This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json) Hash identifier: tJs00VbQ+dXcy0d2uQkPEcVkIUurcujZRBNMIml64fo= Subject key identifier: C8:EB:22:2A:AF:7F:A9:36:51:F0:D6:22:4A:D7:65:FA:C3:CD:5E:98 Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc Certificate serial: 019B360E051EFF538A8CE88FEE31A400D771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft Manifest number: 0F08 Signing time: Fri 19 Dec 2025 10:00:46 +0000 Manifest this update: Fri 19 Dec 2025 10:00:46 +0000 Manifest next update: Sat 20 Dec 2025 10:00:46 +0000 Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: jDSRRsI7JHW8KUvilfeI89G4FvwhwoWuifgsU1wsBAM=) 2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:05:1e:ff:53:8a:8c:e8:8f:ee:31:a4:00:d7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc Validity Not Before: Dec 19 10:00:46 2025 GMT Not After : Dec 20 10:00:46 2025 GMT Subject: CN=c8eb222aaf7fa93651f0d6224ad765fac3cd5e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:38:81:7d:19:d0:f0:50:5c:a7:16:5d:4b: 9b:0d:e8:ed:1b:62:92:fe:32:a7:c2:b4:8b:a8:97: c0:5b:31:21:dc:15:fd:2e:6f:63:7c:7a:90:79:e0: 7d:35:2c:e3:71:89:29:42:39:7d:bc:02:09:06:24: 30:41:73:96:4c:ed:a6:9a:8e:45:4e:92:4c:6a:6d: 47:50:8d:a6:e7:a5:d8:0f:c6:52:5f:95:60:b5:91: 8b:db:13:cf:ac:bd:b4:03:22:49:e7:b6:48:0a:de: 59:1e:bd:1c:4a:86:7d:38:17:a1:84:eb:18:7d:46: 0d:b5:28:aa:30:41:9e:9c:3a:b6:6b:2e:42:8b:ce: 44:c1:13:14:27:26:af:e5:8e:42:90:7a:85:59:d9: 94:ea:7b:d7:02:1a:0e:7a:4b:0c:d8:85:e9:e8:68: 43:3e:c4:14:87:e8:92:79:93:50:e8:56:34:2f:6a: 05:9f:74:d0:56:fc:77:ac:8e:a0:75:73:6b:4b:46: 8f:96:09:43:88:01:cf:f5:72:63:b7:f4:a9:5e:94: eb:70:ce:bd:cf:a5:98:02:8c:34:ef:67:97:29:16: 9d:a0:d2:40:bf:09:fa:07:95:bb:c3:4d:9d:de:3c: 19:81:09:0b:37:a7:2f:2a:b6:40:dd:21:ab:83:d1: 25:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EB:22:2A:AF:7F:A9:36:51:F0:D6:22:4A:D7:65:FA:C3:CD:5E:98 X509v3 Authority Key Identifier: keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:44:4c:a5:ff:53:3d:bf:e2:27:3c:e4:83:20:40:5a:c2:62: 10:df:ce:49:d4:23:ac:2c:ac:0c:67:7b:2a:39:01:1e:29:eb: f2:5e:ba:a7:c0:f0:ae:49:b4:41:27:65:98:f9:95:0e:29:75: a9:a1:6a:3e:4c:65:d2:89:6d:b5:f9:1e:89:91:8c:0b:73:56: 5d:c7:9b:a2:5a:b1:5a:d9:f5:87:02:09:e9:3c:68:66:ba:52: a7:14:b1:16:d5:58:cf:4f:ce:06:5a:47:12:6b:4a:ff:7d:c3: 18:3c:95:2d:52:48:b5:32:67:fb:84:e6:ec:41:22:bf:0a:d3: da:9e:24:09:d4:fa:30:33:7f:20:5d:ae:eb:6a:75:e0:23:57: da:6f:df:6b:5a:64:c4:7f:74:b7:31:2d:4d:e6:04:20:c0:e6: 4a:2a:c5:29:a1:b4:ee:f6:e9:49:23:d8:80:66:00:1b:a6:0e: 3d:83:e2:84:46:57:e0:83:2d:8a:c5:5a:6d:43:77:f9:80:d8: 41:c5:5d:5b:0a:b0:87:77:17:de:5a:91:41:f3:b8:e5:b4:14: 85:5c:1e:54:a3:d1:fa:8c:b6:7c:85:bb:d9:45:a7:81:2e:55: f7:53:f9:0e:d7:15:f7:dd:5d:2f:51:8e:af:d7:08:f4:3e:e3: fb:e2:72:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DgUe/1OKjOiP7jGkANdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWUyOTk4ZTg2ZmE3NDg4ZTZiNjRmOGVkYmMwMzJjZTE1 ZDFiY2MwHhcNMjUxMjE5MTAwMDQ2WhcNMjUxMjIwMTAwMDQ2WjAzMTEwLwYDVQQD EyhjOGViMjIyYWFmN2ZhOTM2NTFmMGQ2MjI0YWQ3NjVmYWMzY2Q1ZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCE4gX0Z0PBQXKcWXUubDejtG2KS /jKnwrSLqJfAWzEh3BX9Lm9jfHqQeeB9NSzjcYkpQjl9vAIJBiQwQXOWTO2mmo5F TpJMam1HUI2m56XYD8ZSX5VgtZGL2xPPrL20AyJJ57ZICt5ZHr0cSoZ9OBehhOsY fUYNtSiqMEGenDq2ay5Ci85EwRMUJyav5Y5CkHqFWdmU6nvXAhoOeksM2IXp6GhD PsQUh+iSeZNQ6FY0L2oFn3TQVvx3rI6gdXNrS0aPlglDiAHP9XJjt/SpXpTrcM69 z6WYAow072eXKRadoNJAvwn6B5W7w02d3jwZgQkLN6cvKrZA3SGrg9ElpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjrIiqvf6k2UfDWIkrXZfrDzV6YMB8GA1UdIwQY MBaAFCzuKZjob6dIjmtk+O28AyzhXRvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE80cG1PaHZwMGlPYTJUNDdid0RMT0ZkRzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ZTE4NzEtMmFmMS00N2QzLWIyNjIt MDhmNDMzZGFlYTE1LzEvTE80cG1PaHZwMGlPYTJUNDdid0RMT0ZkRzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ZTE4NzEtMmFmMS00N2QzLWIyNjItMDhmNDMzZGFlYTE1 LzEvTE80cG1PaHZwMGlPYTJUNDdid0RMT0ZkRzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0RMpf9T Pb/iJzzkgyBAWsJiEN/OSdQjrCysDGd7KjkBHinr8l66p8Dwrkm0QSdlmPmVDil1 qaFqPkxl0olttfkeiZGMC3NWXcebolqxWtn1hwIJ6TxoZrpSpxSxFtVYz0/OBlpH EmtK/33DGDyVLVJItTJn+4Tm7EEivwrT2p4kCdT6MDN/IF2u62p14CNX2m/fa1pk xH90tzEtTeYEIMDmSirFKaG07vbpSSPYgGYAG6YOPYPihEZX4IMtisVabUN3+YDY QcVdWwqwh3cX3lqRQfO45bQUhVweVKPR+oy2fIW72UWngS5V91P5DtcV991dL1GO r9cI9D7j++Jy/w== -----END CERTIFICATE-----Generated at Fri Dec 19 18:44:39 2025 by rpki-client