This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json) Hash identifier: jU22gPYpkDuGqeYVXAz2poDVTTzHrTiZo0S5jgTh85M= Subject key identifier: BB:4C:07:4C:9F:74:F9:A5:19:AD:A1:2C:0A:C3:87:3C:B1:26:D6:35 Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf Certificate serial: 019AF20978610BBA2691C2DE94D82CD9F001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: BdJgWfxqz9W2nUwzDL0/BZXHr8Tq5Vdp9PvDfov4ogI=) 2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=) 3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=) 4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=) 5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=) 6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=) 7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=) 8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:78:61:0b:ba:26:91:c2:de:94:d8:2c:d9:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=bb4c074c9f74f9a519ada12c0ac3873cb126d635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:f0:22:1b:66:d1:9b:63:a6:b7:2c:97:49: b5:14:f0:50:08:02:14:63:48:33:b8:00:62:fb:1f: 8e:0b:a4:bf:cb:90:a4:05:d3:27:a4:0c:1e:99:df: db:f9:fc:5f:57:27:83:bf:9e:12:c0:5c:ea:6c:13: 6a:2b:cc:66:b3:55:3d:8d:48:17:d1:fb:74:a6:4c: bb:55:ea:9c:b3:db:29:e1:ac:af:10:01:4a:bc:27: 23:bc:e4:52:bd:78:71:96:83:a2:8e:f4:fd:e8:05: 78:f9:1e:fb:da:9b:19:37:ca:ad:56:11:81:67:25: df:c9:81:00:25:30:c5:3e:ce:aa:47:b1:f1:b6:b1: e6:57:d0:db:26:0b:7c:60:05:1e:9a:7e:96:16:65: a0:04:53:1f:a1:cf:a0:5a:31:cd:2e:1f:bd:db:94: b0:d9:ec:cf:aa:c5:af:70:d7:ac:ca:bf:3f:d1:44: 5b:10:f6:65:d1:ee:83:16:14:c5:fe:0b:8d:66:54: 8c:3b:b2:8f:8c:99:c6:5d:6c:89:e3:dc:49:0c:5a: 7a:2f:da:78:27:a4:92:03:19:80:6d:55:a8:49:45: 82:b3:1c:6b:0b:db:6f:fd:8c:a0:db:92:10:60:09: 8e:22:e6:58:05:2d:d2:80:ba:c4:85:fd:87:f0:e1: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4C:07:4C:9F:74:F9:A5:19:AD:A1:2C:0A:C3:87:3C:B1:26:D6:35 X509v3 Authority Key Identifier: keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:77:97:f7:3c:41:1d:f7:57:b9:e4:26:15:db:2a:d1:c7:d0: 21:3a:f8:4f:3e:b6:48:c0:f9:4c:30:8c:fe:33:a8:e8:52:d7: 35:22:c2:ad:0e:33:97:f8:bb:82:b3:bf:c0:6f:17:a8:0e:85: 0d:53:47:15:cd:9e:a6:04:e3:20:ef:28:ba:a1:dd:de:f8:93: 22:02:22:fe:c9:65:93:20:2a:48:ab:84:da:2e:4c:fb:4a:9e: df:89:95:a2:ea:78:e8:a9:34:7f:5a:87:72:ff:45:05:79:4a: 86:cc:b7:f8:9d:b5:54:94:8a:14:0f:90:9b:fa:dc:2e:09:c8: 9a:53:4f:c0:09:ce:63:34:16:79:c7:e0:f7:ab:0c:72:24:97: c5:7e:2a:e0:c8:80:95:56:7c:41:0e:1b:7e:32:4b:1e:56:6e: 3b:72:cf:e3:68:20:5e:e0:dc:d0:f8:dd:5d:17:52:f6:38:5b: d9:4b:50:82:a4:04:93:f9:40:46:bc:2d:a1:ff:d2:5e:69:11: d2:64:75:39:11:00:b1:9f:11:9a:50:85:e2:6a:96:9a:fc:a1: ed:32:ce:ad:8b:c0:72:37:91:51:64:5e:d1:68:94:58:53:df: da:34:c2:4d:b1:b3:0d:23:23:8b:a3:d4:d4:ad:b3:ff:de:02: de:27:77:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXhhC7omkcLelNgs2fABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh ZjYxY2YwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EyhiYjRjMDc0YzlmNzRmOWE1MTlhZGExMmMwYWMzODczY2IxMjZkNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1LwIhtm0Ztjprcsl0m1FPBQCAIU Y0gzuABi+x+OC6S/y5CkBdMnpAwemd/b+fxfVyeDv54SwFzqbBNqK8xms1U9jUgX 0ft0pky7Veqcs9sp4ayvEAFKvCcjvORSvXhxloOijvT96AV4+R772psZN8qtVhGB ZyXfyYEAJTDFPs6qR7HxtrHmV9DbJgt8YAUemn6WFmWgBFMfoc+gWjHNLh+925Sw 2ezPqsWvcNesyr8/0URbEPZl0e6DFhTF/guNZlSMO7KPjJnGXWyJ49xJDFp6L9p4 J6SSAxmAbVWoSUWCsxxrC9tv/Yyg25IQYAmOIuZYBS3SgLrEhf2H8OE46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtMB0yfdPmlGa2hLArDhzyxJtY1MB8GA1UdIwQY MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt NzJiYWQ5ZDczYzgwLzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3eX9zxB HfdXueQmFdsq0cfQITr4Tz62SMD5TDCM/jOo6FLXNSLCrQ4zl/i7grO/wG8XqA6F DVNHFc2epgTjIO8ouqHd3viTIgIi/sllkyAqSKuE2i5M+0qe34mVoup46Kk0f1qH cv9FBXlKhsy3+J21VJSKFA+Qm/rcLgnImlNPwAnOYzQWecfg96sMciSXxX4q4MiA lVZ8QQ4bfjJLHlZuO3LP42ggXuDc0PjdXRdS9jhb2UtQgqQEk/lARrwtof/SXmkR 0mR1OREAsZ8RmlCF4mqWmvyh7TLOrYvAcjeRUWRe0WiUWFPf2jTCTbGzDSMji6PU 1K2z/94C3id3cA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:14 2025 by rpki-client