This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json) Hash identifier: OHm4ntXR9UwX1kZkCRnkm/UQLREpBSjunqs+LhvVc9g= Subject key identifier: 3B:B0:5C:0B:2C:77:D3:A9:A0:6B:58:BA:E0:ED:A6:0C:7C:A2:A7:4F Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467 Certificate serial: 019AF23FA56C29BD911A0EB6D0B8B89E13B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft Manifest number: 0C5D Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: GIv286-shw2KQ9cHbSFZoILsF4Y.roa (hash: n0V2P6i8c6cHkiGOtEBdR3HlibGvUywK0wCobqEXaiI=) 2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: CdYADe840/cYpirmgBbl+PCWg41on21waSqffmKZmqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a5:6c:29:bd:91:1a:0e:b6:d0:b8:b8:9e:13:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=3bb05c0b2c77d3a9a06b58bae0eda60c7ca2a74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:81:49:a9:00:3f:b9:2a:3c:2f:75:00:10: 36:b0:d5:c1:5a:ce:fb:39:d4:84:69:67:da:e3:ae: 90:0e:1b:7a:1b:66:3a:1e:b0:39:63:3c:b6:6b:08: b4:7a:66:91:dd:3b:3f:95:23:bf:85:ac:13:2e:ce: 4a:bc:93:fd:5d:ba:a0:4e:c9:81:f6:94:a3:59:39: e5:33:69:ef:86:d0:ce:53:ee:56:1f:a3:ed:b1:4d: c4:e6:f9:4b:7b:76:e8:02:09:6a:36:97:e5:0d:10: d4:8e:aa:58:70:8d:8d:e4:bd:35:bf:68:57:66:e0: 8e:7f:cd:fb:db:69:e4:d6:f6:13:81:02:96:4e:a9: 26:22:21:bc:65:de:8b:51:4b:2e:4b:8a:2d:4a:68: f1:72:2c:b6:ea:3c:f9:bd:cd:54:22:60:6b:17:e0: 47:89:05:50:ec:2b:0a:bc:d3:64:ef:43:b5:9e:f6: 06:d8:d6:a1:93:4d:46:3a:7b:d1:81:3b:33:8f:68: 53:b8:db:f8:48:79:8c:1c:e1:9c:11:ae:cf:b8:ef: 7e:0a:f0:eb:91:0a:88:ec:e1:e2:36:6b:14:e8:f5: c1:90:b6:7c:94:df:c4:dd:ab:28:55:76:25:1e:8f: 05:a5:98:30:78:8b:ef:59:b6:14:f2:77:d2:81:b3: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:5C:0B:2C:77:D3:A9:A0:6B:58:BA:E0:ED:A6:0C:7C:A2:A7:4F X509v3 Authority Key Identifier: keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f8:a7:3b:e2:61:d2:eb:5e:0b:52:17:1f:a0:13:60:53:dc: e4:30:14:eb:91:83:c1:e8:b9:b1:6c:9f:01:35:34:99:ce:41: d5:9d:1e:ba:fe:83:f1:e7:71:ab:3b:59:d2:95:9d:ba:35:ad: f1:ae:58:e8:64:0d:09:64:a3:c3:e8:79:e9:47:44:27:2e:3d: d3:76:a8:d9:30:b4:3b:48:83:4e:3a:29:f5:e5:88:44:f9:4b: 4c:59:3e:1b:b1:2c:72:05:8d:ae:7e:90:d7:32:43:43:42:a2: 5a:d1:52:de:2a:a0:58:13:ce:9f:21:5a:93:34:f6:0a:19:68: 82:d9:51:68:cd:7e:15:c6:27:42:34:39:df:50:fa:4d:6f:dd: 04:a2:91:83:10:3b:94:b9:95:aa:1c:40:58:4e:af:a8:22:33: b4:da:a3:8d:72:04:ce:ad:62:60:ce:7b:e9:a5:fb:01:8b:63: 6e:55:0a:b5:f0:d0:9a:88:76:8e:a7:e8:14:e9:79:be:f0:d7: 47:32:1b:be:8e:bc:81:d1:36:54:0b:84:31:ef:9b:06:f3:e9: c1:d6:2b:d2:f6:77:db:ed:18:60:a5:b6:3c:43:84:99:0f:3f: 6e:b6:b6:c3:e1:64:07:c9:af:8b:c5:ca:01:1f:47:de:58:96: ef:4a:e4:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6VsKb2RGg620Li4nhOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDkyZWNjMzdiYWUyYjlmODFkYTAyOTM4NTgxN2Q0MzNj NTA0NjcwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EygzYmIwNWMwYjJjNzdkM2E5YTA2YjU4YmFlMGVkYTYwYzdjYTJhNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAKBSakAP7kqPC91ABA2sNXBWs77 OdSEaWfa466QDht6G2Y6HrA5Yzy2awi0emaR3Ts/lSO/hawTLs5KvJP9XbqgTsmB 9pSjWTnlM2nvhtDOU+5WH6PtsU3E5vlLe3boAglqNpflDRDUjqpYcI2N5L01v2hX ZuCOf83722nk1vYTgQKWTqkmIiG8Zd6LUUsuS4otSmjxciy26jz5vc1UImBrF+BH iQVQ7CsKvNNk70O1nvYG2Nahk01GOnvRgTszj2hTuNv4SHmMHOGcEa7PuO9+CvDr kQqI7OHiNmsU6PXBkLZ8lN/E3asoVXYlHo8FpZgweIvvWbYU8nfSgbOZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuwXAssd9OpoGtYuuDtpgx8oqdPMB8GA1UdIwQY MBaAFJdJLsw3uuK5+B2gKThYF9QzxQRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQt ZTlmMWM1OTFjZWRjLzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQtZTlmMWM1OTFjZWRj LzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfinO+Jh 0uteC1IXH6ATYFPc5DAU65GDwei5sWyfATU0mc5B1Z0euv6D8edxqztZ0pWdujWt 8a5Y6GQNCWSjw+h56UdEJy4903ao2TC0O0iDTjop9eWIRPlLTFk+G7EscgWNrn6Q 1zJDQ0KiWtFS3iqgWBPOnyFakzT2ChlogtlRaM1+FcYnQjQ531D6TW/dBKKRgxA7 lLmVqhxAWE6vqCIztNqjjXIEzq1iYM576aX7AYtjblUKtfDQmoh2jqfoFOl5vvDX RzIbvo68gdE2VAuEMe+bBvPpwdYr0vZ32+0YYKW2PEOEmQ8/bra2w+FkB8mvi8XK AR9H3liW70rkUg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:58 2025 by rpki-client