This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft File: loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json) Hash identifier: Xo9p2aa+kfemOxHcqlwzN2a3Mz5xB1WpaHZ867lEq7I= Subject key identifier: C8:84:83:9A:D9:79:18:13:56:18:D3:3A:D9:A5:E5:85:C9:BD:E9:F9 Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 Certificate issuer: /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Certificate serial: 019AF2ADF857BEE56FB802120DAF53EEF02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft Manifest number: 0203 Signing time: Sat 06 Dec 2025 08:01:18 +0000 Manifest this update: Sat 06 Dec 2025 08:01:18 +0000 Manifest next update: Sun 07 Dec 2025 08:01:18 +0000 Files and hashes: 1: F7JL5bHYyLaweW8pONIwm4V1Ta8.roa (hash: 9Al0+nQsmlduPmazSDY0bBkTJLPuHl1nJV+djdoKlfw=) 2: aOIjfYULj8ZZW-4gX-UQwdrDQ9U.roa (hash: 0raPVOn63vL6rgNpBZdFkEjdsenkXzmQ/PYsO0nF2sE=) 3: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: XeZhkYaIR+/g4n/t7+Qdp4+Z9eVgoxcCbgT85tqcl/0=) 4: qxk1xepxwGG51OB8xsnLC_37Uaw.roa (hash: ypZE1fVxTf8ts+4DLxa1x+J1+KV7fqtGzn+ax6Dq94A=) 5: w1BzHYlYCb3EG4ztspZKX_15RAY.roa (hash: ASsa3u4RFIDCrpyjiaJAOUJvMGU5bhKQs1/vB/xTB6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f8:57:be:e5:6f:b8:02:12:0d:af:53:ee:f0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7 Validity Not Before: Dec 6 08:01:18 2025 GMT Not After : Dec 7 08:01:18 2025 GMT Subject: CN=c884839ad97918135618d33ad9a5e585c9bde9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:18:6e:9c:b4:17:7f:e0:dd:1a:ff:76:01: 6f:03:18:b1:7c:8d:47:a5:db:c1:3d:8f:26:4d:63: 9a:b6:df:a6:5b:e4:23:44:d8:4e:84:36:3d:7f:dd: 3e:d1:14:c4:ce:59:f9:11:6e:92:e4:a1:ca:e1:98: fd:cd:2b:ff:6b:64:88:7e:c6:b8:dd:39:1a:3d:f0: 0f:49:66:8f:15:3d:d9:2a:a8:a4:be:f8:82:42:f6: 43:49:42:c2:9b:bc:b6:d0:2f:55:9d:63:62:d9:24: 03:73:f4:88:2c:8c:19:4e:ab:01:6b:04:31:44:31: 99:64:6c:76:e6:45:18:58:21:9e:c1:60:37:a1:fd: 2c:7e:37:d2:1f:d0:e3:d5:0f:d2:c8:06:ef:70:78: 2d:b3:d2:d2:d9:ab:13:c8:c2:ef:e6:de:42:93:71: 8a:52:0d:ca:e7:27:f0:3a:72:7b:6c:9b:60:d3:96: 71:52:88:61:12:f5:89:b2:cd:e5:d3:6e:54:e4:9f: f3:24:49:69:f0:3b:c2:ad:8e:7d:65:d4:28:45:99: 4a:b8:d1:42:b4:ea:20:b8:3a:db:1b:01:dd:0d:9b: 41:2d:fc:e8:c3:e4:d3:be:d8:fe:51:1e:25:63:00: 60:0f:53:9c:c5:0e:fa:da:15:5c:eb:53:54:31:2e: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:83:9A:D9:79:18:13:56:18:D3:3A:D9:A5:E5:85:C9:BD:E9:F9 X509v3 Authority Key Identifier: keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:d2:3e:e3:d3:b8:a3:43:bb:15:c3:36:f3:71:49:b7:32: 46:57:50:91:77:d8:c3:29:b9:28:3f:06:1e:3c:7e:81:cb:d5: 32:57:01:78:6c:5c:d6:65:a3:fd:42:c1:8b:f4:85:22:aa:f1: 9f:24:58:18:bc:4c:4d:37:e7:b5:ea:ea:78:ac:de:52:82:10: aa:0f:1d:d5:3f:5c:08:23:a5:8b:87:69:45:d7:6b:e3:e3:45: 03:94:14:26:6d:11:37:5e:93:f3:5a:73:f1:44:99:e7:b5:95: 67:e2:3e:04:31:54:e3:e7:58:a3:2c:be:17:45:ed:f8:56:ce: da:a1:73:78:f3:73:39:71:dc:bd:f4:2f:bc:71:86:ac:c1:ea: 3d:93:14:87:9c:71:1d:8c:11:0f:8a:7c:e7:0b:47:cb:48:59: 8b:18:83:d1:c7:2a:ad:6c:74:02:08:9c:dd:3e:cf:e6:b3:cb: ea:a0:5b:65:bf:37:d3:ef:e5:c6:e3:f4:ce:e0:1f:52:16:1d: 1c:0d:db:d7:0a:d9:3c:d0:0e:1b:a6:04:ee:5a:f9:5d:10:b5: 60:3d:96:1a:1b:0a:8b:ed:6b:4a:a8:7a:48:75:73:e4:7a:46: 25:8e:cf:d2:7f:c2:a1:89:b7:12:64:ed:b5:8b:03:d8:6b:d5: 88:58:65:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfhXvuVvuAISDa9T7vAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ODFmYzhjNzMzN2M2YTFkMjBiODQ4MDBkZjg2MmEyN2U1 ZmRiZDcwHhcNMjUxMjA2MDgwMTE4WhcNMjUxMjA3MDgwMTE4WjAzMTEwLwYDVQQD EyhjODg0ODM5YWQ5NzkxODEzNTYxOGQzM2FkOWE1ZTU4NWM5YmRlOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F0Ybpy0F3/g3Rr/dgFvAxixfI1H pdvBPY8mTWOatt+mW+QjRNhOhDY9f90+0RTEzln5EW6S5KHK4Zj9zSv/a2SIfsa4 3TkaPfAPSWaPFT3ZKqikvviCQvZDSULCm7y20C9VnWNi2SQDc/SILIwZTqsBawQx RDGZZGx25kUYWCGewWA3of0sfjfSH9Dj1Q/SyAbvcHgts9LS2asTyMLv5t5Ck3GK Ug3K5yfwOnJ7bJtg05ZxUohhEvWJss3l025U5J/zJElp8DvCrY59ZdQoRZlKuNFC tOoguDrbGwHdDZtBLfzow+TTvtj+UR4lYwBgD1OcxQ762hVc61NUMS5EBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiEg5rZeRgTVhjTOtml5YXJven5MB8GA1UdIwQY MBaAFJaB/IxzN8ah0guEgA34YqJ+X9vXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzIt NTNkOTYwOTlkN2IxLzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80MGU1ZDUtZWQ0MS00ZGQzLTkzMzItNTNkOTYwOTlkN2Ix LzEvbG9IOGpITTN4cUhTQzRTQURmaGlvbjVmMjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDPSPuPT uKNDuxXDNvNxSbcyRldQkXfYwym5KD8GHjx+gcvVMlcBeGxc1mWj/ULBi/SFIqrx nyRYGLxMTTfnterqeKzeUoIQqg8d1T9cCCOli4dpRddr4+NFA5QUJm0RN16T81pz 8USZ57WVZ+I+BDFU4+dYoyy+F0Xt+FbO2qFzePNzOXHcvfQvvHGGrMHqPZMUh5xx HYwRD4p85wtHy0hZixiD0ccqrWx0Agic3T7P5rPL6qBbZb830+/lxuP0zuAfUhYd HA3b1wrZPNAOG6YE7lr5XRC1YD2WGhsKi+1rSqh6SHVz5HpGJY7P0n/CoYm3EmTt tYsD2GvViFhl+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:11 2025 by rpki-client