This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json) Hash identifier: OgdIb9x9ww06rkBA9EIQWsRV7M2gVMf3w1doViBkHv0= Subject key identifier: 35:39:0A:95:6A:0E:79:82:3B:1E:B0:6E:03:4F:5F:BE:70:AD:45:B8 Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Certificate serial: 019AF0BF2CB25378B60823FDD8515D025364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft Manifest number: 0E55 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=) 2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: 63/VzIBa0xaeIhLFTWrrxJSAxMj7YoHIb1l39+bb5mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2c:b2:53:78:b6:08:23:fd:d8:51:5d:02:53:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=35390a956a0e79823b1eb06e034f5fbe70ad45b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:05:00:21:97:a1:3f:b0:6d:86:bb:9c:d9: d9:d2:73:1d:93:dd:5c:21:bd:93:18:13:9f:cd:85: 6c:0d:00:f8:c1:a9:39:1d:8f:f8:eb:02:2c:72:70: ba:f0:0a:32:e8:31:8c:8c:10:b4:cd:1d:16:0f:5f: ce:97:9c:dd:fd:54:da:7c:bb:26:06:12:49:ba:df: ba:fa:c5:6a:ed:ec:34:85:24:a4:92:3e:46:8a:24: 44:60:83:2e:a6:30:92:4c:02:b6:15:19:e2:c1:e0: e3:a6:25:31:8e:fe:d1:16:23:04:19:97:6c:a1:6e: fe:d8:31:e0:8d:d1:15:fd:6a:db:29:51:12:fb:d9: 8e:ee:67:c8:9f:e2:5c:1a:a9:3f:0a:fa:da:a3:5c: ae:9b:07:67:dc:22:2f:78:18:c7:d9:d8:e7:9a:a6: 0f:f0:0d:d4:f0:89:58:cb:71:78:57:b7:fd:88:a3: 0d:b4:57:35:bc:72:b3:b7:89:ec:25:77:31:63:a3: 09:9c:51:1a:51:1e:fc:c4:2f:60:2e:d1:07:7f:93: 9a:29:c6:25:d8:66:30:e2:72:57:f1:d6:5e:cd:c0: 42:6d:24:ae:5e:71:82:06:15:86:7b:c8:3d:b8:f9: 19:b9:7f:11:98:da:cc:00:03:71:a7:13:0d:ac:76: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:39:0A:95:6A:0E:79:82:3B:1E:B0:6E:03:4F:5F:BE:70:AD:45:B8 X509v3 Authority Key Identifier: keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0c:3f:71:a6:63:f2:9e:94:2f:88:f1:a0:0d:19:77:3e:a5: ed:8f:c2:82:a6:78:c9:65:ee:b6:2d:ed:50:43:52:66:2c:fe: 8e:53:92:bb:95:43:3f:43:10:f6:ef:36:e7:8a:73:88:55:a2: fc:8e:5a:24:2d:bd:0c:17:c1:7c:8c:6e:72:92:1b:c0:87:cb: 5c:60:4f:32:4d:4d:43:ba:6c:91:77:d5:d5:dd:e4:57:4a:2a: fe:ff:19:a3:2f:c0:3e:9a:46:4b:52:34:dc:9d:25:23:0e:b8: c9:d3:e9:d7:4b:18:c4:2f:66:07:c0:ac:7b:37:0d:c3:62:49: 23:fb:ce:4a:ff:63:5f:60:fb:bf:8c:fc:80:8e:88:55:48:d9: eb:72:e8:ba:da:19:25:8f:12:85:f8:5f:5d:53:3d:73:2a:93: 0a:41:8e:16:e1:04:0a:4a:73:63:05:6a:93:ea:b4:48:5f:8a: e5:ba:5e:ff:b8:aa:50:aa:dd:08:1f:59:65:3a:d7:51:84:b4: 2c:d2:eb:46:bb:2f:fa:9e:96:61:20:d7:00:08:2a:9d:a3:76: 26:57:32:ec:72:3f:be:30:4c:84:07:85:93:e8:e1:54:47:84: 6e:4a:00:36:5e:86:ea:d3:98:ae:76:a9:59:07:61:83:61:ca: 7e:a1:7d:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyyyU3i2CCP92FFdAlNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0 MzRkYTkwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EygzNTM5MGE5NTZhMGU3OTgyM2IxZWIwNmUwMzRmNWZiZTcwYWQ0NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjYFACGXoT+wbYa7nNnZ0nMdk91c Ib2TGBOfzYVsDQD4wak5HY/46wIscnC68Aoy6DGMjBC0zR0WD1/Ol5zd/VTafLsm BhJJut+6+sVq7ew0hSSkkj5GiiREYIMupjCSTAK2FRniweDjpiUxjv7RFiMEGZds oW7+2DHgjdEV/WrbKVES+9mO7mfIn+JcGqk/Cvrao1yumwdn3CIveBjH2djnmqYP 8A3U8IlYy3F4V7f9iKMNtFc1vHKzt4nsJXcxY6MJnFEaUR78xC9gLtEHf5OaKcYl 2GYw4nJX8dZezcBCbSSuXnGCBhWGe8g9uPkZuX8RmNrMAANxpxMNrHbtewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDU5CpVqDnmCOx6wbgNPX75wrUW4MB8GA1UdIwQY MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgw/caZj 8p6UL4jxoA0Zdz6l7Y/CgqZ4yWXuti3tUENSZiz+jlOSu5VDP0MQ9u8254pziFWi /I5aJC29DBfBfIxucpIbwIfLXGBPMk1NQ7pskXfV1d3kV0oq/v8Zoy/APppGS1I0 3J0lIw64ydPp10sYxC9mB8CsezcNw2JJI/vOSv9jX2D7v4z8gI6IVUjZ63LoutoZ JY8ShfhfXVM9cyqTCkGOFuEECkpzYwVqk+q0SF+K5bpe/7iqUKrdCB9ZZTrXUYS0 LNLrRrsv+p6WYSDXAAgqnaN2Jlcy7HI/vjBMhAeFk+jhVEeEbkoANl6G6tOYrnap WQdhg2HKfqF99g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:04 2025 by rpki-client