This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json) Hash identifier: Qg9HDRnuiFEW1A0Gg0zSBCX3ROnJPTc4nKc1rPPnOb8= Subject key identifier: 8A:8B:56:CE:C2:35:43:C9:1D:74:62:4A:B2:57:40:18:FD:70:2A:DE Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7 Certificate serial: 019B43C9B589D1258C070BCC94E583B94499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft Manifest number: 1797 Signing time: Mon 22 Dec 2025 02:00:51 +0000 Manifest this update: Mon 22 Dec 2025 02:00:51 +0000 Manifest next update: Tue 23 Dec 2025 02:00:51 +0000 Files and hashes: 1: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=) 2: LOAmRNgz3AR78bC-CKjKBqCJY3M.roa (hash: xld+cbw2oRdP1v3iddUMoK+GuqeXMoAOXkKfJjjcrk8=) 3: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=) 4: gi5eF85DS2YJELAZM_ySYFsKV08.roa (hash: MIgOllfsmrhmY3owqBnBM3hgcAd1OAro3szJ6UxB+Hk=) 5: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: cYgkdxoBpkC98A/Ntr2I3OQuSORpmWI8/MLUwmpwuz0=) 6: pczhsUKGHELIQkg7tKT9igyRi-A.roa (hash: Y7SOjOUl6Opwe6kgzkQEfHKGoUu9pf1pYRSzuMhv1S4=) 7: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:b5:89:d1:25:8c:07:0b:cc:94:e5:83:b9:44:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7 Validity Not Before: Dec 22 02:00:51 2025 GMT Not After : Dec 23 02:00:51 2025 GMT Subject: CN=8a8b56cec23543c91d74624ab2574018fd702ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:90:dc:1a:ac:85:08:96:0b:c0:36:ed:56: 9b:bf:66:51:19:3c:4f:2f:85:d7:88:29:b1:70:ea: c2:22:8e:e3:de:fa:be:ed:cb:79:40:f1:e4:d3:f6: f3:cf:22:13:82:72:16:ee:e4:38:28:a1:9e:3b:37: f8:d9:7c:d6:fb:6d:5c:e2:8b:cb:e4:56:92:ca:ad: 96:76:75:37:5d:93:b2:94:34:33:3b:b7:cc:3d:61: 4f:1c:08:24:b1:84:12:5a:89:21:5c:16:95:3b:33: 12:bd:26:e4:69:69:5d:b0:01:f9:b4:af:01:04:f2: c8:01:70:53:04:eb:5b:07:62:8e:9e:ed:15:9c:da: cd:b9:25:a3:76:b7:75:43:df:ef:fd:7d:d5:b5:00: a3:e2:39:58:f0:7c:fd:fa:3b:3a:5f:9b:6f:2d:bf: 25:01:b4:6b:38:10:71:43:f5:62:13:fc:38:91:38: ce:3c:86:23:79:76:01:19:b8:e7:94:c9:9f:41:7e: 79:5a:6e:58:5a:54:52:30:60:72:85:d2:9c:3f:8c: 21:4f:7e:bd:45:b5:e7:08:06:bf:16:94:86:bd:77: 3f:16:0f:c6:a6:b7:f4:f6:6a:7e:e4:a2:63:be:73: 17:b4:e9:8e:4d:f6:3e:67:df:fe:77:ac:50:48:60: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8B:56:CE:C2:35:43:C9:1D:74:62:4A:B2:57:40:18:FD:70:2A:DE X509v3 Authority Key Identifier: keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:50:cb:ed:a6:c7:f0:d6:80:b2:8a:00:a4:73:91:ce:9a:8b: 72:2c:28:4d:8d:e4:78:de:c4:92:03:82:5b:b0:6c:10:46:9f: af:89:d3:99:d3:92:22:bf:8a:8e:76:d8:cc:cb:c9:19:98:79: fd:61:2d:51:d3:43:40:17:21:3c:cd:22:10:b4:e4:09:4d:90: a9:ad:94:15:7b:b9:be:0b:c9:3d:3c:0c:61:7f:2d:57:94:c9: 1a:36:32:aa:26:df:c7:b4:18:04:9c:83:63:48:9b:40:43:d9: 62:8f:f0:46:ae:10:82:0b:06:17:b9:0e:26:a1:63:fc:48:3a: 1a:63:c9:8f:04:89:02:2b:f1:76:3e:ad:e6:ee:f4:0e:f0:53: 0a:ea:ee:4f:cb:b6:51:c1:31:3e:3e:ae:37:77:a1:68:39:c0: 97:6e:82:e8:4a:39:b2:51:c3:a1:6b:55:0a:86:a3:29:ea:0c: f1:7a:2d:51:54:e5:3b:98:45:ad:89:bf:83:35:65:c6:aa:cd: 8b:c8:fd:62:c4:42:b1:2d:4e:77:f3:34:77:81:8c:03:a4:1d: 7f:1f:fd:51:8e:89:1b:26:36:c4:78:db:14:bb:90:99:7c:83: 16:46:7a:a3:8f:06:fd:7e:56:92:f6:49:d6:83:87:ca:89:38: a7:af:7e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDybWJ0SWMBwvMlOWDuUSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5 MmFlYjcwHhcNMjUxMjIyMDIwMDUxWhcNMjUxMjIzMDIwMDUxWjAzMTEwLwYDVQQD Eyg4YThiNTZjZWMyMzU0M2M5MWQ3NDYyNGFiMjU3NDAxOGZkNzAyYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN2Q3BqshQiWC8A27Vabv2ZRGTxP L4XXiCmxcOrCIo7j3vq+7ct5QPHk0/bzzyITgnIW7uQ4KKGeOzf42XzW+21c4ovL 5FaSyq2WdnU3XZOylDQzO7fMPWFPHAgksYQSWokhXBaVOzMSvSbkaWldsAH5tK8B BPLIAXBTBOtbB2KOnu0VnNrNuSWjdrd1Q9/v/X3VtQCj4jlY8Hz9+js6X5tvLb8l AbRrOBBxQ/ViE/w4kTjOPIYjeXYBGbjnlMmfQX55Wm5YWlRSMGByhdKcP4whT369 RbXnCAa/FpSGvXc/Fg/Gprf09mp+5KJjvnMXtOmOTfY+Z9/+d6xQSGATkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqLVs7CNUPJHXRiSrJXQBj9cCreMB8GA1UdIwQY MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt NDU2NWYwNGY4ZDg1LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1 LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFDL7abH 8NaAsooApHORzpqLciwoTY3keN7EkgOCW7BsEEafr4nTmdOSIr+KjnbYzMvJGZh5 /WEtUdNDQBchPM0iELTkCU2Qqa2UFXu5vgvJPTwMYX8tV5TJGjYyqibfx7QYBJyD Y0ibQEPZYo/wRq4QggsGF7kOJqFj/Eg6GmPJjwSJAivxdj6t5u70DvBTCuruT8u2 UcExPj6uN3ehaDnAl26C6Eo5slHDoWtVCoajKeoM8XotUVTlO5hFrYm/gzVlxqrN i8j9YsRCsS1Od/M0d4GMA6Qdfx/9UY6JGyY2xHjbFLuQmXyDFkZ6o48G/X5WkvZJ 1oOHyok4p69+vg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:45 2025 by rpki-client