This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json) Hash identifier: d+hedY4F4/HlOtzKUn+VOaeEfdwC/6lkz6+EVGSamGw= Subject key identifier: 7D:41:3E:47:27:B8:B2:2B:DB:F4:33:FB:7A:26:D7:22:5A:90:D0:3D Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Certificate serial: 019AF1D259E18CE33A7E4BC51B2EDFE858C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft Manifest number: 09EF Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 9hOySnoZoe98Vds65PO-k5WBbfQ.roa (hash: bWjpGXsf5+0jGIGSfAb5UBCCFfQkAKUBkc1nnoBo6sA=) 2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: nvrStag7OS7+xGk3oBXpXP0WNmvM16kLVs6aaI1pnBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:59:e1:8c:e3:3a:7e:4b:c5:1b:2e:df:e8:58:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=7d413e4727b8b22bdbf433fb7a26d7225a90d03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:7c:6d:0d:bb:40:d6:e9:49:a0:27:86:d7: dd:99:50:fb:48:ef:20:0b:94:70:4f:56:e5:0f:6a: 2d:d6:a2:f7:78:93:a0:a4:1c:c0:d2:32:6c:2b:5b: 9f:ad:42:11:cf:1f:1e:36:1a:3d:50:0b:69:a1:71: 9c:b8:15:a6:6e:b1:82:b4:00:5b:75:9d:9a:5a:b8: 0d:02:7c:2d:14:72:47:1c:dd:ab:8e:1d:43:60:53: 85:c4:77:b7:c5:52:11:e4:12:2e:e1:0b:5a:21:93: da:f2:74:b5:79:ab:71:e9:2e:70:f3:8b:2f:ba:7a: 5b:f6:49:15:b2:85:25:94:c0:21:50:25:49:c7:59: 5d:30:92:1b:d2:f1:9e:46:88:00:6c:69:60:74:03: 91:9c:a5:de:1d:ac:d0:cb:bd:ec:10:46:ca:33:d1: 49:6e:fc:a6:fd:06:ef:37:e9:c3:07:69:7f:0a:68: 46:82:59:3b:c9:3a:cc:3b:4a:9d:14:92:bd:ef:1c: 32:f6:e5:4f:96:2c:90:4c:8b:ed:a6:1e:a0:6b:c1: bc:a4:fa:1b:35:77:cd:2d:35:30:46:7e:c5:7b:62: b4:56:8d:8f:f3:c5:4f:9a:3e:80:81:20:4e:4d:50: 5c:24:20:b8:6e:41:b0:28:91:3d:30:91:de:04:49: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:3E:47:27:B8:B2:2B:DB:F4:33:FB:7A:26:D7:22:5A:90:D0:3D X509v3 Authority Key Identifier: keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3b:5c:e6:79:66:e4:89:c6:65:ba:bb:09:3a:0e:c8:3b:12: 0a:79:7b:61:68:bd:87:57:e7:35:f7:8f:d9:45:4b:3c:09:b6: aa:d6:8a:28:d4:8c:85:d5:e4:6e:9b:63:f0:9c:4f:d0:5a:95: 14:ca:42:c7:23:33:62:84:cf:c1:b0:2a:73:5b:cf:a1:1c:bd: 2a:f7:b3:81:31:4d:14:65:b7:6b:10:18:e9:ad:be:a0:30:db: b7:67:9a:5e:e2:ed:09:4a:59:2b:54:09:40:fb:4a:91:a7:c7: 4d:74:63:51:9f:ef:40:72:ed:71:d6:6e:41:b7:90:b4:70:7b: 29:67:fc:4c:6a:ae:d5:a4:93:32:4a:25:3d:03:e0:48:2c:d5: 76:1b:f0:bb:3a:48:2d:ac:15:24:cc:ae:b2:8d:fa:20:d1:27: 26:a0:c8:05:c6:42:7d:92:4b:3d:43:ec:01:21:6a:16:5b:a1: 2a:98:64:d0:26:00:92:aa:c1:42:7b:e0:e4:79:52:cc:51:9a: 27:20:15:2c:a6:2f:ce:b7:2a:a2:85:97:47:5b:aa:0e:c3:f0: eb:b9:d9:ef:ac:ef:dc:c7:e1:b8:5c:04:df:92:aa:de:c3:17: 5f:7c:93:5c:8b:30:dc:7e:33:e7:e0:b3:01:d7:c8:e6:fd:79: 2a:14:55:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lnhjOM6fkvFGy7f6FjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk ZjUxODIwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD Eyg3ZDQxM2U0NzI3YjhiMjJiZGJmNDMzZmI3YTI2ZDcyMjVhOTBkMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAl8bQ27QNbpSaAnhtfdmVD7SO8g C5RwT1blD2ot1qL3eJOgpBzA0jJsK1ufrUIRzx8eNho9UAtpoXGcuBWmbrGCtABb dZ2aWrgNAnwtFHJHHN2rjh1DYFOFxHe3xVIR5BIu4QtaIZPa8nS1eatx6S5w84sv unpb9kkVsoUllMAhUCVJx1ldMJIb0vGeRogAbGlgdAORnKXeHazQy73sEEbKM9FJ bvym/QbvN+nDB2l/CmhGglk7yTrMO0qdFJK97xwy9uVPliyQTIvtph6ga8G8pPob NXfNLTUwRn7Fe2K0Vo2P88VPmj6AgSBOTVBcJCC4bkGwKJE9MJHeBEmkrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1BPkcnuLIr2/Qz+3om1yJakNA9MB8GA1UdIwQY MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTtc5nlm 5InGZbq7CToOyDsSCnl7YWi9h1fnNfeP2UVLPAm2qtaKKNSMhdXkbptj8JxP0FqV FMpCxyMzYoTPwbAqc1vPoRy9KvezgTFNFGW3axAY6a2+oDDbt2eaXuLtCUpZK1QJ QPtKkafHTXRjUZ/vQHLtcdZuQbeQtHB7KWf8TGqu1aSTMkolPQPgSCzVdhvwuzpI LawVJMyuso36INEnJqDIBcZCfZJLPUPsASFqFluhKphk0CYAkqrBQnvg5HlSzFGa JyAVLKYvzrcqooWXR1uqDsPw67nZ76zv3MfhuFwE35Kq3sMXX3yTXIsw3H4z5+Cz AdfI5v15KhRVmA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:43 2025 by rpki-client