This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json) Hash identifier: oCwH3qL9u2LKcPQF8rWWwSF70HVaEFzWVf3rAWvX5JE= Subject key identifier: F1:D1:75:D0:BC:77:20:AE:A9:FD:BC:04:D7:82:27:A8:E8:B1:35:3B Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467 Certificate serial: 019B39B3ECD748F1C30BD904FFBDDA11B40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft Manifest number: 0C82 Signing time: Sat 20 Dec 2025 03:00:51 +0000 Manifest this update: Sat 20 Dec 2025 03:00:51 +0000 Manifest next update: Sun 21 Dec 2025 03:00:51 +0000 Files and hashes: 1: GIv286-shw2KQ9cHbSFZoILsF4Y.roa (hash: n0V2P6i8c6cHkiGOtEBdR3HlibGvUywK0wCobqEXaiI=) 2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: l1NStcHtXwGTmxhZ+6hgLvkvhzghKOG2tceoUC7MlIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ec:d7:48:f1:c3:0b:d9:04:ff:bd:da:11:b4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467 Validity Not Before: Dec 20 03:00:51 2025 GMT Not After : Dec 21 03:00:51 2025 GMT Subject: CN=f1d175d0bc7720aea9fdbc04d78227a8e8b1353b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:2c:8f:ae:16:36:8e:74:55:d5:49:fd:62: 0e:9f:41:00:85:8c:96:35:04:5a:46:3e:f3:cb:0f: f3:89:c2:ad:4d:f5:0b:9c:9a:6c:90:0d:7d:e7:05: 7d:dc:25:cc:63:00:3c:43:5a:e8:d0:50:21:e1:c2: 51:90:63:ac:7a:d4:c4:84:ad:3f:2a:30:aa:3f:dc: d8:e9:c7:53:a2:b6:c1:4e:02:81:9a:79:f5:b4:2b: 42:49:94:2a:c5:cd:b7:a0:e7:56:39:20:83:b9:81: ee:6f:c1:47:10:3d:42:e4:09:f6:61:82:09:9a:53: 2f:a2:de:a7:98:fa:d6:4d:2b:b2:7e:01:2c:22:60: 76:0e:ad:7f:f7:27:2c:40:7a:c3:de:4d:13:b5:36: a7:8d:54:0a:15:83:8d:1c:f1:ce:0e:91:05:11:30: e6:f8:ec:ce:5e:8e:7f:49:38:44:88:0f:6c:c1:46: 4b:76:2e:e7:ba:9c:51:fc:6f:3c:0f:9a:54:fc:0e: 02:7c:7b:27:97:69:98:57:3f:89:a4:89:c1:fe:7b: 55:21:a7:9f:9f:b5:2c:a4:63:0d:53:26:a7:f3:3e: 85:9d:54:d8:28:df:c3:42:0a:26:87:c4:da:5c:d4: 48:c4:91:70:e7:89:c1:bc:9b:4f:5c:20:58:0d:87: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D1:75:D0:BC:77:20:AE:A9:FD:BC:04:D7:82:27:A8:E8:B1:35:3B X509v3 Authority Key Identifier: keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ac:ec:4f:9e:37:55:03:d0:90:6e:40:3b:bb:1c:40:b9:c4: 37:f3:ec:5d:75:56:14:7a:d8:d1:d9:a8:b6:9e:d0:17:55:4f: e0:d4:1e:17:b3:c7:8b:49:36:50:fe:59:06:ea:1a:0e:12:0c: e7:2c:f0:9c:44:81:67:c7:c6:dd:5b:55:d1:72:d4:48:32:a8: 49:07:e5:0b:c8:dc:b4:77:a0:67:f6:e9:16:f0:d8:a2:b5:57: 90:d9:9c:58:0b:ef:fc:cc:82:0a:1e:7f:c4:c8:89:68:63:ab: db:9a:91:ba:97:dc:61:3e:60:5d:c1:12:21:09:84:d8:c3:c3: af:c0:cc:ec:35:6f:02:28:1c:77:fd:a5:02:72:d8:ea:8d:98: bd:13:d5:88:77:3c:bc:61:36:7b:a9:af:44:57:2d:5f:f5:21: d0:e0:32:26:64:74:81:08:5b:d9:dd:52:21:38:d0:20:b7:9d: b6:2d:cb:68:2b:56:2f:bd:3a:50:9a:8f:70:dd:99:a9:1c:5b: 87:b7:a5:1c:d2:7d:78:e8:11:aa:c0:38:c3:e0:43:5e:e8:71: 3a:a5:e6:bd:99:86:b1:a8:f2:d4:71:ea:12:44:d7:46:33:19: 0f:e9:28:6f:fb:bb:e8:22:3d:e0:3a:a5:9e:26:55:54:df:d4: 77:74:00:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+zXSPHDC9kE/73aEbQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDkyZWNjMzdiYWUyYjlmODFkYTAyOTM4NTgxN2Q0MzNj NTA0NjcwHhcNMjUxMjIwMDMwMDUxWhcNMjUxMjIxMDMwMDUxWjAzMTEwLwYDVQQD EyhmMWQxNzVkMGJjNzcyMGFlYTlmZGJjMDRkNzgyMjdhOGU4YjEzNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYIsj64WNo50VdVJ/WIOn0EAhYyW NQRaRj7zyw/zicKtTfULnJpskA195wV93CXMYwA8Q1ro0FAh4cJRkGOsetTEhK0/ KjCqP9zY6cdTorbBTgKBmnn1tCtCSZQqxc23oOdWOSCDuYHub8FHED1C5An2YYIJ mlMvot6nmPrWTSuyfgEsImB2Dq1/9ycsQHrD3k0TtTanjVQKFYONHPHODpEFETDm +OzOXo5/SThEiA9swUZLdi7nupxR/G88D5pU/A4CfHsnl2mYVz+JpInB/ntVIaef n7UspGMNUyan8z6FnVTYKN/DQgomh8TaXNRIxJFw54nBvJtPXCBYDYevnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHRddC8dyCuqf28BNeCJ6josTU7MB8GA1UdIwQY MBaAFJdJLsw3uuK5+B2gKThYF9QzxQRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQt ZTlmMWM1OTFjZWRjLzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQtZTlmMWM1OTFjZWRj LzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArazsT543 VQPQkG5AO7scQLnEN/PsXXVWFHrY0dmotp7QF1VP4NQeF7PHi0k2UP5ZBuoaDhIM 5yzwnESBZ8fG3VtV0XLUSDKoSQflC8jctHegZ/bpFvDYorVXkNmcWAvv/MyCCh5/ xMiJaGOr25qRupfcYT5gXcESIQmE2MPDr8DM7DVvAigcd/2lAnLY6o2YvRPViHc8 vGE2e6mvRFctX/Uh0OAyJmR0gQhb2d1SITjQILedti3LaCtWL706UJqPcN2ZqRxb h7elHNJ9eOgRqsA4w+BDXuhxOqXmvZmGsajy1HHqEkTXRjMZD+kob/u76CI94Dql niZVVN/Ud3QAtw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:05:06 2025 by rpki-client