This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json) Hash identifier: TpEyoK5aI7BggxwPY+Evw18ZCJg0nzF0t2mmS1w8paE= Subject key identifier: 3D:EB:A5:00:06:F5:FB:C7:80:F7:20:38:B4:40:2B:B4:BB:C4:93:E0 Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac Certificate serial: 019B2EFA465132B7D07C3FC41C4D76E2D4E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 01:01:52 +0000 Manifest this update: Thu 18 Dec 2025 01:01:52 +0000 Manifest next update: Fri 19 Dec 2025 01:01:52 +0000 Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: hxag3ZXra6EBPjgPnFYO1LbWWFECpgyJpUmUez86RHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:46:51:32:b7:d0:7c:3f:c4:1c:4d:76:e2:d4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac Validity Not Before: Dec 18 01:01:52 2025 GMT Not After : Dec 19 01:01:52 2025 GMT Subject: CN=3deba50006f5fbc780f72038b4402bb4bbc493e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:a0:e8:a6:4c:8f:a9:9a:fa:51:70:4f:f3: 1b:2d:01:b3:0c:88:f4:74:ce:46:95:01:e3:c8:9f: ea:95:5e:96:16:60:23:bb:63:47:4f:cd:cb:91:8e: dc:fd:b8:90:73:bf:42:db:f8:67:ef:19:ec:2b:5a: 3c:95:ae:0f:f1:64:cc:15:dd:f3:de:3c:93:eb:19: a5:3f:a3:09:de:83:f8:1e:de:f0:dc:65:d1:05:6c: 31:f8:7f:b8:b8:00:30:6b:e6:5f:5a:f7:1a:c9:c8: da:ec:d8:cb:83:25:04:c3:36:f1:64:d1:75:0a:37: f5:f0:1a:a0:be:bb:4c:cf:47:9e:6c:59:b1:c5:46: f0:87:e1:7d:27:d3:d6:c7:bb:f9:88:69:41:ae:f1: 01:32:48:66:6a:72:78:c7:e1:ed:3d:08:df:d7:0a: 0e:93:0d:45:e2:dc:77:f4:5f:98:db:40:95:df:4d: 97:47:cf:7a:ee:e6:3f:2d:1e:2f:d4:ed:ba:c8:46: 1d:9f:87:f8:1a:05:d9:06:ce:66:ba:e1:5b:d4:e1: c0:8d:5f:6a:ba:ce:98:29:56:8b:84:3a:08:a9:7d: 20:c0:cf:a8:ff:f4:c1:8c:3a:90:9b:3d:aa:bc:ef: fb:0c:90:80:3e:b7:07:53:65:95:df:29:1d:c3:7e: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:A5:00:06:F5:FB:C7:80:F7:20:38:B4:40:2B:B4:BB:C4:93:E0 X509v3 Authority Key Identifier: keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:44:25:2b:4b:87:e5:66:58:61:c8:89:35:78:4d:d1:eb: 61:2e:96:49:b6:24:7d:94:e1:ae:8a:64:ef:3c:4d:fb:a9:6a: e5:46:ec:83:18:f9:38:0a:07:8c:aa:61:5c:72:9e:19:51:d6: 87:d0:0a:97:97:a2:48:15:68:f8:be:1d:37:eb:34:33:dd:a2: 6a:8c:c3:5f:1f:62:dc:16:93:79:87:b3:39:a4:9a:1c:33:b3: 02:cc:67:ab:01:09:53:26:c4:62:52:48:1d:0f:76:16:05:8e: 41:94:c1:0b:55:cb:be:09:ce:e3:75:9d:cc:2e:cf:49:9c:95: 48:d3:d3:98:98:37:e6:53:c2:67:af:44:a7:21:18:30:2c:f4: f5:d9:41:ad:75:fd:d3:93:0c:92:fa:85:04:84:45:30:d3:d3: 23:80:6a:87:20:11:8a:3c:be:79:5c:ed:10:68:62:c0:6f:31: 52:31:90:d8:26:6d:d7:ff:bd:7d:03:69:21:2a:5c:e2:8a:51: c5:6d:b1:55:de:08:33:39:b7:64:07:30:8a:9f:4f:cd:6b:1a: 50:48:6a:5a:41:19:ed:90:fe:7c:8a:3c:e4:58:d4:7c:28:77: 36:40:f5:34:b5:6b:87:77:27:79:38:a6:1c:1a:10:8c:72:65: 4b:c9:29:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+kZRMrfQfD/EHE124tTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWJjMTAzNTRkMzFiZmRmN2MxZDgzNTEwZGYwZGQ2NmNl ODM1YWMwHhcNMjUxMjE4MDEwMTUyWhcNMjUxMjE5MDEwMTUyWjAzMTEwLwYDVQQD EygzZGViYTUwMDA2ZjVmYmM3ODBmNzIwMzhiNDQwMmJiNGJiYzQ5M2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU+g6KZMj6ma+lFwT/MbLQGzDIj0 dM5GlQHjyJ/qlV6WFmAju2NHT83LkY7c/biQc79C2/hn7xnsK1o8la4P8WTMFd3z 3jyT6xmlP6MJ3oP4Ht7w3GXRBWwx+H+4uAAwa+ZfWvcaycja7NjLgyUEwzbxZNF1 Cjf18BqgvrtMz0eebFmxxUbwh+F9J9PWx7v5iGlBrvEBMkhmanJ4x+HtPQjf1woO kw1F4tx39F+Y20CV302XR8967uY/LR4v1O26yEYdn4f4GgXZBs5muuFb1OHAjV9q us6YKVaLhDoIqX0gwM+o//TBjDqQmz2qvO/7DJCAPrcHU2WV3ykdw34quwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3rpQAG9fvHgPcgOLRAK7S7xJPgMB8GA1UdIwQY MBaAFJTrwQNU0xv998HYNRDfDdZs6DWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3Zjgt Yjc3ODAzOTZmYWY0LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3ZjgtYjc3ODAzOTZmYWY0 LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU9EJStL h+VmWGHIiTV4TdHrYS6WSbYkfZThropk7zxN+6lq5Ubsgxj5OAoHjKphXHKeGVHW h9AKl5eiSBVo+L4dN+s0M92iaozDXx9i3BaTeYezOaSaHDOzAsxnqwEJUybEYlJI HQ92FgWOQZTBC1XLvgnO43WdzC7PSZyVSNPTmJg35lPCZ69EpyEYMCz09dlBrXX9 05MMkvqFBIRFMNPTI4BqhyARijy+eVztEGhiwG8xUjGQ2CZt1/+9fQNpISpc4opR xW2xVd4IMzm3ZAcwip9PzWsaUEhqWkEZ7ZD+fIo85FjUfCh3NkD1NLVrh3cneTim HBoQjHJlS8kpJw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:28:19 2025 by rpki-client