This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json) Hash identifier: /Tsgb5XOJtvmwa0ijQapGVTAMn+AP9lC6pxRCj7NpOA= Subject key identifier: 30:E2:ED:43:88:A2:CD:F2:C9:FA:22:4F:E8:55:40:D5:94:04:19:98 Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Certificate serial: 019B72230D5F67D27B47A3373B120FCAB6E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft Manifest number: 0E98 Signing time: Wed 31 Dec 2025 02:00:58 +0000 Manifest this update: Wed 31 Dec 2025 02:00:58 +0000 Manifest next update: Thu 01 Jan 2026 02:00:58 +0000 Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=) 2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: Hnx/zIGGZrjYyoOw27FtkzhZevFBIn4hVGwaswN5y/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:23:0d:5f:67:d2:7b:47:a3:37:3b:12:0f:ca:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Validity Not Before: Dec 31 02:00:58 2025 GMT Not After : Jan 1 02:00:58 2026 GMT Subject: CN=30e2ed4388a2cdf2c9fa224fe85540d594041998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:55:65:66:ee:45:94:d1:35:9a:90:d1:c6: b5:73:6e:08:65:c6:b0:db:ae:e0:18:ce:b8:ab:e7: 8a:a0:9b:ab:49:5f:be:ae:85:7d:fc:e8:96:e5:a4: 20:7b:91:3c:2e:6d:60:b9:b9:5f:99:f4:58:57:19: 0b:9c:9e:c8:a2:97:bd:ce:8b:6c:eb:f0:5f:cf:46: 93:c5:44:14:4e:fe:8c:df:65:15:b7:e3:6c:e0:8c: e9:5f:84:5c:9c:8c:34:05:69:73:7f:8e:1e:ef:84: f4:49:f7:21:15:e7:ad:7d:65:44:9c:c1:b9:49:bd: b9:bd:c6:97:b1:95:e6:ad:36:38:05:7b:0b:52:3f: df:1e:8f:6a:3f:64:cf:b4:9b:3a:92:01:d3:d4:e1: 61:71:3c:0c:64:1a:b1:72:46:61:54:45:c7:70:cd: d5:db:fd:95:b1:a9:4f:cf:eb:64:a6:db:40:6f:91: 0c:31:90:15:b2:15:14:fb:9f:18:f2:59:d6:67:41: 84:7d:96:07:3b:7e:7f:b4:a7:8e:20:7e:fc:30:ec: c3:6c:a0:7c:3e:5d:fd:99:8b:83:e1:1b:c0:8b:68: cd:49:96:71:1d:e0:df:4d:18:ad:b6:33:8e:a4:19: 4f:f6:04:d8:05:c4:0b:71:d2:36:f0:f2:93:29:99: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E2:ED:43:88:A2:CD:F2:C9:FA:22:4F:E8:55:40:D5:94:04:19:98 X509v3 Authority Key Identifier: keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:1b:ea:0a:21:64:9e:e4:58:3c:8d:fa:f1:da:c6:f1:84: 06:e2:92:67:43:8e:ec:3b:32:c9:a5:cd:df:35:bc:35:5e:60: 43:37:18:39:7f:81:4b:cc:06:9c:e6:de:9e:27:77:11:57:0f: 17:c1:32:29:68:02:aa:32:9b:8d:08:5d:dc:36:d0:f5:2d:8a: 2f:a5:8c:b3:a4:b0:f7:00:5c:ec:2d:46:12:da:b2:2b:51:b4: ea:5d:31:76:6f:f8:0a:06:a4:62:76:db:78:17:84:05:b6:8f: 45:35:18:f1:28:e3:e5:44:b6:8b:d4:11:fb:38:24:f1:f9:93: 95:37:bb:26:db:75:72:3b:69:17:7c:0f:fe:3e:d5:3a:50:56: c7:b8:54:5c:42:6a:dd:9c:89:e5:d0:5e:36:37:c1:4f:1f:09: f1:3e:05:58:30:38:81:bb:05:01:8d:02:84:e8:98:8c:0f:f1: ab:9f:7b:8d:a9:4a:0d:27:b1:db:ba:98:f7:2a:45:c6:55:57: 74:33:12:79:cb:b0:d3:17:22:45:9e:3b:d0:f6:dd:0b:b0:fb: d0:71:9b:7b:3d:42:a8:fb:1a:af:f0:21:67:a4:78:72:92:dc: cb:0b:7d:8c:e1:1a:69:2f:fa:5f:08:06:f7:ef:ec:a8:09:1e: 8b:6b:26:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIw1fZ9J7R6M3OxIPyrbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0 MzRkYTkwHhcNMjUxMjMxMDIwMDU4WhcNMjYwMTAxMDIwMDU4WjAzMTEwLwYDVQQD EygzMGUyZWQ0Mzg4YTJjZGYyYzlmYTIyNGZlODU1NDBkNTk0MDQxOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmRVZWbuRZTRNZqQ0ca1c24IZcaw 267gGM64q+eKoJurSV++roV9/OiW5aQge5E8Lm1gublfmfRYVxkLnJ7Iope9zots 6/Bfz0aTxUQUTv6M32UVt+Ns4IzpX4RcnIw0BWlzf44e74T0SfchFeetfWVEnMG5 Sb25vcaXsZXmrTY4BXsLUj/fHo9qP2TPtJs6kgHT1OFhcTwMZBqxckZhVEXHcM3V 2/2VsalPz+tkpttAb5EMMZAVshUU+58Y8lnWZ0GEfZYHO35/tKeOIH78MOzDbKB8 Pl39mYuD4RvAi2jNSZZxHeDfTRittjOOpBlP9gTYBcQLcdI28PKTKZmVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDi7UOIos3yyfoiT+hVQNWUBBmYMB8GA1UdIwQY MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGkb6goh ZJ7kWDyN+vHaxvGEBuKSZ0OO7DsyyaXN3zW8NV5gQzcYOX+BS8wGnObenid3EVcP F8EyKWgCqjKbjQhd3DbQ9S2KL6WMs6Sw9wBc7C1GEtqyK1G06l0xdm/4CgakYnbb eBeEBbaPRTUY8Sjj5US2i9QR+zgk8fmTlTe7Jtt1cjtpF3wP/j7VOlBWx7hUXEJq 3ZyJ5dBeNjfBTx8J8T4FWDA4gbsFAY0ChOiYjA/xq597jalKDSex27qY9ypFxlVX dDMSecuw0xciRZ470PbdC7D70HGbez1CqPsar/AhZ6R4cpLcywt9jOEaaS/6XwgG 9+/sqAkei2sm0w== -----END CERTIFICATE-----Generated at Wed Dec 31 05:59:34 2025 by rpki-client