This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json) Hash identifier: +Scndf6FxKXfqI+NhPgQX4AnuBwi/OnuHOUhFMNvSac= Subject key identifier: 4B:30:B4:24:FA:25:FA:DD:D2:EB:F6:58:62:DE:CD:1C:2B:1A:A6:23 Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5 Certificate serial: 019B3420146BD002D05F5DD068171F997F0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 01:01:16 +0000 Manifest this update: Fri 19 Dec 2025 01:01:16 +0000 Manifest next update: Sat 20 Dec 2025 01:01:16 +0000 Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: HqtChKB6PqZtlwkAr4fhsyL316Gdfgu/EEHSyg0ANLQ=) 2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:14:6b:d0:02:d0:5f:5d:d0:68:17:1f:99:7f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5 Validity Not Before: Dec 19 01:01:16 2025 GMT Not After : Dec 20 01:01:16 2025 GMT Subject: CN=4b30b424fa25faddd2ebf65862decd1c2b1aa623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:4f:a7:58:2f:75:c7:e1:d9:cf:c4:21:5f: 70:56:9f:a4:42:9c:aa:35:84:b7:eb:68:06:e1:72: f6:e7:24:3d:5c:fc:a3:64:fc:6d:28:3c:c3:82:e7: 1f:a0:ec:69:aa:72:74:ca:0e:8a:be:16:8d:27:c6: 9f:cf:75:76:46:ae:64:fb:98:07:fe:e1:5e:d7:2e: 72:f8:4e:85:31:69:3c:51:b3:c9:7e:77:6b:0d:3a: 39:a9:9a:cc:58:89:30:d7:b0:e6:bd:31:78:ed:83: 3e:b5:74:eb:2b:c6:8e:68:0b:4b:85:91:fb:9e:88: b0:7b:1c:e8:c4:3f:5c:a4:52:23:f2:e6:df:6c:1a: 6e:8b:16:a6:df:f5:b2:e0:c7:40:db:02:cc:74:78: 0b:4e:91:96:94:e2:21:62:03:ba:9a:5c:26:b7:89: d9:13:11:63:27:96:6e:1d:d5:c7:0d:c1:5d:f9:78: a0:f0:5b:e3:90:21:fd:35:2c:5a:ad:bd:68:81:2e: f6:71:0c:74:5a:08:4a:7f:df:56:7d:32:98:f8:ce: 43:77:1e:b0:bb:8c:6b:95:97:6e:a3:ab:aa:3d:f0: 5b:85:f0:d8:c0:b8:43:e0:f4:b5:a4:4d:ba:8f:7c: 70:d3:f4:42:a9:23:13:f4:31:f7:2a:44:3a:91:97: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:30:B4:24:FA:25:FA:DD:D2:EB:F6:58:62:DE:CD:1C:2B:1A:A6:23 X509v3 Authority Key Identifier: keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:42:95:ff:38:a7:35:82:d0:c6:c1:4d:62:12:06:71:1d:f7: e3:81:59:fc:73:63:d3:e4:05:d1:84:4c:6d:b5:d4:f3:a9:07: f8:2d:4e:32:78:d9:46:e7:22:0d:92:32:b1:ff:8b:cf:3a:73: e9:ce:73:fd:89:10:95:d1:7d:f5:4a:5b:ed:e8:64:f8:ca:ec: 01:d7:37:75:20:10:85:49:24:d5:b8:f2:58:0f:59:92:e2:0e: 3d:48:56:6b:92:96:f7:ae:5a:05:a3:25:b1:5a:bf:be:65:68: 0c:27:72:bb:09:4d:e0:f7:8d:85:a2:5e:69:ac:2a:4a:2b:84: 65:dd:bd:62:9a:af:8d:8f:49:0d:13:4c:ef:07:f8:37:b9:c8: f0:d7:6b:1e:67:d6:4f:0f:18:f1:f7:8e:8b:08:47:d6:05:2a: c2:56:24:31:3b:39:02:53:7f:40:87:3f:c6:4d:b4:5b:97:83: 31:aa:90:0c:ce:ee:80:b9:83:69:d6:01:6f:ed:58:c2:6d:85: d3:91:d4:91:c7:10:f6:24:bb:43:ec:fa:46:3d:09:98:86:4a: 6f:20:10:dc:c3:2f:81:91:b3:33:55:69:02:c6:6c:95:d5:5a: 3d:37:ed:12:cc:02:56:7d:24:b9:b5:5f:44:f7:d6:a8:8f:c7: 4e:d4:58:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IBRr0ALQX13QaBcfmX8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz MTIzYjUwHhcNMjUxMjE5MDEwMTE2WhcNMjUxMjIwMDEwMTE2WjAzMTEwLwYDVQQD Eyg0YjMwYjQyNGZhMjVmYWRkZDJlYmY2NTg2MmRlY2QxYzJiMWFhNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRhPp1gvdcfh2c/EIV9wVp+kQpyq NYS362gG4XL25yQ9XPyjZPxtKDzDgucfoOxpqnJ0yg6KvhaNJ8afz3V2Rq5k+5gH /uFe1y5y+E6FMWk8UbPJfndrDTo5qZrMWIkw17DmvTF47YM+tXTrK8aOaAtLhZH7 noiwexzoxD9cpFIj8ubfbBpuixam3/Wy4MdA2wLMdHgLTpGWlOIhYgO6mlwmt4nZ ExFjJ5ZuHdXHDcFd+Xig8FvjkCH9NSxarb1ogS72cQx0WghKf99WfTKY+M5Ddx6w u4xrlZduo6uqPfBbhfDYwLhD4PS1pE26j3xw0/RCqSMT9DH3KkQ6kZcBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEswtCT6Jfrd0uv2WGLezRwrGqYjMB8GA1UdIwQY MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUKV/zin NYLQxsFNYhIGcR3344FZ/HNj0+QF0YRMbbXU86kH+C1OMnjZRuciDZIysf+Lzzpz 6c5z/YkQldF99Upb7ehk+MrsAdc3dSAQhUkk1bjyWA9ZkuIOPUhWa5KW965aBaMl sVq/vmVoDCdyuwlN4PeNhaJeaawqSiuEZd29YpqvjY9JDRNM7wf4N7nI8NdrHmfW Tw8Y8feOiwhH1gUqwlYkMTs5AlN/QIc/xk20W5eDMaqQDM7ugLmDadYBb+1Ywm2F 05HUkccQ9iS7Q+z6Rj0JmIZKbyAQ3MMvgZGzM1VpAsZsldVaPTftEswCVn0kubVf RPfWqI/HTtRYCg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:36 2025 by rpki-client