4:f9:3c:60:be:a3:8b:77:7d:52:59: f4:c2:44:74:f5:44:b4:07:2f:aa:6b:39:99:2f:9b:da:26:89: c6:69:06:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSuJeOae7OwHeqK2pQG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj ZDkyYWUwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD EygwM2M5ZWUxMDgwMGRkNTA2NmJmMjYwZTQ1Zjc1YzM1ZmVjMzJmNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oxWPvO88jsQbdc1BKFIvdfszMWc rtmT9bCnNMCiXHfVmJ9AntGTcVXZnqC9DOEk4JBWC38UGEjHAeHzoM009rPIyGzQ hKmfjSsJ3VnO+gvD8/RIzfJOCQky53a4gY+wRlxQEvFE0dgDI6w6OUfrTHhIWCzZ 2INhrqBc7yUoR2PRFSh4Mx829J9xLSAMRI+f9wnFoypZlCBpmw/IylgkQ7OWjToE 8hUo3fTSVDy+Whaj2DrpON55ypD99tgjhe4ms/1RHc8d22JAgrcPPZhX5G4QHSmj qCX8L6wLE0iaNLg4cj4fI71iKSi0MSWsz/5ge0TOL7aRuXa58cGibekQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPJ7hCADdUGa/Jg5F91w1/sMvecMB8GA1UdIwQY MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2 LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDIjpCHC CZ/nP+ISS1kNN5IZtJqcuZfXpVnbuKCtgp0F7BhdsT1kKs/+4tLEFgJV/LGtZ8lc QEE8pAS53LHkz0bV9zUFfFdVB6CHxT/mszBAIioMxTqTGshNIIZK+b6LuSI59bLx IHCQCYpAIzU/d6j0BouP9WVt0IwOu0pU8lJh6RDb0eAjXubVCdrpbplSza4dGRmw JCaBz8WjOLU/shaaXCIp+4ZYIWcpHEbR78OGznnLX8NXh4+FkLIVPRx8hPOoLFR6 Vpgv9ghgyXAKxux46joOU7HCpB7liKwqJrT5PGC+o4t3fVJZ9MJEdPVEtAcvqms5 mS+b2iaJxmkG9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:37:40 2025 by rpki-client