This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json) Hash identifier: A5vbIA383QuhhUt06ZSiyr01hIvBPWYi4bYROK/mw0s= Subject key identifier: 27:E6:5E:C2:06:64:F7:53:36:15:FD:50:9C:26:1A:CC:75:76:02:C2 Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Certificate serial: 019B59E48DF2F189450B9ECA669330E5C19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft Manifest number: 10AF Signing time: Fri 26 Dec 2025 09:01:49 +0000 Manifest this update: Fri 26 Dec 2025 09:01:49 +0000 Manifest next update: Sat 27 Dec 2025 09:01:49 +0000 Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=) 2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: oqfMMCD/xZdbF3cIfxxmtvgOhaGZbDFX3fmgfOm7RB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:8d:f2:f1:89:45:0b:9e:ca:66:93:30:e5:c1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Validity Not Before: Dec 26 09:01:49 2025 GMT Not After : Dec 27 09:01:49 2025 GMT Subject: CN=27e65ec20664f7533615fd509c261acc757602c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:ac:7b:d3:3f:79:8a:a2:4d:b4:e5:97:bc: 0b:4c:01:2b:d9:50:13:3c:23:08:e3:b9:dc:89:0d: 22:f1:2c:b4:55:ef:e1:24:74:60:cc:6c:e1:1c:ba: 70:78:28:3a:2f:a2:5d:3b:84:d3:52:b0:ed:13:48: 98:9f:d4:ad:e9:64:0e:f3:92:2b:f2:20:87:82:f2: e8:8d:ce:ae:96:63:9a:30:95:f7:60:81:9d:f3:c6: a7:ee:7f:40:61:36:4a:65:7d:5e:3b:4c:be:a9:58: 99:ae:74:e2:61:ad:a9:bb:a1:a1:ee:a9:7e:c7:b9: 6c:fc:a8:a1:7f:01:c7:89:30:db:11:dd:50:14:26: 40:33:0a:ce:77:4a:9a:36:4d:cd:e8:35:f2:ef:1b: e3:89:5a:75:e3:69:a9:20:9d:ec:a8:8a:8e:83:18: 39:19:1a:7b:b6:87:32:23:b7:2f:2d:71:80:d2:a1: 48:aa:94:ac:de:27:31:6b:ef:df:f6:08:e0:c7:ff: 0f:a6:31:25:29:dd:35:57:89:ab:6e:d6:1b:94:ba: 05:ec:3f:1a:85:77:6f:a5:05:e1:aa:ab:39:69:ac: 29:dc:cc:53:20:77:90:fa:22:f7:9d:89:65:2b:f3: 5b:2e:27:59:ad:7e:ae:8a:3b:d7:35:f9:8c:e5:00: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E6:5E:C2:06:64:F7:53:36:15:FD:50:9C:26:1A:CC:75:76:02:C2 X509v3 Authority Key Identifier: keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:b2:d9:29:94:d1:26:b4:3c:78:c0:b7:66:e5:b1:3a:7a: 0c:e8:4a:db:8f:a1:b2:98:4e:fd:d3:97:83:6d:55:97:1e:34: 4d:47:24:ea:23:ac:76:c3:8e:26:fc:fc:6d:bc:42:d5:01:34: 1d:ff:08:ba:71:ad:a7:79:75:9b:fc:67:a7:f2:98:d3:30:cb: 16:59:f9:60:59:bd:ce:61:d7:89:7c:e9:a2:88:73:43:0e:54: b1:b4:74:9c:6b:09:7f:70:83:95:e9:89:00:fa:c0:8d:d6:20: fd:2a:3d:a5:8d:f0:68:61:98:d9:c0:7e:15:b3:a6:75:83:b3: 25:1c:48:40:22:9d:43:24:57:24:f1:45:8c:ec:ec:4c:34:83: a3:5e:e9:48:bc:57:cc:e7:51:9d:6e:4c:ff:4a:d4:52:81:f8: 7c:8e:6b:ee:b7:61:b3:9e:aa:e0:c6:69:fe:84:f2:0f:65:0e: c1:d1:00:8e:82:ca:25:20:9c:17:6e:a3:c1:46:f7:7c:d1:0c: 0e:05:9f:90:8f:29:22:55:31:09:1d:20:8b:b2:a7:2a:45:ec: bd:32:e3:04:f3:f0:6f:00:b5:f6:0c:70:5e:1d:95:17:d9:eb: a6:91:c9:a2:f9:dd:1c:34:d3:7a:7c:3f:b5:3a:a3:78:e1:d3: ee:6b:9c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5I3y8YlFC57KZpMw5cGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw OGMzODUwHhcNMjUxMjI2MDkwMTQ5WhcNMjUxMjI3MDkwMTQ5WjAzMTEwLwYDVQQD EygyN2U2NWVjMjA2NjRmNzUzMzYxNWZkNTA5YzI2MWFjYzc1NzYwMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kKse9M/eYqiTbTll7wLTAEr2VAT PCMI47nciQ0i8Sy0Ve/hJHRgzGzhHLpweCg6L6JdO4TTUrDtE0iYn9St6WQO85Ir 8iCHgvLojc6ulmOaMJX3YIGd88an7n9AYTZKZX1eO0y+qViZrnTiYa2pu6Gh7ql+ x7ls/KihfwHHiTDbEd1QFCZAMwrOd0qaNk3N6DXy7xvjiVp142mpIJ3sqIqOgxg5 GRp7tocyI7cvLXGA0qFIqpSs3icxa+/f9gjgx/8PpjElKd01V4mrbtYblLoF7D8a hXdvpQXhqqs5aawp3MxTIHeQ+iL3nYllK/NbLidZrX6uijvXNfmM5QBCrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfmXsIGZPdTNhX9UJwmGsx1dgLCMB8GA1UdIwQY MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNGy2SmU 0Sa0PHjAt2blsTp6DOhK24+hsphO/dOXg21Vlx40TUck6iOsdsOOJvz8bbxC1QE0 Hf8IunGtp3l1m/xnp/KY0zDLFln5YFm9zmHXiXzpoohzQw5UsbR0nGsJf3CDlemJ APrAjdYg/So9pY3waGGY2cB+FbOmdYOzJRxIQCKdQyRXJPFFjOzsTDSDo17pSLxX zOdRnW5M/0rUUoH4fI5r7rdhs56q4MZp/oTyD2UOwdEAjoLKJSCcF26jwUb3fNEM DgWfkI8pIlUxCR0gi7KnKkXsvTLjBPPwbwC19gxwXh2VF9nrppHJovndHDTTenw/ tTqjeOHT7mucpA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:25 2025 by rpki-client