This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json) Hash identifier: l5bQ+b3W3dRliS2eyszrZjl+wyisAxxE6IPqpFSTI18= Subject key identifier: 48:4C:B6:02:7C:54:EB:D8:3C:B8:F8:ED:1A:41:6D:91:2E:53:A5:3D Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Certificate serial: 019B318C7768245E9E4030579AF172B6D270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft Manifest number: 0A10 Signing time: Thu 18 Dec 2025 13:00:47 +0000 Manifest this update: Thu 18 Dec 2025 13:00:47 +0000 Manifest next update: Fri 19 Dec 2025 13:00:47 +0000 Files and hashes: 1: 9hOySnoZoe98Vds65PO-k5WBbfQ.roa (hash: bWjpGXsf5+0jGIGSfAb5UBCCFfQkAKUBkc1nnoBo6sA=) 2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: xdTIv/vIVJEoLY8u0AgMRIoGZbWC/L+g2+Rlp0xNvVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:77:68:24:5e:9e:40:30:57:9a:f1:72:b6:d2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Validity Not Before: Dec 18 13:00:47 2025 GMT Not After : Dec 19 13:00:47 2025 GMT Subject: CN=484cb6027c54ebd83cb8f8ed1a416d912e53a53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:08:b3:84:3b:a3:64:16:48:8b:e9:b5:d3: 68:54:56:0d:89:08:11:ec:fb:bb:dc:a1:af:19:1d: 51:e4:77:a9:7a:7b:4f:8d:96:18:dd:cd:d0:ec:5b: 8c:5f:85:b0:31:3e:aa:57:45:5a:c6:7d:45:22:ff: d5:b8:57:b2:93:10:98:d6:c9:49:26:ae:6a:c0:10: e6:f9:42:38:10:4f:3a:2a:35:ec:6d:a1:f0:02:32: f0:4e:01:df:37:23:2f:bf:a2:62:e5:ff:59:9f:c8: f9:b2:e2:51:53:6a:49:27:a4:09:d5:90:82:ce:40: a5:f4:15:56:ca:ac:9d:79:1a:a9:ba:2b:85:65:97: 69:b2:dc:75:1f:7d:17:c7:64:03:4c:c6:3a:c3:8b: ff:12:64:81:90:eb:30:41:97:2f:0b:e7:6b:96:18: 69:cb:0e:3b:ef:c1:57:08:69:2a:06:43:da:61:b4: cf:71:fc:22:e3:3b:3d:ee:2e:e7:5a:2a:12:97:5a: 4b:08:0a:d2:d5:1e:00:91:48:81:50:14:49:f2:6a: 37:a4:98:ea:62:9e:e5:85:d4:b7:08:ae:18:60:6c: 5a:82:13:35:f9:26:e6:16:74:a7:37:23:93:b5:00: 69:70:50:d5:ff:78:e5:6d:b4:b6:c8:7c:39:20:05: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4C:B6:02:7C:54:EB:D8:3C:B8:F8:ED:1A:41:6D:91:2E:53:A5:3D X509v3 Authority Key Identifier: keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e8:c1:12:b7:b2:3b:82:bf:ac:2b:6f:98:e2:ea:1f:0a:73: a8:8b:39:2b:db:80:5c:cb:c5:95:3c:98:c0:28:bb:ae:c1:cf: 49:c3:7e:b5:6f:8c:86:3b:37:de:c2:26:57:dc:ff:42:b8:2f: e6:5b:5b:c9:f2:df:5c:9e:e4:15:b4:85:c9:96:ec:8f:a4:c1: c3:87:0f:61:83:75:b4:76:e2:5e:65:84:20:e3:4c:ef:64:97: b6:86:d6:ea:c7:e5:71:01:e1:d2:15:21:9c:fc:1b:19:f1:c9: ab:6f:24:fe:21:59:98:09:d6:48:75:55:f2:89:97:d7:8e:2b: d1:95:1b:1b:a5:21:be:14:97:03:20:28:c6:77:7c:7e:91:29: 37:20:a9:a1:f8:9f:26:ff:ee:4c:77:66:ed:4e:65:e9:36:14: 15:3b:df:5c:d6:17:52:4e:05:86:12:1d:f3:ce:c3:5e:a8:96: c3:8b:c0:03:ce:e4:42:39:27:71:38:da:e5:07:cd:92:87:0a: 1b:fc:c7:67:bc:54:57:8d:82:3a:08:8b:c4:31:1a:c8:56:87: b4:fc:90:25:93:75:b7:52:14:35:d2:0f:44:f3:69:28:4c:6f: 78:7c:f9:06:31:59:11:42:f4:79:d8:56:1b:c3:69:74:c2:b3: ab:b6:a8:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjHdoJF6eQDBXmvFyttJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk ZjUxODIwHhcNMjUxMjE4MTMwMDQ3WhcNMjUxMjE5MTMwMDQ3WjAzMTEwLwYDVQQD Eyg0ODRjYjYwMjdjNTRlYmQ4M2NiOGY4ZWQxYTQxNmQ5MTJlNTNhNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGIIs4Q7o2QWSIvptdNoVFYNiQgR 7Pu73KGvGR1R5HepentPjZYY3c3Q7FuMX4WwMT6qV0Vaxn1FIv/VuFeykxCY1slJ Jq5qwBDm+UI4EE86KjXsbaHwAjLwTgHfNyMvv6Ji5f9Zn8j5suJRU2pJJ6QJ1ZCC zkCl9BVWyqydeRqpuiuFZZdpstx1H30Xx2QDTMY6w4v/EmSBkOswQZcvC+drlhhp yw4778FXCGkqBkPaYbTPcfwi4zs97i7nWioSl1pLCArS1R4AkUiBUBRJ8mo3pJjq Yp7lhdS3CK4YYGxaghM1+SbmFnSnNyOTtQBpcFDV/3jlbbS2yHw5IAXvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhMtgJ8VOvYPLj47RpBbZEuU6U9MB8GA1UdIwQY MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAujBErey O4K/rCtvmOLqHwpzqIs5K9uAXMvFlTyYwCi7rsHPScN+tW+Mhjs33sImV9z/Qrgv 5ltbyfLfXJ7kFbSFyZbsj6TBw4cPYYN1tHbiXmWEIONM72SXtobW6sflcQHh0hUh nPwbGfHJq28k/iFZmAnWSHVV8omX144r0ZUbG6UhvhSXAyAoxnd8fpEpNyCpofif Jv/uTHdm7U5l6TYUFTvfXNYXUk4FhhId887DXqiWw4vAA87kQjkncTja5QfNkocK G/zHZ7xUV42COgiLxDEayFaHtPyQJZN1t1IUNdIPRPNpKExveHz5BjFZEUL0edhW G8NpdMKzq7aoVA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:39:02 2025 by rpki-client