This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json) Hash identifier: vdWi6s8KdgycEjQF6A8PXzYcvT//EonpWnD0Sl+S+os= Subject key identifier: C0:49:6D:DC:C3:04:21:79:23:B6:AE:69:13:0D:79:AC:D1:29:AE:8F Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1 Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1 Certificate serial: 019AAC1529E58DF27296131C6BF3282917B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft Manifest number: 1439 Signing time: Sat 22 Nov 2025 15:00:59 +0000 Manifest this update: Sat 22 Nov 2025 15:00:59 +0000 Manifest next update: Sun 23 Nov 2025 15:00:59 +0000 Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=) 2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=) 3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: 7VfkW2kBmq6cgglO+tx5xzwTudV8StkirK6TyfskgpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:29:e5:8d:f2:72:96:13:1c:6b:f3:28:29:17:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1 Validity Not Before: Nov 22 15:00:59 2025 GMT Not After : Nov 23 15:00:59 2025 GMT Subject: CN=c0496ddcc304217923b6ae69130d79acd129ae8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:3a:e2:4a:1d:20:92:07:90:21:cf:e3:b9: 61:97:f4:06:54:1c:02:d5:50:40:af:39:7e:de:31: 61:82:87:82:e9:9d:8d:19:23:e6:38:ac:c4:8e:1b: a3:d9:da:ee:b5:00:74:e9:ce:fe:94:fd:f6:df:7a: 8d:77:58:b7:61:59:06:e1:74:92:b4:7d:36:98:7a: 99:4a:1a:00:a4:ef:4e:41:35:8b:ee:70:ff:19:96: 5b:7c:87:e9:b6:46:1a:c7:d7:fd:ff:e6:ac:73:1c: 78:d0:ff:f6:a4:cf:b9:28:43:04:34:d5:97:5e:81: 12:e9:d8:76:83:e4:59:31:f1:3a:38:f9:73:4d:4c: 75:cc:57:77:e9:1d:b8:38:31:53:2c:c8:d5:65:40: ce:87:7f:d1:e0:d4:6e:c3:f9:1c:2f:14:67:69:77: da:c1:fe:00:ed:39:79:07:6e:83:d4:db:24:9b:62: eb:d2:67:54:5f:26:74:cc:33:2c:ab:4d:0f:2f:cb: a0:d8:0b:34:e8:41:ac:43:b4:1d:4a:ee:62:68:01: c8:a5:81:0f:f0:89:e6:6d:8c:15:59:8b:d5:25:9d: d0:da:c6:38:75:50:96:51:8b:72:0c:8a:40:ad:4b: f3:e0:b8:72:16:23:94:ad:54:4c:67:06:64:f4:09: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:49:6D:DC:C3:04:21:79:23:B6:AE:69:13:0D:79:AC:D1:29:AE:8F X509v3 Authority Key Identifier: keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c6:b5:46:dc:3f:be:85:96:1c:c0:30:84:14:a7:0a:eb:9c: 7b:eb:93:07:d8:8e:6e:92:1d:43:36:49:b2:df:4f:d2:1f:e8: f7:ce:ee:0d:ce:e9:1c:13:58:0c:6d:7e:34:c3:00:cc:2c:6f: d6:a5:63:22:c4:4d:78:32:f3:09:65:04:34:b4:18:13:a5:3c: fc:22:6a:04:8c:b3:2f:06:35:33:88:09:b5:95:45:52:c4:0d: 9d:69:90:30:f4:79:bb:a5:c0:12:67:b9:2a:3a:17:11:fc:a2: 6a:59:1b:76:3a:c0:5b:02:e0:37:7f:3f:c8:22:aa:6f:48:80: 13:0d:e2:69:72:86:4e:bd:51:34:83:bb:55:8a:55:32:67:13: 3f:a8:5d:c4:c2:e3:f8:0c:60:43:5c:0c:37:3d:b1:67:d6:ec: bf:e2:7d:ee:1c:f4:ed:f0:ca:39:8f:95:d9:ad:4c:d6:a8:bc: 88:a1:33:7c:87:6a:60:9a:7f:04:0a:63:2f:f6:77:39:76:fc: fd:9a:2d:0e:47:65:d4:1e:c8:94:c5:ee:6f:60:dc:67:f5:55: e7:a7:94:92:b4:94:6c:fe:59:15:95:c6:25:aa:cc:4d:53:f5: 93:e0:b8:73:9f:f5:02:8a:b5:95:12:36:0c:49:a4:34:4f:cf: e6:81:36:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFSnljfJylhMca/MoKRe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0 YzUwZjEwHhcNMjUxMTIyMTUwMDU5WhcNMjUxMTIzMTUwMDU5WjAzMTEwLwYDVQQD EyhjMDQ5NmRkY2MzMDQyMTc5MjNiNmFlNjkxMzBkNzlhY2QxMjlhZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq864kodIJIHkCHP47lhl/QGVBwC 1VBArzl+3jFhgoeC6Z2NGSPmOKzEjhuj2drutQB06c7+lP3233qNd1i3YVkG4XSS tH02mHqZShoApO9OQTWL7nD/GZZbfIfptkYax9f9/+ascxx40P/2pM+5KEMENNWX XoES6dh2g+RZMfE6OPlzTUx1zFd36R24ODFTLMjVZUDOh3/R4NRuw/kcLxRnaXfa wf4A7Tl5B26D1Nskm2Lr0mdUXyZ0zDMsq00PL8ug2As06EGsQ7QdSu5iaAHIpYEP 8InmbYwVWYvVJZ3Q2sY4dVCWUYtyDIpArUvz4LhyFiOUrVRMZwZk9Al4FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBJbdzDBCF5I7auaRMNeazRKa6PMB8GA1UdIwQY MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsa1Rtw/ voWWHMAwhBSnCuuce+uTB9iObpIdQzZJst9P0h/o987uDc7pHBNYDG1+NMMAzCxv 1qVjIsRNeDLzCWUENLQYE6U8/CJqBIyzLwY1M4gJtZVFUsQNnWmQMPR5u6XAEme5 KjoXEfyialkbdjrAWwLgN38/yCKqb0iAEw3iaXKGTr1RNIO7VYpVMmcTP6hdxMLj +AxgQ1wMNz2xZ9bsv+J97hz07fDKOY+V2a1M1qi8iKEzfIdqYJp/BApjL/Z3OXb8 /ZotDkdl1B7IlMXub2DcZ/VV56eUkrSUbP5ZFZXGJarMTVP1k+C4c5/1Aoq1lRI2 DEmkNE/P5oE22g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:12 2025 by rpki-client