This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json) Hash identifier: p+X2fWAQSw6anib51VCJj//4jMAZrgeNzmaNyLxI0lw= Subject key identifier: 0F:FA:6C:30:2E:F8:E2:AE:C0:75:34:FA:D6:EE:F1:F8:B7:E6:15:7F Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Certificate serial: 019B3C7EFBAB59D383E27571FB728BA12323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 16:01:53 +0000 Manifest this update: Sat 20 Dec 2025 16:01:53 +0000 Manifest next update: Sun 21 Dec 2025 16:01:53 +0000 Files and hashes: 1: 0fTjjyjaiEMTmN0qEGg30Ao2zns.roa (hash: bVrLoN7n3oaO1XYgZx8crHTGWgcotUS3skM4/csJhUA=) 2: Eem0N3GXMChoR9TCOhSTBkWIdjc.roa (hash: igndwr3EyynLXRXaxAnOCIr8pyhy15Y9vo4ph2wbRZ8=) 3: SZcqM2MymNLwtybzmnw-E1d2RJk.roa (hash: jRh3gj1EqHTeeiOWY5OcArwxYUApFn4YAZHaSARNuyY=) 4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: aT/YmF0j+5+9YKC8ort9GemG2PLfjBrfOivcdAj+t98=) 5: safrg3kATgNbdktyHNaBTUQ20Fg.roa (hash: rMOUfy4ZM5vd45QmK8llUEFz0T+7f/LFtDqbEYg/alc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:fb:ab:59:d3:83:e2:75:71:fb:72:8b:a1:23:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Validity Not Before: Dec 20 16:01:53 2025 GMT Not After : Dec 21 16:01:53 2025 GMT Subject: CN=0ffa6c302ef8e2aec07534fad6eef1f8b7e6157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:ea:ed:12:00:cd:79:a3:3e:22:f6:12:08: 18:1e:f9:4d:cd:eb:1c:f3:f0:a8:9e:ab:df:3d:51: a1:fe:b2:ea:48:7c:e8:dd:3b:dc:03:e4:85:9e:52: 5f:bf:73:3f:23:75:5e:09:e3:45:f6:0f:17:de:42: 63:c4:25:ba:24:ea:a1:b0:53:6d:f7:5e:ee:c5:f8: 31:e1:8b:7c:96:07:2d:24:86:b5:0e:8d:48:48:11: 56:2f:b3:1e:22:1a:53:fd:93:bc:54:4c:0b:cf:31: 75:13:aa:41:e9:9d:ce:6c:68:21:39:e6:0d:8a:db: e7:69:bd:3e:f6:ed:5a:54:68:0b:72:d8:b2:92:8b: 14:54:40:69:50:f1:2d:1c:79:10:6d:1a:68:54:9c: 28:da:fe:be:15:51:ab:b9:4d:11:34:d4:54:8e:86: c5:a5:9f:01:e6:27:30:80:ce:56:ee:29:ce:19:79: 99:b6:9a:04:6b:b6:03:f4:3d:1b:91:63:45:97:53: 8f:85:96:79:d1:a0:89:1c:b1:44:39:61:da:5e:60: 41:44:55:cb:8b:0c:ab:74:4a:9d:54:46:5a:f2:69: 5e:67:60:9b:fc:79:35:f6:19:e0:29:3b:28:31:b8: f8:ab:16:7d:fc:43:c7:b0:f7:71:d7:59:8c:09:ef: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:6C:30:2E:F8:E2:AE:C0:75:34:FA:D6:EE:F1:F8:B7:E6:15:7F X509v3 Authority Key Identifier: keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:32:f4:e1:0a:ad:58:b1:ee:ed:50:2a:01:6e:52:c4:1f:88: 70:ee:3d:9f:df:d9:3f:07:b4:55:5a:fa:ff:87:0b:3a:b6:3a: 61:15:7d:72:11:64:4c:cc:55:96:1d:1c:e5:3f:60:cf:84:a0: 9f:e4:55:a6:45:a1:59:1b:76:a2:19:e8:82:b1:c2:11:bf:a9: 00:7b:25:18:26:83:c3:a3:89:c5:73:85:bd:9c:04:99:83:10: a4:9b:dc:f8:35:c6:96:1a:04:65:6e:d8:61:64:26:fa:d1:56: 34:b6:cd:72:6a:f7:94:be:5f:2e:e8:6e:f6:86:38:d2:d6:92: e9:41:16:d9:33:eb:ce:cc:88:f5:87:09:f0:a1:a8:6e:d1:ce: 92:7d:ff:c0:2e:3c:a5:58:e8:c1:09:b5:04:5d:58:5d:f7:c5: ab:18:ca:42:95:c8:59:22:05:50:6d:c1:52:14:8b:02:75:52: 19:be:8b:a9:c2:59:1b:d5:9e:e1:d2:09:20:e4:74:73:1f:6b: 23:3a:5c:e4:cb:18:d9:e8:38:e4:7b:78:60:40:f0:3b:37:c5: 8a:90:fb:a9:64:51:99:9e:ed:55:15:72:05:4f:53:15:b5:ab: 68:9f:93:47:f3:4e:92:56:19:d3:71:b8:6e:0a:dd:86:4f:81: 34:41:30:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvurWdOD4nVx+3KLoSMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Y2NhMDk1MmRiOGFhOWZlNWU1NzAzYzZmMTg5YTA2YTU3 ZjRiYjEwHhcNMjUxMjIwMTYwMTUzWhcNMjUxMjIxMTYwMTUzWjAzMTEwLwYDVQQD EygwZmZhNmMzMDJlZjhlMmFlYzA3NTM0ZmFkNmVlZjFmOGI3ZTYxNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHDq7RIAzXmjPiL2EggYHvlNzesc 8/ConqvfPVGh/rLqSHzo3TvcA+SFnlJfv3M/I3VeCeNF9g8X3kJjxCW6JOqhsFNt 917uxfgx4Yt8lgctJIa1Do1ISBFWL7MeIhpT/ZO8VEwLzzF1E6pB6Z3ObGghOeYN itvnab0+9u1aVGgLctiykosUVEBpUPEtHHkQbRpoVJwo2v6+FVGruU0RNNRUjobF pZ8B5icwgM5W7inOGXmZtpoEa7YD9D0bkWNFl1OPhZZ50aCJHLFEOWHaXmBBRFXL iwyrdEqdVEZa8mleZ2Cb/Hk19hngKTsoMbj4qxZ9/EPHsPdx11mMCe/o8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/6bDAu+OKuwHU0+tbu8fi35hV/MB8GA1UdIwQY MBaAFJfMoJUtuKqf5eVwPG8Ymgalf0uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYt NWQ2ZGQwYmE1MmNmLzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYtNWQ2ZGQwYmE1MmNm LzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTL04Qqt WLHu7VAqAW5SxB+IcO49n9/ZPwe0VVr6/4cLOrY6YRV9chFkTMxVlh0c5T9gz4Sg n+RVpkWhWRt2ohnogrHCEb+pAHslGCaDw6OJxXOFvZwEmYMQpJvc+DXGlhoEZW7Y YWQm+tFWNLbNcmr3lL5fLuhu9oY40taS6UEW2TPrzsyI9YcJ8KGobtHOkn3/wC48 pVjowQm1BF1YXffFqxjKQpXIWSIFUG3BUhSLAnVSGb6LqcJZG9We4dIJIOR0cx9r Izpc5MsY2eg45Ht4YEDwOzfFipD7qWRRmZ7tVRVyBU9TFbWraJ+TR/NOklYZ03G4 bgrdhk+BNEEwMA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:43 2025 by rpki-client