This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json) Hash identifier: CQ4HM16Hj0k/MJTTpaLjO+iyurSqSDoQE7H1zVryw84= Subject key identifier: 4F:BC:78:58:0D:D9:37:55:04:95:09:27:76:46:8E:58:A2:C9:80:6D Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f Certificate serial: 019B59E406E265AD2A2EB630680D986A7A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft Manifest number: 0182 Signing time: Fri 26 Dec 2025 09:01:14 +0000 Manifest this update: Fri 26 Dec 2025 09:01:14 +0000 Manifest next update: Sat 27 Dec 2025 09:01:14 +0000 Files and hashes: 1: k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa (hash: GH7ewlueeqCkKF8FdnLHf1UDx0BAMbcdhJEt7chNpzU=) 2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: tHVr6S0fbGdHawFOuA+K0gR+hrCyxogAGDd+fFBqJoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:06:e2:65:ad:2a:2e:b6:30:68:0d:98:6a:7a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f Validity Not Before: Dec 26 09:01:14 2025 GMT Not After : Dec 27 09:01:14 2025 GMT Subject: CN=4fbc78580dd937550495092776468e58a2c9806d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bb:f2:07:68:10:56:13:e2:8a:4d:ab:9c:4d: 5d:ec:96:98:98:bf:35:6f:66:24:4e:56:5b:68:89: e4:22:0e:15:99:50:ec:f5:aa:b2:48:4d:f2:c3:00: fb:f2:2f:51:13:4f:33:5a:42:3e:5f:a4:d9:aa:7f: df:d6:08:57:f7:47:73:d2:ad:ba:ef:9b:8d:42:78: 98:8a:c6:63:bd:2c:98:eb:2d:6c:ab:06:26:6e:c3: 39:be:8f:b8:0a:bd:7c:cf:9b:ec:ef:04:10:67:8f: 49:4c:ce:d4:0d:49:1c:5a:2b:8f:10:35:1c:3f:45: e1:82:e5:fb:79:2b:96:f6:1d:5b:5a:8d:0a:7f:c7: 15:5f:0c:85:a8:ed:1d:72:a9:52:26:40:25:0a:bf: c3:2c:c1:7b:49:d9:8e:1d:2b:25:09:8f:ad:29:60: 8e:65:68:a0:a1:46:9c:b5:d3:74:7b:cb:e3:81:ae: 17:23:d6:b2:19:b7:df:80:9e:7e:6e:7f:3c:3d:54: 04:8d:e4:21:2c:d1:3e:60:93:af:18:d2:f4:1a:42: f1:68:ef:57:ff:8d:5b:20:61:16:23:fa:15:cc:d4: 76:c2:55:13:df:df:0c:ac:fc:85:85:01:3d:00:2b: 07:24:af:1c:1f:6d:87:1b:c3:8b:2c:94:70:5c:5a: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BC:78:58:0D:D9:37:55:04:95:09:27:76:46:8E:58:A2:C9:80:6D X509v3 Authority Key Identifier: keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:72:b6:78:b5:63:b2:ef:32:86:1c:4f:ec:77:03:2f:64:7d: 3c:77:27:bd:bd:2b:4c:4c:98:d2:11:75:56:69:33:8c:4d:8f: 9a:44:b0:cf:86:78:59:a6:9b:03:7d:e7:08:90:c4:6a:2d:a9: 52:6c:e9:41:4b:00:4d:19:17:50:b1:64:42:5a:5f:1f:b3:c7: 14:da:8c:e7:0a:50:59:c3:59:83:5a:d4:be:5f:44:d3:e3:0d: 98:5e:00:37:57:6e:a3:9f:c0:b7:43:60:52:fb:7b:0e:56:5d: 62:5e:f5:18:09:4e:a7:3a:9c:16:f2:8e:21:6c:01:ad:e1:2f: a9:53:8b:c9:49:69:80:da:0c:57:75:96:b2:01:28:37:fb:96: 28:54:37:25:d1:9d:78:b0:f9:02:f7:21:17:78:8a:4c:c2:12: fa:9b:55:5b:07:f3:7f:0d:4c:fc:25:a3:bd:ef:bd:50:53:55: 69:6d:d2:98:ff:9f:68:4f:cb:2f:81:24:d4:7a:60:7d:c0:db: 18:45:dd:13:bb:88:84:3c:06:64:65:9c:07:ce:8f:94:ff:d5: e9:25:b9:47:c2:48:49:f7:f3:4d:f4:d5:5c:98:e1:83:2c:b4: 83:43:84:18:00:ca:9d:f2:bd:ce:fe:35:5c:ba:d6:6a:d2:95: b0:0b:14:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5AbiZa0qLrYwaA2YanpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzVlNWQzODQ1OTIxYjlkNWZkZjIzNjM3YzU5ODExYjgz ODYzNGYwHhcNMjUxMjI2MDkwMTE0WhcNMjUxMjI3MDkwMTE0WjAzMTEwLwYDVQQD Eyg0ZmJjNzg1ODBkZDkzNzU1MDQ5NTA5Mjc3NjQ2OGU1OGEyYzk4MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbvyB2gQVhPiik2rnE1d7JaYmL81 b2YkTlZbaInkIg4VmVDs9aqySE3ywwD78i9RE08zWkI+X6TZqn/f1ghX90dz0q26 75uNQniYisZjvSyY6y1sqwYmbsM5vo+4Cr18z5vs7wQQZ49JTM7UDUkcWiuPEDUc P0XhguX7eSuW9h1bWo0Kf8cVXwyFqO0dcqlSJkAlCr/DLMF7SdmOHSslCY+tKWCO ZWigoUactdN0e8vjga4XI9ayGbffgJ5+bn88PVQEjeQhLNE+YJOvGNL0GkLxaO9X /41bIGEWI/oVzNR2wlUT398MrPyFhQE9ACsHJK8cH22HG8OLLJRwXFpe6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+8eFgN2TdVBJUJJ3ZGjliiyYBtMB8GA1UdIwQY MBaAFJU15dOEWSG51f3yNjfFmBG4OGNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYt OWNlZjkxN2I4ZTM3LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYtOWNlZjkxN2I4ZTM3 LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHK2eLVj su8yhhxP7HcDL2R9PHcnvb0rTEyY0hF1VmkzjE2PmkSwz4Z4WaabA33nCJDEai2p UmzpQUsATRkXULFkQlpfH7PHFNqM5wpQWcNZg1rUvl9E0+MNmF4AN1duo5/At0Ng Uvt7DlZdYl71GAlOpzqcFvKOIWwBreEvqVOLyUlpgNoMV3WWsgEoN/uWKFQ3JdGd eLD5AvchF3iKTMIS+ptVWwfzfw1M/CWjve+9UFNVaW3SmP+faE/LL4Ek1HpgfcDb GEXdE7uIhDwGZGWcB86PlP/V6SW5R8JISffzTfTVXJjhgyy0g0OEGADKnfK9zv41 XLrWatKVsAsUoA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client