This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json) Hash identifier: GZF1ifyf6kaHfFZQXm0xsGyjDquxUM5p5OKPpCPwKWw= Subject key identifier: 01:B0:96:20:95:F1:AC:68:B1:27:78:18:59:A2:16:C5:66:5E:BD:F3 Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf Certificate serial: 019B0935B3AEB3D6BA124F9826B2BA423F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft Manifest number: 1778 Signing time: Wed 10 Dec 2025 17:01:12 +0000 Manifest this update: Wed 10 Dec 2025 17:01:12 +0000 Manifest next update: Thu 11 Dec 2025 17:01:12 +0000 Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: mFoTrCId941AJlYnIVrM171fzxMXc6mysm5Jrbc3J0A=) 2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=) 3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=) 4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=) 5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=) 6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=) 7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=) 8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:b3:ae:b3:d6:ba:12:4f:98:26:b2:ba:42:3f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf Validity Not Before: Dec 10 17:01:12 2025 GMT Not After : Dec 11 17:01:12 2025 GMT Subject: CN=01b0962095f1ac68b127781859a216c5665ebdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:8a:f0:82:62:c7:75:9b:35:c3:af:49:ac: e9:18:a8:54:79:64:2a:67:5f:b7:82:0a:d7:b2:1a: df:4c:8b:74:59:a9:bc:da:3a:db:ef:31:19:fc:45: 81:2a:24:a6:95:e3:d6:8b:98:92:6b:23:41:fc:49: 51:20:8b:3a:7f:3a:a0:51:6a:a5:5b:e7:32:57:80: 28:0f:8a:21:7f:01:90:00:77:05:80:2a:a8:72:ea: 26:88:2f:39:d4:c1:dc:30:79:03:0b:5c:f5:4d:90: 6e:52:01:09:36:a8:b4:73:68:7f:cd:d9:77:5a:a4: b5:52:ad:94:ff:80:ec:b7:83:2f:f1:ce:ea:74:e7: 9e:09:52:db:20:99:1a:ff:9b:42:00:f2:61:12:5c: 66:e0:a2:3c:ad:d8:8a:30:55:01:f1:f9:a3:27:d4: e3:f5:b9:0e:bf:1b:6b:4b:9f:86:7b:7b:f4:6a:a2: e9:05:0e:66:9b:e9:a0:07:d7:7a:93:61:1f:76:48: 69:97:58:d2:c4:50:4c:fc:28:55:37:eb:9d:c4:4c: c1:ef:34:9e:04:65:d0:2e:de:91:ea:78:d2:a6:6a: 6c:d7:d5:74:86:99:e3:ad:55:84:33:68:d7:c6:b0: a9:70:c6:84:32:b7:3b:5a:f2:5c:9d:d7:0e:5b:2c: 1a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:96:20:95:F1:AC:68:B1:27:78:18:59:A2:16:C5:66:5E:BD:F3 X509v3 Authority Key Identifier: keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:62:f5:ee:9d:a1:91:1e:f9:0b:dd:52:73:1c:c7:49:da:af: 9b:a0:a9:22:c7:30:b8:8b:98:04:cb:77:2a:79:23:cc:61:ba: 87:ac:dc:73:0b:44:62:59:75:49:b6:7b:58:04:3a:2b:ca:e9: 1a:ef:5b:d3:16:f8:6d:e4:fb:19:28:3b:2d:61:6c:42:9f:34: cc:ab:85:0e:58:8c:3a:64:f8:40:5d:03:3d:35:ab:d0:78:3f: 47:ed:c6:77:d9:61:5e:d3:3a:0a:dd:46:d0:df:c7:f5:0c:71: 1e:d4:b0:33:57:36:e4:68:8c:78:56:0d:2a:f4:23:78:b8:d8: 17:82:14:f9:ca:41:d3:c7:a0:b3:9f:85:6e:70:f6:22:ff:bb: 5f:a7:9a:f3:c3:72:4c:9d:cc:7c:0e:da:d8:b6:c7:ee:15:5d: 36:c7:fc:aa:9e:90:08:87:c2:eb:c4:be:40:91:42:1b:cf:84: 76:a3:de:97:d1:53:c9:8b:1a:bb:a0:31:b5:e9:58:46:98:fd: 36:62:2c:4f:ad:36:5a:05:8d:d3:3d:6e:11:d3:56:55:a0:b6: 14:09:bc:3b:c3:bb:db:01:a1:30:e2:7d:4c:4d:6e:fb:4e:32: d3:7e:76:0b:8f:9f:4b:2a:1c:fe:72:02:ab:b9:76:47:98:08: 77:5a:8b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNbOus9a6Ek+YJrK6Qj94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh ZjYxY2YwHhcNMjUxMjEwMTcwMTEyWhcNMjUxMjExMTcwMTEyWjAzMTEwLwYDVQQD EygwMWIwOTYyMDk1ZjFhYzY4YjEyNzc4MTg1OWEyMTZjNTY2NWViZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI2K8IJix3WbNcOvSazpGKhUeWQq Z1+3ggrXshrfTIt0Wam82jrb7zEZ/EWBKiSmlePWi5iSayNB/ElRIIs6fzqgUWql W+cyV4AoD4ohfwGQAHcFgCqocuomiC851MHcMHkDC1z1TZBuUgEJNqi0c2h/zdl3 WqS1Uq2U/4Dst4Mv8c7qdOeeCVLbIJka/5tCAPJhElxm4KI8rdiKMFUB8fmjJ9Tj 9bkOvxtrS5+Ge3v0aqLpBQ5mm+mgB9d6k2Efdkhpl1jSxFBM/ChVN+udxEzB7zSe BGXQLt6R6njSpmps19V0hpnjrVWEM2jXxrCpcMaEMrc7WvJcndcOWywaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGwliCV8axosSd4GFmiFsVmXr3zMB8GA1UdIwQY MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt NzJiYWQ5ZDczYzgwLzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2L17p2h kR75C91ScxzHSdqvm6CpIscwuIuYBMt3KnkjzGG6h6zccwtEYll1SbZ7WAQ6K8rp Gu9b0xb4beT7GSg7LWFsQp80zKuFDliMOmT4QF0DPTWr0Hg/R+3Gd9lhXtM6Ct1G 0N/H9QxxHtSwM1c25GiMeFYNKvQjeLjYF4IU+cpB08egs5+FbnD2Iv+7X6ea88Ny TJ3MfA7a2LbH7hVdNsf8qp6QCIfC68S+QJFCG8+EdqPel9FTyYsau6AxtelYRpj9 NmIsT602WgWN0z1uEdNWVaC2FAm8O8O72wGhMOJ9TE1u+04y0352C4+fSyoc/nIC q7l2R5gId1qLZg== -----END CERTIFICATE-----Generated at Wed Dec 10 19:26:53 2025 by rpki-client