This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json) Hash identifier: ZWSVPw9ygHMfh53Ul9ebRI9Ckh+yoofA0iEYVQAgdOM= Subject key identifier: 8C:F1:DD:D5:44:EA:0C:3D:AE:2C:54:90:37:DA:2F:5B:2C:5F:7D:15 Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30 Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330 Certificate serial: 019B2407CDCB7CB7D5783658ED5AB77A93C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 22:00:49 +0000 Manifest this update: Mon 15 Dec 2025 22:00:49 +0000 Manifest next update: Tue 16 Dec 2025 22:00:49 +0000 Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: 8u8/k42Skg9b48YatS39epO12qroNnHvsuhTZyP0Zk4=) 2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=) 3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:cd:cb:7c:b7:d5:78:36:58:ed:5a:b7:7a:93:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330 Validity Not Before: Dec 15 22:00:49 2025 GMT Not After : Dec 16 22:00:49 2025 GMT Subject: CN=8cf1ddd544ea0c3dae2c549037da2f5b2c5f7d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:43:c6:4c:ea:b1:52:43:63:ee:70:39:bb: 8e:62:8f:6a:a1:e8:1b:e7:08:70:6a:9b:15:7b:6b: 8f:25:1c:ad:a4:eb:38:58:57:98:1d:54:11:eb:61: eb:49:ef:86:b9:99:bb:43:d2:35:59:3a:6d:02:81: 78:cb:48:4a:06:a5:cd:ae:1b:b1:f8:ea:bc:c8:95: 3c:a4:a4:b8:7e:c8:d8:65:7f:d3:bf:c7:ab:6c:44: a8:75:84:10:d6:11:8d:7a:37:54:35:5e:4d:c8:cb: 76:6f:73:81:48:52:b2:5d:ea:68:bc:28:17:df:d6: b7:d3:06:15:bc:b0:d8:06:ae:f7:ac:0e:0a:06:3b: 2f:fb:88:d2:2b:e6:a5:09:68:de:26:80:6d:e5:dc: a6:43:35:20:2b:d2:14:cf:8d:bc:f8:52:7c:71:da: 17:22:6d:3c:ff:2d:66:9b:03:af:7b:53:56:56:c3: 97:ef:20:03:6c:f3:65:8b:c0:22:24:9c:cc:13:b4: 5d:b6:51:0e:bf:5e:b1:9d:bb:0d:e4:52:4b:80:ef: 3d:69:e1:91:98:90:5a:59:60:98:a1:3a:08:72:b7: 3a:71:b7:ff:ab:c1:a0:97:3e:0d:63:04:81:15:18: 09:fc:06:b1:64:79:6b:86:1c:45:d6:02:d1:a3:e5: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:DD:D5:44:EA:0C:3D:AE:2C:54:90:37:DA:2F:5B:2C:5F:7D:15 X509v3 Authority Key Identifier: keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:00:ab:90:e2:18:34:d3:f6:f3:e8:7d:70:68:34:41:0a:20: 71:74:eb:aa:ea:b9:3f:32:be:b0:02:fe:15:a3:be:c5:45:01: b8:a5:65:0e:d2:80:cf:ba:3d:5f:48:65:c1:9e:e8:ef:1b:ef: 79:e2:3a:e6:e7:be:4d:8f:45:45:d1:34:61:7b:5c:78:5f:5b: 50:dc:43:35:b1:53:5c:27:22:e0:a0:59:53:0e:c6:97:d4:03: 61:25:2d:9a:be:0e:87:a9:85:ec:47:6b:e7:dd:e7:28:f5:34: d7:eb:19:a8:af:76:70:e6:99:b9:4d:ff:9b:1a:35:90:38:46: d7:17:9e:be:1a:0a:55:b2:dc:3f:da:f3:79:df:fb:d8:75:55: f8:32:b4:f8:3b:61:d7:4d:40:36:df:a7:90:54:03:ba:3f:80: 22:9e:81:11:1a:a9:51:cb:6b:d7:64:b6:6e:37:42:af:fa:79: 3b:16:c5:a1:b2:ab:2e:4d:85:e7:d7:45:84:f2:7e:74:49:a7: 66:fe:16:d9:49:ec:01:5c:7b:48:f7:22:7a:55:1b:ff:25:cc: 4a:41:13:8a:e1:71:03:26:ad:8a:21:57:ee:a9:33:0a:78:45: da:37:e0:dc:1d:10:47:02:79:83:aa:4b:6a:b1:c4:90:eb:9b: ac:e0:88:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB83LfLfVeDZY7Vq3epPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2 MGYzMzAwHhcNMjUxMjE1MjIwMDQ5WhcNMjUxMjE2MjIwMDQ5WjAzMTEwLwYDVQQD Eyg4Y2YxZGRkNTQ0ZWEwYzNkYWUyYzU0OTAzN2RhMmY1YjJjNWY3ZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbNDxkzqsVJDY+5wObuOYo9qoegb 5whwapsVe2uPJRytpOs4WFeYHVQR62HrSe+GuZm7Q9I1WTptAoF4y0hKBqXNrhux +Oq8yJU8pKS4fsjYZX/Tv8erbESodYQQ1hGNejdUNV5NyMt2b3OBSFKyXepovCgX 39a30wYVvLDYBq73rA4KBjsv+4jSK+alCWjeJoBt5dymQzUgK9IUz428+FJ8cdoX Im08/y1mmwOve1NWVsOX7yADbPNli8AiJJzME7RdtlEOv16xnbsN5FJLgO89aeGR mJBaWWCYoToIcrc6cbf/q8Gglz4NYwSBFRgJ/AaxZHlrhhxF1gLRo+WcqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzx3dVE6gw9rixUkDfaL1ssX30VMB8GA1UdIwQY MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwCrkOIY NNP28+h9cGg0QQogcXTrquq5PzK+sAL+FaO+xUUBuKVlDtKAz7o9X0hlwZ7o7xvv eeI65ue+TY9FRdE0YXtceF9bUNxDNbFTXCci4KBZUw7Gl9QDYSUtmr4Oh6mF7Edr 593nKPU01+sZqK92cOaZuU3/mxo1kDhG1xeevhoKVbLcP9rzed/72HVV+DK0+Dth 101ANt+nkFQDuj+AIp6BERqpUctr12S2bjdCr/p5OxbFobKrLk2F59dFhPJ+dEmn Zv4W2UnsAVx7SPcielUb/yXMSkETiuFxAyatiiFX7qkzCnhF2jfg3B0QRwJ5g6pL arHEkOubrOCITg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:36 2025 by rpki-client