This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json) Hash identifier: ifJs0bxJm5BxxpUQc3Z/FbD458+qpdtDzDslcaJTvnY= Subject key identifier: 58:C7:D5:AC:8C:EF:59:4A:60:8E:89:5A:8E:F7:6C:2F:B5:15:72:9E Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Certificate serial: 019B4136D05A4BC8D49D31B89C7234C31525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft Manifest number: 169D Signing time: Sun 21 Dec 2025 14:01:09 +0000 Manifest this update: Sun 21 Dec 2025 14:01:09 +0000 Manifest next update: Mon 22 Dec 2025 14:01:09 +0000 Files and hashes: 1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=) 2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: axktHh3Bp2bYXT8Gld//piUAbFiNe7Xtfr0pxRh/dxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d0:5a:4b:c8:d4:9d:31:b8:9c:72:34:c3:15:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Validity Not Before: Dec 21 14:01:09 2025 GMT Not After : Dec 22 14:01:09 2025 GMT Subject: CN=58c7d5ac8cef594a608e895a8ef76c2fb515729e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:0c:70:82:bb:1a:e4:cf:0e:2d:7a:f9:4e: 96:65:75:01:b9:9e:e5:c3:2b:b5:40:6c:d5:a7:32: 42:66:9f:4f:c5:f2:09:bc:6e:92:ee:ec:85:7e:72: a7:12:26:3b:cc:3a:3f:c1:f4:5b:89:fb:a8:8f:be: 24:2c:8d:4d:97:b0:fc:3e:ad:ac:94:85:9a:24:28: 22:03:51:12:34:eb:0b:1e:6f:32:d4:1f:17:4b:f4: 5c:22:e5:16:94:77:9a:5c:95:cf:17:3c:3a:ee:97: 51:27:db:18:d4:b8:d8:99:5b:4d:91:e2:ac:4b:16: 19:8a:20:20:bf:f3:a3:a5:37:db:3c:76:5f:45:e1: 93:c1:00:47:3d:da:c5:cd:16:32:7b:03:43:29:12: f8:fa:cb:ce:8d:a8:55:3b:b4:b4:51:fa:d6:a1:a3: bc:ab:0a:6f:ac:53:9a:d0:18:c5:5b:97:7a:fc:f3: a8:60:17:3e:3e:57:ae:63:8a:84:0d:73:2f:2a:5d: a2:14:bc:b1:11:49:61:9d:51:b0:0a:1a:ad:61:08: 5a:57:34:2f:22:8b:83:c1:f5:b0:0a:52:3a:1c:ad: 95:c7:ab:93:af:ad:fa:6f:b2:a7:e1:5c:c8:4e:20: 7d:23:72:a3:3f:72:4e:c3:06:02:de:75:db:db:ba: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C7:D5:AC:8C:EF:59:4A:60:8E:89:5A:8E:F7:6C:2F:B5:15:72:9E X509v3 Authority Key Identifier: keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0c:e5:f1:56:0b:bd:08:00:02:7b:2b:84:42:be:e6:f3:00: 75:14:49:44:04:2b:e4:95:b6:fa:87:bb:33:c8:67:58:c4:3f: 71:71:12:bf:c2:5f:ed:6c:99:3e:7f:7a:40:74:72:41:e9:f5: 51:8c:a9:9c:93:dd:0d:e6:22:3a:cf:71:f1:62:69:b3:25:bc: 8c:35:8f:ba:a2:8b:05:49:54:da:c5:73:5f:cd:28:3a:52:29: 63:03:0c:74:2a:5e:27:65:6d:2f:be:c1:91:8e:c9:cb:68:b1: 3a:30:77:ab:41:a2:79:ca:93:c2:4f:b2:a0:7a:78:db:e4:89: 88:4f:c6:59:98:aa:f2:9c:03:4e:7b:e3:7c:ab:66:b6:ad:6c: d9:b5:e3:a1:2c:05:04:11:38:36:e7:55:77:22:a8:a6:d8:23: e5:f9:b2:75:3b:8a:17:53:1f:76:4b:02:81:52:ac:29:db:93: f8:75:39:5c:5d:fc:8c:c1:a6:f6:eb:78:b6:b1:38:3b:a5:06: 0e:5e:6f:75:d1:58:3a:1e:3d:83:b8:fb:60:f5:06:7f:e5:da: b8:a7:7d:51:f3:d0:fe:ae:ce:28:a8:a3:fd:df:53:c3:96:ec: f7:1a:dd:d3:73:ac:73:fc:15:b9:8a:e6:74:0e:f0:80:f7:2a: ff:b7:9d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtBaS8jUnTG4nHI0wxUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI3Yzg3Y2JiZmMyNjFhMjc0ZTljYjFiMDk1MDI2YTgw YzYxMzYwHhcNMjUxMjIxMTQwMTA5WhcNMjUxMjIyMTQwMTA5WjAzMTEwLwYDVQQD Eyg1OGM3ZDVhYzhjZWY1OTRhNjA4ZTg5NWE4ZWY3NmMyZmI1MTU3MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mAMcIK7GuTPDi16+U6WZXUBuZ7l wyu1QGzVpzJCZp9PxfIJvG6S7uyFfnKnEiY7zDo/wfRbifuoj74kLI1Nl7D8Pq2s lIWaJCgiA1ESNOsLHm8y1B8XS/RcIuUWlHeaXJXPFzw67pdRJ9sY1LjYmVtNkeKs SxYZiiAgv/OjpTfbPHZfReGTwQBHPdrFzRYyewNDKRL4+svOjahVO7S0UfrWoaO8 qwpvrFOa0BjFW5d6/POoYBc+PleuY4qEDXMvKl2iFLyxEUlhnVGwChqtYQhaVzQv IouDwfWwClI6HK2Vx6uTr636b7Kn4VzITiB9I3KjP3JOwwYC3nXb27rdDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjH1ayM71lKYI6JWo73bC+1FXKeMB8GA1UdIwQY MBaAFC6CfIfLv8JhonTpyxsJUCaoDGE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83YjIwYmQtZmM0ZS00Y2JmLWFkMWIt MjRmYTEwOTY1ZTg1LzEvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83YjIwYmQtZmM0ZS00Y2JmLWFkMWItMjRmYTEwOTY1ZTg1 LzEvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawzl8VYL vQgAAnsrhEK+5vMAdRRJRAQr5JW2+oe7M8hnWMQ/cXESv8Jf7WyZPn96QHRyQen1 UYypnJPdDeYiOs9x8WJpsyW8jDWPuqKLBUlU2sVzX80oOlIpYwMMdCpeJ2VtL77B kY7Jy2ixOjB3q0GiecqTwk+yoHp42+SJiE/GWZiq8pwDTnvjfKtmtq1s2bXjoSwF BBE4NudVdyKoptgj5fmydTuKF1MfdksCgVKsKduT+HU5XF38jMGm9ut4trE4O6UG Dl5vddFYOh49g7j7YPUGf+XauKd9UfPQ/q7OKKij/d9Tw5bs9xrd03Osc/wVuYrm dA7wgPcq/7edhg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:26 2025 by rpki-client