This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json) Hash identifier: IYDiUfBQ3iSlitl+4YzMOEvMu3V2vSUIjTO1VyqSNm8= Subject key identifier: 44:E3:2A:60:BE:26:52:04:30:EA:2E:19:87:12:D8:FA:2A:25:0E:F6 Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c Certificate serial: 019B4324FF19F2F40DA272E1A92483C85A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 23:00:56 +0000 Manifest this update: Sun 21 Dec 2025 23:00:56 +0000 Manifest next update: Mon 22 Dec 2025 23:00:56 +0000 Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: gXQ9Cvdd6pD+cEQLqy1EKQh/4DGyXkslAfpnzRnrcSw=) 2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ff:19:f2:f4:0d:a2:72:e1:a9:24:83:c8:5a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c Validity Not Before: Dec 21 23:00:56 2025 GMT Not After : Dec 22 23:00:56 2025 GMT Subject: CN=44e32a60be26520430ea2e198712d8fa2a250ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:95:74:dc:c0:11:5d:51:06:b6:1d:4a:2a: 28:f0:2b:23:7f:92:7a:d7:ca:f9:27:81:5d:92:cb: 6d:c5:49:28:aa:9a:05:00:40:0b:20:96:b0:2b:b6: a9:fc:f9:3d:b1:e9:8f:ff:9c:2f:33:48:64:6c:19: b6:9e:ff:50:fe:02:cd:75:ec:a6:81:e9:aa:58:dc: 46:7d:d1:ef:f4:01:20:a1:4d:c6:b7:2a:f2:0d:e6: ad:28:4e:68:df:62:f3:31:1d:25:1a:73:cd:ab:79: 23:11:d1:c9:50:a7:84:13:a0:96:55:8c:7e:1f:bd: ab:2c:63:59:be:66:e0:e3:25:cf:7a:a0:a3:22:47: 30:ff:86:ee:f1:54:18:d2:33:21:e2:a5:0a:0e:ec: 66:71:11:d0:0a:5a:87:14:e4:6a:fb:41:14:66:2b: 4a:1c:1b:f1:74:f7:45:be:3d:1f:c3:a9:18:c5:72: 4e:59:c6:2c:65:16:ed:69:de:9e:10:78:6c:5f:f8: 24:87:af:1f:0b:b5:d9:8d:cf:32:38:ad:91:a6:ed: dd:d6:3f:57:55:bf:2e:3a:f0:0c:06:a4:5f:e3:48: a8:8f:5c:c4:46:3f:89:0e:5f:bd:cd:c9:2a:49:07: 80:58:67:8d:8b:58:0c:dc:c0:8b:6c:19:32:94:b8: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:2A:60:BE:26:52:04:30:EA:2E:19:87:12:D8:FA:2A:25:0E:F6 X509v3 Authority Key Identifier: keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a6:03:06:c5:de:0f:0f:16:88:ca:55:7e:04:b0:76:74:6d: 95:9b:66:51:1a:7c:4d:15:e3:23:6b:16:b9:a3:5b:54:17:97: 17:93:14:a7:7c:fc:ea:43:04:2a:e5:60:cf:fb:d1:12:86:92: 20:a3:0f:8b:a5:66:51:51:94:91:32:96:3d:00:aa:d7:6c:45: 63:6b:2c:c1:a5:9a:65:ab:a6:ad:30:a7:12:c2:80:12:18:13: 05:9a:99:bc:b9:01:31:3d:12:93:65:1f:19:97:bc:f2:e3:c7: 0c:d1:10:19:66:e9:1f:25:c8:00:54:1d:fb:3e:dd:c2:1b:fc: 8e:e0:c7:b6:07:f6:b7:88:69:4b:d6:a8:19:ef:80:d1:d6:70: be:d1:be:50:6e:3d:8a:cd:e0:47:8c:20:64:1a:a9:c2:29:1b: f9:a7:8d:d4:b2:23:aa:06:ae:b1:6b:43:da:10:a8:30:57:9f: aa:58:d2:97:3e:c2:46:04:e0:91:d6:9f:d6:1a:ae:0d:8b:4d: 47:ec:c2:ce:fb:4e:b0:87:ba:fb:61:1b:99:b9:f6:dc:a3:cf: 9f:28:1f:d9:38:74:9a:32:1e:99:3d:d8:e4:00:c3:29:57:86: 56:30:6f:11:13:23:07:3d:59:09:2c:e4:da:12:cd:0c:ac:38: 7f:3a:12:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJP8Z8vQNonLhqSSDyFpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1 NTM4NmMwHhcNMjUxMjIxMjMwMDU2WhcNMjUxMjIyMjMwMDU2WjAzMTEwLwYDVQQD Eyg0NGUzMmE2MGJlMjY1MjA0MzBlYTJlMTk4NzEyZDhmYTJhMjUwZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aVdNzAEV1RBrYdSioo8Csjf5J6 18r5J4FdksttxUkoqpoFAEALIJawK7ap/Pk9semP/5wvM0hkbBm2nv9Q/gLNdeym gemqWNxGfdHv9AEgoU3GtyryDeatKE5o32LzMR0lGnPNq3kjEdHJUKeEE6CWVYx+ H72rLGNZvmbg4yXPeqCjIkcw/4bu8VQY0jMh4qUKDuxmcRHQClqHFORq+0EUZitK HBvxdPdFvj0fw6kYxXJOWcYsZRbtad6eEHhsX/gkh68fC7XZjc8yOK2Rpu3d1j9X Vb8uOvAMBqRf40ioj1zERj+JDl+9zckqSQeAWGeNi1gM3MCLbBkylLjg0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETjKmC+JlIEMOouGYcS2PoqJQ72MB8GA1UdIwQY MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt NDZmZDQ2ZDZiNTQ3LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3 LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqYDBsXe Dw8WiMpVfgSwdnRtlZtmURp8TRXjI2sWuaNbVBeXF5MUp3z86kMEKuVgz/vREoaS IKMPi6VmUVGUkTKWPQCq12xFY2sswaWaZaumrTCnEsKAEhgTBZqZvLkBMT0Sk2Uf GZe88uPHDNEQGWbpHyXIAFQd+z7dwhv8juDHtgf2t4hpS9aoGe+A0dZwvtG+UG49 is3gR4wgZBqpwikb+aeN1LIjqgausWtD2hCoMFefqljSlz7CRgTgkdaf1hquDYtN R+zCzvtOsIe6+2Ebmbn23KPPnygf2Th0mjIemT3Y5ADDKVeGVjBvERMjBz1ZCSzk 2hLNDKw4fzoS2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:51 2025 by rpki-client