This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json) Hash identifier: 5VPnNC2je9fJEN+Gs3bPcz1hIoli7Ve9FSc6cvAOvj4= Subject key identifier: A1:9C:13:01:C4:F9:D3:92:4D:CF:C5:DD:F3:B1:83:47:70:B7:19:F4 Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e Certificate serial: 019B35697BC24FA064F888AF872D27C73B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft Manifest number: 0CE9 Signing time: Fri 19 Dec 2025 07:01:03 +0000 Manifest this update: Fri 19 Dec 2025 07:01:03 +0000 Manifest next update: Sat 20 Dec 2025 07:01:03 +0000 Files and hashes: 1: GofoKymii5U39NPDECdDJtD2TH0.roa (hash: ePVDpp/IL/yJ1aEgP104JCCy3cNXznxaF2wO6kp9DYI=) 2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: G3R/+bknhVAhB0jdnsYVNVGh9qeNQ6UNI8wWawIx1jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:7b:c2:4f:a0:64:f8:88:af:87:2d:27:c7:3b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e Validity Not Before: Dec 19 07:01:03 2025 GMT Not After : Dec 20 07:01:03 2025 GMT Subject: CN=a19c1301c4f9d3924dcfc5ddf3b1834770b719f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:92:b7:e8:3c:84:18:31:0d:83:83:b1:24: 9d:ad:5b:db:30:7c:bf:fc:81:28:e5:f2:95:eb:5e: bc:a6:f1:5f:58:81:46:32:5b:cd:5e:c9:a6:b5:af: 41:6e:db:cf:d5:58:7e:2d:a3:5f:e5:94:a7:a1:5d: 77:4f:f6:e5:5b:2a:7f:e9:8d:d9:70:95:f1:d7:bc: c8:ef:15:29:93:7f:10:5e:cb:33:de:a7:57:96:48: 47:53:b8:7f:b9:e2:84:f5:35:e4:16:84:89:d3:c5: d0:81:08:e6:30:2f:f7:7b:3b:a0:fe:0d:c7:d2:9c: 46:38:47:b6:82:38:4d:6e:e9:f6:e3:24:68:4b:38: bb:e3:e9:48:a0:2e:92:cc:3f:5f:46:0a:64:e2:14: dd:c2:4b:58:94:b8:f8:37:85:4c:3b:f5:e4:90:02: df:de:62:1d:c7:c4:85:66:db:5b:98:66:9e:c0:31: 82:10:a0:66:f8:69:dd:38:26:36:f8:62:ad:77:59: be:78:e3:6e:f4:7d:72:13:57:57:1a:bf:0e:97:7e: 72:94:9e:c5:a9:08:8c:6a:f2:c6:a4:f5:e9:c0:21: 29:93:3a:ee:99:6d:c1:c5:f1:a6:35:a4:1d:b8:24: 48:c1:ee:bc:8a:e8:f6:7d:4c:8a:1a:3d:0b:ad:e0: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:13:01:C4:F9:D3:92:4D:CF:C5:DD:F3:B1:83:47:70:B7:19:F4 X509v3 Authority Key Identifier: keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:53:5e:f0:22:17:ff:16:25:7a:50:81:4c:60:b3:43:2e:04: 0f:a2:fd:9e:a8:d9:e1:c6:fd:27:86:93:cc:59:37:da:0d:6b: 75:6d:96:27:48:38:d8:91:92:3c:43:ff:95:55:00:c8:91:6c: 6b:68:c5:da:24:d8:d9:4a:b5:38:6f:3f:25:20:d3:34:89:c8: fa:48:12:38:c0:e5:c9:cf:64:cc:12:ca:f7:07:09:66:07:e2: 9a:8a:bf:61:e7:ee:8d:21:45:9c:5f:fe:9f:ec:e4:48:9a:ee: 8e:e8:8b:8e:32:45:c2:2d:46:62:41:28:ce:34:73:40:60:64: 8a:1d:4d:26:dc:6a:3a:f2:64:ee:8c:54:51:f4:cb:75:34:c9: fe:d1:72:6d:bf:5b:a7:1d:44:ad:ba:fa:eb:96:14:54:0c:81: a1:7d:d2:ca:f9:3e:2a:fc:ac:1a:0b:92:b6:15:ec:15:56:ec: bc:f8:10:2a:33:f8:d3:91:f6:96:f5:19:57:7a:d3:ec:7c:b5: 04:a9:c1:c3:f7:0c:cc:da:28:88:b1:68:a2:95:09:f5:af:32: 2f:f6:68:cb:1b:0f:f4:b1:92:e0:91:7f:3f:2e:47:d2:59:c4: 5f:e8:c3:22:52:b0:f2:3a:d7:6d:99:9f:17:86:8b:b4:62:10: 76:ce:56:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aXvCT6Bk+Iivhy0nxzuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzQzOGNkOGFhZWIxYWQyNDJlZDQ5YjRmZjI4N2M5ZDBm NDNiMGUwHhcNMjUxMjE5MDcwMTAzWhcNMjUxMjIwMDcwMTAzWjAzMTEwLwYDVQQD EyhhMTljMTMwMWM0ZjlkMzkyNGRjZmM1ZGRmM2IxODM0NzcwYjcxOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywWSt+g8hBgxDYODsSSdrVvbMHy/ /IEo5fKV6168pvFfWIFGMlvNXsmmta9BbtvP1Vh+LaNf5ZSnoV13T/blWyp/6Y3Z cJXx17zI7xUpk38QXssz3qdXlkhHU7h/ueKE9TXkFoSJ08XQgQjmMC/3ezug/g3H 0pxGOEe2gjhNbun24yRoSzi74+lIoC6SzD9fRgpk4hTdwktYlLj4N4VMO/XkkALf 3mIdx8SFZttbmGaewDGCEKBm+GndOCY2+GKtd1m+eONu9H1yE1dXGr8Ol35ylJ7F qQiMavLGpPXpwCEpkzrumW3BxfGmNaQduCRIwe68iuj2fUyKGj0LreDFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGcEwHE+dOSTc/F3fOxg0dwtxn0MB8GA1UdIwQY MBaAFC/EOM2KrrGtJC7Um0/yh8nQ9DsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83ZWExOTUtMmZiZS00ODA2LWE4MmQt MTZiNDRjNDkzNWVhLzEvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83ZWExOTUtMmZiZS00ODA2LWE4MmQtMTZiNDRjNDkzNWVh LzEvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVNe8CIX /xYlelCBTGCzQy4ED6L9nqjZ4cb9J4aTzFk32g1rdW2WJ0g42JGSPEP/lVUAyJFs a2jF2iTY2Uq1OG8/JSDTNInI+kgSOMDlyc9kzBLK9wcJZgfimoq/YefujSFFnF/+ n+zkSJrujuiLjjJFwi1GYkEozjRzQGBkih1NJtxqOvJk7oxUUfTLdTTJ/tFybb9b px1Erbr665YUVAyBoX3Syvk+KvysGguSthXsFVbsvPgQKjP405H2lvUZV3rT7Hy1 BKnBw/cMzNooiLFoopUJ9a8yL/ZoyxsP9LGS4JF/Py5H0lnEX+jDIlKw8jrXbZmf F4aLtGIQds5Wdw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:24:40 2025 by rpki-client