This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json) Hash identifier: AAzqvdeoEdi6q+RxInAGBBdZX3LIq+YuieX6qdjOQrs= Subject key identifier: 01:CF:EA:8B:A4:24:9F:F9:B4:2C:08:C6:47:4E:10:62:09:25:DD:D5 Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e Certificate serial: 019AF3C0088261CF33173308DC963B3682C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft Manifest number: 0CC7 Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: GofoKymii5U39NPDECdDJtD2TH0.roa (hash: ePVDpp/IL/yJ1aEgP104JCCy3cNXznxaF2wO6kp9DYI=) 2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: 7dGFWo1G+Cne8jRkhtzYxCqOzE+sbVlkj/auUM+YqVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:08:82:61:cf:33:17:33:08:dc:96:3b:36:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=01cfea8ba4249ff9b42c08c6474e10620925ddd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:1a:d5:8e:67:99:ce:47:fa:b7:90:be:0d: 2b:ef:a1:bf:42:75:c1:81:77:68:f4:8e:ec:36:bf: 81:28:c9:87:70:1f:1b:0b:0f:c3:a6:76:04:2e:fe: 7f:f7:80:f0:16:f7:e3:eb:20:df:23:3d:2c:72:c8: 9b:2c:e8:53:dd:11:2c:19:2f:c4:0f:97:49:e7:fc: 1e:21:60:af:4f:86:5a:fc:1c:ee:a7:3c:c5:75:83: 44:b7:99:44:2b:34:c1:db:e4:7a:9d:0a:bb:ba:26: 33:1a:e0:8d:e0:ad:ca:a6:09:1e:e6:23:88:c5:11: 61:e1:a6:ef:8d:09:c0:0d:d6:46:75:ef:68:4c:41: 42:6a:6a:e4:fc:01:e3:39:a3:d4:1e:cb:1d:71:f7: 0e:6b:09:c3:24:55:3b:51:ba:3e:ba:15:17:8d:d1: 3c:53:3e:77:be:42:ef:6a:fc:a0:42:ed:c8:eb:d0: a0:d9:55:75:7a:74:e8:d9:f9:1a:5a:16:d3:5c:c0: fb:37:37:46:3f:14:26:26:2c:fc:f3:71:e6:63:5d: 35:e8:11:1a:2d:84:6f:34:eb:91:1b:8e:df:f5:d7: 7c:5f:00:ae:ba:17:3e:86:28:26:7d:44:42:1b:6c: 19:67:be:75:da:1d:93:97:59:63:a5:df:5b:74:0c: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:EA:8B:A4:24:9F:F9:B4:2C:08:C6:47:4E:10:62:09:25:DD:D5 X509v3 Authority Key Identifier: keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4b:0c:ca:0c:99:8e:31:3b:7d:21:6e:15:1e:c6:e0:9b:64: 92:37:e7:ba:37:99:30:b6:e9:ba:0d:9b:b0:54:6f:5d:a8:9c: f8:ec:3a:7f:18:a3:0c:37:b2:4b:83:87:ed:66:f1:2a:a7:71: a2:e6:44:9b:8a:bf:f6:c6:35:55:12:f0:3b:0e:b8:a1:2a:02: 95:ed:cf:ee:f2:33:86:df:8e:4d:c4:7d:33:88:9f:f7:d5:fc: 39:61:dd:17:53:2b:26:4c:20:d8:66:93:f8:9b:66:d7:14:66: 2f:0f:01:d8:fe:47:88:da:05:f5:d3:b7:c6:3e:7f:71:88:6e: 6e:de:85:a8:98:63:08:13:c4:5f:5b:82:65:6a:17:1c:2a:5e: 2e:2e:45:ea:1b:ec:25:d0:b7:e2:0f:3c:ff:8a:48:2d:0f:dc: d7:fd:a9:f1:8b:b0:7d:51:fd:5c:60:5f:50:77:80:51:a5:22: b2:48:bb:8a:99:b0:b4:97:ae:b1:24:0d:e8:8a:8f:7b:b0:62: 97:1e:d0:c5:85:cc:56:af:4a:a9:c2:79:a9:95:8d:28:d7:74: 4b:47:43:a0:15:c3:67:84:ff:3f:1d:c5:89:2b:44:78:d2:be: f7:bd:55:65:3b:37:3a:4d:d6:3b:27:75:69:fa:fc:b0:9c:59: c5:a5:29:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAiCYc8zFzMI3JY7NoLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzQzOGNkOGFhZWIxYWQyNDJlZDQ5YjRmZjI4N2M5ZDBm NDNiMGUwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD EygwMWNmZWE4YmE0MjQ5ZmY5YjQyYzA4YzY0NzRlMTA2MjA5MjVkZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Uca1Y5nmc5H+reQvg0r76G/QnXB gXdo9I7sNr+BKMmHcB8bCw/DpnYELv5/94DwFvfj6yDfIz0scsibLOhT3REsGS/E D5dJ5/weIWCvT4Za/BzupzzFdYNEt5lEKzTB2+R6nQq7uiYzGuCN4K3Kpgke5iOI xRFh4abvjQnADdZGde9oTEFCamrk/AHjOaPUHssdcfcOawnDJFU7Ubo+uhUXjdE8 Uz53vkLvavygQu3I69Cg2VV1enTo2fkaWhbTXMD7NzdGPxQmJiz883HmY1016BEa LYRvNOuRG47f9dd8XwCuuhc+higmfURCG2wZZ7512h2Tl1ljpd9bdAwDAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHP6oukJJ/5tCwIxkdOEGIJJd3VMB8GA1UdIwQY MBaAFC/EOM2KrrGtJC7Um0/yh8nQ9DsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83ZWExOTUtMmZiZS00ODA2LWE4MmQt MTZiNDRjNDkzNWVhLzEvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83ZWExOTUtMmZiZS00ODA2LWE4MmQtMTZiNDRjNDkzNWVh LzEvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApksMygyZ jjE7fSFuFR7G4JtkkjfnujeZMLbpug2bsFRvXaic+Ow6fxijDDeyS4OH7WbxKqdx ouZEm4q/9sY1VRLwOw64oSoCle3P7vIzht+OTcR9M4if99X8OWHdF1MrJkwg2GaT +Jtm1xRmLw8B2P5HiNoF9dO3xj5/cYhubt6FqJhjCBPEX1uCZWoXHCpeLi5F6hvs JdC34g88/4pILQ/c1/2p8YuwfVH9XGBfUHeAUaUiski7ipmwtJeusSQN6IqPe7Bi lx7QxYXMVq9KqcJ5qZWNKNd0S0dDoBXDZ4T/Px3FiStEeNK+971VZTs3Ok3WOyd1 afr8sJxZxaUpMA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:56 2025 by rpki-client