This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json) Hash identifier: Sw4Rlm7L1IkDFwL7WzjruCcn1Vxz2ErRyoYR6NPcvE4= Subject key identifier: 0C:8B:CE:84:10:2D:2A:04:E6:E9:0C:E6:DF:29:F5:82:C1:DA:76:5D Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac Certificate serial: 019B32D6F61B175CF95670AABD00767689A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft Manifest number: 0AF0 Signing time: Thu 18 Dec 2025 19:01:46 +0000 Manifest this update: Thu 18 Dec 2025 19:01:46 +0000 Manifest next update: Fri 19 Dec 2025 19:01:46 +0000 Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=) 2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: /0kWRLEK0yCbaE0jY2Vg/OLg1xeA5xzSLI8tMmsLb4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:f6:1b:17:5c:f9:56:70:aa:bd:00:76:76:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac Validity Not Before: Dec 18 19:01:46 2025 GMT Not After : Dec 19 19:01:46 2025 GMT Subject: CN=0c8bce84102d2a04e6e90ce6df29f582c1da765d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:e6:d9:24:1f:e4:f4:6a:59:91:82:83:5b: ad:fd:2e:20:05:1c:2f:43:0a:d6:65:bd:c2:5b:36: 4d:55:9f:94:3f:b4:9f:e9:36:de:bf:e2:23:95:12: e9:fa:50:9b:43:11:34:43:93:34:22:1c:cd:d2:3a: 5f:ce:c3:55:d1:cf:a2:48:37:41:d1:32:d5:02:1e: 4c:b8:54:49:b1:0c:ec:1e:a9:fe:c6:b4:21:b1:9b: b5:26:7a:88:ca:c7:9f:10:a3:f1:ee:1c:0c:2d:bb: 20:97:8d:e9:40:b8:8c:23:68:3d:6a:ad:35:c1:ea: e0:9a:29:78:a4:2f:5d:a9:9e:26:75:03:ce:4f:0a: 5b:a4:99:72:60:8d:3d:7a:90:dd:6c:f6:30:9e:2e: 30:d6:f7:cf:99:05:b8:50:eb:f2:27:3a:0f:c2:7c: 64:23:c7:0c:b0:6b:0f:d7:0b:61:fc:db:01:0d:87: e2:9b:f0:a4:16:8e:f5:37:6f:cc:1a:44:d4:d5:cf: 7e:23:ef:26:4b:6e:92:9c:94:40:a4:21:52:08:af: 46:98:a9:0d:4e:c7:37:0e:0a:3a:5a:6f:ac:d3:34: fe:23:51:9a:8e:03:df:04:fe:ee:0e:eb:27:84:3b: b4:79:5e:cf:06:c4:94:3c:e4:de:b9:3b:2c:74:5d: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8B:CE:84:10:2D:2A:04:E6:E9:0C:E6:DF:29:F5:82:C1:DA:76:5D X509v3 Authority Key Identifier: keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a8:f8:58:85:75:ab:ae:43:71:ba:88:e3:e9:83:76:28:2e: db:b0:1d:f5:f8:cb:72:8e:a3:31:61:c3:78:7c:40:94:00:a0: 1b:2c:3c:b6:68:18:f1:78:ae:96:a0:5a:62:c3:5e:6b:25:be: 35:34:08:76:fa:80:5a:10:60:2c:d7:83:bf:6e:64:71:54:d0: 49:23:cd:f5:1d:12:a4:cc:94:03:dc:b6:72:36:6b:21:ff:47: 64:db:ed:00:8f:b4:4b:11:a8:da:da:be:a0:3f:7c:e5:33:fa: 2a:82:81:7f:b3:84:89:0f:5a:19:07:44:e7:2d:02:85:04:9c: d1:67:2e:bd:ab:a4:92:e8:1a:c8:c9:82:e8:53:b6:25:49:45: b1:71:b2:96:00:c8:41:00:b7:71:6e:92:9e:01:71:59:aa:bc: 10:e5:45:3e:1b:d6:d1:e0:55:36:33:c3:ed:c1:6a:04:4f:17: 33:ea:7e:fb:0d:3c:3a:2f:41:56:14:f5:4d:ec:02:6f:5d:42: f2:2a:45:b4:6b:16:04:c6:3b:7e:23:33:61:b8:54:32:82:33: 4f:d1:90:e9:b9:22:31:fe:57:ad:3c:9a:c2:0e:47:60:02:6d: 5a:45:91:16:04:9c:2a:d4:a6:da:8b:5c:47:f8:07:cd:13:1a: 8f:67:c1:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1vYbF1z5VnCqvQB2domnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZTZmNDczMzAyYzZhM2M4OWRmN2I4OTMyYzU2YmM4NDFj YjVmYWMwHhcNMjUxMjE4MTkwMTQ2WhcNMjUxMjE5MTkwMTQ2WjAzMTEwLwYDVQQD EygwYzhiY2U4NDEwMmQyYTA0ZTZlOTBjZTZkZjI5ZjU4MmMxZGE3NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0rm2SQf5PRqWZGCg1ut/S4gBRwv QwrWZb3CWzZNVZ+UP7Sf6Tbev+IjlRLp+lCbQxE0Q5M0IhzN0jpfzsNV0c+iSDdB 0TLVAh5MuFRJsQzsHqn+xrQhsZu1JnqIysefEKPx7hwMLbsgl43pQLiMI2g9aq01 wergmil4pC9dqZ4mdQPOTwpbpJlyYI09epDdbPYwni4w1vfPmQW4UOvyJzoPwnxk I8cMsGsP1wth/NsBDYfim/CkFo71N2/MGkTU1c9+I+8mS26SnJRApCFSCK9GmKkN Tsc3Dgo6Wm+s0zT+I1GajgPfBP7uDusnhDu0eV7PBsSUPOTeuTssdF0txQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyLzoQQLSoE5ukM5t8p9YLB2nZdMB8GA1UdIwQY MBaAFJTm9HMwLGo8id97iTLFa8hBy1+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAt OWExZjBkZGI5ZTcwLzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAtOWExZjBkZGI5ZTcw LzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6j4WIV1 q65DcbqI4+mDdigu27Ad9fjLco6jMWHDeHxAlACgGyw8tmgY8XiulqBaYsNeayW+ NTQIdvqAWhBgLNeDv25kcVTQSSPN9R0SpMyUA9y2cjZrIf9HZNvtAI+0SxGo2tq+ oD985TP6KoKBf7OEiQ9aGQdE5y0ChQSc0WcuvaukkugayMmC6FO2JUlFsXGylgDI QQC3cW6SngFxWaq8EOVFPhvW0eBVNjPD7cFqBE8XM+p++w08Oi9BVhT1TewCb11C 8ipFtGsWBMY7fiMzYbhUMoIzT9GQ6bkiMf5XrTyawg5HYAJtWkWRFgScKtSm2otc R/gHzRMaj2fB7g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:11 2025 by rpki-client