This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json) Hash identifier: 9uxj77PNOqoeahoDBNpzN6Wbmk7Mf8PqA9CEovWK/UY= Subject key identifier: 9D:1C:01:C4:71:B2:AA:3A:2A:F8:60:29:85:87:FF:44:40:24:9F:2E Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Certificate serial: 019B3EDA2D6215C3CC1B7CCE6F87787D30B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft Manifest number: 10A1 Signing time: Sun 21 Dec 2025 03:00:44 +0000 Manifest this update: Sun 21 Dec 2025 03:00:44 +0000 Manifest next update: Mon 22 Dec 2025 03:00:44 +0000 Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=) 2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: ksMrFvgiRjgTfXn00oD5Jp1UF0u80Vm+A2qWlbCvHD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:2d:62:15:c3:cc:1b:7c:ce:6f:87:78:7d:30:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Validity Not Before: Dec 21 03:00:44 2025 GMT Not After : Dec 22 03:00:44 2025 GMT Subject: CN=9d1c01c471b2aa3a2af860298587ff4440249f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:ae:06:5f:6e:b0:58:a2:52:5f:fb:01:75: a2:07:69:76:6c:92:54:d8:76:eb:07:3b:75:3e:55: ea:3a:43:fd:9f:cf:3b:a7:f6:ac:7b:49:92:17:99: f4:28:93:8d:5e:d3:26:2b:34:d3:bb:e5:91:26:e4: 29:18:40:51:01:10:53:b3:88:a6:c1:cc:14:7e:0f: 26:4e:f4:b8:cf:73:1e:a3:5e:ae:f5:13:23:9a:58: c0:b0:b8:98:e3:35:d7:9c:7e:93:ee:5a:4b:62:ed: 64:e2:46:9c:dc:a6:ab:9f:ee:f5:7f:e0:96:83:72: 50:58:fd:1d:c5:26:9f:f0:cb:00:6c:53:0f:10:ec: c5:6b:6a:6d:d2:79:a7:1f:5b:38:23:ed:76:09:90: 60:4d:7b:bd:ba:d7:f0:b1:3c:e1:66:6e:f2:64:15: 94:63:f0:4b:93:be:1b:9f:51:ae:3e:af:74:6b:79: 13:35:27:68:b6:a7:83:11:4e:b9:a3:20:ff:f3:a4: 02:18:88:4f:48:db:d2:58:3a:95:44:d1:d8:28:2b: ef:c5:03:15:38:71:e3:32:72:9c:f7:30:94:77:30: 08:69:7a:fe:11:62:a9:b3:29:f3:b8:03:98:3d:86: 51:24:80:2a:9e:62:41:0b:be:bd:97:59:be:95:74: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1C:01:C4:71:B2:AA:3A:2A:F8:60:29:85:87:FF:44:40:24:9F:2E X509v3 Authority Key Identifier: keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a1:6a:2f:e4:a1:44:bd:94:64:04:72:10:16:02:4f:a8:38: ef:ea:dd:84:37:03:c2:c8:3f:79:59:93:70:45:75:0b:32:16: ef:9c:9b:77:8d:09:3a:3d:62:9d:f3:14:cf:e9:da:4c:f5:59: 93:a0:10:db:fd:f8:8c:d4:13:2e:b5:5d:57:0f:4b:30:99:ba: 88:50:d8:b9:8f:3c:3a:9a:31:71:ad:21:a4:77:4c:e5:47:1d: 7c:53:8f:a1:89:1f:33:1c:2c:45:02:ba:93:c9:7a:06:f6:89: 2f:98:c5:df:9c:65:9b:e7:66:17:48:16:fc:bc:cd:7e:27:c1: 65:e2:ab:aa:2b:0c:12:4b:cc:b8:80:ac:67:65:47:0e:06:3c: 36:9f:dd:71:1c:f6:bc:53:9d:d2:33:e0:0c:82:45:5d:ac:0a: ff:b9:d0:3f:ab:65:5d:6f:78:30:b3:a2:5b:bd:41:89:60:cb: d0:b6:f6:14:42:61:74:4e:a6:df:64:8e:a2:f3:b4:be:22:9a: 7e:05:89:d6:ed:60:38:d6:7e:b7:00:59:7f:14:64:2c:6c:5b: 8c:2a:67:21:ea:cb:bc:85:df:99:8d:f9:0b:ff:9a:4a:2b:de: b0:81:3d:b5:85:60:c8:58:33:df:45:ed:46:57:6b:13:13:0a: 33:52:73:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2i1iFcPMG3zOb4d4fTC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw OGMzODUwHhcNMjUxMjIxMDMwMDQ0WhcNMjUxMjIyMDMwMDQ0WjAzMTEwLwYDVQQD Eyg5ZDFjMDFjNDcxYjJhYTNhMmFmODYwMjk4NTg3ZmY0NDQwMjQ5ZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q6uBl9usFiiUl/7AXWiB2l2bJJU 2HbrBzt1PlXqOkP9n887p/ase0mSF5n0KJONXtMmKzTTu+WRJuQpGEBRARBTs4im wcwUfg8mTvS4z3Meo16u9RMjmljAsLiY4zXXnH6T7lpLYu1k4kac3Karn+71f+CW g3JQWP0dxSaf8MsAbFMPEOzFa2pt0nmnH1s4I+12CZBgTXu9utfwsTzhZm7yZBWU Y/BLk74bn1GuPq90a3kTNSdotqeDEU65oyD/86QCGIhPSNvSWDqVRNHYKCvvxQMV OHHjMnKc9zCUdzAIaXr+EWKpsynzuAOYPYZRJIAqnmJBC769l1m+lXSd9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0cAcRxsqo6KvhgKYWH/0RAJJ8uMB8GA1UdIwQY MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKFqL+Sh RL2UZARyEBYCT6g47+rdhDcDwsg/eVmTcEV1CzIW75ybd40JOj1infMUz+naTPVZ k6AQ2/34jNQTLrVdVw9LMJm6iFDYuY88Opoxca0hpHdM5UcdfFOPoYkfMxwsRQK6 k8l6BvaJL5jF35xlm+dmF0gW/LzNfifBZeKrqisMEkvMuICsZ2VHDgY8Np/dcRz2 vFOd0jPgDIJFXawK/7nQP6tlXW94MLOiW71BiWDL0Lb2FEJhdE6m32SOovO0viKa fgWJ1u1gONZ+twBZfxRkLGxbjCpnIerLvIXfmY35C/+aSivesIE9tYVgyFgz30Xt RldrExMKM1Jz+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:24 2025 by rpki-client