This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json) Hash identifier: iaIUmBdeyiq194t6aQxaw4paSzq4cpNnvi/Vk9+51GM= Subject key identifier: BA:12:64:A8:8D:70:11:26:BD:DE:45:60:82:C7:75:C5:79:6E:B1:D2 Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4 Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4 Certificate serial: 019B2F9EBE3A7E76182FD96213C08983AAC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 04:01:31 +0000 Manifest this update: Thu 18 Dec 2025 04:01:31 +0000 Manifest next update: Fri 19 Dec 2025 04:01:31 +0000 Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: MLB7rFGwUDEHf++VTsdoWdlsMC3UE6i1KrZM/s8Sjqo=) 2: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (hash: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:be:3a:7e:76:18:2f:d9:62:13:c0:89:83:aa:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4 Validity Not Before: Dec 18 04:01:31 2025 GMT Not After : Dec 19 04:01:31 2025 GMT Subject: CN=ba1264a88d701126bdde456082c775c5796eb1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:0a:76:a6:f4:91:e9:c5:95:53:cf:12:d9: 7b:da:0a:86:d5:cd:50:fd:8d:7e:86:99:99:4d:83: 93:4e:ed:fb:1b:b2:7e:b8:c8:9e:e7:7c:0c:9b:40: 6d:d7:c7:55:8c:f6:43:20:bf:9e:66:6c:64:40:ce: a5:af:42:0e:d3:35:e5:73:6c:72:55:82:e4:ff:e1: ab:52:3a:ff:73:9e:f6:4e:d7:e5:5a:7c:e7:68:2d: 8d:63:9f:f2:74:fd:cd:de:d1:4b:8a:43:1f:74:77: 92:c4:0a:11:d7:c6:41:0f:64:4f:f4:61:42:a7:05: 68:a7:22:75:d2:f5:f7:dc:80:83:91:76:0e:d0:24: 17:15:34:a1:7c:05:e6:1f:16:5e:68:86:17:6f:71: 8a:47:46:36:8c:97:0b:7e:32:33:a2:0c:36:6f:c1: 58:f9:ca:7f:77:50:c3:4b:70:23:1b:25:b0:32:a7: ec:2f:1c:be:ac:8e:1c:fe:94:c7:4f:f0:8e:49:f7: 62:15:79:1b:e2:0a:14:77:f6:8b:14:35:91:db:15: 94:ae:c6:3c:78:e1:a3:70:47:a1:e7:32:3b:66:c6: 49:9b:1c:d0:46:b9:93:a8:ce:de:e0:23:a6:02:01: a7:86:da:42:d5:61:fd:b7:7e:34:41:6e:e9:5b:62: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:12:64:A8:8D:70:11:26:BD:DE:45:60:82:C7:75:C5:79:6E:B1:D2 X509v3 Authority Key Identifier: keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:49:8e:05:2e:6a:d4:cd:71:ce:60:86:d9:ef:0c:25:ee:58: dd:9e:3a:cf:87:6f:45:01:2b:bf:41:e5:17:82:93:7b:bb:76: c2:dd:30:6a:60:ba:95:ed:11:69:45:73:a1:13:26:a4:ba:e7: 25:2a:e9:27:a4:1d:f5:93:97:3c:7e:93:c1:85:5e:a3:8d:4c: 96:7a:c9:96:32:94:ca:44:c3:e7:1e:9e:24:48:32:9f:5c:e9: cf:be:7d:48:88:54:43:9b:a3:77:4b:e4:14:47:4c:a5:b0:76: d7:7a:a1:32:e4:71:92:36:64:e5:25:e1:0c:0d:08:46:45:0f: b0:11:bd:8a:f2:b0:fd:4b:86:cd:68:22:8e:b0:df:a6:9e:1b: 6b:cb:bc:4c:1b:2a:2b:a6:33:ad:5c:3c:38:56:b0:41:31:70: 1e:9a:ad:32:e3:03:19:53:0c:fb:bd:96:d9:32:44:ef:27:0d: 44:2e:f1:35:f5:a0:a1:cc:8a:8b:f2:d7:03:1c:d6:bb:99:8a: 70:7d:34:79:9a:a9:e8:7f:a4:08:d7:b5:23:0c:ec:a0:7a:f9: 65:fa:e3:84:c7:c1:93:b3:db:fc:ea:72:b2:aa:0b:0b:07:e5: d2:a4:5f:0e:4a:69:a5:ba:cd:18:d2:0c:ef:32:ba:9a:36:8f: e9:8c:e1:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnr46fnYYL9liE8CJg6rDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjkwNGRmNWVlYzIyMTZiMzQzMDE2YzVjYjI0YmI5MGE0 M2QzYTQwHhcNMjUxMjE4MDQwMTMxWhcNMjUxMjE5MDQwMTMxWjAzMTEwLwYDVQQD EyhiYTEyNjRhODhkNzAxMTI2YmRkZTQ1NjA4MmM3NzVjNTc5NmViMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CIKdqb0kenFlVPPEtl72gqG1c1Q /Y1+hpmZTYOTTu37G7J+uMie53wMm0Bt18dVjPZDIL+eZmxkQM6lr0IO0zXlc2xy VYLk/+GrUjr/c572TtflWnznaC2NY5/ydP3N3tFLikMfdHeSxAoR18ZBD2RP9GFC pwVopyJ10vX33ICDkXYO0CQXFTShfAXmHxZeaIYXb3GKR0Y2jJcLfjIzogw2b8FY +cp/d1DDS3AjGyWwMqfsLxy+rI4c/pTHT/COSfdiFXkb4goUd/aLFDWR2xWUrsY8 eOGjcEeh5zI7ZsZJmxzQRrmTqM7e4COmAgGnhtpC1WH9t340QW7pW2Jw7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoSZKiNcBEmvd5FYILHdcV5brHSMB8GA1UdIwQY MBaAFNC5BN9e7CIWs0MBbFyyS7kKQ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUt NDFhODRmNDE5YWM1LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUtNDFhODRmNDE5YWM1 LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7UmOBS5q 1M1xzmCG2e8MJe5Y3Z46z4dvRQErv0HlF4KTe7t2wt0wamC6le0RaUVzoRMmpLrn JSrpJ6Qd9ZOXPH6TwYVeo41MlnrJljKUykTD5x6eJEgyn1zpz759SIhUQ5ujd0vk FEdMpbB213qhMuRxkjZk5SXhDA0IRkUPsBG9ivKw/UuGzWgijrDfpp4ba8u8TBsq K6YzrVw8OFawQTFwHpqtMuMDGVMM+72W2TJE7ycNRC7xNfWgocyKi/LXAxzWu5mK cH00eZqp6H+kCNe1IwzsoHr5ZfrjhMfBk7Pb/OpysqoLCwfl0qRfDkpppbrNGNIM 7zK6mjaP6YzhoA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:14:31 2025 by rpki-client