This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json) Hash identifier: o3cTa+YVAWEyfNj1fyadqcwfmsAnW7rZM5TXBeJFGLY= Subject key identifier: FA:AB:A9:85:73:D7:00:B4:41:31:9D:D3:3B:71:20:4F:93:D7:9A:B6 Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Certificate serial: 019B2FD4E6903C02E507C65EF5E64AA94778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 05:00:40 +0000 Manifest this update: Thu 18 Dec 2025 05:00:40 +0000 Manifest next update: Fri 19 Dec 2025 05:00:40 +0000 Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=) 2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: Ztf+3IDssGT2HU+nQP/TrMczNY9iE8ymEB5ZtW67GMk=) 3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:e6:90:3c:02:e5:07:c6:5e:f5:e6:4a:a9:47:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce Validity Not Before: Dec 18 05:00:40 2025 GMT Not After : Dec 19 05:00:40 2025 GMT Subject: CN=faaba98573d700b441319dd33b71204f93d79ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:47:7b:f1:70:4a:c9:fc:66:37:2c:a8:f1: bb:10:d9:99:66:21:18:4f:4a:41:12:90:8c:8b:69: a8:7f:75:96:c8:e5:84:d6:27:38:3d:b1:61:c2:de: 88:1a:c4:68:3c:92:e7:81:a7:17:88:bc:c0:4b:5c: 33:c2:99:15:38:59:be:8c:fe:09:aa:49:3e:96:45: 54:01:5f:a4:67:a4:80:ea:76:99:21:f5:8f:80:e4: 15:1d:39:78:b5:9d:d8:62:46:2e:32:f9:51:12:dd: 7f:a6:45:cd:3a:cb:17:95:85:ea:9d:32:79:2e:86: 1c:61:90:4f:0b:6a:76:4d:0d:13:c7:d0:df:28:5a: 20:60:3c:9f:9b:f4:a1:ab:d5:72:18:6c:8d:d5:4a: 09:3f:ae:5c:8f:f6:c6:9c:13:a2:b5:40:3c:69:4c: 69:b4:77:2d:3b:07:18:1b:bb:cc:e5:7f:3b:20:bb: 21:cb:be:d7:45:03:39:12:f0:6e:63:62:07:8b:0f: c0:bf:a5:dd:08:01:55:b6:26:0f:97:06:a3:a9:7e: 30:3d:d4:c6:15:40:be:c7:19:a1:6a:b2:44:71:2a: 73:67:8e:c4:78:3a:09:fb:81:6d:a4:e0:c7:7f:ba: e3:83:47:fd:a8:0d:04:50:9f:54:0c:7d:46:07:cb: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AB:A9:85:73:D7:00:B4:41:31:9D:D3:3B:71:20:4F:93:D7:9A:B6 X509v3 Authority Key Identifier: keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ee:c8:4f:4e:e5:ad:db:8b:a0:ae:d2:e9:7b:63:00:65:8c: 3a:af:01:a7:28:5b:aa:e5:a9:e3:e5:8c:5c:cb:10:3c:c3:02: 82:91:83:ca:d0:62:ff:cc:66:09:71:01:9a:20:c6:83:a4:e8: f4:a2:fe:c9:58:f5:be:1a:89:c4:1e:7e:65:70:78:0f:31:77: fe:3c:a7:2c:41:cc:b5:d0:26:50:8e:2f:4c:54:1f:c0:41:b3: 54:dc:5b:72:22:e4:e2:b7:7c:1b:0e:2c:f2:cd:e2:ac:11:d8: de:90:2e:73:19:fd:36:1d:cf:b0:7b:bc:38:e9:1d:e2:00:c8: e8:ed:c2:46:6c:9b:af:0c:85:cb:a7:f9:3d:ef:52:e6:20:43: da:f9:0b:cc:41:80:fe:4d:5e:5d:3d:45:a7:35:ca:b3:05:9a: be:0f:2a:a1:1b:19:4a:2c:4c:82:84:6a:26:f5:cd:1e:08:06: 89:45:c2:71:f4:25:65:93:ce:7c:81:a7:41:d8:cf:6f:c5:67: 3b:d3:ed:d2:19:96:4d:5d:81:25:cc:a3:a8:21:90:28:a1:ad: 00:5e:23:fe:c6:36:a5:4f:b6:dc:1b:db:85:71:53:7e:80:50: 5a:4b:db:2e:d6:e2:88:a4:cc:c4:ad:c3:d4:f6:bc:0a:91:88: 1f:33:5e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1OaQPALlB8Ze9eZKqUd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0 NzkyY2UwHhcNMjUxMjE4MDUwMDQwWhcNMjUxMjE5MDUwMDQwWjAzMTEwLwYDVQQD EyhmYWFiYTk4NTczZDcwMGI0NDEzMTlkZDMzYjcxMjA0ZjkzZDc5YWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkhHe/FwSsn8ZjcsqPG7ENmZZiEY T0pBEpCMi2mof3WWyOWE1ic4PbFhwt6IGsRoPJLngacXiLzAS1wzwpkVOFm+jP4J qkk+lkVUAV+kZ6SA6naZIfWPgOQVHTl4tZ3YYkYuMvlREt1/pkXNOssXlYXqnTJ5 LoYcYZBPC2p2TQ0Tx9DfKFogYDyfm/Shq9VyGGyN1UoJP65cj/bGnBOitUA8aUxp tHctOwcYG7vM5X87ILshy77XRQM5EvBuY2IHiw/Av6XdCAFVtiYPlwajqX4wPdTG FUC+xxmharJEcSpzZ47EeDoJ+4FtpODHf7rjg0f9qA0EUJ9UDH1GB8t2DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqrqYVz1wC0QTGd0ztxIE+T15q2MB8GA1UdIwQY MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt MDJiMzM1ODJjNzQ3LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3 LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+7IT07l rduLoK7S6XtjAGWMOq8BpyhbquWp4+WMXMsQPMMCgpGDytBi/8xmCXEBmiDGg6To 9KL+yVj1vhqJxB5+ZXB4DzF3/jynLEHMtdAmUI4vTFQfwEGzVNxbciLk4rd8Gw4s 8s3irBHY3pAucxn9Nh3PsHu8OOkd4gDI6O3CRmybrwyFy6f5Pe9S5iBD2vkLzEGA /k1eXT1FpzXKswWavg8qoRsZSixMgoRqJvXNHggGiUXCcfQlZZPOfIGnQdjPb8Vn O9Pt0hmWTV2BJcyjqCGQKKGtAF4j/sY2pU+23BvbhXFTfoBQWkvbLtbiiKTMxK3D 1Pa8CpGIHzNenw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:34:24 2025 by rpki-client