This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json) Hash identifier: E81G1W9zopMJuxe0q5LVUNzh2SYJHVCCs72wg8m8nuA= Subject key identifier: CD:7F:12:BD:02:EA:06:64:ED:56:3F:E7:B5:5B:41:CF:3F:2C:C7:63 Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Certificate serial: 019B3BD922D1A8C55D0EA28D1248D0ABD06D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 13:00:44 +0000 Manifest this update: Sat 20 Dec 2025 13:00:44 +0000 Manifest next update: Sun 21 Dec 2025 13:00:44 +0000 Files and hashes: 1: 96CoHDqUFKRWLMKpuPNky2AThV0.roa (hash: 2dbkXGtx2Y2iGJ3uWXJRyOKWK4j+bBsW6iNp6F1vwRk=) 2: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (hash: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=) 3: biGYeNx8PlSGKHRmVucthKOSlnY.roa (hash: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=) 4: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (hash: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=) 5: kZbYAR7_VQFdZ98vhS7MW7IOa5g.roa (hash: veptVlnHGE2k0mSrEVT7abLTAqTrUJe6t8F1/LuZDvo=) 6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: JZmy3uqYhX/B6Ma/F5JCgXBCtoIT0CGOif6FVvYZIVg=) 7: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (hash: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=) 8: rZuO-15UbHThyJRmeryxRpgLk2M.roa (hash: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:22:d1:a8:c5:5d:0e:a2:8d:12:48:d0:ab:d0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Validity Not Before: Dec 20 13:00:44 2025 GMT Not After : Dec 21 13:00:44 2025 GMT Subject: CN=cd7f12bd02ea0664ed563fe7b55b41cf3f2cc763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:64:81:02:71:c8:98:de:e7:e8:de:65:62: 34:d8:c6:de:56:58:3e:fd:f6:26:e0:83:68:57:73: 7f:fd:26:fc:79:1b:97:ef:39:ed:fa:d9:51:e4:53: 6a:fb:93:1f:79:ba:db:26:95:3f:95:bc:cc:40:8b: bc:42:c9:88:d9:f5:d7:5e:cf:48:60:93:d1:32:83: ba:07:5f:e9:97:c3:43:30:2e:a1:3e:7e:12:c1:8c: b4:f2:92:28:60:2f:3c:3d:da:17:bf:99:e2:f4:01: ed:f8:71:f0:40:70:0d:ed:e5:2d:96:d5:20:c2:b9: 8b:ac:44:64:05:ae:11:51:73:15:81:af:97:83:fc: ef:69:a0:64:83:89:90:ff:b8:e9:fa:44:fd:78:b8: 7c:e4:8a:cd:eb:e3:2c:c9:45:f8:3c:08:60:a8:a1: 2b:19:8e:3c:33:88:a8:5d:44:3c:35:9f:39:aa:94: e0:3d:c0:d0:90:65:5a:fb:8c:2f:27:82:6e:0e:1e: af:1e:80:6b:90:a8:a4:87:e6:34:6e:ef:79:51:8a: 58:aa:0c:ac:c3:88:07:ff:b7:ef:5c:26:42:03:4a: ad:4e:0d:cb:f6:75:94:56:81:a5:63:a5:9e:34:7d: 39:0e:d4:b3:9c:28:d7:67:e3:85:23:89:b5:be:34: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7F:12:BD:02:EA:06:64:ED:56:3F:E7:B5:5B:41:CF:3F:2C:C7:63 X509v3 Authority Key Identifier: keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:61:db:fd:77:16:18:c6:d3:89:95:21:f6:e2:82:51:2d:48: 8f:70:1a:a9:04:62:4c:c1:83:53:b1:9b:29:2a:15:25:65:98: 9e:ae:b3:39:bc:7d:d3:7c:96:37:bf:a4:a0:a0:bd:a4:ea:28: db:22:b5:10:f3:af:23:ee:e4:db:9e:de:ac:d1:a8:c0:da:c4: 79:1d:2f:ec:fe:71:53:3b:0d:cf:3e:aa:60:2f:15:3e:4e:6d: d3:b5:e1:82:a3:dc:f8:4d:12:c6:35:4f:f5:3d:6f:80:81:d8: 10:97:12:12:84:a8:70:42:c6:f4:60:38:74:77:d0:b9:81:a9: 37:de:c9:23:24:34:96:a1:40:3e:66:17:18:39:27:3e:ce:8d: d3:6f:ba:db:d8:81:a4:81:9f:05:59:a7:98:44:1d:b2:db:f4: 54:cc:93:ba:4a:fe:ca:b1:7b:9e:70:29:c5:87:69:6b:29:86: 47:65:39:49:d8:93:e6:cb:fa:95:b5:86:9c:ea:0e:09:e8:b9: 6b:d5:37:4d:bb:ce:2c:dd:94:a4:f8:49:59:02:0b:14:84:6b: 5b:5c:88:fb:7c:fb:0a:9d:1b:71:f5:72:6c:2b:03:02:78:ae: a1:99:7c:b6:62:d2:3b:1a:d6:ef:78:f5:06:9e:6b:32:52:ef: d1:67:c1:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SLRqMVdDqKNEkjQq9BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1 YTUwMDAwHhcNMjUxMjIwMTMwMDQ0WhcNMjUxMjIxMTMwMDQ0WjAzMTEwLwYDVQQD EyhjZDdmMTJiZDAyZWEwNjY0ZWQ1NjNmZTdiNTViNDFjZjNmMmNjNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ZkgQJxyJje5+jeZWI02MbeVlg+ /fYm4INoV3N//Sb8eRuX7znt+tlR5FNq+5MfebrbJpU/lbzMQIu8QsmI2fXXXs9I YJPRMoO6B1/pl8NDMC6hPn4SwYy08pIoYC88PdoXv5ni9AHt+HHwQHAN7eUtltUg wrmLrERkBa4RUXMVga+Xg/zvaaBkg4mQ/7jp+kT9eLh85IrN6+MsyUX4PAhgqKEr GY48M4ioXUQ8NZ85qpTgPcDQkGVa+4wvJ4JuDh6vHoBrkKikh+Y0bu95UYpYqgys w4gH/7fvXCZCA0qtTg3L9nWUVoGlY6WeNH05DtSznCjXZ+OFI4m1vjRIaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1/Er0C6gZk7VY/57VbQc8/LMdjMB8GA1UdIwQY MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt ZGNlNmQ2OTA5MjQ3LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3 LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWHb/XcW GMbTiZUh9uKCUS1Ij3AaqQRiTMGDU7GbKSoVJWWYnq6zObx903yWN7+koKC9pOoo 2yK1EPOvI+7k257erNGowNrEeR0v7P5xUzsNzz6qYC8VPk5t07XhgqPc+E0SxjVP 9T1vgIHYEJcSEoSocELG9GA4dHfQuYGpN97JIyQ0lqFAPmYXGDknPs6N02+629iB pIGfBVmnmEQdstv0VMyTukr+yrF7nnApxYdpaymGR2U5SdiT5sv6lbWGnOoOCei5 a9U3TbvOLN2UpPhJWQILFIRrW1yI+3z7Cp0bcfVybCsDAniuoZl8tmLSOxrW73j1 Bp5rMlLv0WfBew== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:51 2025 by rpki-client