This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json) Hash identifier: 1xR/WC+GFQ20gRE4N8A3CZ/TIjFXErZMQMOfEnzJJJY= Subject key identifier: 39:BA:83:41:3E:4A:28:AB:98:5B:75:C6:81:8F:8A:57:30:A9:C5:59 Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Certificate serial: 019B2061E875E81E8C2C13E118326F209F3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 05:00:45 +0000 Manifest this update: Mon 15 Dec 2025 05:00:45 +0000 Manifest next update: Tue 16 Dec 2025 05:00:45 +0000 Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=) 2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: 0hhf5XFnEhIwrHOqhNx7/keA+ZK6NRqc7DcMX4y2iI8=) 3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:e8:75:e8:1e:8c:2c:13:e1:18:32:6f:20:9f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Validity Not Before: Dec 15 05:00:45 2025 GMT Not After : Dec 16 05:00:45 2025 GMT Subject: CN=39ba83413e4a28ab985b75c6818f8a5730a9c559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:da:02:06:b5:40:5d:db:74:90:9a:0e:42: 6d:f1:3d:ce:30:a7:70:3b:21:d0:fe:24:e5:41:84: c2:ad:ab:a7:4b:ec:40:22:81:5e:ca:af:8a:01:df: 59:7a:bc:a8:b3:68:90:61:1a:9a:91:8c:07:50:bf: 3c:db:5e:15:c4:6d:27:56:ae:f5:6e:3f:85:42:7d: 46:bc:2a:00:e7:b0:be:c1:2f:f0:48:19:c0:7d:5f: d4:66:02:b4:c5:83:d3:09:2e:1d:4c:18:55:1b:e7: 90:95:30:bf:c6:60:f9:70:d6:86:2e:35:cf:2e:10: 88:9b:6c:71:99:ba:de:35:1b:d6:19:30:62:4d:3d: 57:70:d3:6d:ba:20:cf:fe:92:df:34:04:26:58:ba: 2b:97:b0:bd:ce:ee:93:b1:e9:df:40:6f:50:6a:02: 5d:f1:59:b1:e6:0a:85:8a:50:07:ae:df:37:93:77: d7:66:95:db:e3:b7:50:c2:20:db:01:c6:7a:4f:c9: 78:3c:27:1d:2e:70:8b:0c:dc:5e:be:74:8e:f1:15: e9:0d:62:77:50:f5:af:62:fd:3b:75:66:21:d6:93: 91:d4:ee:bf:a6:07:43:2b:3f:0b:71:62:70:0a:d5: 85:b9:19:28:f3:95:d2:69:f8:a8:26:a6:9a:e0:2c: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BA:83:41:3E:4A:28:AB:98:5B:75:C6:81:8F:8A:57:30:A9:C5:59 X509v3 Authority Key Identifier: keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:85:d5:57:06:2e:51:49:34:82:c1:fa:ed:56:66:a1:d8:e8: 34:f0:82:4b:60:71:53:43:1f:a0:5f:ba:3a:de:1e:27:fd:46: 7e:69:72:12:d4:1e:4f:b1:39:09:61:07:57:e7:16:aa:d5:e0: 54:c8:dc:74:e0:a0:cf:8f:86:6e:a7:7f:80:eb:4b:62:83:fd: c9:9c:a6:4a:e5:a1:7e:01:c8:82:45:f2:17:40:a2:9d:60:bb: 98:4e:1d:af:cb:ce:08:05:9f:bb:88:e6:36:1f:e1:29:0e:51: df:24:a3:2f:d3:98:a9:5f:2c:5b:be:b2:62:6e:10:b9:c4:e0: e9:67:7d:67:a1:73:26:54:4d:11:fb:a0:dd:4e:1e:43:69:5d: 25:dc:6d:85:5c:61:9e:c1:c6:02:29:e6:4a:2a:99:47:98:b0: f0:ec:85:63:06:aa:2c:2e:75:2c:7c:b2:e0:45:d2:51:e8:e3: bd:cc:b1:dd:09:ae:61:79:03:ab:eb:f0:e5:e7:40:f6:14:49: 3d:9a:6b:76:8b:cd:61:28:74:98:c3:5d:52:21:70:6c:fb:aa: 63:aa:40:ea:57:7a:d9:b4:21:4c:d0:1e:40:e6:f9:e6:de:85: 8c:82:3d:3d:e1:d7:62:38:14:cc:db:9c:18:4b:ba:82:40:21: 95:c5:df:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYeh16B6MLBPhGDJvIJ86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0 NzkyY2UwHhcNMjUxMjE1MDUwMDQ1WhcNMjUxMjE2MDUwMDQ1WjAzMTEwLwYDVQQD EygzOWJhODM0MTNlNGEyOGFiOTg1Yjc1YzY4MThmOGE1NzMwYTljNTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzbaAga1QF3bdJCaDkJt8T3OMKdw OyHQ/iTlQYTCraunS+xAIoFeyq+KAd9Zeryos2iQYRqakYwHUL88214VxG0nVq71 bj+FQn1GvCoA57C+wS/wSBnAfV/UZgK0xYPTCS4dTBhVG+eQlTC/xmD5cNaGLjXP LhCIm2xxmbreNRvWGTBiTT1XcNNtuiDP/pLfNAQmWLorl7C9zu6TsenfQG9QagJd 8Vmx5gqFilAHrt83k3fXZpXb47dQwiDbAcZ6T8l4PCcdLnCLDNxevnSO8RXpDWJ3 UPWvYv07dWYh1pOR1O6/pgdDKz8LcWJwCtWFuRko85XSafioJqaa4CykLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm6g0E+SiirmFt1xoGPilcwqcVZMB8GA1UdIwQY MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt MDJiMzM1ODJjNzQ3LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3 LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4XVVwYu UUk0gsH67VZmodjoNPCCS2BxU0MfoF+6Ot4eJ/1GfmlyEtQeT7E5CWEHV+cWqtXg VMjcdOCgz4+Gbqd/gOtLYoP9yZymSuWhfgHIgkXyF0CinWC7mE4dr8vOCAWfu4jm Nh/hKQ5R3ySjL9OYqV8sW76yYm4QucTg6Wd9Z6FzJlRNEfug3U4eQ2ldJdxthVxh nsHGAinmSiqZR5iw8OyFYwaqLC51LHyy4EXSUejjvcyx3QmuYXkDq+vw5edA9hRJ PZprdovNYSh0mMNdUiFwbPuqY6pA6ld62bQhTNAeQOb55t6FjII9PeHXYjgUzNuc GEu6gkAhlcXf3Q== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:41 2025 by rpki-client