This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json) Hash identifier: pioBmxOyxnrBjLces1L2PTFUmjFUaUPETJ123zE0Rtg= Subject key identifier: C9:9E:31:FD:78:40:89:42:27:56:5E:96:5D:57:1D:8F:C6:AC:30:ED Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Certificate serial: 019B31555437D41BEC6A9897D1E2FA9DFDC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft Manifest number: 109A Signing time: Thu 18 Dec 2025 12:00:34 +0000 Manifest this update: Thu 18 Dec 2025 12:00:34 +0000 Manifest next update: Fri 19 Dec 2025 12:00:34 +0000 Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=) 2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: L/eLv83Ji35tDbQjy73F3aTJOdKyapbY5ZocS1n/0cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:54:37:d4:1b:ec:6a:98:97:d1:e2:fa:9d:fd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Validity Not Before: Dec 18 12:00:34 2025 GMT Not After : Dec 19 12:00:34 2025 GMT Subject: CN=c99e31fd7840894227565e965d571d8fc6ac30ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:2c:c8:73:66:1a:bd:a3:75:86:69:47:7e: 64:36:6e:9d:5d:b1:4e:49:6d:6f:46:7c:91:bf:6b: 7a:82:03:83:67:f0:35:9d:ac:a9:6e:b3:c0:bb:08: ad:b2:4c:1e:47:f3:fe:db:fa:b5:f4:77:fe:6e:b0: c5:28:12:9e:53:b5:9c:ea:b3:ec:23:e5:ff:74:1f: f5:01:9e:03:d0:1a:f9:f5:a1:71:1f:77:69:82:12: 60:a6:65:47:a4:dc:9f:2f:63:8c:e3:f7:d6:8d:3f: aa:32:3a:de:f5:36:60:a9:7b:f8:fd:a1:33:72:78: 6b:10:c1:c9:45:ac:ac:df:52:26:00:f4:66:84:20: d8:76:a1:cc:21:5f:2c:03:60:ab:bb:0b:ca:05:5a: 62:ed:85:bc:cd:4a:c7:f6:e7:32:67:05:84:78:36: fe:65:78:03:81:8b:5d:eb:95:4e:ac:84:cb:2b:09: ce:7f:0f:11:bf:f5:7a:55:0a:84:2f:75:37:e2:91: a2:f7:3b:21:6d:d4:fa:02:41:e4:c4:f5:db:cb:1f: 08:b8:94:e5:8c:81:9d:22:54:e9:94:03:7d:7b:9e: 01:36:8b:62:66:6b:e6:45:c4:f7:6f:7f:fd:59:ed: a1:d8:18:50:07:22:3c:92:e7:4d:aa:bc:10:55:84: 5c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9E:31:FD:78:40:89:42:27:56:5E:96:5D:57:1D:8F:C6:AC:30:ED X509v3 Authority Key Identifier: keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:28:51:e7:48:5f:b9:a9:28:17:ad:6d:a7:1e:dc:59:4e:64: 82:3d:90:7f:48:8b:65:ba:90:8c:42:81:c6:3b:69:0f:65:88: e3:fe:07:7f:b2:91:9f:39:ae:85:76:71:c4:10:f9:b4:fb:a9: 7a:ea:b4:f3:cc:dd:e8:a4:3e:1a:84:b3:3e:ae:eb:8f:0e:61: 18:eb:76:d0:4a:c7:8e:df:b5:de:fb:ea:cb:e8:97:9d:ef:4d: e8:75:35:00:f1:09:57:42:70:46:a8:28:ae:db:c6:29:cd:0e: 13:66:33:53:f1:34:bd:b2:5d:fb:36:03:37:4a:0b:2f:4e:5c: ce:52:5e:03:89:89:52:6e:23:1c:8c:fe:48:83:79:bb:88:b4: 23:3b:c5:e1:63:bd:d4:ac:2d:7c:84:ef:5a:9e:02:ac:c4:3b: cf:a0:9d:99:85:54:32:23:9c:17:8d:1f:3a:2e:eb:36:6d:dc: 5e:cd:59:f4:d4:09:f7:45:bb:aa:6e:e6:c0:2f:e6:e1:7a:33: 9e:7c:81:d4:58:7b:87:4d:26:e5:02:e4:6b:a1:c1:7c:ee:4f: 5e:72:12:9e:be:66:f6:96:2a:37:85:d2:ce:cf:bd:0f:29:f7: 27:4a:33:38:31:cd:d9:85:80:07:8e:31:a3:33:27:d8:ce:6c: 03:5b:ce:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVVQ31BvsapiX0eL6nf3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw OGMzODUwHhcNMjUxMjE4MTIwMDM0WhcNMjUxMjE5MTIwMDM0WjAzMTEwLwYDVQQD EyhjOTllMzFmZDc4NDA4OTQyMjc1NjVlOTY1ZDU3MWQ4ZmM2YWMzMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpIsyHNmGr2jdYZpR35kNm6dXbFO SW1vRnyRv2t6ggODZ/A1naypbrPAuwitskweR/P+2/q19Hf+brDFKBKeU7Wc6rPs I+X/dB/1AZ4D0Br59aFxH3dpghJgpmVHpNyfL2OM4/fWjT+qMjre9TZgqXv4/aEz cnhrEMHJRays31ImAPRmhCDYdqHMIV8sA2CruwvKBVpi7YW8zUrH9ucyZwWEeDb+ ZXgDgYtd65VOrITLKwnOfw8Rv/V6VQqEL3U34pGi9zshbdT6AkHkxPXbyx8IuJTl jIGdIlTplAN9e54BNotiZmvmRcT3b3/9We2h2BhQByI8kudNqrwQVYRc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmeMf14QIlCJ1Zell1XHY/GrDDtMB8GA1UdIwQY MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtChR50hf uakoF61tpx7cWU5kgj2Qf0iLZbqQjEKBxjtpD2WI4/4Hf7KRnzmuhXZxxBD5tPup euq088zd6KQ+GoSzPq7rjw5hGOt20ErHjt+13vvqy+iXne9N6HU1APEJV0JwRqgo rtvGKc0OE2YzU/E0vbJd+zYDN0oLL05czlJeA4mJUm4jHIz+SIN5u4i0IzvF4WO9 1KwtfITvWp4CrMQ7z6CdmYVUMiOcF40fOi7rNm3cXs1Z9NQJ90W7qm7mwC/m4Xoz nnyB1Fh7h00m5QLka6HBfO5PXnISnr5m9pYqN4XSzs+9Dyn3J0ozODHN2YWAB44x ozMn2M5sA1vOxQ== -----END CERTIFICATE-----Generated at Thu Dec 18 21:47:29 2025 by rpki-client