This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json) Hash identifier: 1t4GVCqzApcHONbpp6WUabv9DzQQJZGDpGnyXvCOMvw= Subject key identifier: 07:DC:D4:0A:2F:F1:19:76:51:A0:3C:5D:4B:42:28:DE:2D:6A:97:95 Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7 Certificate serial: 019B3DFEBE70186C1BAD54E8710429591999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 23:01:03 +0000 Manifest this update: Sat 20 Dec 2025 23:01:03 +0000 Manifest next update: Sun 21 Dec 2025 23:01:03 +0000 Files and hashes: 1: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=) 2: LOAmRNgz3AR78bC-CKjKBqCJY3M.roa (hash: xld+cbw2oRdP1v3iddUMoK+GuqeXMoAOXkKfJjjcrk8=) 3: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=) 4: gi5eF85DS2YJELAZM_ySYFsKV08.roa (hash: MIgOllfsmrhmY3owqBnBM3hgcAd1OAro3szJ6UxB+Hk=) 5: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: Fra1sC107YTXHNkEfPQybQRepsG42dzmR69oaoir0nI=) 6: pczhsUKGHELIQkg7tKT9igyRi-A.roa (hash: Y7SOjOUl6Opwe6kgzkQEfHKGoUu9pf1pYRSzuMhv1S4=) 7: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:be:70:18:6c:1b:ad:54:e8:71:04:29:59:19:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7 Validity Not Before: Dec 20 23:01:03 2025 GMT Not After : Dec 21 23:01:03 2025 GMT Subject: CN=07dcd40a2ff1197651a03c5d4b4228de2d6a9795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:49:7e:13:5c:3c:f7:eb:1b:d3:10:24:6c: 30:e5:d8:58:2e:a1:56:7d:d2:06:54:9e:31:0c:de: b0:33:5f:9a:25:10:c5:9b:2b:03:29:5f:54:80:66: d7:b3:de:57:3b:de:99:3e:40:44:e9:82:b2:23:4e: e9:91:52:05:8b:46:12:f4:13:c6:4d:03:e7:af:aa: 02:bb:ec:26:be:7e:04:d8:6d:2e:39:cf:16:d7:ba: 28:87:72:60:20:7c:a6:97:91:38:3b:39:1f:ad:5b: eb:a6:49:92:ef:e5:72:3a:aa:16:bc:13:05:78:8a: 42:bc:31:8d:a5:90:ea:c5:3e:ab:8a:5e:8b:09:ed: 95:71:2d:f1:10:92:7c:1f:3a:7a:71:56:7b:47:c0: 53:ea:74:1e:4b:52:81:34:88:cb:d7:76:ae:60:3e: 45:af:11:38:1f:ad:9d:5f:87:2a:5a:08:31:2a:ec: 48:8d:6b:dc:03:a3:19:fd:f6:70:28:d2:aa:ca:08: 29:55:2a:27:55:90:62:a7:43:76:89:45:1c:62:fe: 89:03:ee:93:17:0a:a5:c4:0f:5e:f0:82:7d:2b:16: f5:4e:47:cc:c5:32:e6:fb:82:ea:a0:ab:4b:05:ab: 59:96:32:e8:6f:cb:7c:72:74:de:1b:45:0c:69:b9: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:D4:0A:2F:F1:19:76:51:A0:3C:5D:4B:42:28:DE:2D:6A:97:95 X509v3 Authority Key Identifier: keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:59:89:50:19:80:f6:1f:ca:4c:ca:c2:1f:31:c4:39:d8:4b: c6:a2:b6:b7:84:4f:87:1b:0e:c4:7d:3a:f0:40:bf:ab:d4:36: fc:8f:c1:00:d7:2c:51:40:fb:95:a4:ec:7f:72:c0:2e:9d:8d: 89:a7:38:6e:20:7c:9c:69:dd:b6:cb:0c:7b:52:70:f4:ba:d4: 7e:f5:9c:35:89:cd:00:e5:fd:c2:3e:06:82:92:f4:b1:0a:5e: a6:2a:0b:01:3d:67:d0:47:8f:31:9c:f1:c0:82:cc:8a:84:02: f4:95:f4:ea:5e:8f:b8:47:0c:79:ac:fe:e5:86:72:59:d2:d9: d8:a3:9b:5c:d4:64:97:d1:58:88:bb:e6:8a:19:71:60:90:d4: d9:45:49:33:de:07:4d:e4:7b:c1:d4:0f:44:97:19:0a:83:31: 37:8a:fc:d9:ae:28:9e:97:0d:15:01:06:e1:5c:59:ce:aa:c1: f5:15:4d:99:7d:5e:8f:4a:ea:87:cd:dd:f9:9c:29:31:27:39: 33:94:66:f8:bb:d0:34:c5:09:60:87:b0:9f:e5:cf:83:fb:9b: 04:1a:50:35:d7:92:5e:ad:5a:bd:d8:c4:70:0c:74:e7:bf:8d: e5:67:e5:01:1b:60:e1:aa:e4:f6:81:c2:c4:8d:bb:ed:91:dc: c7:99:be:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/r5wGGwbrVTocQQpWRmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5 MmFlYjcwHhcNMjUxMjIwMjMwMTAzWhcNMjUxMjIxMjMwMTAzWjAzMTEwLwYDVQQD EygwN2RjZDQwYTJmZjExOTc2NTFhMDNjNWQ0YjQyMjhkZTJkNmE5Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9NJfhNcPPfrG9MQJGww5dhYLqFW fdIGVJ4xDN6wM1+aJRDFmysDKV9UgGbXs95XO96ZPkBE6YKyI07pkVIFi0YS9BPG TQPnr6oCu+wmvn4E2G0uOc8W17ooh3JgIHyml5E4OzkfrVvrpkmS7+VyOqoWvBMF eIpCvDGNpZDqxT6ril6LCe2VcS3xEJJ8Hzp6cVZ7R8BT6nQeS1KBNIjL13auYD5F rxE4H62dX4cqWggxKuxIjWvcA6MZ/fZwKNKqyggpVSonVZBip0N2iUUcYv6JA+6T FwqlxA9e8IJ9Kxb1TkfMxTLm+4LqoKtLBatZljLob8t8cnTeG0UMabnH/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfc1Aov8Rl2UaA8XUtCKN4tapeVMB8GA1UdIwQY MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt NDU2NWYwNGY4ZDg1LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1 LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFmJUBmA 9h/KTMrCHzHEOdhLxqK2t4RPhxsOxH068EC/q9Q2/I/BANcsUUD7laTsf3LALp2N iac4biB8nGndtssMe1Jw9LrUfvWcNYnNAOX9wj4GgpL0sQpepioLAT1n0EePMZzx wILMioQC9JX06l6PuEcMeaz+5YZyWdLZ2KObXNRkl9FYiLvmihlxYJDU2UVJM94H TeR7wdQPRJcZCoMxN4r82a4onpcNFQEG4VxZzqrB9RVNmX1ej0rqh83d+ZwpMSc5 M5Rm+LvQNMUJYIewn+XPg/ubBBpQNdeSXq1avdjEcAx057+N5WflARtg4ark9oHC xI277ZHcx5m+dw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:52 2025 by rpki-client