This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json) Hash identifier: F8r2WqSxxUJMsnODFYr5JVAIvP3ER3QAw/gS/xU6P/Q= Subject key identifier: 75:EF:92:AD:7A:D7:92:DF:15:3E:1D:54:EF:FD:DA:3B:69:E4:B9:FE Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Certificate serial: 019AF5E5F7C6EE1F60798E6F5CA73472812B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft Manifest number: 1676 Signing time: Sat 06 Dec 2025 23:01:20 +0000 Manifest this update: Sat 06 Dec 2025 23:01:20 +0000 Manifest next update: Sun 07 Dec 2025 23:01:20 +0000 Files and hashes: 1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=) 2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: wXKtHYD34NyK9xMxWeuUHAM3+8MZqe6RuGh3+/RLYnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:f7:c6:ee:1f:60:79:8e:6f:5c:a7:34:72:81:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Validity Not Before: Dec 6 23:01:20 2025 GMT Not After : Dec 7 23:01:20 2025 GMT Subject: CN=75ef92ad7ad792df153e1d54effdda3b69e4b9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6d:51:81:ab:4b:15:fd:60:8f:1a:0e:03:9d: 95:4f:d3:39:b3:1f:3a:1e:d6:75:2d:9b:05:ab:63: 99:af:6f:da:81:0c:d0:fe:22:ea:d6:71:03:26:ef: b5:9a:62:01:37:92:41:15:fd:4e:76:e5:50:26:55: 74:b4:70:6a:bb:5c:e8:f3:4e:c2:31:c8:90:df:9b: 67:2a:3a:26:6e:56:05:49:94:0c:c7:b0:46:e3:65: 17:31:8c:ed:6b:4e:5e:49:79:65:17:f3:87:ed:f9: 02:bb:91:9d:c0:5e:d2:75:6e:95:4d:f6:50:67:e3: 2a:30:b9:61:24:21:3f:3e:e3:aa:54:b2:ae:39:57: b5:6e:02:8a:49:2b:8b:ff:24:b3:9f:ac:8d:67:0e: a6:1b:ec:f3:05:e0:c8:59:8a:81:72:cc:f5:b2:7e: 97:1a:59:66:c4:5c:01:81:8a:bb:49:de:dd:04:a5: 1d:31:f0:d6:f3:f1:5b:bb:d0:2f:6e:4f:1a:9d:92: bd:f1:2c:f7:45:07:f7:9e:0f:7f:22:e0:d2:54:c8: c5:19:88:1d:42:64:e3:d6:af:0f:b5:8d:48:00:20: 51:bb:14:24:dc:81:30:b5:21:97:39:82:5c:3f:09: e8:1a:da:a1:3c:82:27:d2:22:e0:0b:cc:b5:c6:ba: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:92:AD:7A:D7:92:DF:15:3E:1D:54:EF:FD:DA:3B:69:E4:B9:FE X509v3 Authority Key Identifier: keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2c:bd:af:9b:e0:76:c5:98:56:21:e0:09:25:2c:5e:a0:d1: c0:11:cf:e0:1c:e0:ba:12:1f:99:15:ba:4a:54:dd:52:ef:d0: 17:0b:a6:d1:95:4f:17:95:39:5a:8c:a8:19:8e:a9:6e:cf:0b: bf:0d:12:1a:fa:26:f6:1a:2c:73:77:f6:c9:6d:7f:53:b3:58: 7b:09:99:91:ac:7a:67:c0:49:35:13:33:48:9d:be:c7:75:8d: 83:ba:a9:82:da:45:5d:fd:93:d6:e0:4c:f1:12:9d:60:85:39: 32:9c:32:29:5a:44:28:b2:72:d4:2b:d1:31:44:ae:68:41:58: 13:51:0a:2f:70:fa:c6:9e:58:2f:20:24:df:b7:b5:1f:4c:03: f0:02:76:09:5c:a7:7e:c5:44:fd:5f:d7:76:a7:7d:3f:77:86: 9c:41:f7:c5:eb:31:23:7e:2a:1a:52:c8:a6:6b:17:7a:e1:2d: 87:2f:61:a8:99:b9:56:71:9a:7e:b0:f4:08:1e:f1:e8:dc:9a: 51:70:90:25:49:9b:79:94:80:94:31:86:6f:e8:95:10:eb:93: ea:38:92:87:43:69:24:d9:7a:5d:da:97:63:03:1d:5b:34:43: 71:37:a9:7c:6c:c2:f6:3c:3a:0f:af:68:27:30:40:62:e7:ab: 1e:47:8b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ffG7h9geY5vXKc0coErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI3Yzg3Y2JiZmMyNjFhMjc0ZTljYjFiMDk1MDI2YTgw YzYxMzYwHhcNMjUxMjA2MjMwMTIwWhcNMjUxMjA3MjMwMTIwWjAzMTEwLwYDVQQD Eyg3NWVmOTJhZDdhZDc5MmRmMTUzZTFkNTRlZmZkZGEzYjY5ZTRiOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m1RgatLFf1gjxoOA52VT9M5sx86 HtZ1LZsFq2OZr2/agQzQ/iLq1nEDJu+1mmIBN5JBFf1OduVQJlV0tHBqu1zo807C MciQ35tnKjomblYFSZQMx7BG42UXMYzta05eSXllF/OH7fkCu5GdwF7SdW6VTfZQ Z+MqMLlhJCE/PuOqVLKuOVe1bgKKSSuL/ySzn6yNZw6mG+zzBeDIWYqBcsz1sn6X GllmxFwBgYq7Sd7dBKUdMfDW8/Fbu9Avbk8anZK98Sz3RQf3ng9/IuDSVMjFGYgd QmTj1q8PtY1IACBRuxQk3IEwtSGXOYJcPwnoGtqhPIIn0iLgC8y1xrqg1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXvkq1615LfFT4dVO/92jtp5Ln+MB8GA1UdIwQY MBaAFC6CfIfLv8JhonTpyxsJUCaoDGE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83YjIwYmQtZmM0ZS00Y2JmLWFkMWIt MjRmYTEwOTY1ZTg1LzEvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83YjIwYmQtZmM0ZS00Y2JmLWFkMWItMjRmYTEwOTY1ZTg1 LzEvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiy9r5vg dsWYViHgCSUsXqDRwBHP4BzguhIfmRW6SlTdUu/QFwum0ZVPF5U5WoyoGY6pbs8L vw0SGvom9hosc3f2yW1/U7NYewmZkax6Z8BJNRMzSJ2+x3WNg7qpgtpFXf2T1uBM 8RKdYIU5MpwyKVpEKLJy1CvRMUSuaEFYE1EKL3D6xp5YLyAk37e1H0wD8AJ2CVyn fsVE/V/Xdqd9P3eGnEH3xesxI34qGlLIpmsXeuEthy9hqJm5VnGafrD0CB7x6Nya UXCQJUmbeZSAlDGGb+iVEOuT6jiSh0NpJNl6XdqXYwMdWzRDcTepfGzC9jw6D69o JzBAYuerHkeLRA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:02 2025 by rpki-client