This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json) Hash identifier: cirnxfy2AJSbgHTWStJZtT07fvaJvVR9J5avfkHRE1k= Subject key identifier: C6:BE:06:8F:9C:66:D5:A2:64:A0:CD:99:FA:36:04:4A:A5:A1:06:33 Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Certificate serial: 019B1193E68F6767CF6A97B88E7B93F4B1AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft Manifest number: 0757 Signing time: Fri 12 Dec 2025 08:01:03 +0000 Manifest this update: Fri 12 Dec 2025 08:01:03 +0000 Manifest next update: Sat 13 Dec 2025 08:01:03 +0000 Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: vu1PauB1ljBh9Sd4Sq/yhBVcmhULnt7yAxKPr9HIk88=) 2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:e6:8f:67:67:cf:6a:97:b8:8e:7b:93:f4:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Validity Not Before: Dec 12 08:01:03 2025 GMT Not After : Dec 13 08:01:03 2025 GMT Subject: CN=c6be068f9c66d5a264a0cd99fa36044aa5a10633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:e9:1a:48:f2:f2:c1:ea:5c:1c:9d:c8:f8: 29:f4:31:c6:e3:74:62:e8:48:9c:a0:bb:d3:20:e7: 42:56:16:13:eb:63:82:3f:58:94:b3:fb:29:2b:3c: 6b:ac:4c:1d:49:08:40:6c:73:3f:83:e9:46:a1:c4: 91:0d:dd:b7:8c:60:f0:34:bf:ad:27:52:13:90:f4: a4:e0:8c:4c:e1:6e:a7:91:4d:37:64:b8:51:c9:73: a8:25:d4:0f:5c:73:2b:b3:b2:c1:f8:6a:2b:27:c2: dd:a7:c9:01:40:9d:77:f6:ac:67:12:2a:2a:db:2a: eb:d8:d1:7a:ff:49:3d:89:26:a7:5b:9d:4f:ad:a4: c8:2d:47:f9:59:1e:3c:c9:aa:04:b2:b0:eb:79:db: 09:c1:51:b4:0a:6b:34:1c:c1:ff:ea:59:8c:7d:f1: 6e:fe:7c:31:12:8a:a8:e1:6f:87:b2:4e:f8:10:33: 3c:11:15:ea:44:e9:82:5d:7f:05:8d:f7:fc:a6:9a: 9b:83:19:5a:eb:20:5c:3c:5c:97:d2:8c:b2:c1:3a: 28:c6:5c:20:ea:0d:93:be:0d:bf:c1:c1:81:f1:c8: 43:17:92:45:28:b9:86:b7:31:cb:a1:c7:4d:72:19: 6d:d1:8f:b4:32:5d:49:5e:62:87:d5:e4:f2:59:0c: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BE:06:8F:9C:66:D5:A2:64:A0:CD:99:FA:36:04:4A:A5:A1:06:33 X509v3 Authority Key Identifier: keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:84:60:be:d7:ef:cd:e3:62:4a:63:b0:fb:26:d9:8e:ec:18: 81:42:bd:02:99:c9:a3:f0:12:a5:d9:9e:24:2e:7f:2b:a5:50: e8:dd:b7:d2:78:1a:b1:41:a6:34:e8:e7:41:e8:22:3a:0d:5b: 32:ce:d5:1e:25:b9:bd:25:12:d7:6c:f3:04:d1:ac:b3:34:33: 9b:98:53:c9:04:3b:25:20:e0:00:53:6f:67:0e:1d:fc:aa:99: 26:c6:2b:69:93:2d:7c:7e:6f:f5:f2:b9:78:6e:f5:f6:f1:9b: 13:a3:d8:87:8c:59:58:8f:46:db:88:cf:60:e6:44:f8:41:3a: c1:b0:d3:61:fd:bf:7d:b8:20:cb:26:cf:2e:2c:88:d7:61:78: 6f:58:51:0c:b6:ef:34:b1:04:20:fc:2b:e6:80:bc:62:28:1e: c0:53:7e:c5:48:61:52:0d:21:69:65:90:37:64:86:ab:93:0e: 39:43:b5:06:54:ed:23:3e:72:51:bd:d1:80:f4:73:3f:19:d1: 4c:fe:64:39:bf:30:7a:5e:b0:d4:87:0c:b3:7a:a5:0e:ec:31: c4:51:1a:03:af:8d:9b:cd:f0:f3:86:a9:00:33:72:4a:5c:cb: 54:44:62:33:07:ac:2c:e8:86:99:55:47:dc:3f:57:75:ae:c2: 54:85:42:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk+aPZ2fPape4jnuT9LGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1 ZTUxN2QwHhcNMjUxMjEyMDgwMTAzWhcNMjUxMjEzMDgwMTAzWjAzMTEwLwYDVQQD EyhjNmJlMDY4ZjljNjZkNWEyNjRhMGNkOTlmYTM2MDQ0YWE1YTEwNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa7pGkjy8sHqXBydyPgp9DHG43Ri 6EicoLvTIOdCVhYT62OCP1iUs/spKzxrrEwdSQhAbHM/g+lGocSRDd23jGDwNL+t J1ITkPSk4IxM4W6nkU03ZLhRyXOoJdQPXHMrs7LB+GorJ8Ldp8kBQJ139qxnEioq 2yrr2NF6/0k9iSanW51PraTILUf5WR48yaoEsrDredsJwVG0Cms0HMH/6lmMffFu /nwxEoqo4W+Hsk74EDM8ERXqROmCXX8Fjff8ppqbgxla6yBcPFyX0oyywTooxlwg 6g2Tvg2/wcGB8chDF5JFKLmGtzHLocdNchlt0Y+0Ml1JXmKH1eTyWQxfVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa+Bo+cZtWiZKDNmfo2BEqloQYzMB8GA1UdIwQY MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYRgvtfv zeNiSmOw+ybZjuwYgUK9ApnJo/ASpdmeJC5/K6VQ6N230ngasUGmNOjnQegiOg1b Ms7VHiW5vSUS12zzBNGsszQzm5hTyQQ7JSDgAFNvZw4d/KqZJsYraZMtfH5v9fK5 eG719vGbE6PYh4xZWI9G24jPYOZE+EE6wbDTYf2/fbggyybPLiyI12F4b1hRDLbv NLEEIPwr5oC8YigewFN+xUhhUg0haWWQN2SGq5MOOUO1BlTtIz5yUb3RgPRzPxnR TP5kOb8wel6w1IcMs3qlDuwxxFEaA6+Nm83w84apADNySlzLVERiMwesLOiGmVVH 3D9Xda7CVIVCpg== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:18 2025 by rpki-client