This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json) Hash identifier: i9atH6EmKEvtYi57sZY6mpWXwGAl+EpIe5UAAx7gK1E= Subject key identifier: 03:C1:AC:C7:C3:66:4A:71:11:26:DB:A4:76:59:72:C5:43:D9:39:7B Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d Certificate serial: 019B44A608D8F34354C86320BA4AA0B22BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 06:01:30 +0000 Manifest this update: Mon 22 Dec 2025 06:01:30 +0000 Manifest next update: Tue 23 Dec 2025 06:01:30 +0000 Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: iMCO4Rjy6Zif00ZdZuU/LiOS8COKy6tF7TxwI4A+Hqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:08:d8:f3:43:54:c8:63:20:ba:4a:a0:b2:2b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d Validity Not Before: Dec 22 06:01:30 2025 GMT Not After : Dec 23 06:01:30 2025 GMT Subject: CN=03c1acc7c3664a711126dba4765972c543d9397b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fc:80:04:a1:8d:b5:94:94:8a:24:74:aa:4a: 7f:0b:d5:2e:06:f7:e7:c8:62:72:c8:77:df:3a:10: ad:1d:3b:8f:21:6b:8b:28:89:5e:91:d7:a9:cc:4a: 01:76:96:22:a6:5e:45:92:04:55:cc:9c:ab:f6:99: 2e:40:8e:f8:e4:eb:89:85:d2:3a:ca:ab:d8:29:2e: 6a:d5:cd:47:04:07:c2:18:26:86:a7:50:03:79:81: df:5e:77:50:a5:60:5e:f4:20:4e:0a:06:0e:dd:f4: 88:14:e4:e7:c3:a5:47:05:14:da:33:e4:4a:9e:82: 4f:cb:b2:85:03:e5:a1:f1:41:c7:60:ad:9b:8a:e2: fe:3e:05:ac:68:d9:41:c8:a5:aa:bd:53:f5:e3:fd: 3d:42:86:d6:05:69:27:b1:d2:8e:3e:7b:b9:35:23: b8:0f:3d:47:c6:99:66:e8:dc:19:92:e1:8b:32:6e: be:4f:a6:02:cb:b8:48:66:86:4a:8e:f8:98:a6:03: 9d:4c:63:40:8c:89:ee:b1:e9:4f:07:73:5e:04:2b: aa:bb:da:69:eb:c7:d9:f6:2e:c8:73:3b:c3:7e:cd: 4b:cf:17:98:f5:0f:b6:29:7c:c4:18:a4:77:9f:ec: 00:26:f7:bc:d0:fb:52:f0:40:74:7c:f8:f0:41:45: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C1:AC:C7:C3:66:4A:71:11:26:DB:A4:76:59:72:C5:43:D9:39:7B X509v3 Authority Key Identifier: keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:14:ff:e0:4a:8e:c8:db:36:72:8e:49:6a:68:37:36:00:fc: 09:4d:e6:fe:f1:a0:e5:80:e4:2b:8c:17:ab:86:8a:d3:41:08: d9:05:27:98:34:7f:9d:4f:b9:93:43:90:48:ba:34:42:4a:97: e5:74:dc:0a:d1:9c:90:68:cd:1c:0f:4d:e5:62:d6:44:d3:91: 8d:ec:01:20:a7:9b:e2:46:fc:3e:41:28:f5:f2:5e:27:7b:8a: 87:de:ca:81:0a:70:c9:c8:01:5b:19:09:14:30:d3:a9:e5:fe: 6d:67:df:89:09:e5:53:3d:f9:f1:ae:f3:3b:12:99:f1:db:05: 98:d7:25:e2:0d:e7:76:2a:57:a8:b4:f0:87:84:ac:0d:22:e1: a6:c7:27:71:0b:72:0d:7a:72:86:36:64:88:30:da:07:a2:59: 90:5b:68:98:fa:7d:1c:9f:e3:c4:02:92:72:87:5c:a9:27:29: af:ec:d0:9d:3b:4a:ae:39:38:0e:ac:08:9e:7a:ab:c0:69:38: 85:dc:87:32:e0:f1:df:db:a6:65:8b:6a:e6:ec:db:16:54:0a: 66:8d:b9:23:8b:14:53:b9:61:8c:33:26:a2:b5:08:ba:17:ed: 34:33:de:31:dd:8e:97:9e:ac:ec:8c:6e:a5:13:75:b7:9b:b3: 7f:b7:3c:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpgjY80NUyGMgukqgsivsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGMyYzU1ZGM4ZWI5OTdiZjU5MTIxZDRjMmZmZDU0NDRh MjJlMmQwHhcNMjUxMjIyMDYwMTMwWhcNMjUxMjIzMDYwMTMwWjAzMTEwLwYDVQQD EygwM2MxYWNjN2MzNjY0YTcxMTEyNmRiYTQ3NjU5NzJjNTQzZDkzOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fyABKGNtZSUiiR0qkp/C9UuBvfn yGJyyHffOhCtHTuPIWuLKIlekdepzEoBdpYipl5FkgRVzJyr9pkuQI745OuJhdI6 yqvYKS5q1c1HBAfCGCaGp1ADeYHfXndQpWBe9CBOCgYO3fSIFOTnw6VHBRTaM+RK noJPy7KFA+Wh8UHHYK2biuL+PgWsaNlByKWqvVP14/09QobWBWknsdKOPnu5NSO4 Dz1Hxplm6NwZkuGLMm6+T6YCy7hIZoZKjviYpgOdTGNAjInuselPB3NeBCuqu9pp 68fZ9i7IczvDfs1LzxeY9Q+2KXzEGKR3n+wAJve80PtS8EB0fPjwQUV+rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPBrMfDZkpxESbbpHZZcsVD2Tl7MB8GA1UdIwQY MBaAFJaMLFXcjrmXv1kSHUwv/VREoi4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYt MTU0ZTU5OWZkMzVmLzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYtMTU0ZTU5OWZkMzVm LzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRT/4EqO yNs2co5Jamg3NgD8CU3m/vGg5YDkK4wXq4aK00EI2QUnmDR/nU+5k0OQSLo0QkqX 5XTcCtGckGjNHA9N5WLWRNORjewBIKeb4kb8PkEo9fJeJ3uKh97KgQpwycgBWxkJ FDDTqeX+bWffiQnlUz358a7zOxKZ8dsFmNcl4g3ndipXqLTwh4SsDSLhpscncQty DXpyhjZkiDDaB6JZkFtomPp9HJ/jxAKScodcqScpr+zQnTtKrjk4DqwInnqrwGk4 hdyHMuDx39umZYtq5uzbFlQKZo25I4sUU7lhjDMmorUIuhftNDPeMd2Ol56s7Ixu pRN1t5uzf7c8ww== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:46 2025 by rpki-client