This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json) Hash identifier: c/uLBNztz8c+8TBaqunENV14TnF2LaSl5I8RKL8J0gs= Subject key identifier: 93:62:08:A7:1B:AD:AF:3C:D6:3F:06:6A:3A:A4:F7:55:CD:C0:C7:34 Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Certificate serial: 019B3BA217DBEB6D80E368B53C1325A57A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 12:00:37 +0000 Manifest this update: Sat 20 Dec 2025 12:00:37 +0000 Manifest next update: Sun 21 Dec 2025 12:00:37 +0000 Files and hashes: 1: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (hash: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=) 2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=) 3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=) 4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: PChgUXAcGF/HjzFD6Zon3LtTn0rVG4gpemPaykjtyPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:17:db:eb:6d:80:e3:68:b5:3c:13:25:a5:7a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Validity Not Before: Dec 20 12:00:37 2025 GMT Not After : Dec 21 12:00:37 2025 GMT Subject: CN=936208a71badaf3cd63f066a3aa4f755cdc0c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:cb:56:ad:ce:e1:de:00:01:db:3d:b7:d0: de:b7:9d:13:1d:da:e9:95:a5:36:2b:a8:a2:3d:8c: 69:e6:0f:6c:2e:f1:b5:7b:49:0d:08:ff:11:83:1d: 3c:be:70:54:c9:fd:04:c6:9a:52:ab:36:33:e0:1e: 85:8c:35:d8:31:7d:ab:32:16:9a:c5:6e:ab:82:2c: 2b:2b:9a:a3:1b:e1:31:68:74:bf:9f:eb:d2:b5:b1: 3b:28:4a:a9:38:82:fb:20:4b:95:af:50:61:d2:38: 35:af:72:75:be:50:d3:61:62:c8:90:9d:2f:9a:e4: 4d:e6:7d:a2:b6:a0:81:6f:8b:f5:82:6e:98:42:3e: 87:41:57:ca:23:11:2d:18:89:ac:a6:ed:e0:13:97: 75:04:15:46:2a:e9:ed:cb:23:2a:db:d8:3f:52:b5: 3f:c3:da:1e:f0:8c:a2:ea:89:15:e0:19:3e:aa:a9: db:1e:58:20:d6:fc:7e:a8:78:4b:de:88:b2:22:71: 7a:93:56:be:6d:76:e0:32:71:a0:fa:43:71:f0:90: 10:03:7d:0d:87:d4:7b:13:70:8f:ed:76:3a:41:85: 97:d8:85:db:ad:e5:19:04:8d:54:a1:fc:29:1a:7c: 60:a9:be:d4:64:53:6c:95:37:10:fa:4b:5a:81:b4: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:62:08:A7:1B:AD:AF:3C:D6:3F:06:6A:3A:A4:F7:55:CD:C0:C7:34 X509v3 Authority Key Identifier: keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b2:58:8a:45:52:33:57:23:f1:a1:bc:a0:e6:be:ff:a7:b6: 9b:28:88:6a:ad:32:b7:aa:d4:0e:01:c7:bd:81:ee:25:09:c3: 0b:9d:d2:b0:64:18:fc:3a:1f:0f:53:9f:78:b5:9a:c5:ef:dc: 32:f3:e2:cf:bc:1e:da:d2:be:0e:1f:46:68:3b:ce:2a:57:c2: c1:a7:28:7f:9f:9d:87:42:69:c3:5c:ea:9b:83:a4:e2:66:b6: 56:9d:67:aa:bc:4e:f5:5f:df:17:07:c5:a7:96:ad:98:11:b3: d0:ff:a9:9c:80:84:ed:4a:2e:54:cc:53:c9:80:f1:70:fa:26: 0b:b3:c7:e1:39:51:ce:a9:e2:2e:10:8f:ee:b8:1a:c8:8c:02: 5a:a0:ea:fc:20:90:3d:77:de:9a:0a:63:72:22:cc:20:bb:95: 9c:d5:36:d5:5f:4a:dd:a2:22:87:7d:9d:b5:c3:db:a0:86:79: b6:a6:be:e9:77:74:cd:08:0b:8e:1c:e7:55:94:75:f9:39:2d: 53:4e:da:43:b7:f2:a7:13:b0:3e:f1:ba:3d:d8:84:f2:cf:dc: cf:18:e8:85:4e:7b:e4:de:fa:c4:58:08:11:3e:e5:72:80:9e: c0:59:83:25:de:eb:ef:ec:5f:d4:95:3d:24:9c:7d:21:d1:43: ba:b2:63:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohfb622A42i1PBMlpXpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0 MTViZjUwHhcNMjUxMjIwMTIwMDM3WhcNMjUxMjIxMTIwMDM3WjAzMTEwLwYDVQQD Eyg5MzYyMDhhNzFiYWRhZjNjZDYzZjA2NmEzYWE0Zjc1NWNkYzBjNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWHLVq3O4d4AAds9t9Det50THdrp laU2K6iiPYxp5g9sLvG1e0kNCP8Rgx08vnBUyf0ExppSqzYz4B6FjDXYMX2rMhaa xW6rgiwrK5qjG+ExaHS/n+vStbE7KEqpOIL7IEuVr1Bh0jg1r3J1vlDTYWLIkJ0v muRN5n2itqCBb4v1gm6YQj6HQVfKIxEtGImspu3gE5d1BBVGKuntyyMq29g/UrU/ w9oe8Iyi6okV4Bk+qqnbHlgg1vx+qHhL3oiyInF6k1a+bXbgMnGg+kNx8JAQA30N h9R7E3CP7XY6QYWX2IXbreUZBI1UofwpGnxgqb7UZFNslTcQ+ktagbQBBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNiCKcbra881j8Gajqk91XNwMc0MB8GA1UdIwQY MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt OGFkYWMxN2U5MGFlLzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrJYikVS M1cj8aG8oOa+/6e2myiIaq0yt6rUDgHHvYHuJQnDC53SsGQY/DofD1OfeLWaxe/c MvPiz7we2tK+Dh9GaDvOKlfCwacof5+dh0Jpw1zqm4Ok4ma2Vp1nqrxO9V/fFwfF p5atmBGz0P+pnICE7UouVMxTyYDxcPomC7PH4TlRzqniLhCP7rgayIwCWqDq/CCQ PXfemgpjciLMILuVnNU21V9K3aIih32dtcPboIZ5tqa+6Xd0zQgLjhznVZR1+Tkt U07aQ7fypxOwPvG6PdiE8s/czxjohU575N76xFgIET7lcoCewFmDJd7r7+xf1JU9 JJx9IdFDurJjtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:57:16 2025 by rpki-client