This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json) Hash identifier: nWhi4Io6PisPjUz88cFX16w2As9UwAKvJ6iv1JYTAVE= Subject key identifier: 20:FB:70:FA:ED:74:04:B1:DA:95:FF:1D:D2:8F:7D:FD:A9:38:E0:D6 Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30 Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330 Certificate serial: 019B48B92D0A87F396CF32D67A318EA2E564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 01:00:53 +0000 Manifest this update: Tue 23 Dec 2025 01:00:53 +0000 Manifest next update: Wed 24 Dec 2025 01:00:53 +0000 Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: +zCjcvrV8sAyhbV7UM6hZBMPIBrB3S1Iojxvd4mxn6U=) 2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=) 3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:2d:0a:87:f3:96:cf:32:d6:7a:31:8e:a2:e5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330 Validity Not Before: Dec 23 01:00:53 2025 GMT Not After : Dec 24 01:00:53 2025 GMT Subject: CN=20fb70faed7404b1da95ff1dd28f7dfda938e0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:9d:b8:a3:e4:33:7d:de:84:70:45:32:50: 37:e6:6e:e0:a0:be:04:6b:2e:7c:e9:25:2e:26:df: 41:fe:16:5d:06:07:a4:38:df:ae:a9:24:06:c3:1d: 16:e8:c2:f5:59:05:15:34:b8:b9:32:a9:52:31:7b: 90:83:2b:76:12:31:91:40:65:0c:79:06:6a:8d:e1: 00:e9:22:16:da:25:a9:98:f4:de:b2:f2:bc:75:cd: 0b:dd:d1:37:97:1f:e0:6a:29:8a:46:fe:37:4d:08: 3b:4f:9e:1b:c4:5a:29:d9:56:8e:4c:23:68:a6:56: 50:0f:16:82:f5:3c:c5:8b:9d:4e:e3:b0:e0:ca:86: 87:74:3e:bc:69:69:92:0f:fb:d2:8f:6a:e2:b8:7b: 25:ae:66:33:f1:ca:be:17:4d:01:f6:a9:da:91:34: e1:ae:d4:d0:df:f1:2c:0f:b1:c7:1e:95:18:af:0c: 07:cc:e0:d4:0a:0f:88:43:73:cd:db:74:37:5c:1f: 76:5f:6f:ca:1a:e8:e5:7b:e0:a5:a3:6b:40:a8:8a: f0:eb:dc:20:21:12:09:30:12:a2:86:df:7e:48:50: 92:52:82:0f:4e:30:7f:83:6e:78:2b:36:0b:b4:83: 7e:50:ab:26:7c:56:b3:ad:3b:4d:24:63:0c:c0:2a: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:70:FA:ED:74:04:B1:DA:95:FF:1D:D2:8F:7D:FD:A9:38:E0:D6 X509v3 Authority Key Identifier: keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fb:80:5b:d8:c9:77:93:56:25:b0:e1:7c:d2:3c:f0:ae:a0: 15:15:e3:87:9a:e7:71:d2:1f:a2:74:be:9b:fd:d6:6c:09:6e: 24:48:5a:83:cb:07:07:9f:a3:f3:8d:1d:f9:89:79:3a:47:84: 13:31:c1:09:d0:f9:4c:f6:c4:d5:c2:4e:51:83:7f:73:9d:08: 8f:88:96:4d:82:ef:ae:2b:31:e3:33:3d:9f:9e:25:c5:2c:3e: 9d:af:37:50:7c:c5:2b:ad:c9:21:19:2a:d9:3d:e4:9c:e8:a8: 05:ba:78:f4:86:74:21:4b:1b:db:e6:8d:c1:83:c0:1e:b7:9a: 9a:54:ff:28:be:4c:9f:94:2a:79:44:d7:2e:36:f2:36:dc:ff: 24:77:f1:de:9e:36:b5:3d:e8:86:02:4b:6f:f5:e6:79:d0:f7: b5:c8:4e:6b:51:ef:cc:4e:2b:69:5e:c7:84:9c:dd:a2:bb:93: 65:a2:1b:69:31:59:db:5c:20:90:16:2e:6b:8b:6e:47:0e:5d: af:f4:f9:c0:71:91:8a:45:bc:05:3b:46:eb:08:36:9c:7d:e8: 70:56:56:7f:cf:ae:c4:cc:83:d1:f6:3a:61:e5:9b:bb:04:1f: af:dd:86:6f:d7:41:c0:5d:4c:4c:b4:49:15:92:5a:b1:12:cf: 89:b5:d4:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuS0Kh/OWzzLWejGOouVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2 MGYzMzAwHhcNMjUxMjIzMDEwMDUzWhcNMjUxMjI0MDEwMDUzWjAzMTEwLwYDVQQD EygyMGZiNzBmYWVkNzQwNGIxZGE5NWZmMWRkMjhmN2RmZGE5MzhlMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLyduKPkM33ehHBFMlA35m7goL4E ay586SUuJt9B/hZdBgekON+uqSQGwx0W6ML1WQUVNLi5MqlSMXuQgyt2EjGRQGUM eQZqjeEA6SIW2iWpmPTesvK8dc0L3dE3lx/gaimKRv43TQg7T54bxFop2VaOTCNo plZQDxaC9TzFi51O47DgyoaHdD68aWmSD/vSj2riuHslrmYz8cq+F00B9qnakTTh rtTQ3/EsD7HHHpUYrwwHzODUCg+IQ3PN23Q3XB92X2/KGujle+Clo2tAqIrw69wg IRIJMBKiht9+SFCSUoIPTjB/g254KzYLtIN+UKsmfFazrTtNJGMMwCrIaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD7cPrtdASx2pX/HdKPff2pOODWMB8GA1UdIwQY MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefuAW9jJ d5NWJbDhfNI88K6gFRXjh5rncdIfonS+m/3WbAluJEhag8sHB5+j840d+Yl5OkeE EzHBCdD5TPbE1cJOUYN/c50Ij4iWTYLvrisx4zM9n54lxSw+na83UHzFK63JIRkq 2T3knOioBbp49IZ0IUsb2+aNwYPAHreamlT/KL5Mn5QqeUTXLjbyNtz/JHfx3p42 tT3ohgJLb/XmedD3tchOa1HvzE4raV7HhJzdoruTZaIbaTFZ21wgkBYua4tuRw5d r/T5wHGRikW8BTtG6wg2nH3ocFZWf8+uxMyD0fY6YeWbuwQfr92Gb9dBwF1MTLRJ FZJasRLPibXUMw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:52:39 2025 by rpki-client