This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft File: loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json) Hash identifier: mSqvnuWSIGGtHvBGgTy617IBDQEaS6mMZu1WFO95b2E= Subject key identifier: 68:4F:67:80:86:AE:12:AA:0B:4D:91:99:F7:D4:84:B8:04:1B:28:66 Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 Certificate issuer: /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Certificate serial: 019B72234EF6FE008DB38DEC8AE869FA79D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft Manifest number: 0245 Signing time: Wed 31 Dec 2025 02:01:15 +0000 Manifest this update: Wed 31 Dec 2025 02:01:15 +0000 Manifest next update: Thu 01 Jan 2026 02:01:15 +0000 Files and hashes: 1: F7JL5bHYyLaweW8pONIwm4V1Ta8.roa (hash: 9Al0+nQsmlduPmazSDY0bBkTJLPuHl1nJV+djdoKlfw=) 2: aOIjfYULj8ZZW-4gX-UQwdrDQ9U.roa (hash: 0raPVOn63vL6rgNpBZdFkEjdsenkXzmQ/PYsO0nF2sE=) 3: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: Z4T9W1um82N9DYjv92YW4nwGgdfZhAqAysfvZWsM/L8=) 4: qxk1xepxwGG51OB8xsnLC_37Uaw.roa (hash: ypZE1fVxTf8ts+4DLxa1x+J1+KV7fqtGzn+ax6Dq94A=) 5: w1BzHYlYCb3EG4ztspZKX_15RAY.roa (hash: ASsa3u4RFIDCrpyjiaJAOUJvMGU5bhKQs1/vB/xTB6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:23:4e:f6:fe:00:8d:b3:8d:ec:8a:e8:69:fa:79:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Validity Not Before: Dec 31 02:01:15 2025 GMT Not After : Jan 1 02:01:15 2026 GMT Subject: CN=684f678086ae12aa0b4d9199f7d484b8041b2866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:2b:17:8c:58:d0:6a:b5:95:ce:f9:38:ee: 43:9e:d4:f9:55:45:5b:ad:fc:87:1d:97:55:4e:3a: ac:0d:ee:59:80:a2:d0:83:3c:99:be:d0:af:61:a3: 76:12:29:19:43:7c:90:52:68:9c:4a:33:d8:74:b9: 49:e5:f7:bb:d3:9d:6e:d9:68:90:b7:4e:f3:4c:b9: e6:61:06:c9:20:bd:8a:d4:41:90:e0:62:36:a1:7d: c7:f4:07:49:2b:22:03:28:60:e5:35:49:6b:89:d4: 1f:e8:4a:f5:8f:7b:1c:39:c5:62:2a:8a:01:89:cf: 4d:22:ae:82:37:84:21:27:67:e6:83:7b:e8:9e:34: 3d:7b:7c:21:f6:1c:a7:b1:01:b3:e4:72:5a:67:a8: 4e:3c:5f:29:51:62:4b:d0:a9:b6:3f:7e:8d:14:b8: af:57:bb:8b:9f:e8:55:80:bf:bb:57:b2:0a:d5:2b: 41:b8:91:9f:1c:31:2e:69:dc:5c:80:95:8a:6a:b2: 63:ac:c3:cd:0f:63:64:d2:fa:1d:74:0c:ac:68:0f: bb:76:97:22:a5:e2:eb:89:47:cb:84:cf:02:d9:df: 51:80:f7:e4:91:ad:31:0c:17:c4:f7:dc:d8:8a:26: cc:69:42:6a:59:9d:07:98:c9:4a:8f:b6:a3:61:4b: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4F:67:80:86:AE:12:AA:0B:4D:91:99:F7:D4:84:B8:04:1B:28:66 X509v3 Authority Key Identifier: keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a5:bd:c8:37:14:31:bb:89:18:6b:ba:22:a4:16:96:11:e3: 23:67:19:5f:a5:81:85:71:6c:17:ae:1b:ea:71:13:9d:2a:4a: e1:ba:82:50:43:f4:08:d1:6c:f6:3c:26:a3:b4:c8:10:5e:ac: bd:cc:9a:68:3e:1f:d3:09:90:cc:0a:02:5a:c2:f9:59:3c:d9: ba:78:83:ac:a5:8e:c3:69:61:3a:44:29:7b:ea:72:dc:59:04: b7:7e:ab:f8:30:0f:9d:a9:4c:f0:b7:67:79:5b:c9:d5:af:e4: 7a:d9:bc:0b:4f:a3:b2:20:42:b7:39:ae:06:de:5c:5c:87:42: a2:15:b6:4c:36:0f:06:91:1c:df:46:74:92:81:f1:aa:cf:34: b7:ed:cc:4f:87:81:ba:1f:93:5a:78:f2:55:1f:be:c7:67:51: fb:25:54:23:75:d4:18:f0:f3:fe:ff:91:0b:32:60:4d:d1:e8: 39:92:c0:08:ac:0d:6a:a5:24:be:53:f4:66:0a:df:21:90:43: 1f:4e:28:18:76:28:7a:a9:82:0b:b9:0b:41:b1:d2:aa:39:3e: 80:3d:b9:ee:a2:24:db:f9:ad:d3:de:23:f4:47:d2:07:bf:93: 9c:fe:7a:1c:92:43:78:78:e9:b5:bf:c2:70:7e:51:cf:9f:d6: cd:1e:6b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyI072/gCNs43siuhp+nnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ODFmYzhjNzMzN2M2YTFkMjBiODQ4MDBkZjg2MmEyN2U1 ZmRiZDcwHhcNMjUxMjMxMDIwMTE1WhcNMjYwMTAxMDIwMTE1WjAzMTEwLwYDVQQD Eyg2ODRmNjc4MDg2YWUxMmFhMGI0ZDkxOTlmN2Q0ODRiODA0MWIyODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+4rF4xY0Gq1lc75OO5DntT5VUVb rfyHHZdVTjqsDe5ZgKLQgzyZvtCvYaN2EikZQ3yQUmicSjPYdLlJ5fe7051u2WiQ t07zTLnmYQbJIL2K1EGQ4GI2oX3H9AdJKyIDKGDlNUlridQf6Er1j3scOcViKooB ic9NIq6CN4QhJ2fmg3vonjQ9e3wh9hynsQGz5HJaZ6hOPF8pUWJL0Km2P36NFLiv V7uLn+hVgL+7V7IK1StBuJGfHDEuadxcgJWKarJjrMPND2Nk0voddAysaA+7dpci peLriUfLhM8C2d9RgPfkka0xDBfE99zYiibMaUJqWZ0HmMlKj7ajYUuhBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhPZ4CGrhKqC02RmffUhLgEGyhmMB8GA1UdIwQY MBaAFJaB/IxzN8ah0guEgA34YqJ+X9vXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzIt NTNkOTYwOTlkN2IxLzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzItNTNkOTYwOTlkN2Ix LzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqW9yDcU MbuJGGu6IqQWlhHjI2cZX6WBhXFsF64b6nETnSpK4bqCUEP0CNFs9jwmo7TIEF6s vcyaaD4f0wmQzAoCWsL5WTzZuniDrKWOw2lhOkQpe+py3FkEt36r+DAPnalM8Ldn eVvJ1a/ketm8C0+jsiBCtzmuBt5cXIdCohW2TDYPBpEc30Z0koHxqs80t+3MT4eB uh+TWnjyVR++x2dR+yVUI3XUGPDz/v+RCzJgTdHoOZLACKwNaqUkvlP0ZgrfIZBD H04oGHYoeqmCC7kLQbHSqjk+gD257qIk2/mt094j9EfSB7+TnP56HJJDeHjptb/C cH5Rz5/WzR5rDw== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:40 2025 by rpki-client