This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json) Hash identifier: DFNIZv3QVxHD2zqAuD0jQjWIyFeZKWdnivW9HqCvrr0= Subject key identifier: 9D:D9:0F:20:12:4E:3F:27:94:3D:D3:26:84:D4:8E:E9:8E:8D:0B:1E Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Certificate serial: 019B21E2A107264756943A09D10179D0F5E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 12:00:58 +0000 Manifest this update: Mon 15 Dec 2025 12:00:58 +0000 Manifest next update: Tue 16 Dec 2025 12:00:58 +0000 Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: TnPTrfGXYczhr0zYhYpbK8PFYK0PkNE2Y9pkHhqucog=) 2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:a1:07:26:47:56:94:3a:09:d1:01:79:d0:f5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Validity Not Before: Dec 15 12:00:58 2025 GMT Not After : Dec 16 12:00:58 2025 GMT Subject: CN=9dd90f20124e3f27943dd32684d48ee98e8d0b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:eb:95:69:8e:71:25:03:e2:8d:78:76:f8: 4c:78:1d:8e:23:ea:e0:35:d5:ca:7f:ce:9a:0c:88: 66:3d:9d:96:c3:ff:70:24:21:ad:78:39:25:ce:1e: 14:b5:40:c9:b6:4b:d9:7f:ec:78:70:e2:00:b8:a4: a5:68:c5:3b:d6:15:9a:d0:7b:5b:c6:cc:2b:8a:07: a6:5b:8f:df:c1:b2:b0:b6:4e:36:c6:df:34:02:8c: 97:0a:50:7d:7c:8f:b9:01:4a:3c:9b:e7:a4:ad:f2: ec:ae:b3:a0:8f:a8:40:f0:7d:52:62:8d:7d:b8:28: c3:7e:a0:16:4e:1c:4a:1b:21:8e:22:da:5c:3c:d8: 35:75:b5:7c:eb:31:b0:23:8c:d3:84:7f:f8:fb:d8: 6a:05:70:51:9f:73:49:e8:2d:d0:47:c0:14:4c:c7: c6:cd:70:3d:77:56:8a:38:ce:c7:ba:78:41:95:6d: 14:e7:d1:08:c4:ca:91:ec:70:ba:e4:0a:18:7b:20: c9:48:90:59:0c:46:13:f6:da:8b:85:d3:ea:2c:f1: f6:a9:f1:f5:0d:09:15:33:c0:b2:f1:27:40:ed:74: 41:b6:97:52:da:e1:f5:8a:ce:a9:36:fc:2a:a8:c3: 2c:7e:72:23:e2:03:4a:f6:99:9c:53:aa:5c:3c:3e: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D9:0F:20:12:4E:3F:27:94:3D:D3:26:84:D4:8E:E9:8E:8D:0B:1E X509v3 Authority Key Identifier: keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:aa:29:57:42:1b:e2:a9:97:06:3b:65:1a:fe:55:35:5a:d8: d1:6e:30:b6:0a:18:d9:06:5e:5e:4d:9a:83:8f:99:3d:fb:d1: 05:d7:ff:57:6b:e5:84:83:69:da:32:0a:82:51:a0:47:0d:ec: 57:19:29:bc:1a:f2:8d:21:8b:c7:df:d1:63:34:bb:c9:f2:43: 19:5b:1a:9f:6b:aa:8c:06:79:be:12:e7:30:04:15:bf:cd:a7: e8:ba:3a:de:a7:84:0c:c5:37:ec:fd:d4:12:7a:97:ae:7b:54: 99:c7:9e:cb:61:c3:3c:56:b3:b0:60:a2:02:12:95:7e:26:cc: 19:5c:26:64:5a:94:cf:c0:5b:e2:88:14:b3:ff:37:8b:c8:b7: e8:7e:68:ac:13:cd:59:b0:55:8f:b8:60:c1:bc:86:56:aa:97: 92:e2:ff:e5:e0:a3:18:80:ed:15:ee:78:0c:0b:82:97:84:f1: d2:86:f9:1c:6b:10:12:23:d9:47:74:30:ba:a0:ce:52:32:d0: 22:fc:9d:e3:eb:71:32:3e:a7:bd:28:a2:99:28:cb:b6:01:b7: f6:ec:d5:b7:7f:46:ab:71:91:d4:69:fd:e7:93:e7:f9:e2:2b: e8:d1:5a:9d:b2:75:de:64:b4:08:64:5e:9c:97:b5:17:47:58: ee:74:ce:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4qEHJkdWlDoJ0QF50PXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWYyY2QxYTlmMGRhNDM1ZjJlM2IzZWU3MGU2NGZkYWY0 YjYxMjEwHhcNMjUxMjE1MTIwMDU4WhcNMjUxMjE2MTIwMDU4WjAzMTEwLwYDVQQD Eyg5ZGQ5MGYyMDEyNGUzZjI3OTQzZGQzMjY4NGQ0OGVlOThlOGQwYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2grrlWmOcSUD4o14dvhMeB2OI+rg NdXKf86aDIhmPZ2Ww/9wJCGteDklzh4UtUDJtkvZf+x4cOIAuKSlaMU71hWa0Htb xswrigemW4/fwbKwtk42xt80AoyXClB9fI+5AUo8m+ekrfLsrrOgj6hA8H1SYo19 uCjDfqAWThxKGyGOItpcPNg1dbV86zGwI4zThH/4+9hqBXBRn3NJ6C3QR8AUTMfG zXA9d1aKOM7HunhBlW0U59EIxMqR7HC65AoYeyDJSJBZDEYT9tqLhdPqLPH2qfH1 DQkVM8Cy8SdA7XRBtpdS2uH1is6pNvwqqMMsfnIj4gNK9pmcU6pcPD5qmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3ZDyASTj8nlD3TJoTUjumOjQseMB8GA1UdIwQY MBaAFNJfLNGp8NpDXy47PucOZP2vS2EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2Et YzViNmFlY2I2YzljLzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2EtYzViNmFlY2I2Yzlj LzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6opV0Ib 4qmXBjtlGv5VNVrY0W4wtgoY2QZeXk2ag4+ZPfvRBdf/V2vlhINp2jIKglGgRw3s VxkpvBryjSGLx9/RYzS7yfJDGVsan2uqjAZ5vhLnMAQVv82n6Lo63qeEDMU37P3U EnqXrntUmceey2HDPFazsGCiAhKVfibMGVwmZFqUz8Bb4ogUs/83i8i36H5orBPN WbBVj7hgwbyGVqqXkuL/5eCjGIDtFe54DAuCl4Tx0ob5HGsQEiPZR3QwuqDOUjLQ Ivyd4+txMj6nvSiimSjLtgG39uzVt39Gq3GR1Gn955Pn+eIr6NFanbJ13mS0CGRe nJe1F0dY7nTORQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:07:18 2025 by rpki-client