This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json) Hash identifier: 6HG/rbdA6hLMwm4Ok0iSmcVi0f68SRYUpl0x82ln790= Subject key identifier: E0:A8:AE:17:E2:78:6E:26:60:3E:DB:10:E9:4B:3D:92:FD:FC:6E:C0 Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019B101301C0F71590ED815C91C7D42E10F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft Manifest number: 0D50 Signing time: Fri 12 Dec 2025 01:00:39 +0000 Manifest this update: Fri 12 Dec 2025 01:00:39 +0000 Manifest next update: Sat 13 Dec 2025 01:00:39 +0000 Files and hashes: 1: 1-l2kYHPzzOgxMyPGeYc0XGNjBT4.roa (hash: LNd5PHqRanBJORsf7oSyFeUFPQrcAuT39Hzl/svHnzg=) 2: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=) 3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=) 4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=) 5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=) 6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: nF4HF9+Tw8qys79btjjemICpET5GrRqwuIpBQWYd+Ik=) 7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=) 8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:01:c0:f7:15:90:ed:81:5c:91:c7:d4:2e:10:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Dec 12 01:00:39 2025 GMT Not After : Dec 13 01:00:39 2025 GMT Subject: CN=e0a8ae17e2786e26603edb10e94b3d92fdfc6ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:bf:c7:59:6c:fc:0b:5c:2c:80:78:0f:59: 81:6e:db:c9:94:a2:cf:22:3e:af:6e:e2:14:83:30: ac:3d:73:b3:ee:e6:30:28:bd:ba:85:ad:04:ec:53: ae:8d:f1:22:b5:85:ae:21:d8:23:06:ea:cd:43:ec: 9e:74:5c:dc:e3:50:64:b5:70:1c:c5:cd:e7:b7:b3: c8:33:b2:bb:93:93:98:7e:1f:ea:17:db:5d:75:36: df:0c:55:48:2a:24:5f:e6:c9:e3:c5:13:af:2d:87: 27:9d:3b:92:4f:57:a4:66:23:d8:47:a7:e1:67:39: d5:7e:17:f4:ce:2d:61:b6:9a:03:0d:a4:1c:f0:d4: d8:0f:e7:7e:09:15:9f:c5:89:7b:32:7a:80:35:c0: ae:33:72:3d:f3:b1:b1:98:85:f7:aa:57:02:6f:30: 23:fe:3b:87:82:9f:f0:2b:da:24:66:9d:7f:ad:5c: 37:e3:5f:8c:11:1d:1f:f8:f4:55:a6:aa:c9:1a:7c: 4f:c4:13:1d:d6:14:ad:9d:bf:76:53:82:82:7d:cc: ff:72:87:c4:ab:31:90:af:75:ea:be:66:45:c6:8a: 1c:aa:a5:92:58:2b:38:b7:33:77:62:67:1b:ad:65: a7:63:d2:01:69:00:ae:67:fd:12:3f:e7:fe:28:da: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A8:AE:17:E2:78:6E:26:60:3E:DB:10:E9:4B:3D:92:FD:FC:6E:C0 X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:39:67:25:c7:2b:44:9e:06:c7:17:29:74:f9:17:83:5c:74: 14:2d:e3:b5:39:2e:f3:2c:a2:25:bb:41:5c:3b:ac:c0:a1:ec: 6f:f7:c7:1f:54:3d:86:70:d3:51:7e:95:af:8c:b5:e5:db:94: a1:61:fc:46:8d:5d:4f:cb:10:d0:c1:33:75:41:e6:04:dd:a5: f3:25:92:f3:f9:77:3d:6f:27:c2:d8:c9:cb:5b:c3:9a:14:96: be:0c:42:8c:e9:38:6a:e9:c0:3a:de:88:96:ef:b0:10:ef:fd: c5:f8:c9:44:fb:a5:2f:50:bf:6d:f0:5f:37:3f:70:6b:ce:e1: 52:7f:5e:17:60:2c:38:80:a6:dc:35:11:81:c7:45:af:72:ad: 6b:e0:bd:44:32:8d:9a:d0:ac:7d:48:1e:a5:cd:11:22:7d:33: 82:85:cb:03:df:c1:8a:ca:f6:f3:c1:c7:d6:e9:08:e0:b6:26: 4d:83:3a:f5:c6:60:88:87:d2:fd:af:fc:01:54:2a:f2:90:a2: 26:be:bd:bc:b9:92:28:b7:3c:b9:87:14:5e:80:dc:e8:ab:a5: bc:8f:0f:c4:0c:22:37:13:b8:e0:38:36:d7:d4:90:03:1d:0c: 07:22:6d:e8:43:f0:63:9c:5d:15:00:96:09:39:a2:f5:63:a0: b4:56:cc:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEwHA9xWQ7YFckcfULhD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjUxMjEyMDEwMDM5WhcNMjUxMjEzMDEwMDM5WjAzMTEwLwYDVQQD EyhlMGE4YWUxN2UyNzg2ZTI2NjAzZWRiMTBlOTRiM2Q5MmZkZmM2ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cS/x1ls/AtcLIB4D1mBbtvJlKLP Ij6vbuIUgzCsPXOz7uYwKL26ha0E7FOujfEitYWuIdgjBurNQ+yedFzc41BktXAc xc3nt7PIM7K7k5OYfh/qF9tddTbfDFVIKiRf5snjxROvLYcnnTuST1ekZiPYR6fh ZznVfhf0zi1htpoDDaQc8NTYD+d+CRWfxYl7MnqANcCuM3I987GxmIX3qlcCbzAj /juHgp/wK9okZp1/rVw341+MER0f+PRVpqrJGnxPxBMd1hStnb92U4KCfcz/cofE qzGQr3XqvmZFxoocqqWSWCs4tzN3YmcbrWWnY9IBaQCuZ/0SP+f+KNoUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCorhfieG4mYD7bEOlLPZL9/G7AMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzlnJccr RJ4GxxcpdPkXg1x0FC3jtTku8yyiJbtBXDuswKHsb/fHH1Q9hnDTUX6Vr4y15duU oWH8Ro1dT8sQ0MEzdUHmBN2l8yWS8/l3PW8nwtjJy1vDmhSWvgxCjOk4aunAOt6I lu+wEO/9xfjJRPulL1C/bfBfNz9wa87hUn9eF2AsOICm3DURgcdFr3Kta+C9RDKN mtCsfUgepc0RIn0zgoXLA9/Bisr288HH1ukI4LYmTYM69cZgiIfS/a/8AVQq8pCi Jr69vLmSKLc8uYcUXoDc6KulvI8PxAwiNxO44Dg219SQAx0MByJt6EPwY5xdFQCW CTmi9WOgtFbMuA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:31 2025 by rpki-client