This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json) Hash identifier: xGbF1oN7mtGSrL/k67yKm/t5AnECEDO0BBk+xRVKInE= Subject key identifier: 57:C1:D7:E1:92:A7:15:70:E9:11:79:DA:67:32:8B:3C:A5:78:63:F0 Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Certificate serial: 019B503C246065304C86546C36D58258BF82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft Manifest number: 10AA Signing time: Wed 24 Dec 2025 12:01:17 +0000 Manifest this update: Wed 24 Dec 2025 12:01:17 +0000 Manifest next update: Thu 25 Dec 2025 12:01:17 +0000 Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=) 2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: 9FuhTVrBN9DaAmovtV0OAdCvbkbV/WqJvCLYYoXoL7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:24:60:65:30:4c:86:54:6c:36:d5:82:58:bf:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Validity Not Before: Dec 24 12:01:17 2025 GMT Not After : Dec 25 12:01:17 2025 GMT Subject: CN=57c1d7e192a71570e91179da67328b3ca57863f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:c7:27:18:60:30:4a:03:57:a8:93:13:87: 6b:79:9e:63:ee:7f:9a:fd:16:4f:bf:4a:b3:eb:7f: ce:b9:41:ea:7f:06:07:32:1b:5b:2d:6c:b2:99:88: 31:98:46:91:c2:58:66:53:76:84:d8:5e:31:37:c2: 99:dd:6d:df:47:56:87:52:88:d0:d6:a3:0d:9f:54: 31:de:86:a8:74:de:a1:9d:a7:75:b2:3c:de:fe:5e: 07:54:82:c4:a4:fa:cd:6e:d8:dd:ed:21:9e:5c:40: 4d:10:1c:11:82:e4:73:d2:fb:99:fd:56:a2:37:74: 17:e5:ae:98:e5:04:0a:a4:25:54:7a:c4:fd:5e:8e: 3f:7f:22:77:30:3d:57:4d:44:b2:b9:2a:a5:be:ea: 1f:8a:c7:7e:d3:58:0b:03:21:0a:ff:a6:55:05:1a: b3:c1:38:3a:26:ce:2d:f5:ac:e7:8b:15:5d:68:48: 44:7a:d3:9e:86:e6:2d:28:4b:73:b9:e1:3e:fc:ec: 9c:52:42:0d:5a:f4:fa:e5:24:1f:a0:c2:06:6c:74: d5:6d:16:9b:f3:a3:64:62:b3:b1:bb:cd:f8:e1:fe: 7d:99:76:e1:f5:11:a3:51:e0:ea:27:d8:f8:bf:fe: 66:1a:1c:10:60:3b:6a:81:e4:2c:f1:89:46:d8:32: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C1:D7:E1:92:A7:15:70:E9:11:79:DA:67:32:8B:3C:A5:78:63:F0 X509v3 Authority Key Identifier: keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:76:77:11:95:ac:8e:88:48:ff:80:5f:e9:e2:ba:5e:61:80: 50:8d:1c:68:19:f4:ec:92:31:af:55:b3:70:6d:b2:c7:66:88: 64:11:a0:56:c5:13:39:31:ae:4a:98:74:65:b2:19:39:ce:43: f2:26:d9:e4:3b:e2:4a:5e:9e:74:e7:24:17:ef:28:f8:5e:ad: 69:03:bb:1a:ae:2c:88:a9:8b:4c:62:47:77:f5:9a:c9:c3:63: c2:0f:d0:b0:48:4f:32:c4:d4:07:20:1b:65:c7:ce:3b:ee:e4: a2:14:0c:70:33:b7:0f:20:ff:59:2c:df:7e:1d:58:e1:2b:32: 1b:4d:fc:29:c1:63:03:44:b8:a2:11:81:58:88:a9:eb:58:ba: 86:86:72:df:61:41:7a:ee:b5:a3:8d:ea:db:19:74:b2:63:c9: 84:32:0f:a6:49:7f:79:58:e6:b1:20:75:64:59:3f:7d:70:a8: b6:f9:dd:d5:c4:b5:0e:a4:1c:6d:d1:cd:64:0f:93:78:24:fb: 25:f1:69:94:b6:69:a5:47:8f:64:1a:08:c2:61:59:72:54:19: 96:52:76:17:d6:78:c9:de:be:fe:f7:91:da:a4:4d:52:4f:fc: d3:6d:7c:2a:ca:a3:f6:e9:01:56:35:9b:ac:37:c0:84:94:9b: c8:33:72:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPCRgZTBMhlRsNtWCWL+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw OGMzODUwHhcNMjUxMjI0MTIwMTE3WhcNMjUxMjI1MTIwMTE3WjAzMTEwLwYDVQQD Eyg1N2MxZDdlMTkyYTcxNTcwZTkxMTc5ZGE2NzMyOGIzY2E1Nzg2M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oXHJxhgMEoDV6iTE4dreZ5j7n+a /RZPv0qz63/OuUHqfwYHMhtbLWyymYgxmEaRwlhmU3aE2F4xN8KZ3W3fR1aHUojQ 1qMNn1Qx3oaodN6hnad1sjze/l4HVILEpPrNbtjd7SGeXEBNEBwRguRz0vuZ/Vai N3QX5a6Y5QQKpCVUesT9Xo4/fyJ3MD1XTUSyuSqlvuofisd+01gLAyEK/6ZVBRqz wTg6Js4t9aznixVdaEhEetOehuYtKEtzueE+/OycUkINWvT65SQfoMIGbHTVbRab 86NkYrOxu8344f59mXbh9RGjUeDqJ9j4v/5mGhwQYDtqgeQs8YlG2DIOkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfB1+GSpxVw6RF52mcyizyleGPwMB8GA1UdIwQY MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHZ3EZWs johI/4Bf6eK6XmGAUI0caBn07JIxr1WzcG2yx2aIZBGgVsUTOTGuSph0ZbIZOc5D 8ibZ5DviSl6edOckF+8o+F6taQO7Gq4siKmLTGJHd/WaycNjwg/QsEhPMsTUByAb ZcfOO+7kohQMcDO3DyD/WSzffh1Y4SsyG038KcFjA0S4ohGBWIip61i6hoZy32FB eu61o43q2xl0smPJhDIPpkl/eVjmsSB1ZFk/fXCotvnd1cS1DqQcbdHNZA+TeCT7 JfFplLZppUePZBoIwmFZclQZllJ2F9Z4yd6+/veR2qRNUk/80218Ksqj9ukBVjWb rDfAhJSbyDNylw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:46 2025 by rpki-client