This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json) Hash identifier: ucCtE5gsD/11mtrsd1cTbgAxHnGF5u4YS1iSpQBP0Ps= Subject key identifier: 95:9D:B0:C8:82:82:AE:45:C0:77:3F:33:DE:B3:21:B6:79:F0:7D:F3 Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Certificate serial: 019B3D91141CCF1A7B4967C849619F4189A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft Manifest number: 17A4 Signing time: Sat 20 Dec 2025 21:01:16 +0000 Manifest this update: Sat 20 Dec 2025 21:01:16 +0000 Manifest next update: Sun 21 Dec 2025 21:01:16 +0000 Files and hashes: 1: E-4ADBGXON3Ebg7oHiDfrmtH_lc.roa (hash: l2qYirx7neuSnlQE7h3UgUns57ricFDVqJUUNXFMsmI=) 2: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: l10DhiL/vJvbabSyLh7spiii33Sz8zHgMRBhpz05YhE=) 3: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:14:1c:cf:1a:7b:49:67:c8:49:61:9f:41:89:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Validity Not Before: Dec 20 21:01:16 2025 GMT Not After : Dec 21 21:01:16 2025 GMT Subject: CN=959db0c88282ae45c0773f33deb321b679f07df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:0e:88:35:52:3a:64:1b:28:a0:49:f4:55: 6d:e8:04:12:37:01:90:e8:4e:85:e1:4a:ef:23:7a: 00:4e:1b:12:d2:01:8c:24:be:50:76:a2:09:39:d1: 4f:59:78:0c:7c:25:58:84:41:34:ef:eb:1a:3d:d9: f8:7b:fa:ff:cf:cf:48:2b:92:6a:fa:7d:17:c6:81: de:fe:99:01:7b:c4:82:00:13:7b:13:5b:70:48:0d: ed:68:d8:f8:73:13:d5:8a:19:e7:c3:77:5a:b6:88: f0:a2:31:66:f8:60:e6:58:46:c5:d6:bb:99:49:69: 42:77:0a:fb:03:8a:67:1f:f1:cb:f9:91:37:fa:f3: db:25:11:a5:92:3f:7a:05:1e:3f:2a:3f:f5:f1:3e: 54:4a:86:2a:89:57:26:96:44:82:0b:a2:6e:86:97: e9:f8:f3:a2:16:23:d0:76:75:ec:90:8c:62:fa:d6: ce:d9:62:6f:de:7b:62:c0:d4:90:41:50:ab:1f:ea: a1:7d:4e:8c:9f:18:ce:a3:41:7a:a8:62:f0:35:c7: 34:03:35:55:2f:f9:8e:fd:64:da:f5:9f:e5:a3:7a: 67:1e:6b:18:02:33:47:57:55:7f:5f:f7:f5:65:55: b2:a1:48:e9:33:db:68:ab:f8:3c:57:c4:30:c0:1b: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:B0:C8:82:82:AE:45:C0:77:3F:33:DE:B3:21:B6:79:F0:7D:F3 X509v3 Authority Key Identifier: keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:c3:c6:03:c0:8b:db:d3:0b:5d:08:f6:43:28:65:72:fe: 26:4e:a6:bd:ab:72:5f:a2:5a:d9:ae:2e:11:32:a5:d5:83:46: c3:54:33:2e:67:09:9f:b4:cf:25:07:9a:2e:95:b5:b7:0d:2d: 31:54:69:81:df:6c:57:3e:65:82:9b:fd:e5:55:26:03:46:56: ed:8d:f7:32:aa:6a:06:62:e5:a1:73:6b:de:62:dd:fc:da:20: d2:c7:29:23:0e:9b:db:88:96:0b:99:f4:e7:53:10:20:2a:78: bf:64:4e:36:29:23:58:e8:78:34:31:4f:43:b2:c8:2c:12:e9: b4:bb:74:ea:88:0d:8d:23:f6:47:eb:e4:12:44:9c:37:ec:29: da:3b:39:bc:11:6b:82:7f:38:f4:5b:15:ca:65:83:36:4d:b7: 96:71:30:6a:4c:e7:e0:2e:e0:af:1d:4a:57:4b:e8:84:32:01: 88:09:3a:59:05:7e:cf:4c:a3:80:86:1a:1c:d8:19:ea:e9:39: 2b:4f:16:60:32:e0:60:b9:9e:1b:b0:55:23:69:9b:2e:fb:cb: 00:83:46:b4:20:3f:ff:62:3b:a6:91:da:ff:98:f1:8b:f1:e4: 56:c9:d5:99:95:55:b2:0c:52:d1:36:5d:fd:cb:46:08:eb:ba: 89:7c:67:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRQczxp7SWfISWGfQYmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy NDk5OTEwHhcNMjUxMjIwMjEwMTE2WhcNMjUxMjIxMjEwMTE2WjAzMTEwLwYDVQQD Eyg5NTlkYjBjODgyODJhZTQ1YzA3NzNmMzNkZWIzMjFiNjc5ZjA3ZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrUOiDVSOmQbKKBJ9FVt6AQSNwGQ 6E6F4UrvI3oAThsS0gGMJL5QdqIJOdFPWXgMfCVYhEE07+saPdn4e/r/z89IK5Jq +n0XxoHe/pkBe8SCABN7E1twSA3taNj4cxPVihnnw3datojwojFm+GDmWEbF1ruZ SWlCdwr7A4pnH/HL+ZE3+vPbJRGlkj96BR4/Kj/18T5USoYqiVcmlkSCC6Juhpfp +POiFiPQdnXskIxi+tbO2WJv3ntiwNSQQVCrH+qhfU6MnxjOo0F6qGLwNcc0AzVV L/mO/WTa9Z/lo3pnHmsYAjNHV1V/X/f1ZVWyoUjpM9toq/g8V8QwwBstGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWdsMiCgq5FwHc/M96zIbZ58H3zMB8GA1UdIwQY MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt OTExOTBhMDJkYjcwLzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSzDxgPA i9vTC10I9kMoZXL+Jk6mvatyX6Ja2a4uETKl1YNGw1QzLmcJn7TPJQeaLpW1tw0t MVRpgd9sVz5lgpv95VUmA0ZW7Y33MqpqBmLloXNr3mLd/Nog0scpIw6b24iWC5n0 51MQICp4v2RONikjWOh4NDFPQ7LILBLptLt06ogNjSP2R+vkEkScN+wp2js5vBFr gn849FsVymWDNk23lnEwakzn4C7grx1KV0vohDIBiAk6WQV+z0yjgIYaHNgZ6uk5 K08WYDLgYLmeG7BVI2mbLvvLAINGtCA//2I7ppHa/5jxi/HkVsnVmZVVsgxS0TZd /ctGCOu6iXxnHw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:17 2025 by rpki-client