This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json) Hash identifier: uzs3vacR146mQLfTh0YQhtSFgdfd3KHvUCtwgh/irOo= Subject key identifier: B3:A5:1F:EB:0B:A0:8D:E3:45:A6:7F:B5:9D:42:CC:6B:0F:CD:F7:85 Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a Certificate serial: 019B48B905EC539EF49CC84E8EBD7B7A085F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 01:00:43 +0000 Manifest this update: Tue 23 Dec 2025 01:00:43 +0000 Manifest next update: Wed 24 Dec 2025 01:00:43 +0000 Files and hashes: 1: hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa (hash: GeXT9//cL/zNTjZxuaw4Cm/U6jftaxUYi+/QSdMp5D0=) 2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: LE2Rua15Yl45SNI6+ggM1dGNSAElnQS/wxZpGgYHPDw=) 3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:05:ec:53:9e:f4:9c:c8:4e:8e:bd:7b:7a:08:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a Validity Not Before: Dec 23 01:00:43 2025 GMT Not After : Dec 24 01:00:43 2025 GMT Subject: CN=b3a51feb0ba08de345a67fb59d42cc6b0fcdf785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:8c:9b:9a:7f:f0:2f:19:0a:58:f9:10:bd: 35:23:02:4e:68:a1:97:48:ef:ec:48:dd:a2:ed:cf: f0:a3:8d:c7:a3:4e:18:fd:8a:c9:94:2b:73:2f:26: fe:7f:8c:f8:dc:6c:2f:18:62:66:50:df:b5:0f:38: 60:7b:c3:2a:be:79:67:b6:5e:e5:14:25:18:7c:1f: 05:17:a0:73:8f:e1:62:e9:67:f4:21:1c:86:e8:af: ae:41:72:7b:a7:de:4e:c9:a8:87:d4:3d:28:49:43: 4b:6b:2f:44:b8:7d:37:5a:5d:fa:38:0f:d3:3c:c8: 63:de:45:29:37:e3:1d:f5:3d:1e:8a:69:c9:75:1b: e4:59:8c:46:8e:b4:08:43:7d:02:35:5e:72:73:7e: b1:c3:88:b0:5b:a1:36:e0:3b:a1:2c:26:af:a7:66: 67:90:88:cf:87:f3:81:01:b4:23:39:89:b7:3d:6e: 77:14:30:4a:47:b0:7a:2a:2e:1d:25:1f:07:8f:b4: ef:ae:c0:ce:1b:1c:32:2d:e8:6f:52:f6:cd:38:a9: 60:e6:13:65:7b:ed:02:12:39:0a:70:10:c2:bc:d1: 20:6c:64:3a:1d:fc:88:93:b7:a7:60:cc:cc:b8:40: 17:90:ae:d5:92:8c:fa:6b:4f:39:42:0e:05:de:9a: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:1F:EB:0B:A0:8D:E3:45:A6:7F:B5:9D:42:CC:6B:0F:CD:F7:85 X509v3 Authority Key Identifier: keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b2:99:fb:4b:7f:82:8d:73:d5:30:a5:10:55:02:4e:84:eb: 64:a1:8e:78:94:3e:1e:cf:fb:6b:22:43:94:6b:00:10:a9:e0: 35:78:6a:59:fb:ee:b8:57:ae:ab:2f:34:cf:35:b8:cd:09:5d: 2e:42:3c:7c:f7:4a:01:25:db:b4:1d:9a:de:48:0a:68:f3:34: 10:5f:35:a9:65:b1:ea:62:8c:62:55:57:27:8a:82:73:ca:1f: 5d:8c:ad:62:18:c6:8c:69:44:22:f0:5d:76:8a:f2:3e:7f:39: b7:bd:fa:d8:f1:8f:3d:00:30:fd:11:82:03:9c:8b:74:06:d4: 43:71:b7:d7:1e:66:6a:7a:c1:17:b5:c8:ad:f0:dc:56:d9:22: 39:e0:80:73:e4:d3:aa:3b:54:fc:5f:00:43:93:8f:da:3a:9c: 95:3b:ec:83:93:9a:76:21:aa:b8:00:8b:d6:e6:f1:7d:fa:71: 96:28:8b:ee:81:c3:ba:3f:1b:cc:ae:34:50:4f:ef:a9:da:af: b0:76:3e:c0:19:b0:91:56:2d:92:69:6b:78:93:7a:5f:7e:f5: 84:2e:9d:ec:03:1b:4d:fc:14:75:ff:0e:f9:07:e6:60:60:69: f9:c7:2f:bf:b6:c1:b9:5d:df:f6:79:b8:87:e9:aa:86:ee:d6: 7f:27:10:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuQXsU570nMhOjr17eghfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjAwZWQ2MmJlZWYzMDcwYTEzNmRkOTg0NWZkMjZlMjFm ZDI2MWEwHhcNMjUxMjIzMDEwMDQzWhcNMjUxMjI0MDEwMDQzWjAzMTEwLwYDVQQD EyhiM2E1MWZlYjBiYTA4ZGUzNDVhNjdmYjU5ZDQyY2M2YjBmY2RmNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf2Mm5p/8C8ZClj5EL01IwJOaKGX SO/sSN2i7c/wo43Ho04Y/YrJlCtzLyb+f4z43GwvGGJmUN+1Dzhge8Mqvnlntl7l FCUYfB8FF6Bzj+Fi6Wf0IRyG6K+uQXJ7p95OyaiH1D0oSUNLay9EuH03Wl36OA/T PMhj3kUpN+Md9T0eimnJdRvkWYxGjrQIQ30CNV5yc36xw4iwW6E24DuhLCavp2Zn kIjPh/OBAbQjOYm3PW53FDBKR7B6Ki4dJR8Hj7TvrsDOGxwyLehvUvbNOKlg5hNl e+0CEjkKcBDCvNEgbGQ6HfyIk7enYMzMuEAXkK7Vkoz6a085Qg4F3pqPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOlH+sLoI3jRaZ/tZ1CzGsPzfeFMB8GA1UdIwQY MBaAFKywDtYr7vMHChNt2YRf0m4h/SYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAt YWFjODlmMmYxN2NkLzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAtYWFjODlmMmYxN2Nk LzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbKZ+0t/ go1z1TClEFUCToTrZKGOeJQ+Hs/7ayJDlGsAEKngNXhqWfvuuFeuqy80zzW4zQld LkI8fPdKASXbtB2a3kgKaPM0EF81qWWx6mKMYlVXJ4qCc8ofXYytYhjGjGlEIvBd doryPn85t7362PGPPQAw/RGCA5yLdAbUQ3G31x5manrBF7XIrfDcVtkiOeCAc+TT qjtU/F8AQ5OP2jqclTvsg5OadiGquACL1ubxffpxliiL7oHDuj8bzK40UE/vqdqv sHY+wBmwkVYtkmlreJN6X371hC6d7AMbTfwUdf8O+QfmYGBp+ccvv7bBuV3f9nm4 h+mqhu7WfycQuQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:52 2025 by rpki-client