This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json) Hash identifier: pPI5OBfZ0azXGrgWgCDK1xqVtePOmyy6KMZr0bvtPoQ= Subject key identifier: B5:9E:AA:D4:EE:8C:28:25:0F:AC:E2:0E:76:A0:81:BE:D5:6E:18:1F Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Certificate serial: 019B30E8C95BA14C9A6A1D9881F435DD551C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 10:02:00 +0000 Manifest this update: Thu 18 Dec 2025 10:02:00 +0000 Manifest next update: Fri 19 Dec 2025 10:02:00 +0000 Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: EdYtJpRcR52DEKSu1HvqczesxarKBO4YnhnVMrlTlkY=) 2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:c9:5b:a1:4c:9a:6a:1d:98:81:f4:35:dd:55:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Validity Not Before: Dec 18 10:02:00 2025 GMT Not After : Dec 19 10:02:00 2025 GMT Subject: CN=b59eaad4ee8c28250face20e76a081bed56e181f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:ef:ef:c8:cf:28:4c:2d:66:cf:d5:0d:b4: 03:6c:33:46:4f:04:52:e8:5b:9d:c4:c7:3c:4b:7b: 5d:07:97:f1:e8:f0:ee:13:bb:49:04:66:06:11:a7: 7f:e8:46:70:36:9f:05:b9:de:d9:69:5d:5d:79:76: 41:81:75:2e:bc:58:56:0f:b4:46:c4:34:ea:83:01: 75:8b:48:4f:94:60:96:cf:cd:bb:92:dd:db:76:d0: 2e:77:bf:ec:78:bb:1d:dc:d2:a8:f8:e9:16:23:f6: 9d:2a:b0:cc:19:5b:ab:32:fd:4d:13:3c:5f:18:1c: 08:f9:1a:2f:bf:6a:c6:2e:42:09:22:fe:09:9e:4c: 25:b7:65:ad:75:f3:a8:2f:50:7e:e5:4b:51:af:b6: 5e:0f:33:bc:17:91:f6:11:f1:12:b5:4e:d4:0b:cc: 7d:d8:b4:a1:0a:9a:55:0c:db:4e:81:08:e3:6e:9b: dd:e6:21:97:a5:48:3f:66:d9:ba:26:31:78:90:a8: 0b:5e:3a:f9:7f:fa:30:8e:a4:f4:04:ee:03:66:8d: 4a:ff:4c:dd:5e:51:08:37:e4:ad:65:fa:40:83:16: a3:db:eb:c9:14:b0:2f:46:f1:b7:11:8a:a8:fb:80: 73:d2:98:48:f5:b2:02:c2:95:4e:6d:59:f0:ca:cd: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9E:AA:D4:EE:8C:28:25:0F:AC:E2:0E:76:A0:81:BE:D5:6E:18:1F X509v3 Authority Key Identifier: keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5b:11:27:00:d9:2d:2f:eb:78:84:2c:c1:56:db:90:11:c5: 01:48:18:f3:2a:39:61:8f:69:1c:9d:95:19:28:ca:12:66:69: 7c:0a:22:e2:51:79:06:65:2a:64:87:0a:33:cc:db:3b:d4:df: d2:9d:86:76:d3:63:f7:de:7b:08:7e:d7:6d:8a:27:18:02:69: 5d:76:ee:23:75:3c:a4:8c:63:01:0d:04:72:05:f1:a6:61:c3: fb:64:d1:eb:6f:f0:68:eb:62:42:ff:e7:50:5a:51:4a:85:29: 47:62:20:92:c6:34:02:74:49:65:16:1b:43:43:5d:dc:ce:e6: 2a:2a:04:34:d9:64:cb:7f:83:58:62:03:03:44:a0:05:2e:e0: e6:ba:01:e9:4b:6e:95:c3:3c:17:2d:0b:23:d0:45:6b:b6:35: 69:98:64:f0:a5:c0:00:3a:b4:1c:91:d1:da:da:3b:d7:45:7c: 82:69:bb:d9:a8:34:f1:fa:54:91:fb:4c:8b:36:58:42:5a:b0: c1:6d:13:7e:6d:90:e7:e2:46:ff:87:9d:3c:35:3f:20:fa:54: 64:d0:71:c3:6c:d4:01:d2:5b:40:7d:46:80:96:7f:6f:4d:37: 2e:16:15:83:d8:e8:a7:e8:47:82:ef:61:77:fc:ce:40:90:3b: 9f:a6:39:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6MlboUyaah2YgfQ13VUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm MGYzNWUwHhcNMjUxMjE4MTAwMjAwWhcNMjUxMjE5MTAwMjAwWjAzMTEwLwYDVQQD EyhiNTllYWFkNGVlOGMyODI1MGZhY2UyMGU3NmEwODFiZWQ1NmUxODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K/v78jPKEwtZs/VDbQDbDNGTwRS 6FudxMc8S3tdB5fx6PDuE7tJBGYGEad/6EZwNp8Fud7ZaV1deXZBgXUuvFhWD7RG xDTqgwF1i0hPlGCWz827kt3bdtAud7/seLsd3NKo+OkWI/adKrDMGVurMv1NEzxf GBwI+Rovv2rGLkIJIv4Jnkwlt2WtdfOoL1B+5UtRr7ZeDzO8F5H2EfEStU7UC8x9 2LShCppVDNtOgQjjbpvd5iGXpUg/Ztm6JjF4kKgLXjr5f/owjqT0BO4DZo1K/0zd XlEIN+StZfpAgxaj2+vJFLAvRvG3EYqo+4Bz0phI9bICwpVObVnwys2zaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWeqtTujCglD6ziDnaggb7VbhgfMB8GA1UdIwQY MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3 LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFsRJwDZ LS/reIQswVbbkBHFAUgY8yo5YY9pHJ2VGSjKEmZpfAoi4lF5BmUqZIcKM8zbO9Tf 0p2GdtNj9957CH7XbYonGAJpXXbuI3U8pIxjAQ0EcgXxpmHD+2TR62/waOtiQv/n UFpRSoUpR2IgksY0AnRJZRYbQ0Nd3M7mKioENNlky3+DWGIDA0SgBS7g5roB6Utu lcM8Fy0LI9BFa7Y1aZhk8KXAADq0HJHR2to710V8gmm72ag08fpUkftMizZYQlqw wW0Tfm2Q5+JG/4edPDU/IPpUZNBxw2zUAdJbQH1GgJZ/b003LhYVg9jop+hHgu9h d/zOQJA7n6Y5+Q== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:47 2025 by rpki-client