This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json) Hash identifier: qPkCYBO0vicqJY8IfR9j0ZiCySMCONyAWBEt11jSw+4= Subject key identifier: 3B:10:5C:75:F2:AA:F4:03:4E:EE:06:83:38:06:8A:5C:5F:4B:C7:12 Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0 Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0 Certificate serial: 019B153995822BBFF89023C4192721E7AA95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft Manifest number: 018E Signing time: Sat 13 Dec 2025 01:00:53 +0000 Manifest this update: Sat 13 Dec 2025 01:00:53 +0000 Manifest next update: Sun 14 Dec 2025 01:00:53 +0000 Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: YNSibFaTMrqsxYqRy1bXdkclDAUI6/XZ3eaJh4ldyHc=) 2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:39:95:82:2b:bf:f8:90:23:c4:19:27:21:e7:aa:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0 Validity Not Before: Dec 13 01:00:53 2025 GMT Not After : Dec 14 01:00:53 2025 GMT Subject: CN=3b105c75f2aaf4034eee068338068a5c5f4bc712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:0b:f3:1c:3d:f3:c5:3d:9b:35:c4:9d:6d: a2:83:14:34:58:dc:49:88:55:4b:d8:be:d0:26:41: e6:65:f6:80:43:a3:77:94:34:c3:aa:8e:7f:ba:d5: ff:6f:e0:73:2f:6c:ec:0a:ad:29:47:ae:bf:94:11: 6c:30:b8:01:f9:f9:90:13:9b:a8:52:50:cb:14:ba: 2b:c8:65:90:ed:92:62:aa:84:c1:ba:f8:83:98:e3: cf:8b:84:06:1b:b5:26:d4:8a:1b:e8:da:6e:f0:4d: 27:d4:36:0a:83:99:ed:04:33:1b:ca:fe:f2:5e:21: c6:2c:66:14:74:b4:40:d2:6f:2c:1f:27:8b:28:05: 29:2b:9f:7b:64:1f:b1:81:8f:4b:ae:4d:25:a7:c5: 3d:79:99:16:4f:bf:0c:8d:3f:d2:1f:97:9d:c9:ab: e8:f9:67:d8:0f:bc:26:02:89:f9:6c:dc:8f:07:55: 18:b7:36:08:83:c5:a4:38:00:9d:8a:17:fb:23:72: 17:2c:f0:71:3d:f9:95:6e:4f:25:9f:cc:f4:1d:4d: a7:f3:6b:1a:d9:9c:d0:a3:df:42:69:a3:5e:f1:af: 5d:a7:a3:00:fa:aa:58:e4:05:27:1b:b6:5c:00:41: d9:65:4e:a5:68:6c:c4:31:7d:29:a4:40:61:6c:fa: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:10:5C:75:F2:AA:F4:03:4E:EE:06:83:38:06:8A:5C:5F:4B:C7:12 X509v3 Authority Key Identifier: keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d4:29:79:0c:29:0f:3e:38:15:07:93:80:81:dd:17:b0:5b: 2e:d8:e5:d7:a3:f3:7b:3f:dc:bd:2e:1c:fe:44:01:32:24:fa: 20:e3:cc:6b:31:17:37:6d:d4:b0:ff:42:23:ae:7e:af:e7:79: e0:f5:19:9e:52:cb:8f:c7:6f:d5:21:f2:f9:16:72:9f:eb:4a: f9:f5:c0:2a:22:66:a9:29:e9:47:57:1c:d5:5c:9e:16:50:e6: 93:69:76:22:af:c0:e6:c7:c3:0f:87:d4:49:67:78:fa:e2:bd: 09:f4:a7:3b:bb:b7:0f:49:51:7f:e6:22:ab:22:07:5a:b6:9e: c9:5d:9a:2d:b1:82:66:dd:9d:b3:bc:a3:06:c7:01:44:70:14: da:e8:2c:a2:57:5f:33:67:18:f5:b8:ec:01:34:db:a1:c2:ad: f5:98:e7:dd:69:5e:93:47:52:12:74:50:2e:ad:ea:4c:29:9b: d6:eb:e1:0f:e4:2e:4d:a3:16:ca:f7:b8:5d:8a:4e:7f:9d:31: 85:77:d4:db:21:81:c6:73:8b:55:db:f5:f9:5d:83:b8:78:de: 91:26:34:f2:cb:ab:33:d1:8b:74:74:c7:8f:6b:af:89:4d:d8: a1:13:c4:70:d5:d4:3d:df:f8:56:72:3b:ae:4b:db:b4:07:f0: 1e:ec:66:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsVOZWCK7/4kCPEGSch56qVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmM1MmQ5NGU2MmVmYTNlYmYyY2NhMTZmNDJkMmU1NjA3 Mzg4ZjAwHhcNMjUxMjEzMDEwMDUzWhcNMjUxMjE0MDEwMDUzWjAzMTEwLwYDVQQD EygzYjEwNWM3NWYyYWFmNDAzNGVlZTA2ODMzODA2OGE1YzVmNGJjNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PYL8xw988U9mzXEnW2igxQ0WNxJ iFVL2L7QJkHmZfaAQ6N3lDTDqo5/utX/b+BzL2zsCq0pR66/lBFsMLgB+fmQE5uo UlDLFLoryGWQ7ZJiqoTBuviDmOPPi4QGG7Um1Iob6Npu8E0n1DYKg5ntBDMbyv7y XiHGLGYUdLRA0m8sHyeLKAUpK597ZB+xgY9Lrk0lp8U9eZkWT78MjT/SH5edyavo +WfYD7wmAon5bNyPB1UYtzYIg8WkOACdihf7I3IXLPBxPfmVbk8ln8z0HU2n82sa 2ZzQo99CaaNe8a9dp6MA+qpY5AUnG7ZcAEHZZU6laGzEMX0ppEBhbPr6cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsQXHXyqvQDTu4GgzgGilxfS8cSMB8GA1UdIwQY MBaAFNC8UtlOYu+j6/LMoW9C0uVgc4jwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDIt YzI2YzE3NTYzMTc0LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDItYzI2YzE3NTYzMTc0 LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNQpeQwp Dz44FQeTgIHdF7BbLtjl16Pzez/cvS4c/kQBMiT6IOPMazEXN23UsP9CI65+r+d5 4PUZnlLLj8dv1SHy+RZyn+tK+fXAKiJmqSnpR1cc1VyeFlDmk2l2Iq/A5sfDD4fU SWd4+uK9CfSnO7u3D0lRf+YiqyIHWraeyV2aLbGCZt2ds7yjBscBRHAU2ugsoldf M2cY9bjsATTbocKt9Zjn3Wlek0dSEnRQLq3qTCmb1uvhD+QuTaMWyve4XYpOf50x hXfU2yGBxnOLVdv1+V2DuHjekSY08surM9GLdHTHj2uviU3YoRPEcNXUPd/4VnI7 rkvbtAfwHuxmsw== -----END CERTIFICATE-----Generated at Sat Dec 13 06:28:29 2025 by rpki-client