This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json) Hash identifier: iZK3WJ+PwW1LZydmApNlBaMsc4dwtLp9Z3GTDdN/6vI= Subject key identifier: 80:8B:D6:04:F9:A4:52:54:C7:3F:42:D1:18:07:09:2E:46:5E:B7:2F Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac Certificate serial: 019B4DE086406E88F1B70F89C296B160133F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 01:01:58 +0000 Manifest this update: Wed 24 Dec 2025 01:01:58 +0000 Manifest next update: Thu 25 Dec 2025 01:01:58 +0000 Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: pVg0Dj96EIuoI0qr90O3YsUiLBgwlD5JoI6lq7qpW6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:86:40:6e:88:f1:b7:0f:89:c2:96:b1:60:13:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac Validity Not Before: Dec 24 01:01:58 2025 GMT Not After : Dec 25 01:01:58 2025 GMT Subject: CN=808bd604f9a45254c73f42d11807092e465eb72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:96:54:48:7d:db:97:f8:06:fc:86:77:d7: 61:a1:19:1c:cc:dd:20:04:1c:0d:f5:23:3a:6e:01: d2:52:9e:fb:70:8a:4d:56:af:4d:a3:f6:cb:2b:a8: b4:11:25:97:4c:e5:d0:5e:a5:1a:9b:5e:db:95:9b: 09:22:68:b6:b9:1c:40:2b:86:f2:98:31:77:fd:aa: 6f:1b:a0:95:de:36:8c:55:88:35:64:6f:f4:fc:aa: ea:38:00:41:e3:ad:a1:ca:8e:29:f2:25:06:b1:41: 74:78:5d:2b:2e:24:c7:bb:ae:f4:40:95:72:cd:1c: de:7a:07:dd:34:d2:78:ec:97:81:39:14:36:ee:e1: 8a:4b:31:30:d7:de:4f:ab:3d:7d:9c:a9:44:2b:b3: 1a:54:af:44:2c:0c:d2:bd:d2:dc:f3:fa:40:9d:f1: 6a:82:d7:70:63:ec:0a:12:90:c2:4c:ed:1b:d3:51: aa:bb:21:f0:4e:89:ce:f0:11:52:d9:c2:c7:96:c5: 35:71:dc:b2:94:df:37:13:4e:50:0b:46:db:12:2d: c0:49:8c:44:0f:95:00:3d:42:d6:2b:29:db:42:4d: d3:4c:fb:23:be:59:54:7f:58:35:91:aa:c7:66:12: 4b:04:ed:09:09:00:e8:98:94:77:0d:20:e6:03:c8: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:D6:04:F9:A4:52:54:C7:3F:42:D1:18:07:09:2E:46:5E:B7:2F X509v3 Authority Key Identifier: keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8c:d0:44:68:2e:1c:6a:a8:48:e5:20:97:ba:09:14:b2:f5: a6:71:9e:bf:e1:53:f8:86:bb:68:75:99:4d:40:07:2e:e0:44: 19:68:f8:f5:95:10:04:d4:18:18:ff:4d:ff:67:7e:4d:ad:9d: 05:0d:26:73:e3:f7:9a:ea:11:83:88:b2:ad:b1:8c:fe:2d:72: 9d:7f:94:84:79:ae:35:62:92:02:aa:d3:20:a5:b9:b9:f2:bc: 39:be:8a:d3:5e:79:f0:36:ff:1b:ca:8b:d3:4d:f2:ff:6f:ed: a5:19:8a:d4:36:42:fe:65:19:a9:ef:46:b2:ee:2a:a4:32:e1: ab:ab:86:3e:03:e2:53:7e:e6:2a:5a:15:4f:dd:cf:ce:09:c2: ac:32:51:a0:7c:17:d3:e2:8f:d7:3f:b2:7f:67:75:b4:00:b1: e0:f2:92:40:ca:24:1f:4f:31:2a:c6:55:f4:a6:7e:19:40:72: 13:58:11:ff:2a:a2:2b:9c:45:75:2e:f3:5c:d5:cc:14:c8:4f: fc:63:54:21:66:fb:14:f0:e8:30:cc:06:20:1e:f0:73:99:1c: 33:6a:80:c8:28:bf:35:43:c6:3b:e6:de:9a:84:44:66:4a:4c: da:6c:71:f7:76:b9:85:ab:9d:e8:8d:ad:58:b0:ae:1f:9d:bf: a5:4c:5c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4IZAbojxtw+JwpaxYBM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWJjMTAzNTRkMzFiZmRmN2MxZDgzNTEwZGYwZGQ2NmNl ODM1YWMwHhcNMjUxMjI0MDEwMTU4WhcNMjUxMjI1MDEwMTU4WjAzMTEwLwYDVQQD Eyg4MDhiZDYwNGY5YTQ1MjU0YzczZjQyZDExODA3MDkyZTQ2NWViNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqSWVEh925f4BvyGd9dhoRkczN0g BBwN9SM6bgHSUp77cIpNVq9No/bLK6i0ESWXTOXQXqUam17blZsJImi2uRxAK4by mDF3/apvG6CV3jaMVYg1ZG/0/KrqOABB462hyo4p8iUGsUF0eF0rLiTHu670QJVy zRzeegfdNNJ47JeBORQ27uGKSzEw195Pqz19nKlEK7MaVK9ELAzSvdLc8/pAnfFq gtdwY+wKEpDCTO0b01GquyHwTonO8BFS2cLHlsU1cdyylN83E05QC0bbEi3ASYxE D5UAPULWKynbQk3TTPsjvllUf1g1karHZhJLBO0JCQDomJR3DSDmA8izmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICL1gT5pFJUxz9C0RgHCS5GXrcvMB8GA1UdIwQY MBaAFJTrwQNU0xv998HYNRDfDdZs6DWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3Zjgt Yjc3ODAzOTZmYWY0LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3ZjgtYjc3ODAzOTZmYWY0 LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYzQRGgu HGqoSOUgl7oJFLL1pnGev+FT+Ia7aHWZTUAHLuBEGWj49ZUQBNQYGP9N/2d+Ta2d BQ0mc+P3muoRg4iyrbGM/i1ynX+UhHmuNWKSAqrTIKW5ufK8Ob6K01558Db/G8qL 003y/2/tpRmK1DZC/mUZqe9Gsu4qpDLhq6uGPgPiU37mKloVT93PzgnCrDJRoHwX 0+KP1z+yf2d1tACx4PKSQMokH08xKsZV9KZ+GUByE1gR/yqiK5xFdS7zXNXMFMhP /GNUIWb7FPDoMMwGIB7wc5kcM2qAyCi/NUPGO+bemoREZkpM2mxx93a5haud6I2t WLCuH52/pUxceQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:28:27 2025 by rpki-client