This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: kGN3RvZLj4iYuNIk6lHkpsCQTdyfBhtBhMMrDYG2x2g= Subject key identifier: BB:71:7F:2C:A2:8D:D0:CA:41:DD:C4:F5:F0:3C:93:FA:8E:07:05:2C Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B0DB6EFDAB3C3F14A300D986F865BCE8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 08E3 Signing time: Thu 11 Dec 2025 14:00:51 +0000 Manifest this update: Thu 11 Dec 2025 14:00:51 +0000 Manifest next update: Fri 12 Dec 2025 14:00:51 +0000 Files and hashes: 1: 3ltCFdZy4V3GyE2PWFgAfClRC2E.roa (hash: MvKcHOfmLjkCC6ae2mrrpxSjZGHgMZgVcn/g1k0NPNY=) 2: Hyeufykk73xgcSneHYi8ECCnPYc.roa (hash: 5VqCSOjA5bcQ+XGnXlR3yfwEpjMPFBK+PpNlY2M7gXw=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: fJTMMWwByN7hphZb0tv_TE2Yvo4.roa (hash: angDRpJs0fbux+XYuzP3Y/VKJHLeYhAHfy7qvUCjIek=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: f9fnGgd4xUCenq4JVhgpdp/UJlItkQKxuejavihg3Tk=) 11: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 12: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 13: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ef:da:b3:c3:f1:4a:30:0d:98:6f:86:5b:ce:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Dec 11 14:00:51 2025 GMT Not After : Dec 12 14:00:51 2025 GMT Subject: CN=bb717f2ca28dd0ca41ddc4f5f03c93fa8e07052c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b7:44:09:aa:12:1a:09:25:e5:19:af:2b:c6: cc:b2:95:10:80:28:5d:21:09:86:24:90:ce:16:50: c6:d3:8b:f7:33:26:d7:9f:67:1f:c0:19:cc:8e:c8: 07:ab:df:60:f4:01:4f:fa:df:4e:97:15:32:a0:30: 7c:0c:d9:5d:81:61:02:d6:90:1d:67:1c:05:ee:80: 22:9d:88:70:4c:4a:9e:9d:b4:bb:4f:17:1e:ca:cf: 30:82:a9:d3:9a:89:20:79:bc:d0:72:43:f4:75:aa: 9f:b4:fd:bb:b3:f4:4b:fd:d9:89:a1:b3:8c:09:73: c7:3f:18:5d:a2:28:e3:5b:0e:10:32:88:77:61:a2: 82:3f:b4:94:d3:40:4a:85:b8:da:a6:2e:d1:1c:32: 35:22:2f:e5:cf:7e:a5:f4:09:40:37:1d:db:44:d3: f1:eb:8a:cf:53:75:d5:fa:5c:8a:29:a3:52:19:ea: 67:95:4d:ad:2c:8e:31:80:6d:7b:63:f5:6c:25:52: 85:a8:6f:ee:56:c5:5f:83:43:ce:e0:2c:31:da:eb: e4:eb:c5:5d:56:e6:7c:cc:9f:4b:58:f8:04:7e:14: c8:01:be:06:b0:21:5a:9a:a7:07:0f:b5:6b:c9:da: 3f:ae:98:42:1d:08:af:b5:37:e2:4e:8e:95:a4:56: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:7F:2C:A2:8D:D0:CA:41:DD:C4:F5:F0:3C:93:FA:8E:07:05:2C X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5d:3d:c6:d2:f0:f6:db:80:29:5a:1b:6a:b5:6e:0b:30:1e: 4d:3a:99:90:d8:54:29:53:1b:ba:68:db:a4:5a:be:20:aa:6b: 3a:dc:9c:23:59:58:5d:0d:53:50:4f:3f:07:a8:a2:59:76:a4: f1:a3:30:4d:0d:51:8c:7c:0b:7c:a7:38:e0:6c:ef:e2:0d:d8: 30:22:05:8e:d9:82:88:ea:09:c3:94:c0:f0:45:bd:6e:35:79: 42:e7:61:2b:f6:22:04:95:a3:29:64:ed:93:b6:3f:f4:42:d3: 05:28:46:7b:8e:5f:08:de:fb:c0:e5:43:07:d6:a3:5d:e9:3d: 3f:5c:18:9e:15:03:97:84:ad:76:47:af:ee:c0:ce:8a:f3:30: 81:d5:ef:65:d9:7c:00:30:26:f7:2b:24:78:3b:34:74:3e:57: 01:ea:cd:5b:17:a6:b3:33:bc:58:c5:78:44:2b:d9:33:73:4c: 89:43:71:9e:b6:34:4a:ef:28:29:fe:9d:a9:cb:f7:eb:10:2a: 0b:f6:19:12:ed:6c:0e:65:57:38:ad:94:0a:38:9c:61:06:29: d6:e8:d4:2f:b1:2d:62:c6:74:11:4d:10:9e:4a:71:e8:f6:48: 52:52:74:33:12:36:86:0a:98:31:88:29:33:56:32:4a:cd:0d: 03:d8:90:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtu/as8PxSjANmG+GW86LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUxMjExMTQwMDUxWhcNMjUxMjEyMTQwMDUxWjAzMTEwLwYDVQQD EyhiYjcxN2YyY2EyOGRkMGNhNDFkZGM0ZjVmMDNjOTNmYThlMDcwNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rdECaoSGgkl5RmvK8bMspUQgChd IQmGJJDOFlDG04v3MybXn2cfwBnMjsgHq99g9AFP+t9OlxUyoDB8DNldgWEC1pAd ZxwF7oAinYhwTEqenbS7Txceys8wgqnTmokgebzQckP0daqftP27s/RL/dmJobOM CXPHPxhdoijjWw4QMoh3YaKCP7SU00BKhbjapi7RHDI1Ii/lz36l9AlANx3bRNPx 64rPU3XV+lyKKaNSGepnlU2tLI4xgG17Y/VsJVKFqG/uVsVfg0PO4Cwx2uvk68Vd VuZ8zJ9LWPgEfhTIAb4GsCFamqcHD7Vrydo/rphCHQivtTfiTo6VpFYF4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtxfyyijdDKQd3E9fA8k/qOBwUsMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF09xtLw 9tuAKVobarVuCzAeTTqZkNhUKVMbumjbpFq+IKprOtycI1lYXQ1TUE8/B6iiWXak 8aMwTQ1RjHwLfKc44Gzv4g3YMCIFjtmCiOoJw5TA8EW9bjV5QudhK/YiBJWjKWTt k7Y/9ELTBShGe45fCN77wOVDB9ajXek9P1wYnhUDl4Stdkev7sDOivMwgdXvZdl8 ADAm9yskeDs0dD5XAerNWxemszO8WMV4RCvZM3NMiUNxnrY0Su8oKf6dqcv36xAq C/YZEu1sDmVXOK2UCjicYQYp1ujUL7EtYsZ0EU0Qnkpx6PZIUlJ0MxI2hgqYMYgp M1YySs0NA9iQUA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:01:36 2025 by rpki-client