This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json) Hash identifier: nbT3HS8rJ2+HvPUEIYK702aEOEW1pUprEjIQWQ34dQY= Subject key identifier: 84:58:C9:EE:2E:89:A9:D3:A6:DE:24:2E:33:86:DC:D0:E4:B2:63:94 Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Certificate serial: 019B44DC8EFC2D3CCD8AB7C75F4D147FC15E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 07:01:03 +0000 Manifest this update: Mon 22 Dec 2025 07:01:03 +0000 Manifest next update: Tue 23 Dec 2025 07:01:03 +0000 Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=) 2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: jJ8v45nPZn6gneudjCRXSHFd6ENBQzTm81DicH5gbJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:8e:fc:2d:3c:cd:8a:b7:c7:5f:4d:14:7f:c1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Validity Not Before: Dec 22 07:01:03 2025 GMT Not After : Dec 23 07:01:03 2025 GMT Subject: CN=8458c9ee2e89a9d3a6de242e3386dcd0e4b26394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:6b:c0:51:14:b1:b9:2a:e8:78:58:52:b6: b8:31:8b:63:2f:1b:f8:16:1b:b7:4c:f2:2f:d0:03: b0:70:99:7d:fe:da:fe:02:36:89:7f:66:0e:d7:85: b1:c7:62:71:bb:cc:c2:9d:f0:6a:c7:76:5e:7d:d4: c1:59:e5:bf:84:e5:ac:e2:d1:c9:6f:46:c0:28:ac: e2:12:3f:cb:f1:b4:1c:14:40:66:ef:f4:f6:7e:93: 0e:b0:99:cc:71:ca:c3:df:6c:6f:15:40:e2:1c:75: 6f:96:df:ef:09:ae:8e:67:f4:51:50:98:01:e1:81: 3d:51:14:af:54:8d:32:6f:e6:a8:44:d0:8e:b8:75: 8d:71:72:06:76:52:9c:4c:a1:02:fc:a6:77:ee:84: 62:8c:8e:a0:6a:22:42:7b:15:3f:fc:2d:bd:58:07: d7:7b:74:c6:c1:02:ac:9c:3f:36:e2:e3:a8:d8:3e: eb:9d:2c:74:87:9d:84:85:68:a3:fd:10:57:45:87: e5:5c:93:1b:4d:e7:5c:aa:2f:7a:23:1c:2d:a5:88: 8f:22:0d:c6:06:60:f9:1e:d3:e1:39:3a:f8:7d:b2: 7a:f3:e4:77:74:3a:e3:8b:d4:06:37:03:76:4d:cf: fd:2a:be:1f:b2:64:0e:e4:a9:9e:6b:80:fd:f4:fd: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:C9:EE:2E:89:A9:D3:A6:DE:24:2E:33:86:DC:D0:E4:B2:63:94 X509v3 Authority Key Identifier: keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7d:8a:82:5b:5e:b5:2e:27:ac:22:52:d7:28:25:37:b3:bb: ad:09:2d:f9:41:cf:8d:ee:3a:4e:84:e3:f7:b6:bd:d1:da:c1: 6b:8f:42:e1:25:83:05:90:d5:e6:d9:fb:02:61:26:8b:b6:2b: 96:4f:96:86:0f:3f:e6:64:cf:8b:cc:97:49:ee:be:24:f3:98: 27:90:3e:ad:da:ba:df:1c:61:c0:04:8c:cc:ea:34:b2:cb:51: 3a:9f:3b:27:90:6d:72:03:d8:ce:05:e1:3f:01:ee:50:a9:6b: d5:9a:f1:f7:55:84:2e:c0:85:2e:1f:82:b9:51:44:63:20:1d: 94:e5:60:75:82:df:43:26:01:c3:e5:3f:72:d6:72:f6:26:a7: d7:96:ba:4c:9a:25:e6:26:ff:0c:9a:4b:c5:7b:b2:4b:b9:05: 52:1a:83:13:55:60:9b:4f:36:c8:3b:6b:e8:f9:75:b1:f7:27: 3f:eb:07:bc:60:44:b4:ae:64:ef:71:e8:19:ba:1d:e9:c0:4a: e8:b9:1c:8c:c5:f3:12:8c:90:a4:3a:78:dd:a8:dc:37:47:5c: 9e:a0:34:f3:5c:d6:d0:9e:e9:f1:b3:ea:69:40:f6:7d:aa:eb: 59:7f:a6:17:21:35:4a:87:8b:41:95:8e:3d:9d:04:e9:42:66: 84:fe:b9:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3I78LTzNirfHX00Uf8FeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGVkYWIxMjIxNWUyOWJkMzhjMWRhOWI1ZTM5NmJkMGM5 NmJlMDkwHhcNMjUxMjIyMDcwMTAzWhcNMjUxMjIzMDcwMTAzWjAzMTEwLwYDVQQD Eyg4NDU4YzllZTJlODlhOWQzYTZkZTI0MmUzMzg2ZGNkMGU0YjI2Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKVrwFEUsbkq6HhYUra4MYtjLxv4 Fhu3TPIv0AOwcJl9/tr+AjaJf2YO14Wxx2Jxu8zCnfBqx3ZefdTBWeW/hOWs4tHJ b0bAKKziEj/L8bQcFEBm7/T2fpMOsJnMccrD32xvFUDiHHVvlt/vCa6OZ/RRUJgB 4YE9URSvVI0yb+aoRNCOuHWNcXIGdlKcTKEC/KZ37oRijI6gaiJCexU//C29WAfX e3TGwQKsnD824uOo2D7rnSx0h52EhWij/RBXRYflXJMbTedcqi96IxwtpYiPIg3G BmD5HtPhOTr4fbJ68+R3dDrji9QGNwN2Tc/9Kr4fsmQO5Kmea4D99P3L8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRYye4uianTpt4kLjOG3NDksmOUMB8GA1UdIwQY MBaAFC6O2rEiFeKb04wdqbXjlr0Mlr4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEt NjQzYTJmYzQ0NzNlLzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEtNjQzYTJmYzQ0NzNl LzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa32Kglte tS4nrCJS1yglN7O7rQkt+UHPje46ToTj97a90drBa49C4SWDBZDV5tn7AmEmi7Yr lk+Whg8/5mTPi8yXSe6+JPOYJ5A+rdq63xxhwASMzOo0sstROp87J5BtcgPYzgXh PwHuUKlr1Zrx91WELsCFLh+CuVFEYyAdlOVgdYLfQyYBw+U/ctZy9ian15a6TJol 5ib/DJpLxXuyS7kFUhqDE1Vgm082yDtr6Pl1sfcnP+sHvGBEtK5k73HoGbod6cBK 6LkcjMXzEoyQpDp43ajcN0dcnqA081zW0J7p8bPqaUD2farrWX+mFyE1SoeLQZWO PZ0E6UJmhP65hA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:17:50 2025 by rpki-client