This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json) Hash identifier: ftjDP1+6D4UTpW8g65jNUwp7v11KdZmmamvQBmDfzJ0= Subject key identifier: 13:CF:2A:D6:46:8B:70:84:72:18:7B:5E:45:3E:93:A0:E5:6E:1A:BE Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Certificate serial: 019B5A1AB3E9B2526C172661E5AF153EE86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 10:00:57 +0000 Manifest this update: Fri 26 Dec 2025 10:00:57 +0000 Manifest next update: Sat 27 Dec 2025 10:00:57 +0000 Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=) 2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: Hw+Fd5vRXjzvDKxr2vAEg7kI3+IRwW7Nfhhlg8qHJ3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b3:e9:b2:52:6c:17:26:61:e5:af:15:3e:e8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Validity Not Before: Dec 26 10:00:57 2025 GMT Not After : Dec 27 10:00:57 2025 GMT Subject: CN=13cf2ad6468b708472187b5e453e93a0e56e1abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:98:36:a5:ef:9b:a3:71:c4:ab:50:eb:ff: 13:c1:4f:cf:94:99:12:5c:82:35:df:78:61:48:37: d0:f9:61:de:01:5e:48:b1:ea:37:ff:85:a0:3c:e1: a4:6e:23:41:7f:64:42:89:32:48:6d:4f:a5:fb:15: 7a:af:2e:9c:30:c7:94:14:8c:37:8f:db:be:e6:6b: ae:b5:3e:c0:1b:fb:4b:71:bf:c9:18:87:71:7f:0c: 1a:cd:c3:de:09:83:86:29:92:4c:e6:85:b8:10:9c: f4:f4:a4:55:b5:b8:d2:18:8e:e9:73:48:bf:1e:de: aa:f9:f5:e0:3a:d0:1f:8a:bb:29:18:64:6f:49:93: 83:61:ba:76:66:cc:bc:98:3f:d6:58:58:76:4f:c3: 08:dc:5f:84:70:7d:0a:5f:6e:be:d9:c7:ae:c8:f2: 7b:be:4c:fc:0f:8c:8f:96:19:f1:81:7c:d4:04:17: 64:b5:22:99:ae:34:69:21:b5:87:c5:98:ff:ca:66: 6d:c1:5e:0a:59:97:46:3f:67:7f:ee:9f:9f:79:3d: f9:9c:45:30:96:58:28:92:fa:e2:6d:63:ed:f1:4b: 7f:07:9d:e0:06:d1:39:7a:34:41:55:f0:60:c9:9e: 26:af:7f:94:51:ef:6d:d1:f5:f7:fe:75:03:13:ce: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CF:2A:D6:46:8B:70:84:72:18:7B:5E:45:3E:93:A0:E5:6E:1A:BE X509v3 Authority Key Identifier: keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:17:d7:a8:91:5b:36:a9:04:0c:1c:16:6a:27:9d:b3:a9:4d: 2d:01:7a:d8:e0:77:30:20:a2:97:35:e1:aa:90:53:e4:67:bc: 14:2e:25:34:48:41:0a:ac:23:28:3f:3e:5f:8a:e0:60:df:fc: a2:6e:19:0d:51:4a:f2:78:96:d1:55:75:7c:62:90:d6:d7:42: 78:c0:eb:df:5c:a3:da:77:37:5f:39:92:9e:70:46:39:6c:58: b1:70:fa:87:63:c2:84:db:26:6b:1b:ed:f9:56:30:ad:dd:c6: 7c:fe:76:e7:a5:28:8e:4f:97:3a:9f:ad:08:52:a8:7c:97:83: 77:d1:6d:1e:d5:86:28:93:69:91:a3:34:00:63:80:82:89:1d: 04:37:d7:1d:99:bc:86:6c:e6:12:32:83:eb:46:f8:e4:98:85: 71:88:18:de:3c:1f:5e:3b:5b:b7:5e:8c:89:aa:78:22:d3:27: 5a:bd:87:d0:fb:c7:e2:19:d1:e5:14:59:cc:a4:34:7f:47:1a: 0c:76:28:d8:44:99:a5:ec:16:c2:76:ae:67:58:db:c5:38:b7: 05:db:64:b6:a6:95:cf:e4:08:05:e7:3e:25:18:62:b2:b9:d5: 38:6b:3b:79:60:5e:f3:f7:12:9f:45:1c:0a:c8:dc:8a:9d:23: 6e:fc:06:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrPpslJsFyZh5a8VPuhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGVkYWIxMjIxNWUyOWJkMzhjMWRhOWI1ZTM5NmJkMGM5 NmJlMDkwHhcNMjUxMjI2MTAwMDU3WhcNMjUxMjI3MTAwMDU3WjAzMTEwLwYDVQQD EygxM2NmMmFkNjQ2OGI3MDg0NzIxODdiNWU0NTNlOTNhMGU1NmUxYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx76YNqXvm6NxxKtQ6/8TwU/PlJkS XII133hhSDfQ+WHeAV5Iseo3/4WgPOGkbiNBf2RCiTJIbU+l+xV6ry6cMMeUFIw3 j9u+5muutT7AG/tLcb/JGIdxfwwazcPeCYOGKZJM5oW4EJz09KRVtbjSGI7pc0i/ Ht6q+fXgOtAfirspGGRvSZODYbp2Zsy8mD/WWFh2T8MI3F+EcH0KX26+2ceuyPJ7 vkz8D4yPlhnxgXzUBBdktSKZrjRpIbWHxZj/ymZtwV4KWZdGP2d/7p+feT35nEUw llgokvribWPt8Ut/B53gBtE5ejRBVfBgyZ4mr3+UUe9t0fX3/nUDE84KpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPPKtZGi3CEchh7XkU+k6Dlbhq+MB8GA1UdIwQY MBaAFC6O2rEiFeKb04wdqbXjlr0Mlr4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEt NjQzYTJmYzQ0NzNlLzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEtNjQzYTJmYzQ0NzNl LzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxfXqJFb NqkEDBwWaieds6lNLQF62OB3MCCilzXhqpBT5Ge8FC4lNEhBCqwjKD8+X4rgYN/8 om4ZDVFK8niW0VV1fGKQ1tdCeMDr31yj2nc3XzmSnnBGOWxYsXD6h2PChNsmaxvt +VYwrd3GfP5256Uojk+XOp+tCFKofJeDd9FtHtWGKJNpkaM0AGOAgokdBDfXHZm8 hmzmEjKD60b45JiFcYgY3jwfXjtbt16Miap4ItMnWr2H0PvH4hnR5RRZzKQ0f0ca DHYo2ESZpewWwnauZ1jbxTi3BdtktqaVz+QIBec+JRhisrnVOGs7eWBe8/cSn0Uc Csjcip0jbvwGJg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:50 2025 by rpki-client