This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json) Hash identifier: K8+P1WEedoHaeQ8OvsBQP/tCWKC961jE8EV/iTLzC+8= Subject key identifier: 97:33:D4:A4:5E:A9:C6:85:4E:3F:56:8A:62:98:A4:2D:D7:73:C7:E8 Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9 Certificate serial: 019AF1648D70D60C9B2C422121DC0799B771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=) 2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: dOesucwAggzHnbTlzn0aOaTtr4gTexy7Ju3t5AAK+1A=) 3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8d:70:d6:0c:9b:2c:42:21:21:dc:07:99:b7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9 Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=9733d4a45ea9c6854e3f568a6298a42dd773c7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:56:84:ac:61:03:e5:63:20:b7:30:aa:1a: ab:1c:5a:ef:82:a7:0b:46:7e:4b:04:f6:06:c4:93: c5:0c:44:6e:28:0c:ef:84:5e:d9:5d:a4:28:d0:98: db:c0:b7:1c:4d:e3:60:8b:5e:5e:9b:b7:f5:1f:ba: 9d:5b:54:a8:68:0a:ad:06:47:bf:f0:0f:79:11:fd: fe:73:46:db:e9:5e:e4:ef:ea:0a:66:30:65:29:98: 74:d8:15:e1:df:f1:15:31:22:ee:19:a6:9d:24:6d: e6:e8:37:65:b8:02:1a:5e:39:fc:51:dd:95:ee:98: 47:9a:e6:7f:4b:10:47:4f:fa:55:29:b7:91:73:3b: b0:ea:c1:08:ba:e8:10:de:a6:77:05:f2:0c:30:63: 86:d4:df:de:a7:32:e9:1f:37:3e:af:98:f3:e4:86: d4:41:c5:6d:23:ec:7b:41:90:0f:c7:aa:a4:1d:9c: 3c:27:11:67:f5:82:d5:8a:ce:4f:dd:a1:e0:c7:7e: 5b:8b:8b:b8:2f:86:23:34:f5:7b:9b:55:c3:d2:e5: 83:9e:1d:44:d1:7e:32:14:16:b1:93:4d:06:e1:67: 70:ef:eb:39:c6:7f:c6:3a:4b:1c:7a:3b:d4:33:1f: d5:04:90:2b:2a:84:1e:15:d4:f1:09:48:95:d5:7a: ba:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:33:D4:A4:5E:A9:C6:85:4E:3F:56:8A:62:98:A4:2D:D7:73:C7:E8 X509v3 Authority Key Identifier: keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ba:d3:f0:24:55:4a:a3:b7:4b:8a:0a:ae:6c:31:45:c8:75: 08:92:51:d7:b0:16:7c:96:c0:33:ac:37:09:f3:ac:ed:cc:a9: e1:84:2b:96:9e:47:23:c4:b6:e2:6e:3a:22:77:0a:7c:d8:7e: 5b:3a:9c:41:38:c0:6b:85:aa:8f:41:24:51:8c:a0:02:2e:9d: 9b:6a:fd:55:ed:2f:1d:fc:25:a0:42:00:9b:c4:66:41:cf:4c: af:39:bf:53:34:ab:eb:e2:5a:16:ad:22:ef:db:3f:d1:ef:36: 61:1d:b5:74:40:d5:ed:d5:3e:15:cc:67:03:8c:d4:b1:d6:56: 08:c1:0a:31:82:6a:ae:f2:85:99:e6:d9:b8:fa:40:ac:4f:4f: b7:7c:d0:30:4b:9c:79:52:a4:11:3a:fc:ab:27:fe:d9:bd:7e: ea:a7:fc:ba:24:7e:ca:5f:04:b0:9f:3c:03:94:9d:8a:8d:1e: 68:e0:d3:01:3c:68:89:a6:34:77:bd:3e:3e:de:10:26:d8:7d: 3d:9b:9c:e6:1f:c0:84:83:85:7d:9b:94:76:f4:2b:db:0b:99: 2f:44:9c:f2:8b:a9:84:17:3a:78:ce:de:ef:e6:7d:88:70:28: 26:65:c0:74:6d:ee:1f:4c:a1:ce:d0:06:4e:68:65:4e:8e:45: 31:9f:73:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI1w1gybLEIhIdwHmbdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWRiZWJiYzEwNzBiOTllNGZiMzcyMTE3ZGYyNjIwMDM4 NjAzZTkwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD Eyg5NzMzZDRhNDVlYTljNjg1NGUzZjU2OGE2Mjk4YTQyZGQ3NzNjN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPRWhKxhA+VjILcwqhqrHFrvgqcL Rn5LBPYGxJPFDERuKAzvhF7ZXaQo0JjbwLccTeNgi15em7f1H7qdW1SoaAqtBke/ 8A95Ef3+c0bb6V7k7+oKZjBlKZh02BXh3/EVMSLuGaadJG3m6DdluAIaXjn8Ud2V 7phHmuZ/SxBHT/pVKbeRczuw6sEIuugQ3qZ3BfIMMGOG1N/epzLpHzc+r5jz5IbU QcVtI+x7QZAPx6qkHZw8JxFn9YLVis5P3aHgx35bi4u4L4YjNPV7m1XD0uWDnh1E 0X4yFBaxk00G4Wdw7+s5xn/GOkscejvUMx/VBJArKoQeFdTxCUiV1Xq6RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcz1KReqcaFTj9WimKYpC3Xc8foMB8GA1UdIwQY MBaAFJVdvrvBBwuZ5Ps3IRffJiADhgPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYt MDIzMjAzOTQ3ZDlkLzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYtMDIzMjAzOTQ3ZDlk LzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbrT8CRV SqO3S4oKrmwxRch1CJJR17AWfJbAM6w3CfOs7cyp4YQrlp5HI8S24m46IncKfNh+ WzqcQTjAa4Wqj0EkUYygAi6dm2r9Ve0vHfwloEIAm8RmQc9Mrzm/UzSr6+JaFq0i 79s/0e82YR21dEDV7dU+FcxnA4zUsdZWCMEKMYJqrvKFmebZuPpArE9Pt3zQMEuc eVKkETr8qyf+2b1+6qf8uiR+yl8EsJ88A5Sdio0eaODTATxoiaY0d70+Pt4QJth9 PZuc5h/AhIOFfZuUdvQr2wuZL0Sc8ouphBc6eM7e7+Z9iHAoJmXAdG3uH0yhztAG TmhlTo5FMZ9zQg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:16 2025 by rpki-client