This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json) Hash identifier: XYLSMxJ7lOiDiq70kL+FOJInZYXsh0k/0i6vKKUugEk= Subject key identifier: 7C:3C:3A:4D:A4:1B:34:22:19:0C:EF:42:4B:47:4A:16:73:35:03:D3 Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Certificate serial: 019B3B6B3736784DC2E90671805D57A29CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:00:40 +0000 Manifest this update: Sat 20 Dec 2025 11:00:40 +0000 Manifest next update: Sun 21 Dec 2025 11:00:40 +0000 Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=) 2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: CAhZN0y3TQEBkdbtWtPvKXWd+p5y3HDqfKgaO1NvAxc=) 3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:37:36:78:4d:c2:e9:06:71:80:5d:57:a2:9c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Validity Not Before: Dec 20 11:00:40 2025 GMT Not After : Dec 21 11:00:40 2025 GMT Subject: CN=7c3c3a4da41b3422190cef424b474a16733503d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:a7:9a:6b:c4:73:d3:68:c2:66:41:16:cd: 8e:fc:f0:12:2d:cb:62:d5:cc:bb:a7:8b:61:a9:5f: 5b:6f:6a:44:5f:3b:48:1f:55:f7:7d:76:ee:68:1e: 1f:09:14:84:30:e6:fd:18:c4:03:32:ae:41:bf:ed: c4:8e:4a:de:9f:6f:f9:00:8a:02:6a:de:26:aa:09: 3a:ff:f5:9a:e9:02:8c:d7:98:ad:bd:3f:7a:e9:95: 5b:4b:47:ae:30:12:ee:56:50:c9:07:82:11:0d:6c: 04:2c:cd:ec:cb:ba:08:01:ec:0a:cf:97:0f:db:55: fc:d9:28:89:05:7e:2c:cc:52:c1:d6:0a:e8:5e:40: 6c:c4:b0:4c:ab:44:e4:dc:b8:e5:7f:64:14:02:43: 70:a9:eb:de:47:2a:ae:bc:11:e2:27:89:42:48:10: 78:cc:08:82:61:06:fa:79:cf:3c:88:e6:0d:09:da: 6d:06:79:b7:c5:4e:dd:b6:75:ce:22:de:80:8e:37: 74:33:c3:f3:80:16:a5:25:cc:f3:de:3c:df:4c:85: e5:1b:67:24:52:54:a9:a0:57:ec:8f:bd:33:6f:7b: 2b:9e:91:e8:eb:2d:7a:13:e3:ed:e3:2b:0f:f2:32: c0:a3:0f:b7:98:98:ff:4b:70:b5:1b:37:67:ca:96: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3C:3A:4D:A4:1B:34:22:19:0C:EF:42:4B:47:4A:16:73:35:03:D3 X509v3 Authority Key Identifier: keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f3:75:e2:ab:17:dc:f3:27:40:7d:74:98:9e:e9:1a:30:a6: 78:e2:e2:e0:5d:fa:63:d8:9e:eb:ba:ad:76:d8:54:ff:6b:a2: 13:05:9a:05:51:b6:f9:a9:08:27:23:27:2c:aa:f9:9b:c3:33: 0d:9d:e4:dd:be:da:39:5a:66:11:12:92:f1:c8:5c:62:fc:8e: 36:c9:a6:2c:dd:5e:9d:dc:a0:4c:19:7d:a0:bc:e4:e3:17:8b: b8:95:38:ee:47:fa:1a:ae:b6:c2:73:09:ff:2d:b1:6b:32:ab: 09:b6:96:ae:b3:87:77:42:fb:86:c7:0f:8a:51:b9:0a:3a:97: ad:c2:c1:44:11:ec:53:00:10:04:9f:15:55:28:39:1f:ea:b5: d0:7d:5e:3d:12:e8:70:6a:86:14:d6:9c:9b:5a:96:a7:9f:1b: cb:79:82:54:58:8d:ee:3e:f9:9e:83:e4:c0:aa:32:aa:36:f6: 93:9c:14:6d:27:23:11:c6:bf:07:21:54:4d:21:8a:f2:30:de: 0c:5c:1d:0e:78:4f:d2:6d:8c:c0:1a:c5:fd:5c:9a:da:7c:f2: 7a:15:94:06:f4:b4:b7:ab:16:f6:b8:ec:90:3e:fd:2f:c9:d6: b9:65:4d:3b:32:f3:f3:ab:7e:68:02:d6:29:d4:48:ca:a4:1c: 3d:5b:8f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azc2eE3C6QZxgF1Xopy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0 NzkyY2UwHhcNMjUxMjIwMTEwMDQwWhcNMjUxMjIxMTEwMDQwWjAzMTEwLwYDVQQD Eyg3YzNjM2E0ZGE0MWIzNDIyMTkwY2VmNDI0YjQ3NGExNjczMzUwM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q6nmmvEc9NowmZBFs2O/PASLcti 1cy7p4thqV9bb2pEXztIH1X3fXbuaB4fCRSEMOb9GMQDMq5Bv+3Ejkren2/5AIoC at4mqgk6//Wa6QKM15itvT966ZVbS0euMBLuVlDJB4IRDWwELM3sy7oIAewKz5cP 21X82SiJBX4szFLB1groXkBsxLBMq0Tk3Ljlf2QUAkNwqeveRyquvBHiJ4lCSBB4 zAiCYQb6ec88iOYNCdptBnm3xU7dtnXOIt6Ajjd0M8PzgBalJczz3jzfTIXlG2ck UlSpoFfsj70zb3srnpHo6y16E+Pt4ysP8jLAow+3mJj/S3C1GzdnypaBXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw8Ok2kGzQiGQzvQktHShZzNQPTMB8GA1UdIwQY MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt MDJiMzM1ODJjNzQ3LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3 LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfN14qsX 3PMnQH10mJ7pGjCmeOLi4F36Y9ie67qtdthU/2uiEwWaBVG2+akIJyMnLKr5m8Mz DZ3k3b7aOVpmERKS8chcYvyONsmmLN1endygTBl9oLzk4xeLuJU47kf6Gq62wnMJ /y2xazKrCbaWrrOHd0L7hscPilG5CjqXrcLBRBHsUwAQBJ8VVSg5H+q10H1ePRLo cGqGFNacm1qWp58by3mCVFiN7j75noPkwKoyqjb2k5wUbScjEca/ByFUTSGK8jDe DFwdDnhP0m2MwBrF/Vya2nzyehWUBvS0t6sW9rjskD79L8nWuWVNOzLz86t+aALW KdRIyqQcPVuPsg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:31:09 2025 by rpki-client