This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json) Hash identifier: 5ih1NLuJSkgYuk255LmaUJNgrzc9FXXY7eUEV0ArKDg= Subject key identifier: ED:38:E3:1C:04:43:E2:7B:11:FA:C9:CD:AC:B1:3B:FE:83:37:74:A5 Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21 Certificate serial: 019AF540D7BBE3A87AEB236B2C926846DB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:58 +0000 Manifest this update: Sat 06 Dec 2025 20:00:58 +0000 Manifest next update: Sun 07 Dec 2025 20:00:58 +0000 Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: VSkZ14yfDaGaF4xV/X6pNVL2+hEX/glLcdTX4EDN/7M=) 2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d7:bb:e3:a8:7a:eb:23:6b:2c:92:68:46:db:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21 Validity Not Before: Dec 6 20:00:58 2025 GMT Not After : Dec 7 20:00:58 2025 GMT Subject: CN=ed38e31c0443e27b11fac9cdacb13bfe833774a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:ff:35:6c:73:e9:8b:f3:31:13:ff:01:e3: eb:bd:32:f2:32:29:29:cd:1e:64:c7:57:21:21:4a: c4:bf:64:38:45:f1:2f:d5:4e:5f:97:37:5a:09:75: 15:24:e2:46:30:00:17:a6:4e:5b:48:be:a5:2a:0f: de:97:ac:ed:61:1b:6f:77:d3:b9:13:63:d2:ac:cd: 9d:1c:5d:de:b8:92:d2:0f:57:c5:7e:42:11:d8:d7: 75:ff:0e:a2:83:89:e7:83:93:7f:49:11:78:46:46: 67:96:eb:62:30:15:fd:22:8b:19:21:eb:fc:d9:c4: 66:c0:9e:d5:b7:30:08:0c:fe:6b:5a:57:0c:8a:5c: af:f6:b6:ac:d5:11:f1:6f:18:11:6e:1f:d0:75:26: 75:d1:dc:08:9a:e0:26:b5:dc:8d:73:51:d4:ad:68: 50:4f:09:11:c0:12:e4:c2:f8:00:41:1f:7b:0e:9b: 97:bf:b0:78:9b:42:c6:39:b4:a0:56:7d:80:59:16: 27:f1:66:38:5a:af:c3:5e:9b:c7:8f:c4:45:66:9b: 4e:8f:da:17:7b:78:a6:33:86:f9:28:e1:41:64:e6: 7c:a1:24:6d:b2:b3:71:90:77:03:f3:98:29:44:57: 69:ce:e9:09:f6:70:fd:f8:04:56:7f:1a:7a:83:19: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:38:E3:1C:04:43:E2:7B:11:FA:C9:CD:AC:B1:3B:FE:83:37:74:A5 X509v3 Authority Key Identifier: keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e7:18:c7:9e:14:3a:a5:60:1b:c8:53:94:e7:82:81:17:3b: 48:d3:a8:27:91:ee:75:32:b9:09:70:39:e7:9b:0d:4c:56:00: a0:3b:4d:cf:07:c8:0f:90:33:2f:04:58:a0:ec:3c:e5:c4:c2: d3:1b:5c:33:14:94:3c:f4:91:57:2d:ba:6d:61:d1:81:ec:d9: b6:20:7f:8e:57:20:94:6a:3d:c2:71:3e:30:d5:e4:7b:e9:e5: af:68:ba:6a:9d:a4:ed:fa:45:5a:c3:d4:35:fe:0b:eb:79:e7: cf:80:4b:2b:62:0d:22:a4:0e:e9:ac:1d:b2:f2:92:17:b1:83: e9:ce:e4:5e:72:38:79:cd:f5:96:a5:ea:9b:f9:59:d0:fd:51: 55:58:bb:12:60:5f:3d:fb:d3:a5:0d:1f:56:94:3c:12:2b:3d: b9:63:79:1f:5b:19:55:4d:45:4b:b2:3f:60:11:8a:87:d9:b4: 76:5a:0c:f0:fa:33:4f:e4:6b:d9:6c:a2:65:58:f3:02:f9:8d: b7:7b:e0:00:49:ce:52:5d:74:2d:4c:77:dd:6f:e3:3b:75:05: 39:69:49:fe:24:1c:bd:5d:c3:88:ab:cc:14:3b:f9:31:a2:1d: 77:c5:b2:0c:d9:43:6e:de:ba:d6:58:8b:f9:7f:d7:f7:7d:1d: 16:80:84:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNe746h66yNrLJJoRttzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh MzNhMjEwHhcNMjUxMjA2MjAwMDU4WhcNMjUxMjA3MjAwMDU4WjAzMTEwLwYDVQQD EyhlZDM4ZTMxYzA0NDNlMjdiMTFmYWM5Y2RhY2IxM2JmZTgzMzc3NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHf/NWxz6YvzMRP/AePrvTLyMikp zR5kx1chIUrEv2Q4RfEv1U5flzdaCXUVJOJGMAAXpk5bSL6lKg/el6ztYRtvd9O5 E2PSrM2dHF3euJLSD1fFfkIR2Nd1/w6ig4nng5N/SRF4RkZnlutiMBX9IosZIev8 2cRmwJ7VtzAIDP5rWlcMilyv9ras1RHxbxgRbh/QdSZ10dwImuAmtdyNc1HUrWhQ TwkRwBLkwvgAQR97DpuXv7B4m0LGObSgVn2AWRYn8WY4Wq/DXpvHj8RFZptOj9oX e3imM4b5KOFBZOZ8oSRtsrNxkHcD85gpRFdpzukJ9nD9+ARWfxp6gxluoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO044xwEQ+J7EfrJzayxO/6DN3SlMB8GA1UdIwQY MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt OWJkNWQ1MTM4MDU5LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5 LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+cYx54U OqVgG8hTlOeCgRc7SNOoJ5HudTK5CXA555sNTFYAoDtNzwfID5AzLwRYoOw85cTC 0xtcMxSUPPSRVy26bWHRgezZtiB/jlcglGo9wnE+MNXke+nlr2i6ap2k7fpFWsPU Nf4L63nnz4BLK2INIqQO6awdsvKSF7GD6c7kXnI4ec31lqXqm/lZ0P1RVVi7EmBf PfvTpQ0fVpQ8Eis9uWN5H1sZVU1FS7I/YBGKh9m0dloM8PozT+Rr2WyiZVjzAvmN t3vgAEnOUl10LUx33W/jO3UFOWlJ/iQcvV3DiKvMFDv5MaIdd8WyDNlDbt661liL +X/X930dFoCEyw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:42 2025 by rpki-client