This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json) Hash identifier: jGRnH8EIUWfLsYdK6sLXRqFbznnXQfWr3DAbLqHoZmE= Subject key identifier: D4:79:C8:32:02:D8:E1:A3:B8:7A:21:A9:AF:B5:A5:F7:8C:94:62:49 Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65 Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65 Certificate serial: 019AF12E7FCB7B42F8BA019812136D6D6F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=) 2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: W3Zpaqe+DU3jE0StBjHzIEeekwgVNaKjoldVJaxB1XQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7f:cb:7b:42:f8:ba:01:98:12:13:6d:6d:6f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65 Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=d479c83202d8e1a3b87a21a9afb5a5f78c946249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:be:05:b2:c4:46:d1:62:f5:64:67:af:2e: 8f:3f:f9:7a:dd:a8:04:e4:7c:16:85:bc:ba:c5:e8: ba:d0:c5:49:87:ea:5d:dd:f1:5b:a6:f4:e7:0e:32: 6f:35:e8:f2:03:5a:e3:ea:5e:da:ae:26:69:d9:16: 06:2b:b7:1e:f1:dd:64:01:26:6b:d3:03:e5:42:b3: 4b:ca:9d:40:9e:8e:3d:0e:2a:1b:5d:62:bb:0b:5c: 6a:c9:bb:5f:78:34:dc:9d:40:79:b6:ec:bb:b2:71: b5:c0:de:c8:9b:98:d9:d9:8a:9d:26:ca:39:85:4b: 0e:75:58:37:b7:42:0f:6b:0c:92:ba:76:99:04:b5: 2f:44:d6:42:21:63:46:f0:fa:81:ae:ab:58:2b:f9: dc:33:70:42:e8:0a:0a:12:34:bb:a1:f3:1d:85:c5: da:61:13:4b:c4:71:91:88:ff:61:7b:d0:0c:fd:59: 7b:da:c3:ed:59:a3:b9:37:cf:1f:4e:9a:ef:01:38: 8f:37:14:1c:87:cc:e8:92:56:a0:4a:90:56:d7:8e: 7b:5e:da:1f:2e:17:6c:32:03:e2:f9:3b:ee:13:85: 1a:7f:04:1e:1c:31:91:48:55:b8:5c:e9:b7:07:e5: 11:95:60:ba:c2:23:1d:cc:31:16:96:da:e6:18:12: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:C8:32:02:D8:E1:A3:B8:7A:21:A9:AF:B5:A5:F7:8C:94:62:49 X509v3 Authority Key Identifier: keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:7d:d3:33:71:de:e8:0b:73:d2:62:c9:a1:a7:cd:be:09:95: 12:61:73:4f:20:c8:00:9c:83:a7:22:ea:51:5a:f0:08:9c:9d: 20:26:4e:a6:74:24:bf:7b:e7:d7:33:df:1a:22:1b:b7:02:8d: 07:cd:dc:21:9a:25:7c:bb:7e:49:56:08:44:0a:3e:12:ea:f4: c1:8b:56:ac:a9:72:0b:af:0d:9c:ad:54:6b:34:5c:56:03:c8: f4:aa:c7:c6:f9:cc:e9:1e:ca:15:18:34:e5:d0:f0:c6:4d:c1: 64:73:2c:af:0c:4b:c4:1f:30:9a:77:3f:61:e6:4b:82:e9:c1: be:35:61:5d:ef:41:16:48:2d:46:fc:f4:a3:ed:ec:95:db:c8: 39:b9:5d:9a:87:41:90:2d:fd:ae:ed:93:9c:0b:68:8d:bc:69: de:9e:ac:43:ff:c0:f1:aa:bb:2e:26:e9:6f:d5:22:0a:9c:be: 49:6c:93:a5:e0:55:59:1b:63:e7:79:45:66:ac:b2:4c:d9:88: e7:0b:7b:1f:be:31:d8:07:2f:28:17:cd:e0:22:1c:22:fe:3e: 4e:7e:78:ce:d0:b6:69:86:3b:45:c2:6e:74:9f:ec:39:51:d0: d5:2c:ab:de:af:ab:f5:3a:f7:27:c6:14:6b:1b:ef:e2:16:d8: 9a:68:ff:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn/Le0L4ugGYEhNtbW9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGExN2UxNjE5NmJiN2E4NjcxOGU2YjJiZDZhMDdlMzdi NDBjNjUwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD EyhkNDc5YzgzMjAyZDhlMWEzYjg3YTIxYTlhZmI1YTVmNzhjOTQ2MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5K+BbLERtFi9WRnry6PP/l63agE 5HwWhby6xei60MVJh+pd3fFbpvTnDjJvNejyA1rj6l7ariZp2RYGK7ce8d1kASZr 0wPlQrNLyp1Ano49DiobXWK7C1xqybtfeDTcnUB5tuy7snG1wN7Im5jZ2YqdJso5 hUsOdVg3t0IPawySunaZBLUvRNZCIWNG8PqBrqtYK/ncM3BC6AoKEjS7ofMdhcXa YRNLxHGRiP9he9AM/Vl72sPtWaO5N88fTprvATiPNxQch8zoklagSpBW1457Xtof LhdsMgPi+TvuE4UafwQeHDGRSFW4XOm3B+URlWC6wiMdzDEWltrmGBIeEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR5yDIC2OGjuHohqa+1pfeMlGJJMB8GA1UdIwQY MBaAFJaKF+Fhlrt6hnGOayvWoH43tAxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMt NjM3ZmExNDY1NmRlLzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMtNjM3ZmExNDY1NmRl LzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxX3TM3He 6Atz0mLJoafNvgmVEmFzTyDIAJyDpyLqUVrwCJydICZOpnQkv3vn1zPfGiIbtwKN B83cIZolfLt+SVYIRAo+Eur0wYtWrKlyC68NnK1UazRcVgPI9KrHxvnM6R7KFRg0 5dDwxk3BZHMsrwxLxB8wmnc/YeZLgunBvjVhXe9BFkgtRvz0o+3sldvIObldmodB kC39ru2TnAtojbxp3p6sQ//A8aq7Libpb9UiCpy+SWyTpeBVWRtj53lFZqyyTNmI 5wt7H74x2AcvKBfN4CIcIv4+Tn54ztC2aYY7RcJudJ/sOVHQ1Syr3q+r9Tr3J8YU axvv4hbYmmj/cA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:34 2025 by rpki-client