This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json) Hash identifier: YX/xx1MXBSl33nhM1dWQ/HT53RfeIKeV86wMA0347dU= Subject key identifier: 8B:CB:62:4E:0A:6F:5E:86:C1:8E:69:95:36:6A:BA:3B:BC:F5:E4:98 Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Certificate serial: 019B22F567B848DB7D9CCE28454B8EEF2492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft Manifest number: 0760 Signing time: Mon 15 Dec 2025 17:01:06 +0000 Manifest this update: Mon 15 Dec 2025 17:01:06 +0000 Manifest next update: Tue 16 Dec 2025 17:01:06 +0000 Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: BuFKKJ3mKBV9J6bXQ5ikTWb5cb+2l9fh1TXjrSch1sc=) 2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:67:b8:48:db:7d:9c:ce:28:45:4b:8e:ef:24:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Validity Not Before: Dec 15 17:01:06 2025 GMT Not After : Dec 16 17:01:06 2025 GMT Subject: CN=8bcb624e0a6f5e86c18e6995366aba3bbcf5e498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:d1:c2:46:42:8f:38:ea:ca:f4:ef:d7:22: 96:b1:82:fa:b9:7a:6a:3c:0f:08:31:b1:5e:b6:74: fe:13:f1:87:92:17:ad:c6:d0:cd:06:d1:03:ae:c9: 92:43:57:a6:aa:b8:c7:ee:3c:e3:ac:54:12:d3:64: bd:a0:da:d6:2c:8d:73:10:5d:f0:90:36:1d:47:46: 53:19:2b:ac:e1:fb:f1:54:12:51:f5:7d:bd:d8:c7: ac:d8:67:a0:8a:01:db:71:a1:f6:46:b5:f1:10:b1: 07:15:c9:b0:43:d4:5a:5c:b2:a4:5d:47:3b:98:88: cb:e9:70:63:13:6b:5b:18:9b:69:c2:db:ab:b2:45: ec:0b:9c:64:a8:95:b5:50:2a:40:74:2c:6c:dc:ae: 39:8d:da:88:70:73:f7:30:2d:f2:97:d7:df:48:cf: 83:80:fe:29:b0:1e:a4:c5:67:a7:a2:9e:54:84:12: 1c:4f:af:32:aa:34:c3:3a:f3:9c:2a:c8:92:b7:66: 54:86:1d:11:42:20:72:21:e4:88:ac:67:11:50:a0: 4d:83:aa:20:60:cc:fc:db:9e:e1:ab:6e:e5:dc:2d: ef:c5:e2:c8:6a:17:80:00:7d:27:7d:0f:a2:1f:af: 07:5e:29:56:77:43:a3:af:8c:83:ac:e2:d6:4a:45: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CB:62:4E:0A:6F:5E:86:C1:8E:69:95:36:6A:BA:3B:BC:F5:E4:98 X509v3 Authority Key Identifier: keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:92:03:dd:1a:5c:2e:d8:cb:2a:10:87:61:3b:e4:f0:8d:61: b3:93:83:79:c1:83:ec:b3:a9:7c:f3:a9:da:42:6a:8f:1c:c3: 70:93:31:08:f1:40:b8:0b:cc:7d:9b:6e:fb:f3:96:60:1d:86: b3:8c:76:d1:2d:6e:03:a8:59:50:79:8a:c0:be:9b:df:cc:76: d9:4c:d9:66:8d:35:39:94:f0:c6:1f:af:c0:e4:22:c7:e5:86: 55:70:53:08:af:45:45:5f:01:1f:de:14:d3:a3:ce:b1:4e:d1: fa:54:3b:09:7b:50:b9:e5:28:a2:dc:4e:98:df:72:4a:ac:cb: 74:54:be:29:50:04:cc:b4:32:c5:0c:bb:8b:83:65:94:b0:7a: 7f:b7:d8:bd:31:b7:69:3d:0f:0d:31:a3:d3:86:99:c2:11:ff: fb:28:2a:5c:f2:48:7b:ba:71:06:16:96:ed:0f:48:e6:7a:d9: cd:d7:cc:d7:ee:da:98:bf:f9:d6:da:cd:af:cf:6b:61:58:1e: 72:f6:9b:2a:22:11:3a:cf:47:16:a0:25:b9:f3:5b:ed:9e:eb: 78:1e:bd:7f:9a:f9:1a:a3:c1:8c:b2:08:88:f8:a1:94:61:80: 37:3d:3d:2c:cb:f7:36:e9:8e:28:bb:9b:60:fb:79:54:a8:47: ef:68:55:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9We4SNt9nM4oRUuO7ySSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1 ZTUxN2QwHhcNMjUxMjE1MTcwMTA2WhcNMjUxMjE2MTcwMTA2WjAzMTEwLwYDVQQD Eyg4YmNiNjI0ZTBhNmY1ZTg2YzE4ZTY5OTUzNjZhYmEzYmJjZjVlNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/fRwkZCjzjqyvTv1yKWsYL6uXpq PA8IMbFetnT+E/GHkhetxtDNBtEDrsmSQ1emqrjH7jzjrFQS02S9oNrWLI1zEF3w kDYdR0ZTGSus4fvxVBJR9X292Mes2GegigHbcaH2RrXxELEHFcmwQ9RaXLKkXUc7 mIjL6XBjE2tbGJtpwturskXsC5xkqJW1UCpAdCxs3K45jdqIcHP3MC3yl9ffSM+D gP4psB6kxWenop5UhBIcT68yqjTDOvOcKsiSt2ZUhh0RQiByIeSIrGcRUKBNg6og YMz8257hq27l3C3vxeLIaheAAH0nfQ+iH68HXilWd0Ojr4yDrOLWSkW04QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvLYk4Kb16GwY5plTZquju89eSYMB8GA1UdIwQY MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZID3Rpc LtjLKhCHYTvk8I1hs5ODecGD7LOpfPOp2kJqjxzDcJMxCPFAuAvMfZtu+/OWYB2G s4x20S1uA6hZUHmKwL6b38x22UzZZo01OZTwxh+vwOQix+WGVXBTCK9FRV8BH94U 06POsU7R+lQ7CXtQueUootxOmN9ySqzLdFS+KVAEzLQyxQy7i4NllLB6f7fYvTG3 aT0PDTGj04aZwhH/+ygqXPJIe7pxBhaW7Q9I5nrZzdfM1+7amL/51trNr89rYVge cvabKiIROs9HFqAlufNb7Z7reB69f5r5GqPBjLIIiPihlGGANz09LMv3NumOKLub YPt5VKhH72hVPQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:14:31 2025 by rpki-client