This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json) Hash identifier: JAB7zibWSpkZ8OFKuVkc9mcqlSz7MW+th75aovCQQuY= Subject key identifier: 51:68:80:87:6D:EE:59:D1:AB:B9:FE:95:64:F1:D8:8D:C6:D8:8F:0E Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Certificate serial: 019B6C57B3F3C41F4029930C9CB4FE110697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft Manifest number: 0E95 Signing time: Mon 29 Dec 2025 23:00:45 +0000 Manifest this update: Mon 29 Dec 2025 23:00:45 +0000 Manifest next update: Tue 30 Dec 2025 23:00:45 +0000 Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=) 2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: FWzBXxh7Yx7+2ZfPXFfwe2C+RY+8HpRtv19NmOPVHoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:b3:f3:c4:1f:40:29:93:0c:9c:b4:fe:11:06:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Validity Not Before: Dec 29 23:00:45 2025 GMT Not After : Dec 30 23:00:45 2025 GMT Subject: CN=516880876dee59d1abb9fe9564f1d88dc6d88f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:d0:21:9b:38:49:b3:5d:62:7e:c3:68:38: 31:49:87:e1:bb:f3:56:00:3a:6b:b5:50:12:59:df: 5e:55:43:d3:8f:cc:c7:22:a1:8e:ab:37:c2:8a:5b: 9f:ca:e1:b0:4a:f6:47:c5:40:d9:bd:53:de:45:96: c9:74:44:7e:9a:78:53:12:24:ac:0e:81:43:e8:76: bd:ea:91:e3:53:f6:d5:5f:b8:da:89:03:17:44:42: 1a:e5:e6:8e:6a:58:7a:f2:14:42:a4:b4:84:eb:7b: fe:e5:60:30:9b:f0:53:52:7c:91:84:ba:f7:cf:e8: 45:1b:4e:90:b1:cd:26:49:88:d8:8b:06:32:38:ce: aa:58:61:49:36:bd:61:76:69:d7:46:16:7a:97:5a: 2e:80:c7:7d:02:10:b3:d7:b1:22:28:df:6a:7e:72: 57:a7:24:c3:73:53:82:a6:f3:a9:3c:4d:05:37:1f: 51:b7:e8:ce:5a:b7:2d:f7:fd:1e:21:52:7f:e0:dc: ab:4c:d1:b8:34:09:21:7e:3e:04:07:b8:99:31:dc: 13:5a:fb:67:8d:fc:38:e5:d8:c3:21:26:19:94:a3: f2:e8:84:f6:13:94:10:d4:ca:c0:58:c8:55:42:78: d1:f8:cb:97:6f:06:ac:b4:f8:67:ec:5f:ad:cf:b8: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:80:87:6D:EE:59:D1:AB:B9:FE:95:64:F1:D8:8D:C6:D8:8F:0E X509v3 Authority Key Identifier: keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:cf:27:79:01:fc:d6:37:c0:f1:f5:de:a7:de:26:dd:8e:0b: 84:cc:85:c1:f2:ee:8f:36:38:b3:72:c1:56:47:dc:88:02:4a: c6:53:7c:7f:79:42:3d:9f:58:58:61:54:ee:6e:11:c3:8f:aa: b8:57:61:6d:0a:d4:d6:6f:c3:2f:06:8f:6d:c0:3b:4a:59:c0: 3a:e3:10:c9:73:be:e0:94:c3:f3:6b:d6:aa:77:0f:18:03:1e: dd:a3:c5:9a:28:ce:9a:77:96:48:b9:53:60:76:c5:54:7c:7c: 89:95:b0:13:18:67:de:43:ff:a3:7d:16:bb:ce:a5:62:61:24: 07:4e:84:99:b0:0f:b8:4f:01:4b:39:4c:3a:f8:85:34:30:94: a2:f0:64:02:3d:43:e1:98:6f:93:a2:a1:51:cb:35:47:c1:9a: 00:1e:a6:84:73:20:82:a1:9a:c1:cd:af:c6:72:ac:c4:f3:04: 1c:c2:ca:93:6e:d8:d1:ba:47:f2:ef:21:64:99:60:92:7b:f9: 66:e1:0b:b8:b1:73:50:0e:69:2a:f9:f9:b2:63:57:2a:84:bd: f6:03:47:e0:a7:ad:89:24:63:72:a9:b6:76:6f:7d:bf:d5:3e: bc:d6:f8:a7:28:e0:17:e7:b8:55:59:de:b0:b4:ac:81:d8:44: 6c:d6:61:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV7PzxB9AKZMMnLT+EQaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0 MzRkYTkwHhcNMjUxMjI5MjMwMDQ1WhcNMjUxMjMwMjMwMDQ1WjAzMTEwLwYDVQQD Eyg1MTY4ODA4NzZkZWU1OWQxYWJiOWZlOTU2NGYxZDg4ZGM2ZDg4ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5jQIZs4SbNdYn7DaDgxSYfhu/NW ADprtVASWd9eVUPTj8zHIqGOqzfCilufyuGwSvZHxUDZvVPeRZbJdER+mnhTEiSs DoFD6Ha96pHjU/bVX7jaiQMXREIa5eaOalh68hRCpLSE63v+5WAwm/BTUnyRhLr3 z+hFG06Qsc0mSYjYiwYyOM6qWGFJNr1hdmnXRhZ6l1ougMd9AhCz17EiKN9qfnJX pyTDc1OCpvOpPE0FNx9Rt+jOWrct9/0eIVJ/4NyrTNG4NAkhfj4EB7iZMdwTWvtn jfw45djDISYZlKPy6IT2E5QQ1MrAWMhVQnjR+MuXbwastPhn7F+tz7iEpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFogIdt7lnRq7n+lWTx2I3G2I8OMB8GA1UdIwQY MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI88neQH8 1jfA8fXep94m3Y4LhMyFwfLujzY4s3LBVkfciAJKxlN8f3lCPZ9YWGFU7m4Rw4+q uFdhbQrU1m/DLwaPbcA7SlnAOuMQyXO+4JTD82vWqncPGAMe3aPFmijOmneWSLlT YHbFVHx8iZWwExhn3kP/o30Wu86lYmEkB06EmbAPuE8BSzlMOviFNDCUovBkAj1D 4Zhvk6KhUcs1R8GaAB6mhHMggqGawc2vxnKsxPMEHMLKk27Y0bpH8u8hZJlgknv5 ZuELuLFzUA5pKvn5smNXKoS99gNH4KetiSRjcqm2dm99v9U+vNb4pyjgF+e4VVne sLSsgdhEbNZhZw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:52 2025 by rpki-client