This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json) Hash identifier: Xs/8E/s55bUTjAePHkb1mq4t1aD1GQLl0H35n765WkI= Subject key identifier: A7:16:DD:0B:E7:A4:B5:6A:AD:16:12:FF:6F:32:31:67:BC:17:17:B0 Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d Certificate serial: 019B1D98513205AD0540D8642A93BD666F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft Manifest number: 175F Signing time: Sun 14 Dec 2025 16:01:20 +0000 Manifest this update: Sun 14 Dec 2025 16:01:20 +0000 Manifest next update: Mon 15 Dec 2025 16:01:20 +0000 Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=) 2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=) 3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: ms9UQTNPIdS2l0Shn5y9X5JHoVqsxTjyUfZZCrCjhCI=) 4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:51:32:05:ad:05:40:d8:64:2a:93:bd:66:6f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d Validity Not Before: Dec 14 16:01:20 2025 GMT Not After : Dec 15 16:01:20 2025 GMT Subject: CN=a716dd0be7a4b56aad1612ff6f323167bc1717b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:0c:2d:48:29:58:80:43:06:6a:72:53:55: fc:0c:5b:c0:d5:88:59:10:85:c2:96:09:2c:4d:94: 60:a5:2a:45:fb:89:74:96:ce:6f:bb:29:86:7e:5c: e9:65:8a:9d:5e:eb:78:d0:3e:fc:f3:fa:fe:7a:5a: c8:69:24:05:72:5f:c9:a8:7e:5a:3f:60:0c:3d:b5: f2:d2:44:88:6a:cd:a0:eb:ff:54:ce:c9:3f:e9:0d: 27:8e:03:d5:08:50:52:3f:00:07:63:0b:9f:1b:cf: 22:0e:59:38:09:a9:a4:f9:7b:75:41:ee:77:9f:5f: d5:80:8a:17:0e:5e:08:50:1c:fb:82:32:fc:a3:5f: 52:1f:ac:ee:38:65:e8:38:70:bc:ba:48:72:40:f4: 5d:8d:1b:70:03:04:4f:6e:92:06:41:bc:58:91:d0: 54:29:a4:f7:5d:9b:e8:c8:43:3d:e4:a5:fb:d0:3f: 38:a6:dd:1c:73:78:a3:0b:ad:d4:97:80:b0:df:3b: f1:13:5c:9a:00:ba:98:2c:e1:de:a6:dd:90:47:9a: b1:90:71:df:0f:25:02:27:fc:8b:e2:db:dc:06:f0: 14:cd:f2:33:ca:25:26:4a:f3:2d:75:f4:1f:7d:fc: 5d:ef:22:a6:f5:15:11:b5:5a:2f:62:2a:bb:97:94: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:16:DD:0B:E7:A4:B5:6A:AD:16:12:FF:6F:32:31:67:BC:17:17:B0 X509v3 Authority Key Identifier: keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2d:ca:bc:b2:8a:c1:0b:0b:eb:59:b5:b7:96:a6:09:c8:2d: db:78:09:48:2b:1d:39:53:7b:f6:c3:ec:b0:38:44:04:93:a9: fd:41:30:57:91:f6:6a:ef:7a:15:8e:77:c9:28:78:83:f5:e0: 2d:de:1d:45:f3:a8:06:65:c8:55:67:c1:73:f9:06:bb:7f:e6: 52:07:f8:87:84:9f:b9:9a:01:6a:bf:56:af:d0:ff:f4:fe:ba: 9e:d7:40:52:4a:28:74:a7:ca:76:2c:4a:4f:4b:5a:1f:c5:6e: 95:ae:dd:7d:c3:e4:63:34:ff:8d:11:96:47:4b:d9:59:ec:93: 22:c3:1b:77:11:a3:ca:03:81:0e:e7:9a:85:61:f5:23:ac:f7: 12:69:f9:b7:59:cc:04:79:78:b6:8c:05:dd:4c:3d:c0:8f:11: aa:df:25:99:b5:fb:19:5f:db:be:35:04:ef:02:76:1d:7b:38: 09:ff:96:c5:8c:29:5a:c6:82:ee:2e:6e:81:5e:3f:19:b8:9e: 85:50:b2:5d:9d:03:92:a9:27:56:e1:60:71:5d:b5:6c:76:6b: 9f:1c:09:f9:f3:18:4b:cb:31:21:d3:1e:ba:6c:ba:93:83:9c: a3:ee:0b:35:48:f4:4b:c4:4e:95:7b:2d:0e:02:d7:5b:61:ec: ae:82:6b:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmFEyBa0FQNhkKpO9Zm80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5 MmUzN2QwHhcNMjUxMjE0MTYwMTIwWhcNMjUxMjE1MTYwMTIwWjAzMTEwLwYDVQQD EyhhNzE2ZGQwYmU3YTRiNTZhYWQxNjEyZmY2ZjMyMzE2N2JjMTcxN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBQMLUgpWIBDBmpyU1X8DFvA1YhZ EIXClgksTZRgpSpF+4l0ls5vuymGflzpZYqdXut40D788/r+elrIaSQFcl/JqH5a P2AMPbXy0kSIas2g6/9Uzsk/6Q0njgPVCFBSPwAHYwufG88iDlk4Camk+Xt1Qe53 n1/VgIoXDl4IUBz7gjL8o19SH6zuOGXoOHC8ukhyQPRdjRtwAwRPbpIGQbxYkdBU KaT3XZvoyEM95KX70D84pt0cc3ijC63Ul4Cw3zvxE1yaALqYLOHept2QR5qxkHHf DyUCJ/yL4tvcBvAUzfIzyiUmSvMtdfQfffxd7yKm9RURtVovYiq7l5TjXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcW3QvnpLVqrRYS/28yMWe8FxewMB8GA1UdIwQY MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt NjM4ZGNmYTEzMDAzLzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC3KvLKK wQsL61m1t5amCcgt23gJSCsdOVN79sPssDhEBJOp/UEwV5H2au96FY53ySh4g/Xg Ld4dRfOoBmXIVWfBc/kGu3/mUgf4h4SfuZoBar9Wr9D/9P66ntdAUkoodKfKdixK T0taH8Vula7dfcPkYzT/jRGWR0vZWeyTIsMbdxGjygOBDueahWH1I6z3Emn5t1nM BHl4towF3Uw9wI8Rqt8lmbX7GV/bvjUE7wJ2HXs4Cf+WxYwpWsaC7i5ugV4/Gbie hVCyXZ0DkqknVuFgcV21bHZrnxwJ+fMYS8sxIdMeumy6k4Oco+4LNUj0S8ROlXst DgLXW2HsroJrMw== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:13 2025 by rpki-client