This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json) Hash identifier: dqc6Vs3GEmfFEVj9jEWAnRcdli0zI37b9f6OxbFqkrk= Subject key identifier: 28:28:C5:AC:F2:CE:B1:48:9D:3C:C8:22:53:2A:CF:34:06:3A:50:81 Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Certificate serial: 019AF208A492153A5AB9B1FA6B54E9A18F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=) 2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: irmKiZBdBWlHtrx0esCHRt5IStfYU3hhB2H4Yjt+MwQ=) 3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a4:92:15:3a:5a:b9:b1:fa:6b:54:e9:a1:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=2828c5acf2ceb1489d3cc822532acf34063a5081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:3a:8d:da:65:64:ec:9a:9a:dc:45:86:98: 86:ae:be:57:16:ba:ed:1e:ef:e3:bb:66:45:fa:e5: 4c:63:66:25:d0:10:2a:72:06:d5:5f:bc:ed:3b:e7: 03:44:98:45:fc:fc:c4:b2:37:6a:f8:9d:c7:aa:1d: c4:db:ad:74:56:dd:da:89:69:e3:15:f9:eb:c9:ca: c9:44:a8:33:e7:b5:aa:f8:0d:33:43:84:84:11:15: 6a:16:32:e9:5a:ed:b1:bb:d9:31:5b:e5:e4:33:50: 04:f7:ee:25:1e:0e:4b:37:21:c2:6a:3f:a5:26:f7: 10:7e:86:d6:9b:85:bb:76:ec:0a:c2:0a:9b:f9:de: eb:60:00:39:e7:40:34:3d:99:51:8f:f5:93:66:35: 86:e4:03:f3:51:f7:1c:8b:15:ba:49:a2:e0:df:1f: 8b:7f:e6:11:a8:9e:3d:3f:ae:74:33:77:03:b2:e5: c2:3c:7b:9b:be:f6:34:94:e8:42:69:3f:96:0d:ef: 41:d1:61:e6:66:16:78:a4:1a:6f:98:95:8a:1d:0a: 35:72:18:c2:fb:ec:53:24:d3:df:38:28:2f:55:8d: e6:bf:aa:9a:f1:80:3b:92:63:c5:02:77:50:6f:b6: 61:98:b3:2d:6d:7d:69:a1:ea:4b:f3:cd:ec:25:e9: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:28:C5:AC:F2:CE:B1:48:9D:3C:C8:22:53:2A:CF:34:06:3A:50:81 X509v3 Authority Key Identifier: keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8a:17:0a:3b:2f:54:1d:e7:97:9f:af:6e:0c:a1:eb:af:dc: 4e:35:1b:51:df:c2:b6:94:c6:8b:23:cf:63:23:89:d8:35:11: 83:49:51:ab:65:dd:b3:f7:47:da:19:88:b0:e3:b5:26:1b:73: 18:57:58:96:8c:59:5e:8f:30:b8:07:f7:5e:41:51:c9:44:27: 89:13:e5:55:7b:58:61:d2:ca:58:23:c2:b7:d5:f8:00:f2:b6: a4:db:f4:54:be:d0:dd:eb:07:c1:85:4e:d7:b8:6e:7a:52:d2: 9e:72:ec:38:0f:63:a4:b2:01:05:d3:9d:eb:ab:81:53:52:b3: 0a:82:44:00:cb:f6:f3:27:73:dd:0b:d9:c6:cf:3c:83:d0:1e: 90:1b:f5:c4:e7:d8:84:df:cc:5d:09:be:19:08:98:bc:9c:3f: b0:7d:f3:1c:e7:82:16:68:c9:d1:07:59:4a:ec:47:3e:8b:15: 4d:6c:e4:72:73:be:5c:3a:be:db:a4:14:de:ba:3e:40:0c:55: e9:73:97:af:ac:55:6b:df:03:02:a7:9e:59:b2:c7:a6:d4:9c: 55:a2:ea:44:49:17:30:53:5b:cd:a3:3e:af:3f:d1:26:8e:6b: 28:1c:7a:46:6d:83:52:9f:89:3d:37:33:36:e1:91:1b:c8:d9: 3b:09:2b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKSSFTpaubH6a1TpoY8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0 NzkyY2UwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EygyODI4YzVhY2YyY2ViMTQ4OWQzY2M4MjI1MzJhY2YzNDA2M2E1MDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArro6jdplZOyamtxFhpiGrr5XFrrt Hu/ju2ZF+uVMY2Yl0BAqcgbVX7ztO+cDRJhF/PzEsjdq+J3Hqh3E2610Vt3aiWnj FfnrycrJRKgz57Wq+A0zQ4SEERVqFjLpWu2xu9kxW+XkM1AE9+4lHg5LNyHCaj+l JvcQfobWm4W7duwKwgqb+d7rYAA550A0PZlRj/WTZjWG5APzUfccixW6SaLg3x+L f+YRqJ49P650M3cDsuXCPHubvvY0lOhCaT+WDe9B0WHmZhZ4pBpvmJWKHQo1chjC ++xTJNPfOCgvVY3mv6qa8YA7kmPFAndQb7ZhmLMtbX1poepL883sJenkmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgoxazyzrFInTzIIlMqzzQGOlCBMB8GA1UdIwQY MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt MDJiMzM1ODJjNzQ3LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3 LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASooXCjsv VB3nl5+vbgyh66/cTjUbUd/CtpTGiyPPYyOJ2DURg0lRq2Xds/dH2hmIsOO1Jhtz GFdYloxZXo8wuAf3XkFRyUQniRPlVXtYYdLKWCPCt9X4APK2pNv0VL7Q3esHwYVO 17huelLSnnLsOA9jpLIBBdOd66uBU1KzCoJEAMv28ydz3QvZxs88g9AekBv1xOfY hN/MXQm+GQiYvJw/sH3zHOeCFmjJ0QdZSuxHPosVTWzkcnO+XDq+26QU3ro+QAxV 6XOXr6xVa98DAqeeWbLHptScVaLqREkXMFNbzaM+rz/RJo5rKBx6Rm2DUp+JPTcz NuGRG8jZOwkrVA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:07 2025 by rpki-client