This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json) Hash identifier: bsF+T2YAemp4y5mbXfYOldwhng3nwH8dVdDVr8yI/Ec= Subject key identifier: 74:AC:18:D8:EA:E2:6B:1E:FC:63:BF:51:DE:19:13:5B:6E:E4:88:FE Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Certificate serial: 019B0F37DBF4BC628201472B7EA2DCD8519B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft Manifest number: 178C Signing time: Thu 11 Dec 2025 21:01:17 +0000 Manifest this update: Thu 11 Dec 2025 21:01:17 +0000 Manifest next update: Fri 12 Dec 2025 21:01:17 +0000 Files and hashes: 1: E-4ADBGXON3Ebg7oHiDfrmtH_lc.roa (hash: l2qYirx7neuSnlQE7h3UgUns57ricFDVqJUUNXFMsmI=) 2: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: TD8GO539IwG9qR0TdT/Uub19Ij6lpORrR36Pl1T7gXA=) 3: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:db:f4:bc:62:82:01:47:2b:7e:a2:dc:d8:51:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Validity Not Before: Dec 11 21:01:17 2025 GMT Not After : Dec 12 21:01:17 2025 GMT Subject: CN=74ac18d8eae26b1efc63bf51de19135b6ee488fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:b8:b5:84:48:29:b9:df:38:6a:d8:fa:4c: 17:67:4c:eb:ea:f9:b1:e5:3e:6e:fc:8e:00:44:b9: 9b:8b:13:55:17:02:04:3b:61:6d:aa:f0:ef:7e:a5: f4:63:b8:2d:29:37:17:34:98:65:7a:63:3f:6d:58: 6e:eb:c0:f5:21:5e:ac:8e:72:d8:60:3e:ae:43:65: 87:33:be:a7:46:a0:3d:d2:91:37:25:0b:06:61:2a: f8:de:74:cc:6a:08:2e:54:f3:84:3d:c6:08:8f:0f: 70:af:58:48:ef:23:28:1d:64:d1:ea:26:07:af:0f: cc:af:92:68:04:83:70:8c:60:40:3f:7b:50:0e:1a: fb:ca:87:f6:e4:d3:a2:0e:3b:14:cb:6e:f9:07:ad: f7:84:d5:97:d4:09:43:d3:e8:94:81:62:2a:05:43: 6d:9d:a1:d3:2f:b1:56:d5:d6:25:d3:29:0d:97:e6: bd:5e:91:71:4b:e0:18:e4:74:98:67:f1:a6:d2:9a: 39:1a:fc:e4:79:b8:cc:fa:94:74:ae:f2:f7:0b:10: 08:77:1a:a6:37:c6:b4:f5:76:27:7b:f8:84:0e:2d: 46:8f:55:fd:37:2e:28:ac:ca:37:3f:11:25:e9:7c: 13:ac:f8:8e:ba:4b:5c:fb:eb:00:04:6a:b7:b4:3c: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:18:D8:EA:E2:6B:1E:FC:63:BF:51:DE:19:13:5B:6E:E4:88:FE X509v3 Authority Key Identifier: keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:20:0b:3c:61:6d:85:f0:c9:93:44:85:b4:4b:f7:f3:84:46: 42:e5:df:96:5e:36:e1:d7:47:d0:ed:14:4e:0f:e0:52:8c:86: c7:2c:9c:8e:87:2d:38:23:23:ca:77:36:3d:95:57:47:5f:6b: d8:bd:7d:4f:3b:81:0b:c3:3d:85:ac:2a:d7:bd:8a:02:a4:e8: d2:0a:9d:41:e1:72:d8:6d:16:57:83:64:a5:47:69:90:52:2f: 26:a0:17:b5:2d:e8:f1:4d:e6:6c:d9:47:6d:de:36:07:d9:1c: 22:02:e2:4b:d7:b8:1d:51:fa:6a:78:7d:42:33:81:b5:6c:75: 03:61:47:c5:c2:a0:1d:f7:c2:e6:61:e9:5b:f5:ff:11:97:1c: 50:a8:78:27:80:63:28:35:30:58:18:25:0d:e2:04:7f:4a:4d: c6:7d:ed:49:70:39:cc:8e:df:e6:a3:0c:19:f4:0d:f1:ba:e2: 12:15:8e:f0:77:33:75:97:51:8d:bb:a5:c7:f4:2c:f6:bf:6b: d7:e8:19:43:24:0b:24:d7:a4:3c:15:51:53:78:3c:67:e4:f0: 26:98:30:9b:3f:ab:e6:e3:76:ea:2b:fc:2c:eb:6c:b7:e0:e4: 5a:1c:09:b7:d9:3b:bf:35:b6:87:4f:4a:28:f5:71:bd:61:71: d4:cf:0b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN9v0vGKCAUcrfqLc2FGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy NDk5OTEwHhcNMjUxMjExMjEwMTE3WhcNMjUxMjEyMjEwMTE3WjAzMTEwLwYDVQQD Eyg3NGFjMThkOGVhZTI2YjFlZmM2M2JmNTFkZTE5MTM1YjZlZTQ4OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKK4tYRIKbnfOGrY+kwXZ0zr6vmx 5T5u/I4ARLmbixNVFwIEO2FtqvDvfqX0Y7gtKTcXNJhlemM/bVhu68D1IV6sjnLY YD6uQ2WHM76nRqA90pE3JQsGYSr43nTMagguVPOEPcYIjw9wr1hI7yMoHWTR6iYH rw/Mr5JoBINwjGBAP3tQDhr7yof25NOiDjsUy275B633hNWX1AlD0+iUgWIqBUNt naHTL7FW1dYl0ykNl+a9XpFxS+AY5HSYZ/Gm0po5GvzkebjM+pR0rvL3CxAIdxqm N8a09XYne/iEDi1Gj1X9Ny4orMo3PxEl6XwTrPiOuktc++sABGq3tDzF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSsGNjq4mse/GO/Ud4ZE1tu5Ij+MB8GA1UdIwQY MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt OTExOTBhMDJkYjcwLzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSALPGFt hfDJk0SFtEv384RGQuXfll424ddH0O0UTg/gUoyGxyycjoctOCMjync2PZVXR19r 2L19TzuBC8M9hawq172KAqTo0gqdQeFy2G0WV4NkpUdpkFIvJqAXtS3o8U3mbNlH bd42B9kcIgLiS9e4HVH6anh9QjOBtWx1A2FHxcKgHffC5mHpW/X/EZccUKh4J4Bj KDUwWBglDeIEf0pNxn3tSXA5zI7f5qMMGfQN8briEhWO8HczdZdRjbulx/Qs9r9r 1+gZQyQLJNekPBVRU3g8Z+TwJpgwmz+r5uN26iv8LOtst+DkWhwJt9k7vzW2h09K KPVxvWFx1M8LxA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:58:41 2025 by rpki-client