This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json) Hash identifier: KrdNdWdZLRWie5YcfnI+Un5o7P4Wy51yroRWyTWhJeA= Subject key identifier: B0:52:01:B7:2A:21:39:67:7F:13:67:63:10:6F:C2:C2:BC:0C:DE:42 Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7 Certificate serial: 019AF878E964DFC83EEBCD7FD2F9AA9F1959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft Manifest number: 1770 Signing time: Sun 07 Dec 2025 11:01:04 +0000 Manifest this update: Sun 07 Dec 2025 11:01:04 +0000 Manifest next update: Mon 08 Dec 2025 11:01:04 +0000 Files and hashes: 1: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=) 2: LOAmRNgz3AR78bC-CKjKBqCJY3M.roa (hash: xld+cbw2oRdP1v3iddUMoK+GuqeXMoAOXkKfJjjcrk8=) 3: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=) 4: gi5eF85DS2YJELAZM_ySYFsKV08.roa (hash: MIgOllfsmrhmY3owqBnBM3hgcAd1OAro3szJ6UxB+Hk=) 5: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: uiWrGUsEV3BPHbbLyAZ58n+yA194wtRyZUfTT+5bqAc=) 6: pczhsUKGHELIQkg7tKT9igyRi-A.roa (hash: Y7SOjOUl6Opwe6kgzkQEfHKGoUu9pf1pYRSzuMhv1S4=) 7: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:78:e9:64:df:c8:3e:eb:cd:7f:d2:f9:aa:9f:19:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7 Validity Not Before: Dec 7 11:01:04 2025 GMT Not After : Dec 8 11:01:04 2025 GMT Subject: CN=b05201b72a2139677f136763106fc2c2bc0cde42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:00:a8:98:fd:61:42:cc:9f:38:5d:92:9d: ee:85:4a:54:a3:47:a7:10:1d:4d:8a:f2:be:22:72: 88:ec:02:b7:2d:34:6c:9c:36:22:d7:02:51:69:d9: cc:eb:b2:6d:86:99:bc:fa:90:da:ed:87:9a:aa:aa: b4:bd:cc:4f:f1:d9:6c:f4:2c:cc:20:65:b9:93:62: f3:8f:b0:33:dc:00:ac:ec:16:72:af:61:0f:e3:99: 78:81:a5:8d:d8:19:02:cd:19:ce:1c:0a:33:c3:5e: 99:7f:1b:0c:bc:f9:8d:ac:76:ec:d9:fa:38:d9:29: 41:f8:04:27:6b:fe:21:0e:72:14:8e:8d:c6:0e:c6: 50:96:ee:d8:1b:84:a7:a9:50:fb:b5:71:39:94:f6: 63:c5:6a:55:25:2e:4c:e7:f7:9c:1b:90:fd:d4:11: 66:47:51:42:2d:d3:38:49:4d:c6:c3:e1:47:ac:4e: 7b:3a:1c:40:a4:43:b8:67:ae:22:b8:fe:ac:de:07: c1:1d:4d:f0:10:5e:cb:75:1e:86:ba:a1:97:7c:79: a1:86:71:95:02:c4:eb:fa:33:3a:1b:a0:3d:89:b7: 03:27:b5:2f:34:83:ce:cc:df:83:70:59:b6:e1:54: 7a:f7:89:f5:55:56:f2:2d:57:9f:21:a4:c1:19:86: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:52:01:B7:2A:21:39:67:7F:13:67:63:10:6F:C2:C2:BC:0C:DE:42 X509v3 Authority Key Identifier: keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:a7:9a:82:2e:90:a3:64:9e:8b:44:c0:03:04:32:73:26:5c: 2e:b5:a3:d3:68:55:fb:2e:3c:92:bd:3d:d5:0d:6e:78:11:6d: 63:69:1a:b9:0f:11:86:54:c0:4b:41:23:9b:5c:93:77:d9:ea: 87:f7:12:73:e0:91:e8:b1:c0:8b:e8:f8:69:ad:bc:32:58:ba: ba:20:da:de:e6:5d:50:f4:08:64:16:db:15:83:b4:7b:a2:72: ed:0c:9b:13:01:7d:4a:5a:15:8d:7d:77:05:cb:2d:d8:e4:68: 66:ce:9e:79:ef:36:1d:2d:9d:5d:1a:32:6f:ae:38:d4:11:ea: ff:55:92:82:24:0b:62:9e:dc:c2:85:af:18:e0:be:6d:7d:51: a7:2d:cd:97:39:a8:19:9d:36:da:cf:76:66:b0:f5:92:e6:a2: 96:cd:98:45:c8:72:3f:e7:0d:c0:27:65:15:37:eb:54:05:1b: ef:b7:ab:0d:99:32:6c:5c:ac:f8:0e:fc:59:0c:73:b2:1a:31: 17:05:b3:61:87:a5:b5:e5:47:51:51:26:96:13:30:94:06:97: 54:bb:ff:f2:36:5a:e0:3f:6a:d9:5c:0c:d3:a3:31:eb:ac:9c: 9b:5e:85:ab:55:c9:8b:2b:21:f7:40:1c:b0:34:cb:44:b4:e0: fa:59:3e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eOlk38g+681/0vmqnxlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5 MmFlYjcwHhcNMjUxMjA3MTEwMTA0WhcNMjUxMjA4MTEwMTA0WjAzMTEwLwYDVQQD EyhiMDUyMDFiNzJhMjEzOTY3N2YxMzY3NjMxMDZmYzJjMmJjMGNkZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJMAqJj9YULMnzhdkp3uhUpUo0en EB1NivK+InKI7AK3LTRsnDYi1wJRadnM67Jthpm8+pDa7Yeaqqq0vcxP8dls9CzM IGW5k2Lzj7Az3ACs7BZyr2EP45l4gaWN2BkCzRnOHAozw16ZfxsMvPmNrHbs2fo4 2SlB+AQna/4hDnIUjo3GDsZQlu7YG4SnqVD7tXE5lPZjxWpVJS5M5/ecG5D91BFm R1FCLdM4SU3Gw+FHrE57OhxApEO4Z64iuP6s3gfBHU3wEF7LdR6GuqGXfHmhhnGV AsTr+jM6G6A9ibcDJ7UvNIPOzN+DcFm24VR694n1VVbyLVefIaTBGYYHCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBSAbcqITlnfxNnYxBvwsK8DN5CMB8GA1UdIwQY MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt NDU2NWYwNGY4ZDg1LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1 LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4qeagi6Q o2Sei0TAAwQycyZcLrWj02hV+y48kr091Q1ueBFtY2kauQ8RhlTAS0Ejm1yTd9nq h/cSc+CR6LHAi+j4aa28Mli6uiDa3uZdUPQIZBbbFYO0e6Jy7QybEwF9SloVjX13 Bcst2ORoZs6eee82HS2dXRoyb6441BHq/1WSgiQLYp7cwoWvGOC+bX1Rpy3Nlzmo GZ022s92ZrD1kuails2YRchyP+cNwCdlFTfrVAUb77erDZkybFys+A78WQxzshox FwWzYYelteVHUVEmlhMwlAaXVLv/8jZa4D9q2VwM06Mx66ycm16Fq1XJiysh90Ac sDTLRLTg+lk+Xw== -----END CERTIFICATE-----Generated at Sun Dec 7 15:12:01 2025 by rpki-client