This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: wEZjgUf2X3FcFMClSc90GrXGJWfu6dkJZ6yhiXRKsuw= Subject key identifier: 9E:E0:88:8D:84:59:DC:1A:51:9A:3C:B1:6A:FD:C2:C7:05:5D:2E:07 Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019AF3524E4F32A54D26C71E3FAD6AC7EFDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 181B Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=) 2: QE-0-GHrWq5bT_oQzBuxsGZ0jgg.roa (hash: Whew7oC4VAA4M2out/vzMuiYeBE1U3ZiPJv+gEs+1dU=) 3: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (hash: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=) 4: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=) 5: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=) 6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 2/9tfykiSRhS3oBLDYZxSrNiknue6Ecfj+PxKqhEses=) 7: sCbiretHkvpeYn6X-YO7yjpBd3I.roa (hash: m4o26nuHfI88h55NDmirhyFa20WJfqvTKSftUFTfvL0=) 8: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=) 9: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4e:4f:32:a5:4d:26:c7:1e:3f:ad:6a:c7:ef:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=9ee0888d8459dc1a519a3cb16afdc2c7055d2e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:7c:f8:2a:77:7f:3c:14:fb:d3:d4:ea:7b: e8:4a:e0:59:8f:da:2f:bb:05:e4:e8:88:1b:d4:76: b3:05:45:84:e7:08:84:de:48:14:59:05:57:de:ad: ec:ee:aa:9b:ed:50:06:a6:d8:b0:5d:a9:0b:ee:bc: b1:99:42:49:14:ec:44:5d:bc:37:98:0d:99:32:74: 0c:ca:db:49:32:be:00:59:1b:e3:25:93:f9:05:cd: fa:fb:58:60:10:9d:ee:88:17:a0:e2:77:86:77:3b: 77:32:a0:00:6f:09:23:49:4c:35:68:7f:a3:21:bf: 86:b0:c0:ea:2e:c5:76:9f:d6:03:be:6d:3b:24:be: a8:b9:10:4c:4f:4c:9d:f1:58:da:54:3a:0b:4f:45: a7:7c:34:a9:2f:57:8a:d2:f9:b1:fe:60:95:89:7b: 71:b9:45:e3:2f:fe:f7:ea:7f:bd:37:e1:0b:9c:ac: 65:0f:d4:b8:6f:d7:3c:ac:6d:96:b0:fa:de:d9:05: 4e:b5:de:b7:b5:6f:2f:75:df:69:2d:51:68:9d:97: 4a:c9:89:5c:66:59:1e:21:06:11:5a:0f:a2:a4:29: cf:db:b2:66:15:1f:dd:b1:f6:d7:cd:24:f1:f4:a1: a5:d5:a4:d5:b4:40:77:a4:43:80:fc:d5:ac:31:63: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E0:88:8D:84:59:DC:1A:51:9A:3C:B1:6A:FD:C2:C7:05:5D:2E:07 X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c0:a0:77:e4:38:a7:bf:2d:d0:a6:ca:8b:92:a6:37:98:3d: 26:ed:a4:ae:2d:71:c1:bc:03:a7:06:3a:7a:d4:17:83:c4:bb: 71:8a:1b:0f:19:a9:f8:d9:7a:3e:30:f7:9f:15:77:28:f7:d6: 88:03:62:82:1e:8e:90:6a:52:c0:f9:19:59:a8:3a:68:25:91: 25:c3:1c:cb:53:7d:e8:a6:e5:47:da:33:3b:4a:d7:e0:1e:91: 8e:66:83:19:6b:20:a7:82:66:df:5e:26:da:e2:0c:69:18:31: 5b:13:c8:11:65:ea:bb:24:76:4b:6c:47:2d:c3:1d:23:c4:99: e4:63:fe:eb:5b:81:c7:20:2c:80:d1:93:cb:07:1d:14:d6:60: ff:1d:c4:8c:67:42:ed:6f:de:23:48:4f:c3:91:4a:f6:8e:e7: 28:1d:5a:02:92:a7:09:79:e5:f2:43:d4:ef:cb:1d:97:1c:55: c1:fb:9e:e5:e4:f9:05:ad:4e:cb:38:b2:5a:8c:54:b2:ec:36: c0:77:fc:13:18:05:39:80:e9:e9:7e:e8:c6:d2:07:e4:44:08: 9b:4e:2f:af:a4:45:89:e5:6d:bf:14:82:71:27:47:99:b5:c9: 46:f2:3b:e8:3a:da:83:23:4e:72:73:b1:89:97:dc:b5:1a:8d: 4b:9c:0f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUk5PMqVNJsceP61qx+/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg5ZWUwODg4ZDg0NTlkYzFhNTE5YTNjYjE2YWZkYzJjNzA1NWQyZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hp8+Cp3fzwU+9PU6nvoSuBZj9ov uwXk6Igb1HazBUWE5wiE3kgUWQVX3q3s7qqb7VAGptiwXakL7ryxmUJJFOxEXbw3 mA2ZMnQMyttJMr4AWRvjJZP5Bc36+1hgEJ3uiBeg4neGdzt3MqAAbwkjSUw1aH+j Ib+GsMDqLsV2n9YDvm07JL6ouRBMT0yd8VjaVDoLT0WnfDSpL1eK0vmx/mCViXtx uUXjL/736n+9N+ELnKxlD9S4b9c8rG2WsPre2QVOtd63tW8vdd9pLVFonZdKyYlc ZlkeIQYRWg+ipCnP27JmFR/dsfbXzSTx9KGl1aTVtEB3pEOA/NWsMWOltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7giI2EWdwaUZo8sWr9wscFXS4HMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMCgd+Q4 p78t0KbKi5KmN5g9Ju2kri1xwbwDpwY6etQXg8S7cYobDxmp+Nl6PjD3nxV3KPfW iANigh6OkGpSwPkZWag6aCWRJcMcy1N96KblR9ozO0rX4B6RjmaDGWsgp4Jm314m 2uIMaRgxWxPIEWXquyR2S2xHLcMdI8SZ5GP+61uBxyAsgNGTywcdFNZg/x3EjGdC 7W/eI0hPw5FK9o7nKB1aApKnCXnl8kPU78sdlxxVwfue5eT5Ba1OyziyWoxUsuw2 wHf8ExgFOYDp6X7oxtIH5EQIm04vr6RFieVtvxSCcSdHmbXJRvI76DragyNOcnOx iZfctRqNS5wPdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:26 2025 by rpki-client