This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json) Hash identifier: cZtG2eX3PfXalbMfv+u6eXygbVfj+Vt74MAUIC3SR9I= Subject key identifier: 76:0A:BD:59:E6:4A:02:40:8F:B5:7A:24:56:03:FB:3F:5A:E2:07:16 Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65 Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65 Certificate serial: 019B405C33DDB68A59839BBFDE3DC8C9A637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 10:02:22 +0000 Manifest this update: Sun 21 Dec 2025 10:02:22 +0000 Manifest next update: Mon 22 Dec 2025 10:02:22 +0000 Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=) 2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: aR1xdKdF6+nemUJCc5XMY8SVZEDhqYGb5nZQRWnK4qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:33:dd:b6:8a:59:83:9b:bf:de:3d:c8:c9:a6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65 Validity Not Before: Dec 21 10:02:22 2025 GMT Not After : Dec 22 10:02:22 2025 GMT Subject: CN=760abd59e64a02408fb57a245603fb3f5ae20716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:c3:d8:57:91:24:cd:f9:86:aa:8f:a7:49: 8e:bd:53:e5:d8:46:5a:5d:ca:b1:ad:c4:ad:39:07: 1e:f0:7e:7d:f2:77:37:10:ab:fc:cb:cf:1f:67:6e: 2c:e0:b7:b6:87:df:16:e0:99:49:91:3b:65:5f:73: 7b:b1:52:95:20:5c:25:27:c7:23:bd:77:f3:41:89: 1d:80:2f:01:5f:43:c8:b6:74:fa:4a:f3:a8:24:88: 8b:a5:ea:b6:7e:f9:83:9a:d4:fc:b1:66:f6:c5:6b: a5:11:9a:0f:63:8d:ed:a8:4d:72:f9:f3:02:1b:a9: 01:ca:07:c2:48:64:b2:09:a5:8c:63:bd:47:4f:92: 7b:5b:52:2f:6d:63:e8:26:dc:38:ef:b1:46:43:65: ae:19:c3:47:9d:a7:34:90:d1:8a:c2:b0:8f:3d:0c: 27:a0:3c:34:7d:63:7b:47:f8:3d:cb:90:c9:00:8f: 8a:c4:df:91:0e:be:b4:33:34:9c:df:f5:4f:1e:24: a6:26:8c:bc:4a:a5:17:6e:d1:ef:6e:8c:19:d0:1b: 92:9e:c9:5d:72:fe:a1:33:00:1d:5a:1b:38:da:f6: 1c:09:9e:da:db:73:08:cb:f5:00:76:6e:d3:24:b8: 9b:2d:06:03:03:93:86:af:10:52:78:92:a5:25:2e: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:BD:59:E6:4A:02:40:8F:B5:7A:24:56:03:FB:3F:5A:E2:07:16 X509v3 Authority Key Identifier: keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:df:d9:c0:6f:13:f4:5b:88:4d:18:54:8d:b2:88:80:57:01: 5b:e3:fc:be:66:66:a2:1a:05:c6:67:ce:d6:32:86:10:1a:9e: b5:45:ac:95:f9:fd:ea:4f:58:4c:b2:29:9b:54:0b:29:a5:d5: 06:7e:1d:84:73:1a:34:63:b2:65:79:d0:23:f4:b7:70:37:4d: 5f:bf:bc:76:49:65:4c:17:8a:2c:89:82:61:46:44:32:99:b1: bf:27:ac:98:96:a8:93:78:d4:08:1b:b9:67:6f:5f:48:3c:9b: a5:ae:3a:0d:79:5f:9f:c6:ee:dd:1c:13:28:b2:18:10:25:0f: b8:3f:a9:a7:d9:bd:ad:f8:2a:32:7f:32:12:36:6c:8f:87:c9: 5f:9b:7c:5a:d8:67:56:9a:57:49:d4:38:1b:23:84:fe:eb:07: 44:7a:2e:9d:1b:d2:e7:a8:67:c3:26:33:1d:16:a4:28:40:28: a6:46:d7:8e:1f:0a:0b:63:9d:16:98:0d:d8:30:0b:ee:65:4f: 6c:7d:b2:ee:76:72:bd:78:c4:3c:7d:f9:da:78:3c:c2:0c:89: 80:a8:82:27:3d:18:b6:a3:a2:be:c9:e8:26:7f:19:10:20:a8: 3e:74:24:75:8d:af:74:21:9d:55:26:2a:8d:66:6c:2f:4a:e5: 63:ab:17:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXDPdtopZg5u/3j3IyaY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGExN2UxNjE5NmJiN2E4NjcxOGU2YjJiZDZhMDdlMzdi NDBjNjUwHhcNMjUxMjIxMTAwMjIyWhcNMjUxMjIyMTAwMjIyWjAzMTEwLwYDVQQD Eyg3NjBhYmQ1OWU2NGEwMjQwOGZiNTdhMjQ1NjAzZmIzZjVhZTIwNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrD2FeRJM35hqqPp0mOvVPl2EZa XcqxrcStOQce8H598nc3EKv8y88fZ24s4Le2h98W4JlJkTtlX3N7sVKVIFwlJ8cj vXfzQYkdgC8BX0PItnT6SvOoJIiLpeq2fvmDmtT8sWb2xWulEZoPY43tqE1y+fMC G6kBygfCSGSyCaWMY71HT5J7W1IvbWPoJtw477FGQ2WuGcNHnac0kNGKwrCPPQwn oDw0fWN7R/g9y5DJAI+KxN+RDr60MzSc3/VPHiSmJoy8SqUXbtHvbowZ0BuSnsld cv6hMwAdWhs42vYcCZ7a23MIy/UAdm7TJLibLQYDA5OGrxBSeJKlJS6vVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYKvVnmSgJAj7V6JFYD+z9a4gcWMB8GA1UdIwQY MBaAFJaKF+Fhlrt6hnGOayvWoH43tAxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMt NjM3ZmExNDY1NmRlLzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMtNjM3ZmExNDY1NmRl LzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt/ZwG8T 9FuITRhUjbKIgFcBW+P8vmZmohoFxmfO1jKGEBqetUWslfn96k9YTLIpm1QLKaXV Bn4dhHMaNGOyZXnQI/S3cDdNX7+8dkllTBeKLImCYUZEMpmxvyesmJaok3jUCBu5 Z29fSDybpa46DXlfn8bu3RwTKLIYECUPuD+pp9m9rfgqMn8yEjZsj4fJX5t8Wthn VppXSdQ4GyOE/usHRHounRvS56hnwyYzHRakKEAopkbXjh8KC2OdFpgN2DAL7mVP bH2y7nZyvXjEPH352ng8wgyJgKiCJz0YtqOivsnoJn8ZECCoPnQkdY2vdCGdVSYq jWZsL0rlY6sXTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:04:04 2025 by rpki-client