This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json) Hash identifier: 89Pg2ewvlfu/uMOu1QY1e8HwAct2qFoba5j/LlOtRz0= Subject key identifier: 70:58:37:08:A7:3D:53:C2:35:E5:A9:69:11:FA:26:07:50:3E:69:3A Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e Certificate serial: 019B3A8F76B0B026C838710BFA3D4964060A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft Manifest number: 1035 Signing time: Sat 20 Dec 2025 07:00:39 +0000 Manifest this update: Sat 20 Dec 2025 07:00:39 +0000 Manifest next update: Sun 21 Dec 2025 07:00:39 +0000 Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=) 2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: ALYjx/kmy8SQRzXq/KE2j8U7XQkkfro7iP3l5iCNf/Q=) 3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:76:b0:b0:26:c8:38:71:0b:fa:3d:49:64:06:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e Validity Not Before: Dec 20 07:00:39 2025 GMT Not After : Dec 21 07:00:39 2025 GMT Subject: CN=70583708a73d53c235e5a96911fa2607503e693a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:14:8a:b8:a3:60:dd:a2:ae:93:81:92:cb:a5: 44:9a:25:64:2f:30:fe:03:d6:91:11:e4:65:d7:b7: 55:cf:97:b7:05:a2:f3:ac:92:16:35:32:dc:aa:9d: 70:bd:cd:1e:b5:90:14:36:f4:57:54:8a:df:aa:62: 36:1f:aa:dd:46:65:20:f6:72:1b:b4:4f:d9:f0:ab: 36:02:bd:4d:95:e7:ff:62:c0:1c:c1:c5:af:50:fa: 0d:fe:26:a5:b3:21:e1:ab:06:0e:54:bf:69:19:3a: d7:ec:c9:82:90:70:87:02:54:9a:5f:b4:b5:0b:d8: 2b:e8:e3:78:04:43:c2:7e:55:be:21:9f:d1:b5:c3: b5:0b:80:d1:25:d3:9d:cf:5e:9a:b0:fb:e1:d1:54: 2c:b4:1b:eb:40:bf:47:44:e0:fb:76:1a:b6:5c:c8: dd:c6:e6:7d:39:ee:c8:2f:81:d1:46:92:90:6c:29: a5:26:31:d2:6c:e2:28:36:39:ef:28:0f:81:b2:d5: 13:58:d4:c1:85:c4:7f:f3:96:cd:ff:e0:0d:5f:a9: e2:7b:73:7a:33:48:a3:2a:0a:ec:b0:c9:59:df:f0: b8:e9:7b:d3:78:13:fb:6b:66:21:f9:94:70:4a:94: 43:1b:fa:5b:19:a1:c7:11:85:93:65:1f:8f:40:53: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:58:37:08:A7:3D:53:C2:35:E5:A9:69:11:FA:26:07:50:3E:69:3A X509v3 Authority Key Identifier: keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:15:f9:89:91:9c:89:18:1a:cc:67:79:55:58:15:aa:0b:ef: 84:57:25:d9:76:c8:f9:b2:be:85:8c:37:d7:cb:27:4e:5b:33: 4a:f1:11:6e:ff:b7:af:fa:0c:fe:63:8d:dc:a7:40:68:18:6a: d7:33:c9:50:71:49:69:24:1f:10:01:82:bb:d4:9e:b8:fb:9c: 4f:76:c3:ed:71:ea:f6:fe:04:94:cf:58:32:9e:2a:ad:70:49: 67:21:b6:5d:56:08:ee:04:57:12:87:be:84:a6:36:d8:5d:cc: 20:95:58:d7:ff:51:85:0a:ed:d4:35:ca:0b:ab:b5:5e:67:11: 1f:6d:e2:4b:33:43:fa:50:89:5c:a1:5c:cd:dd:2b:2f:3e:e9: 61:73:0b:47:38:81:18:f4:a2:21:82:91:4f:5d:6e:83:e2:07: ee:da:5e:a8:95:ae:f3:46:1b:63:a1:b4:5a:84:47:8d:89:bf: b9:e0:57:f6:d2:b4:4a:ae:5b:36:88:e9:ec:9b:7d:b7:b6:9d: d6:5f:2f:ec:72:bf:01:88:69:60:5f:21:57:52:23:99:ca:17: 69:af:7f:f2:39:ff:54:7a:a6:1b:a2:f8:a8:60:8f:e5:d9:76: de:99:1b:4d:2f:49:79:4e:72:bf:56:50:7e:bb:b5:5f:6f:f6: 60:ce:0b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j3awsCbIOHEL+j1JZAYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx YWM0N2UwHhcNMjUxMjIwMDcwMDM5WhcNMjUxMjIxMDcwMDM5WjAzMTEwLwYDVQQD Eyg3MDU4MzcwOGE3M2Q1M2MyMzVlNWE5NjkxMWZhMjYwNzUwM2U2OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBSKuKNg3aKuk4GSy6VEmiVkLzD+ A9aREeRl17dVz5e3BaLzrJIWNTLcqp1wvc0etZAUNvRXVIrfqmI2H6rdRmUg9nIb tE/Z8Ks2Ar1Nlef/YsAcwcWvUPoN/ialsyHhqwYOVL9pGTrX7MmCkHCHAlSaX7S1 C9gr6ON4BEPCflW+IZ/RtcO1C4DRJdOdz16asPvh0VQstBvrQL9HROD7dhq2XMjd xuZ9Oe7IL4HRRpKQbCmlJjHSbOIoNjnvKA+BstUTWNTBhcR/85bN/+ANX6nie3N6 M0ijKgrssMlZ3/C46XvTeBP7a2Yh+ZRwSpRDG/pbGaHHEYWTZR+PQFMMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBYNwinPVPCNeWpaRH6JgdQPmk6MB8GA1UdIwQY MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxX5iZGc iRgazGd5VVgVqgvvhFcl2XbI+bK+hYw318snTlszSvERbv+3r/oM/mON3KdAaBhq 1zPJUHFJaSQfEAGCu9SeuPucT3bD7XHq9v4ElM9YMp4qrXBJZyG2XVYI7gRXEoe+ hKY22F3MIJVY1/9RhQrt1DXKC6u1XmcRH23iSzND+lCJXKFczd0rLz7pYXMLRziB GPSiIYKRT11ug+IH7tpeqJWu80YbY6G0WoRHjYm/ueBX9tK0Sq5bNojp7Jt9t7ad 1l8v7HK/AYhpYF8hV1IjmcoXaa9/8jn/VHqmG6L4qGCP5dl23pkbTS9JeU5yv1ZQ fru1X2/2YM4Lyw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:59 2025 by rpki-client