This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json) Hash identifier: G8n9eEp42JcSIBJrW7LEyiYJwHMado6Req6ndeQX/D0= Subject key identifier: 16:83:00:AF:F0:E5:C1:AF:B5:4F:0A:A3:ED:D6:2C:58:B9:E6:17:F2 Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019AF50992F14292EB20D595C8027AD0BD3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft Manifest number: 0D42 Signing time: Sat 06 Dec 2025 19:00:36 +0000 Manifest this update: Sat 06 Dec 2025 19:00:36 +0000 Manifest next update: Sun 07 Dec 2025 19:00:36 +0000 Files and hashes: 1: 1-l2kYHPzzOgxMyPGeYc0XGNjBT4.roa (hash: LNd5PHqRanBJORsf7oSyFeUFPQrcAuT39Hzl/svHnzg=) 2: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=) 3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=) 4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=) 5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=) 6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: mMzXJNHRTWs/YIbAfX4V3Hj+kLWD4dsU5eVqfiQ+PLw=) 7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=) 8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:92:f1:42:92:eb:20:d5:95:c8:02:7a:d0:bd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Dec 6 19:00:36 2025 GMT Not After : Dec 7 19:00:36 2025 GMT Subject: CN=168300aff0e5c1afb54f0aa3edd62c58b9e617f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:0f:3e:4d:28:81:35:30:e1:7b:96:a0:a9: 00:5a:5b:b5:e1:de:8a:16:20:14:b3:dd:6d:50:33: b9:ca:16:0d:6b:76:35:9b:c3:39:61:f1:fb:49:9f: c3:5a:d7:fb:5d:f1:67:94:b2:a1:d4:4d:ce:d0:16: 73:48:32:8e:1f:7d:5c:43:a1:44:ca:4f:9f:34:e2: 9a:4a:5a:b6:6b:c1:f9:60:13:82:9f:7e:21:dc:11: 04:e4:da:57:73:a5:a8:85:3b:71:e3:7a:83:e2:66: 31:a6:93:9d:20:5b:ea:a7:83:3e:6e:26:3e:31:51: d6:8c:93:9c:45:0a:22:0e:58:5b:73:fd:74:82:a2: a5:a4:56:4b:22:45:f3:3f:dd:bb:07:8b:67:2e:c8: c7:dd:9c:02:ba:8d:f3:c9:8f:85:c7:68:ac:49:30: 7c:f9:d7:87:97:24:25:30:76:11:02:df:4e:dc:46: c1:2d:f2:04:b6:85:2f:66:39:95:2b:a0:04:ed:ff: 12:2b:f2:c7:fe:5b:ba:c4:e6:07:39:8b:c2:b1:c7: bd:82:df:38:ea:b4:28:74:af:25:53:2c:da:ac:c6: 9e:c4:55:de:e6:39:66:b0:3b:7f:8d:70:3c:fb:60: d2:9c:c6:89:f0:83:a4:d8:ab:14:17:0c:e8:1e:73: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:83:00:AF:F0:E5:C1:AF:B5:4F:0A:A3:ED:D6:2C:58:B9:E6:17:F2 X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ac:4f:73:ef:20:35:ba:d4:0f:78:1b:96:2d:84:77:2a:c4: 4b:8b:30:d5:e6:cb:39:26:5a:d0:12:53:b4:a7:58:2f:0d:a3: b2:f8:52:6c:a5:bf:b2:a4:7a:45:7b:92:55:db:8a:30:0f:99: 82:be:09:16:c3:77:1a:47:c1:6c:7b:bb:c6:ce:08:ec:01:46: 8c:a5:9b:0b:37:ff:f3:f7:87:95:26:6a:2a:e0:2a:7f:4c:01: 0c:d1:91:04:f4:47:db:83:f4:79:60:a9:47:35:03:59:29:bf: de:db:70:14:63:af:13:fa:c5:c9:82:02:5a:ed:05:24:d3:28: d1:5a:13:f4:8a:1c:e0:04:8f:e6:ec:34:e9:66:33:f5:9d:8a: 84:30:bb:78:ee:a5:f8:a9:07:39:99:eb:67:c0:65:7f:a8:c3: fb:1c:60:d3:0b:52:e6:bd:73:06:57:52:1b:1b:30:b2:18:bc: 36:37:7f:26:70:3b:09:41:6d:ae:33:5b:a0:9f:6d:a6:56:a3: 68:13:64:fb:b2:f3:e6:5d:c9:c3:e3:95:25:2a:0d:97:13:63: 07:1f:a9:39:b9:77:cb:20:d0:fd:e7:6c:33:b4:5e:9a:60:e8: 1a:ad:78:90:bc:2c:81:c3:ce:a3:1e:bb:ff:6c:d5:6e:a1:ca: 4f:3d:76:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZLxQpLrINWVyAJ60L06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjUxMjA2MTkwMDM2WhcNMjUxMjA3MTkwMDM2WjAzMTEwLwYDVQQD EygxNjgzMDBhZmYwZTVjMWFmYjU0ZjBhYTNlZGQ2MmM1OGI5ZTYxN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4UPPk0ogTUw4XuWoKkAWlu14d6K FiAUs91tUDO5yhYNa3Y1m8M5YfH7SZ/DWtf7XfFnlLKh1E3O0BZzSDKOH31cQ6FE yk+fNOKaSlq2a8H5YBOCn34h3BEE5NpXc6WohTtx43qD4mYxppOdIFvqp4M+biY+ MVHWjJOcRQoiDlhbc/10gqKlpFZLIkXzP927B4tnLsjH3ZwCuo3zyY+Fx2isSTB8 +deHlyQlMHYRAt9O3EbBLfIEtoUvZjmVK6AE7f8SK/LH/lu6xOYHOYvCsce9gt84 6rQodK8lUyzarMaexFXe5jlmsDt/jXA8+2DSnMaJ8IOk2KsUFwzoHnP3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaDAK/w5cGvtU8Ko+3WLFi55hfyMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6xPc+8g NbrUD3gbli2EdyrES4sw1ebLOSZa0BJTtKdYLw2jsvhSbKW/sqR6RXuSVduKMA+Z gr4JFsN3GkfBbHu7xs4I7AFGjKWbCzf/8/eHlSZqKuAqf0wBDNGRBPRH24P0eWCp RzUDWSm/3ttwFGOvE/rFyYICWu0FJNMo0VoT9Ioc4ASP5uw06WYz9Z2KhDC7eO6l +KkHOZnrZ8Blf6jD+xxg0wtS5r1zBldSGxswshi8Njd/JnA7CUFtrjNboJ9tplaj aBNk+7Lz5l3Jw+OVJSoNlxNjBx+pObl3yyDQ/edsM7RemmDoGq14kLwsgcPOox67 /2zVbqHKTz12SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:27 2025 by rpki-client