This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json) Hash identifier: 2U8OI1xyhzjlwFFlHwQtYHuxYgajWh3TlwAdZRPr/lI= Subject key identifier: C1:B3:FB:6E:58:CA:C3:49:8E:D8:48:F1:99:FC:DB:C0:A4:E8:D2:CB Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d Certificate serial: 019B38A1E1BB1AA90DCC11DE1DA09F89F0E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft Manifest number: 176D Signing time: Fri 19 Dec 2025 22:01:31 +0000 Manifest this update: Fri 19 Dec 2025 22:01:31 +0000 Manifest next update: Sat 20 Dec 2025 22:01:31 +0000 Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=) 2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=) 3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: NPWGKd/AROrZjp4UlaOw6tbzWWk8gd4lZtH9pQMq/GU=) 4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:e1:bb:1a:a9:0d:cc:11:de:1d:a0:9f:89:f0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d Validity Not Before: Dec 19 22:01:31 2025 GMT Not After : Dec 20 22:01:31 2025 GMT Subject: CN=c1b3fb6e58cac3498ed848f199fcdbc0a4e8d2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:6a:d5:8b:a2:4a:4e:f1:6e:d7:b0:14:1b: 01:ac:fe:2e:39:9c:96:aa:7b:cb:51:68:7c:b7:9d: 60:95:c6:94:7d:26:59:d2:99:ee:d4:f3:cd:00:68: 6a:56:af:24:8c:78:81:17:3c:68:cc:54:94:59:6c: 88:e8:1a:84:6c:13:f6:c0:66:c6:21:c8:f0:13:7e: 30:44:ea:f1:79:7c:95:09:72:ac:18:84:16:a6:9c: 7e:50:ee:a7:83:42:b7:5a:58:6c:74:ae:1f:7a:d1: 37:77:b2:b9:20:ce:64:92:b5:56:c5:72:0d:fd:2f: f7:da:3e:c4:f1:93:d9:e5:c3:a2:da:13:7e:92:86: b0:8e:9c:6c:af:92:ed:4e:3e:89:2c:ca:56:20:29: 70:75:2c:71:e4:d3:01:cc:2a:11:f4:99:7b:04:9d: a2:ac:52:87:62:ce:d2:5f:37:65:8b:73:2c:dc:08: 1e:0c:21:ac:42:ab:24:28:f0:00:32:93:bb:c0:3f: 0a:06:e5:65:13:79:92:95:83:ef:ce:c9:fe:5c:48: c6:0b:26:7e:1e:c2:c8:cd:54:99:58:8a:f9:62:ad: 57:7f:9b:92:74:d8:60:c5:39:92:8a:65:76:4f:96: 15:4c:40:cf:83:48:0c:9d:53:42:a3:ef:0b:75:91: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B3:FB:6E:58:CA:C3:49:8E:D8:48:F1:99:FC:DB:C0:A4:E8:D2:CB X509v3 Authority Key Identifier: keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:a8:26:47:b9:d7:93:48:e7:65:cf:28:8b:c6:09:da:2d: 83:8f:14:89:96:a3:eb:0d:2c:27:a2:80:a9:9c:e6:69:08:31: 65:4b:2c:10:2b:65:ef:b3:3a:51:fa:ba:f8:5c:9f:a5:4c:c4: 7b:4b:05:95:64:a4:70:ec:8f:a0:17:3b:7a:ec:e6:c1:d5:83: 81:45:49:51:55:d9:10:45:80:23:ed:d3:8c:eb:62:56:88:2f: af:cc:e4:6d:d5:6f:1b:11:a9:e9:c5:ba:68:39:93:69:42:58: ee:2c:ec:6f:82:66:6e:40:44:af:fc:87:b5:49:c9:a6:05:33: 7b:47:a6:c9:5e:e9:1d:b5:76:80:a0:48:da:f0:f9:2e:f0:aa: f3:ff:ac:7d:23:1a:c4:e8:2b:bb:f5:11:c0:73:38:be:ab:bb: 4c:ea:b7:7f:80:79:77:c4:f9:52:a0:13:e6:d4:9c:1a:61:27: 50:21:4e:42:ea:e3:75:1e:42:72:07:38:3d:a5:41:e1:e7:cd: e1:99:6b:91:ca:ad:99:f7:fd:37:ab:5d:89:82:e7:42:a5:ce: a4:1c:2d:b9:88:ad:27:1c:a6:64:7a:23:70:a8:98:95:ec:b2: c7:6b:5f:62:79:5b:24:ff:ca:b3:c7:36:eb:07:e7:92:7d:4f: 7a:15:5e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oeG7GqkNzBHeHaCfifDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5 MmUzN2QwHhcNMjUxMjE5MjIwMTMxWhcNMjUxMjIwMjIwMTMxWjAzMTEwLwYDVQQD EyhjMWIzZmI2ZTU4Y2FjMzQ5OGVkODQ4ZjE5OWZjZGJjMGE0ZThkMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifxq1YuiSk7xbtewFBsBrP4uOZyW qnvLUWh8t51glcaUfSZZ0pnu1PPNAGhqVq8kjHiBFzxozFSUWWyI6BqEbBP2wGbG IcjwE34wROrxeXyVCXKsGIQWppx+UO6ng0K3WlhsdK4fetE3d7K5IM5kkrVWxXIN /S/32j7E8ZPZ5cOi2hN+koawjpxsr5LtTj6JLMpWIClwdSxx5NMBzCoR9Jl7BJ2i rFKHYs7SXzdli3Ms3AgeDCGsQqskKPAAMpO7wD8KBuVlE3mSlYPvzsn+XEjGCyZ+ HsLIzVSZWIr5Yq1Xf5uSdNhgxTmSimV2T5YVTEDPg0gMnVNCo+8LdZETpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGz+25YysNJjthI8Zn828Ck6NLLMB8GA1UdIwQY MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt NjM4ZGNmYTEzMDAzLzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaqoJke5 15NI52XPKIvGCdotg48UiZaj6w0sJ6KAqZzmaQgxZUssECtl77M6Ufq6+FyfpUzE e0sFlWSkcOyPoBc7euzmwdWDgUVJUVXZEEWAI+3TjOtiVogvr8zkbdVvGxGp6cW6 aDmTaUJY7izsb4JmbkBEr/yHtUnJpgUze0emyV7pHbV2gKBI2vD5LvCq8/+sfSMa xOgru/URwHM4vqu7TOq3f4B5d8T5UqAT5tScGmEnUCFOQurjdR5Ccgc4PaVB4efN 4Zlrkcqtmff9N6tdiYLnQqXOpBwtuYitJxymZHojcKiYleyyx2tfYnlbJP/Ks8c2 6wfnkn1PehVeeA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:40:21 2025 by rpki-client