This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: 6VZYNVz15zkYQ401tJAEVw9D+hwr9FlIyYu0ktT/9Ac= Subject key identifier: D7:C8:A9:01:FB:70:2C:79:F6:55:37:FD:66:8D:35:8C:C7:69:C7:BB Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019B38339C2C486793B204B987FA82044C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 183F Signing time: Fri 19 Dec 2025 20:01:04 +0000 Manifest this update: Fri 19 Dec 2025 20:01:04 +0000 Manifest next update: Sat 20 Dec 2025 20:01:04 +0000 Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=) 2: BRHlUoVs4kTAJJzJpj2fQx42B0g.roa (hash: v4G5+buvZ/BhLTazPK7WGSu5PzG/f4FLXfPXo1ZLswM=) 3: QE-0-GHrWq5bT_oQzBuxsGZ0jgg.roa (hash: Whew7oC4VAA4M2out/vzMuiYeBE1U3ZiPJv+gEs+1dU=) 4: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=) 5: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=) 6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: pFC3/bIB86bgDBpZwWVqD1xJvWALaB4qW2mBIjZCRbs=) 7: sCbiretHkvpeYn6X-YO7yjpBd3I.roa (hash: m4o26nuHfI88h55NDmirhyFa20WJfqvTKSftUFTfvL0=) 8: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=) 9: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:9c:2c:48:67:93:b2:04:b9:87:fa:82:04:4c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Dec 19 20:01:04 2025 GMT Not After : Dec 20 20:01:04 2025 GMT Subject: CN=d7c8a901fb702c79f65537fd668d358cc769c7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:71:d2:5b:99:b5:ac:de:aa:22:1b:9f:7e: d1:48:0c:ee:af:cf:22:e8:cb:56:a5:a1:47:0d:f6: 84:70:0f:a7:74:38:96:42:28:3d:81:9a:5a:b8:0c: 5d:f9:19:6f:33:fc:ff:2f:8f:20:7d:95:5e:7a:68: 13:da:c7:17:6f:83:b7:21:40:2c:d6:94:7a:ae:7d: b2:be:36:54:83:1b:74:5e:65:2c:bc:f3:87:3f:ed: 29:c0:c8:fd:0e:b6:21:27:8e:2e:47:9e:6a:da:32: c4:ce:31:c0:74:9c:d7:fc:51:35:9c:ab:13:f6:fb: d9:3f:a0:e7:46:14:f0:35:b6:0e:2e:4b:08:58:4d: 87:59:93:da:b8:36:f1:0a:bd:8a:f3:af:33:e2:07: 0d:65:fc:da:dc:29:28:de:e8:51:c4:3d:12:ee:a0: 70:31:b5:b0:12:a2:22:06:87:97:67:2f:ef:d1:76: 84:9a:d7:8e:af:24:18:c4:b9:5d:4d:63:ff:3b:ec: 2a:77:33:9d:fb:55:95:5a:29:d8:c0:6b:3c:36:92: 97:19:de:ca:79:3b:5f:55:49:c4:8f:be:6d:0c:e7: 4d:ba:94:6a:e8:06:89:e0:33:b4:86:5e:96:5d:30: df:b5:42:49:24:20:72:92:94:24:51:75:8e:47:be: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C8:A9:01:FB:70:2C:79:F6:55:37:FD:66:8D:35:8C:C7:69:C7:BB X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:90:0a:e4:c8:7c:ba:27:8a:69:d8:15:1a:a3:03:b7:ce: cf:b0:68:09:d8:79:2c:e6:91:79:be:e7:95:1f:04:fe:34:2e: fd:85:e9:3d:c8:18:da:3c:b3:bc:0d:e3:a3:6d:1a:5f:d6:e2: 1a:b7:c9:5c:a0:df:a3:46:46:92:cc:1a:45:27:36:2a:97:09: 98:92:e4:43:aa:26:5a:59:64:cb:74:40:a0:22:13:eb:63:46: ea:f8:2f:04:46:bf:8b:0e:81:46:e5:2e:d9:97:82:82:95:e2: 5f:fb:64:0a:f0:24:ae:81:49:01:e2:95:da:90:17:4b:ae:1c: 17:65:52:1f:5c:17:b7:a9:8d:f4:2e:3e:c6:bd:49:66:2b:de: 1a:70:5f:e6:b9:a1:48:21:47:11:c4:3f:a0:8c:0a:7f:7e:54: 0c:78:36:92:4c:a5:20:16:bb:a8:93:02:86:e5:f1:b7:c7:8b: 2c:92:da:2d:17:75:79:be:0f:a3:7b:01:de:75:a9:3c:b2:89: d3:0f:7d:b1:0a:64:f7:64:4f:52:7a:df:6a:96:38:db:26:fb: be:74:cd:00:ca:68:36:db:73:85:34:d2:0a:67:bf:33:ca:12: 40:10:12:6b:eb:5d:95:de:87:e1:70:70:7a:90:ca:d1:8f:f9: 04:46:e3:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5wsSGeTsgS5h/qCBEwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjUxMjE5MjAwMTA0WhcNMjUxMjIwMjAwMTA0WjAzMTEwLwYDVQQD EyhkN2M4YTkwMWZiNzAyYzc5ZjY1NTM3ZmQ2NjhkMzU4Y2M3NjljN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxtx0luZtazeqiIbn37RSAzur88i 6MtWpaFHDfaEcA+ndDiWQig9gZpauAxd+RlvM/z/L48gfZVeemgT2scXb4O3IUAs 1pR6rn2yvjZUgxt0XmUsvPOHP+0pwMj9DrYhJ44uR55q2jLEzjHAdJzX/FE1nKsT 9vvZP6DnRhTwNbYOLksIWE2HWZPauDbxCr2K868z4gcNZfza3Cko3uhRxD0S7qBw MbWwEqIiBoeXZy/v0XaEmteOryQYxLldTWP/O+wqdzOd+1WVWinYwGs8NpKXGd7K eTtfVUnEj75tDOdNupRq6AaJ4DO0hl6WXTDftUJJJCBykpQkUXWOR75zQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfIqQH7cCx59lU3/WaNNYzHace7MB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOKQCuTI fLonimnYFRqjA7fOz7BoCdh5LOaReb7nlR8E/jQu/YXpPcgY2jyzvA3jo20aX9bi GrfJXKDfo0ZGkswaRSc2KpcJmJLkQ6omWllky3RAoCIT62NG6vgvBEa/iw6BRuUu 2ZeCgpXiX/tkCvAkroFJAeKV2pAXS64cF2VSH1wXt6mN9C4+xr1JZiveGnBf5rmh SCFHEcQ/oIwKf35UDHg2kkylIBa7qJMChuXxt8eLLJLaLRd1eb4Po3sB3nWpPLKJ 0w99sQpk92RPUnrfapY42yb7vnTNAMpoNttzhTTSCme/M8oSQBASa+tdld6H4XBw epDK0Y/5BEbjrA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:18:53 2025 by rpki-client