This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json) Hash identifier: KZgIFY+IDvgT0Ov5KL4TU2R15wtFBfLQHxdyMr7URyE= Subject key identifier: 9D:E9:81:31:F3:19:D2:5B:02:07:B3:7C:F2:D8:46:A6:82:62:46:B9 Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97 Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397 Certificate serial: 019B46279702F084F31097977CC89396CA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft Manifest number: 1735 Signing time: Mon 22 Dec 2025 13:02:38 +0000 Manifest this update: Mon 22 Dec 2025 13:02:38 +0000 Manifest next update: Tue 23 Dec 2025 13:02:38 +0000 Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=) 2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: gRPSunFx8PV350MnHm4Og9McIcXfDj80QHHnxk/+aoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:97:02:f0:84:f3:10:97:97:7c:c8:93:96:ca:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397 Validity Not Before: Dec 22 13:02:38 2025 GMT Not After : Dec 23 13:02:38 2025 GMT Subject: CN=9de98131f319d25b0207b37cf2d846a6826246b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:2b:28:1c:8c:3f:a1:00:01:e5:94:cc:7f: 25:12:ae:2a:8c:e9:8a:f3:94:9d:f4:5b:b5:5d:a9: 12:ac:e9:1e:39:ed:2a:bb:91:45:36:1a:c3:6b:ba: 8d:06:d5:17:6f:30:95:56:46:2d:31:a7:6d:d7:f3: dd:01:1d:de:da:35:c9:00:1d:0f:94:30:e3:40:47: b8:38:09:5a:7e:16:da:71:78:aa:1d:77:f8:1f:90: 53:ae:d0:05:68:f2:9b:8b:a5:4c:ed:78:97:31:6b: 9d:18:44:01:b4:48:31:f4:71:38:c3:c7:fd:94:b3: b9:6f:0c:40:09:4b:d8:0d:b8:84:54:f3:b8:af:5c: 0a:9d:71:aa:b3:d0:a2:96:cd:8a:81:b8:bf:fe:1d: 56:9c:77:0c:bf:3d:88:09:11:c0:8c:ed:d8:74:e6: 1d:b6:56:ad:bd:da:b4:48:d2:cd:3d:6b:54:ff:85: 69:1b:03:e9:42:c2:83:74:52:b4:54:96:4e:71:ba: 97:6d:bc:71:4a:50:17:6b:16:a6:de:39:c4:44:2f: a8:e3:ef:17:a5:cb:dc:c1:48:64:1a:8a:9f:7b:ad: d7:f7:f7:09:ee:85:0c:71:34:e2:28:b6:9b:a6:d7: 46:1d:5e:04:a6:ab:4b:2c:e8:ab:be:7a:e4:9c:3a: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E9:81:31:F3:19:D2:5B:02:07:B3:7C:F2:D8:46:A6:82:62:46:B9 X509v3 Authority Key Identifier: keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c7:ae:51:aa:5f:23:05:32:7f:81:b4:9c:12:68:a5:31:db: f8:52:09:4a:18:5d:b1:73:95:7b:67:f8:f7:14:23:a6:88:9b: 6b:90:3a:5a:76:cc:6a:af:63:87:de:27:24:97:1f:85:a3:55: ed:a5:a1:1d:e2:78:a8:14:a5:b4:3c:4c:05:c6:2d:da:5d:1b: 52:f0:62:48:2e:8e:e6:36:63:f0:d4:fa:88:a6:c4:3a:b5:a6: a7:c9:96:a6:8a:4a:51:7f:d4:67:bc:26:86:bf:d9:cf:07:fb: fa:4b:fe:22:a3:a9:f6:93:aa:d6:84:d7:af:05:6c:4e:ef:a2: 8d:f9:8e:01:62:9f:26:c5:d3:28:9e:0a:2c:f3:ba:85:c7:9e: 50:ed:55:72:36:8d:10:61:e1:b4:d5:04:2d:22:9f:90:f7:91: 49:9b:bf:bc:55:0e:93:75:9f:ba:0f:0b:d4:0c:c9:b6:40:ec: b7:f7:19:68:b4:a4:43:e4:b8:c1:5f:b8:38:b3:33:6e:fd:f6: f8:ef:b3:0e:aa:f4:21:5e:b3:d3:f0:dc:d6:18:3f:91:d9:00: 38:5b:f1:9a:6a:63:6a:92:80:71:d5:e5:6b:97:1c:7b:40:ed: 15:80:df:b6:94:c5:24:50:b9:a6:3a:e7:dc:6c:e4:75:92:b6: d2:e3:da:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ5cC8ITzEJeXfMiTlspIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx ZjEzOTcwHhcNMjUxMjIyMTMwMjM4WhcNMjUxMjIzMTMwMjM4WjAzMTEwLwYDVQQD Eyg5ZGU5ODEzMWYzMTlkMjViMDIwN2IzN2NmMmQ4NDZhNjgyNjI0NmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCsrKByMP6EAAeWUzH8lEq4qjOmK 85Sd9Fu1XakSrOkeOe0qu5FFNhrDa7qNBtUXbzCVVkYtMadt1/PdAR3e2jXJAB0P lDDjQEe4OAlafhbacXiqHXf4H5BTrtAFaPKbi6VM7XiXMWudGEQBtEgx9HE4w8f9 lLO5bwxACUvYDbiEVPO4r1wKnXGqs9Cils2Kgbi//h1WnHcMvz2ICRHAjO3YdOYd tlatvdq0SNLNPWtU/4VpGwPpQsKDdFK0VJZOcbqXbbxxSlAXaxam3jnERC+o4+8X pcvcwUhkGoqfe63X9/cJ7oUMcTTiKLabptdGHV4EpqtLLOirvnrknDrKcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3pgTHzGdJbAgezfPLYRqaCYka5MB8GA1UdIwQY MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0 LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8euUapf IwUyf4G0nBJopTHb+FIJShhdsXOVe2f49xQjpoiba5A6WnbMaq9jh94nJJcfhaNV 7aWhHeJ4qBSltDxMBcYt2l0bUvBiSC6O5jZj8NT6iKbEOrWmp8mWpopKUX/UZ7wm hr/Zzwf7+kv+IqOp9pOq1oTXrwVsTu+ijfmOAWKfJsXTKJ4KLPO6hceeUO1VcjaN EGHhtNUELSKfkPeRSZu/vFUOk3Wfug8L1AzJtkDst/cZaLSkQ+S4wV+4OLMzbv32 +O+zDqr0IV6z0/Dc1hg/kdkAOFvxmmpjapKAcdXla5cce0DtFYDftpTFJFC5pjrn 3GzkdZK20uPacg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:09:02 2025 by rpki-client