This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json) Hash identifier: rneZKmJoir6HbQZ8uyugxhl6JP5Ae6k2c3CHC+JyjZ8= Subject key identifier: 7B:CB:55:0F:D1:07:9F:2F:3B:F6:DE:CD:DF:0E:E1:23:01:1B:3C:6E Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467 Certificate serial: 019B2098EC3E99D2E15601BF5D991B3BE263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft Manifest number: 0C75 Signing time: Mon 15 Dec 2025 06:00:51 +0000 Manifest this update: Mon 15 Dec 2025 06:00:51 +0000 Manifest next update: Tue 16 Dec 2025 06:00:51 +0000 Files and hashes: 1: GIv286-shw2KQ9cHbSFZoILsF4Y.roa (hash: n0V2P6i8c6cHkiGOtEBdR3HlibGvUywK0wCobqEXaiI=) 2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: Q9fn/ZzIfEjAajqs5L8Dl7BsQxF53P+kgI+PVTHUOg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:ec:3e:99:d2:e1:56:01:bf:5d:99:1b:3b:e2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467 Validity Not Before: Dec 15 06:00:51 2025 GMT Not After : Dec 16 06:00:51 2025 GMT Subject: CN=7bcb550fd1079f2f3bf6decddf0ee123011b3c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:4f:b6:08:be:b5:e7:dd:75:a1:b6:bd:d1: 26:aa:6e:c7:1a:9b:2e:9a:12:5d:be:92:59:28:93: 50:a1:66:f6:13:b9:51:61:36:de:8b:1d:cf:d9:90: ae:80:63:00:28:2d:a2:5d:ca:c1:e0:a6:39:d7:a7: b6:d8:11:70:5e:46:68:6f:5e:be:02:40:6f:0f:f3: 69:72:cb:a1:97:71:af:0e:2b:ef:e8:f5:8e:f3:60: c6:48:0e:61:f5:05:24:bf:31:ab:e2:8c:b6:93:e9: 2d:48:2a:f5:ad:41:93:5c:b1:08:f6:c2:d2:d7:b8: 66:10:54:bd:81:7d:3c:53:86:20:da:08:52:a3:84: 4e:74:56:ba:33:e0:8e:92:f6:80:22:3e:56:cf:5d: 46:53:b4:be:6d:82:ae:62:81:64:3a:9f:3f:c9:f0: 3c:18:c3:98:e0:5d:56:ee:1b:64:01:2f:3e:00:83: 58:b8:04:f3:4d:d8:6d:9b:b1:ec:35:c8:ef:91:98: 74:89:aa:0f:0d:d7:23:91:f2:af:8e:38:af:84:6a: ec:32:c1:ee:51:ae:f3:ce:91:58:88:08:b5:e1:15: 79:d4:6d:a5:b5:0e:7b:a2:21:8f:a5:7d:48:23:df: 5a:fb:3a:e5:1c:eb:1e:77:44:9c:12:20:a4:dc:d2: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:55:0F:D1:07:9F:2F:3B:F6:DE:CD:DF:0E:E1:23:01:1B:3C:6E X509v3 Authority Key Identifier: keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9f:ee:f9:d5:2c:da:6b:6c:31:81:02:48:48:25:a2:3d:69: ca:69:f8:7e:88:72:32:c7:06:d3:a1:31:0d:5c:07:69:ab:aa: f7:18:56:3f:cd:bc:cc:96:d3:83:14:d0:95:00:69:87:8c:b5: 86:52:06:55:2a:9b:de:b7:78:c4:df:f9:b9:3b:cc:15:e5:b2: ea:27:42:0d:5f:87:4c:77:0b:d5:c6:7b:8b:08:45:4a:05:2e: 7e:68:97:56:6d:0a:b4:11:8f:25:e1:44:7e:ae:d1:89:9f:38: a5:f2:b3:f3:3e:0d:b2:2d:8d:a8:57:4c:bf:23:ae:c0:f1:d7: 21:7f:8d:3f:83:69:48:2d:0c:1c:31:3c:2f:80:eb:45:3f:32: d3:24:b0:70:13:f3:5a:1b:11:f9:e2:da:8e:f0:2b:d8:50:ee: 83:fe:b1:e7:1d:c0:2b:ee:a5:a9:c1:69:bd:ec:e9:fe:08:9d: 36:9f:f7:d0:40:83:4b:02:d9:1e:f6:6c:92:4c:4e:cd:3a:4b: 82:8c:19:57:f0:11:29:28:3c:ab:a9:24:fd:a2:b0:d1:5b:a7: 6e:38:f2:4e:ea:2c:71:29:b5:4d:c2:c7:8c:19:1d:e1:87:f1: 2e:ad:7d:70:49:e4:32:93:75:55:b5:77:97:06:ea:3e:6b:82: 77:7c:56:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmOw+mdLhVgG/XZkbO+JjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDkyZWNjMzdiYWUyYjlmODFkYTAyOTM4NTgxN2Q0MzNj NTA0NjcwHhcNMjUxMjE1MDYwMDUxWhcNMjUxMjE2MDYwMDUxWjAzMTEwLwYDVQQD Eyg3YmNiNTUwZmQxMDc5ZjJmM2JmNmRlY2RkZjBlZTEyMzAxMWIzYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf9Ptgi+tefddaG2vdEmqm7HGpsu mhJdvpJZKJNQoWb2E7lRYTbeix3P2ZCugGMAKC2iXcrB4KY516e22BFwXkZob16+ AkBvD/Npcsuhl3GvDivv6PWO82DGSA5h9QUkvzGr4oy2k+ktSCr1rUGTXLEI9sLS 17hmEFS9gX08U4Yg2ghSo4ROdFa6M+COkvaAIj5Wz11GU7S+bYKuYoFkOp8/yfA8 GMOY4F1W7htkAS8+AINYuATzTdhtm7HsNcjvkZh0iaoPDdcjkfKvjjivhGrsMsHu Ua7zzpFYiAi14RV51G2ltQ57oiGPpX1II99a+zrlHOsed0ScEiCk3NIN+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvLVQ/RB58vO/bezd8O4SMBGzxuMB8GA1UdIwQY MBaAFJdJLsw3uuK5+B2gKThYF9QzxQRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQt ZTlmMWM1OTFjZWRjLzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQtZTlmMWM1OTFjZWRj LzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZ/u+dUs 2mtsMYECSEgloj1pymn4fohyMscG06ExDVwHaauq9xhWP828zJbTgxTQlQBph4y1 hlIGVSqb3rd4xN/5uTvMFeWy6idCDV+HTHcL1cZ7iwhFSgUufmiXVm0KtBGPJeFE fq7RiZ84pfKz8z4Nsi2NqFdMvyOuwPHXIX+NP4NpSC0MHDE8L4DrRT8y0ySwcBPz WhsR+eLajvAr2FDug/6x5x3AK+6lqcFpvezp/gidNp/30ECDSwLZHvZskkxOzTpL gowZV/ARKSg8q6kk/aKw0VunbjjyTuoscSm1TcLHjBkd4YfxLq19cEnkMpN1VbV3 lwbqPmuCd3xWgQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:37 2025 by rpki-client