This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json) Hash identifier: 2mHZ5OmvaSX972XxLu6PYh1snSB00rHUZrPM9A0vsZc= Subject key identifier: 8D:AF:2E:E0:BF:CD:B7:2C:0B:4E:BD:3A:9C:10:7A:BC:6D:97:31:DA Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Certificate serial: 019B07478B806B81F04DF0E1656AC2B9C764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft Manifest number: 157F Signing time: Wed 10 Dec 2025 08:01:27 +0000 Manifest this update: Wed 10 Dec 2025 08:01:27 +0000 Manifest next update: Thu 11 Dec 2025 08:01:27 +0000 Files and hashes: 1: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: MklcUB9Y27gCS1NycsupFfHLd2mopDrMSobK3omFtEk=) 2: XuUIg00P_oELwRIdekPlKjcVl2M.roa (hash: D5bbltVcpYBKzhGcnj29+Y83dlfa0xkosi+p8XbJoUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:8b:80:6b:81:f0:4d:f0:e1:65:6a:c2:b9:c7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d Validity Not Before: Dec 10 08:01:27 2025 GMT Not After : Dec 11 08:01:27 2025 GMT Subject: CN=8daf2ee0bfcdb72c0b4ebd3a9c107abc6d9731da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:1f:88:f5:3a:2b:28:9d:1f:27:72:06:53: 8a:87:11:ed:17:02:20:f0:50:43:e1:19:ef:35:4b: d4:c7:b4:a1:3f:15:9c:6f:d1:65:8a:d5:f2:24:88: 7e:dc:9b:d7:24:a2:6d:56:24:6c:7e:ea:14:a0:34: ef:52:a3:51:b2:20:2a:c6:d4:06:1e:c5:d6:89:40: e3:ec:62:8f:a7:21:b1:d5:e7:7c:c1:be:da:b0:66: 35:0b:38:ee:14:16:2a:be:0d:87:ce:26:a5:e1:09: 54:1f:bc:75:52:e3:3e:e7:64:0c:f6:bf:55:bd:08: c5:48:bc:0d:fc:ff:74:34:d3:37:16:e5:15:06:72: 95:5f:16:09:5f:88:95:1c:78:bd:b4:3e:2f:ee:98: 04:fd:4f:1c:40:33:73:3c:95:d5:ed:92:3c:c7:98: be:13:69:19:67:82:58:0a:d1:55:08:89:ee:e5:30: 77:ed:68:9b:2a:ba:3b:17:c7:0a:8f:30:b3:72:9b: b8:47:fe:b8:bf:16:32:1a:c9:b8:b3:04:8c:7a:69: 3f:49:3e:f1:0f:f5:27:0d:b7:f4:2f:b2:a6:30:e1: 82:29:21:67:78:41:96:89:17:dd:02:a9:16:4f:92: d1:94:6b:97:2a:a7:36:fe:38:02:9e:00:aa:e4:43: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AF:2E:E0:BF:CD:B7:2C:0B:4E:BD:3A:9C:10:7A:BC:6D:97:31:DA X509v3 Authority Key Identifier: keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:43:a0:e6:7e:05:ac:14:f8:9e:79:47:a3:c4:c2:7b:b9:f3: 58:34:7c:15:4a:f1:d0:82:4d:37:bb:aa:61:6e:7a:1d:40:0b: 0d:61:b9:e3:3b:63:12:68:b6:56:a7:26:bc:64:97:2b:f9:30: f7:64:63:bb:7f:58:8d:35:a2:45:71:d3:f7:ba:fb:a0:b0:68: 00:a6:0f:aa:59:9b:09:44:04:50:9e:be:41:35:b1:95:fd:62: 83:ca:79:fa:76:dc:1c:ee:4b:e7:6b:c0:39:45:26:af:ae:07: d0:01:d4:68:0b:0f:24:74:f0:c6:fc:0f:49:f3:75:43:73:d9: 24:76:80:40:b5:af:4c:b7:3a:41:58:2c:6c:1f:b7:a7:0f:1b: e1:62:49:8d:8a:62:a9:7c:ce:6d:c4:cc:c3:c1:d5:31:f1:65: 5c:11:9f:55:b8:b4:6d:63:6a:8d:78:23:8d:77:df:28:93:e9: d8:af:44:0c:7e:42:0d:30:04:dd:4f:3c:b2:cf:2d:99:f9:7c: 0a:55:0e:5d:dd:12:34:1e:d1:dc:dc:7d:5b:70:4c:a9:f7:45: ab:4c:27:af:a4:28:95:c9:c7:86:3a:f9:44:52:bc:05:65:c8: 53:2c:89:b3:82:b3:61:71:5f:e3:08:84:9b:01:e7:a1:07:c2: 59:19:77:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHR4uAa4HwTfDhZWrCucdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOThjNTA2YTE3NGNmMmNhZDljMWE2YzViODFkNmU4OTg4 NjM2MmQwHhcNMjUxMjEwMDgwMTI3WhcNMjUxMjExMDgwMTI3WjAzMTEwLwYDVQQD Eyg4ZGFmMmVlMGJmY2RiNzJjMGI0ZWJkM2E5YzEwN2FiYzZkOTczMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz00fiPU6KyidHydyBlOKhxHtFwIg 8FBD4RnvNUvUx7ShPxWcb9FlitXyJIh+3JvXJKJtViRsfuoUoDTvUqNRsiAqxtQG HsXWiUDj7GKPpyGx1ed8wb7asGY1CzjuFBYqvg2Hzial4QlUH7x1UuM+52QM9r9V vQjFSLwN/P90NNM3FuUVBnKVXxYJX4iVHHi9tD4v7pgE/U8cQDNzPJXV7ZI8x5i+ E2kZZ4JYCtFVCInu5TB37WibKro7F8cKjzCzcpu4R/64vxYyGsm4swSMemk/ST7x D/UnDbf0L7KmMOGCKSFneEGWiRfdAqkWT5LRlGuXKqc2/jgCngCq5EMVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2vLuC/zbcsC069OpwQerxtlzHaMB8GA1UdIwQY MBaAFC6YxQahdM8srZwabFuB1uiYhjYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjIt NmJiYTdmYzMxNzI4LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjItNmJiYTdmYzMxNzI4 LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkOg5n4F rBT4nnlHo8TCe7nzWDR8FUrx0IJNN7uqYW56HUALDWG54ztjEmi2VqcmvGSXK/kw 92Rju39YjTWiRXHT97r7oLBoAKYPqlmbCUQEUJ6+QTWxlf1ig8p5+nbcHO5L52vA OUUmr64H0AHUaAsPJHTwxvwPSfN1Q3PZJHaAQLWvTLc6QVgsbB+3pw8b4WJJjYpi qXzObcTMw8HVMfFlXBGfVbi0bWNqjXgjjXffKJPp2K9EDH5CDTAE3U88ss8tmfl8 ClUOXd0SNB7R3Nx9W3BMqfdFq0wnr6QolcnHhjr5RFK8BWXIUyyJs4KzYXFf4wiE mwHnoQfCWRl3Bg== -----END CERTIFICATE-----Generated at Wed Dec 10 16:07:22 2025 by rpki-client