This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json) Hash identifier: xYTxuZrLpX+uaPOUKl8xHOaOCSoGMwxYimOOe9hq3pU= Subject key identifier: 42:0A:2A:70:14:23:04:33:0D:B7:F7:4C:B0:3B:13:68:04:36:08:81 Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Certificate serial: 019AF12D14DF3487F06F74EF38DFCF3BA173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft Manifest number: 0890 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=) 2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: G9QECqT6QbUUv55zFY/Hc3W2nh/We05JN8FApXYQvHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:df:34:87:f0:6f:74:ef:38:df:cf:3b:a1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=420a2a70142304330db7f74cb03b136804360881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:9f:cb:16:ea:4e:26:e8:b2:fd:cf:76:cf: 80:09:7c:2e:82:a6:3e:ce:13:4d:6d:be:99:98:81: 9b:41:10:b6:96:a8:50:00:92:13:f1:e4:b0:c7:30: 5b:0a:87:40:e8:56:9e:5a:6e:e2:e1:48:4c:cd:3d: c4:ff:b0:5a:64:84:29:9c:48:68:bb:e9:16:f6:f5: c3:17:c5:a4:bc:f9:77:3c:d0:14:f7:5a:ef:f9:d3: 93:6f:90:fa:76:1e:10:8d:bd:8b:24:b0:d4:25:40: bf:87:78:af:66:44:5d:f4:16:ba:ec:a5:d6:24:89: 95:90:d6:36:e2:e6:37:0d:83:a9:5a:6b:7a:d6:35: 56:65:1f:a9:be:e2:39:c6:73:8b:04:c7:9d:93:b1: 13:fe:53:90:10:19:0f:de:33:c4:64:65:c1:21:90: c6:eb:fb:c1:65:7a:4e:5c:37:fc:74:7b:0e:e5:44: c8:83:c4:ae:2f:6c:8f:2e:40:c2:c5:c0:4b:96:9b: 98:37:8d:2b:11:bd:4b:fd:3a:3b:34:90:2b:b9:42: 1f:8d:d7:6a:e9:69:d1:48:4b:68:22:a1:29:ab:3a: bd:00:68:96:fb:fa:04:69:0b:f0:34:19:70:94:4d: dd:8b:fe:11:ce:57:4a:4f:ee:63:7f:fd:64:fa:2d: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:2A:70:14:23:04:33:0D:B7:F7:4C:B0:3B:13:68:04:36:08:81 X509v3 Authority Key Identifier: keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:17:5e:05:1b:52:d6:7a:7c:a2:0f:6d:2f:4f:1e:7b:99:ca: 58:e3:b1:bc:cc:6a:53:9e:ef:3b:78:b0:fb:98:91:f5:bb:17: 3c:00:4d:98:08:4a:e6:2e:1a:50:ce:cf:42:6f:8a:3a:c1:ed: e7:c0:f3:0d:0f:f9:04:5c:7d:14:1e:b1:97:4c:83:1c:18:f9: ad:47:33:43:a3:91:06:ba:58:ce:7e:61:71:12:24:2b:0f:39: 70:38:1f:ff:1c:94:88:eb:78:9a:43:7b:8c:f7:81:f2:80:89: 18:f4:c0:9f:1c:f0:fc:5a:4e:96:70:73:05:8c:89:a7:a8:19: 21:c7:c8:b9:45:04:db:d9:b8:ce:96:ab:ea:45:35:23:dc:a7: 4b:0c:87:d1:a7:a0:74:82:e5:ea:ce:86:9d:58:36:61:ef:f6: eb:55:91:b9:2b:ed:3f:53:1f:6d:5a:43:90:b4:b0:2f:22:4d: db:a4:eb:43:fe:ec:2f:0c:80:a8:2a:48:57:50:26:0f:05:6e: bf:44:fe:b9:ea:bf:72:d4:81:65:33:d0:bb:8d:45:8b:18:e2: ac:d0:dd:e1:1f:b9:c2:30:83:e7:7a:e9:9d:12:97:02:0e:c5: 14:ac:6f:86:9b:7c:29:45:87:77:e9:32:c4:96:49:4d:cd:40: 54:3a:10:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRTfNIfwb3TvON/PO6FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2M5MDNiNGQwZTgzYmM4YjJkNDU0MzEzNmU5Y2Q1ZjM5 ODY0ZjUwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg0MjBhMmE3MDE0MjMwNDMzMGRiN2Y3NGNiMDNiMTM2ODA0MzYwODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoifyxbqTibosv3Pds+ACXwugqY+ zhNNbb6ZmIGbQRC2lqhQAJIT8eSwxzBbCodA6FaeWm7i4UhMzT3E/7BaZIQpnEho u+kW9vXDF8WkvPl3PNAU91rv+dOTb5D6dh4Qjb2LJLDUJUC/h3ivZkRd9Ba67KXW JImVkNY24uY3DYOpWmt61jVWZR+pvuI5xnOLBMedk7ET/lOQEBkP3jPEZGXBIZDG 6/vBZXpOXDf8dHsO5UTIg8SuL2yPLkDCxcBLlpuYN40rEb1L/To7NJAruUIfjddq 6WnRSEtoIqEpqzq9AGiW+/oEaQvwNBlwlE3di/4RzldKT+5jf/1k+i3/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIKKnAUIwQzDbf3TLA7E2gENgiBMB8GA1UdIwQY MBaAFJQ8kDtNDoO8iy1FQxNunNXzmGT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTkt Zjk4Yzc1ZGVhMjkyLzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTktZjk4Yzc1ZGVhMjky LzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRdeBRtS 1np8og9tL08ee5nKWOOxvMxqU57vO3iw+5iR9bsXPABNmAhK5i4aUM7PQm+KOsHt 58DzDQ/5BFx9FB6xl0yDHBj5rUczQ6ORBrpYzn5hcRIkKw85cDgf/xyUiOt4mkN7 jPeB8oCJGPTAnxzw/FpOlnBzBYyJp6gZIcfIuUUE29m4zpar6kU1I9ynSwyH0aeg dILl6s6GnVg2Ye/261WRuSvtP1MfbVpDkLSwLyJN26TrQ/7sLwyAqCpIV1AmDwVu v0T+ueq/ctSBZTPQu41FixjirNDd4R+5wjCD53rpnRKXAg7FFKxvhpt8KUWHd+ky xJZJTc1AVDoQtw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:35 2025 by rpki-client