This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json) Hash identifier: GnqaIZtl50u/Faw2yDnnQLu+8J+Y8oLQM+QVu8qMePc= Subject key identifier: 48:40:0B:0A:BB:5C:C6:34:8B:61:3E:A3:C2:5C:75:C2:E7:09:68:81 Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97 Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397 Certificate serial: 019AF12EECCD74006AF902342430ACA1B7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft Manifest number: 1709 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=) 2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: EfcQ9dlARMTZYAST+aSVmLT88wgNnPMlwNeyb6uwAkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ec:cd:74:00:6a:f9:02:34:24:30:ac:a1:b7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=48400b0abb5cc6348b613ea3c25c75c2e7096881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:94:8d:dc:2a:fe:ed:0d:63:44:21:d6:f2: 20:a2:66:ab:12:2e:f7:2d:b1:fe:27:f8:84:aa:c0: a9:a3:5b:ea:ff:5e:ba:34:90:ee:9b:0e:57:14:25: 8f:b4:5b:89:ef:19:c7:26:77:e7:15:88:9d:a6:9a: 63:e3:9e:b7:85:0d:e3:9d:9f:a0:69:fb:6b:21:65: b6:4c:71:a8:fb:10:86:f3:6d:d2:0a:d4:3b:13:72: b7:e7:4c:7b:3b:86:e6:2b:7b:c0:fa:4e:97:e2:4d: 5d:cd:fa:b0:d5:2a:04:18:de:17:21:89:60:a7:7e: db:ec:64:56:7d:02:7a:a6:0a:2f:8f:e3:e2:27:ed: 9b:f2:43:db:0a:14:99:62:d7:2b:4f:8d:57:9a:79: 50:08:31:20:81:7a:c9:3a:57:87:23:d8:2e:28:31: 80:43:d0:de:ae:98:d4:6e:07:d1:06:fa:2b:a7:87: 88:21:b9:03:d3:c4:de:fc:c3:eb:18:d9:fb:14:72: ef:d6:47:33:bb:e4:9b:e3:cd:a2:f7:b0:99:46:62: a7:c8:db:ad:97:56:32:74:ca:2f:3e:c3:73:26:ac: 4f:ea:e2:7d:fa:42:a3:7b:e1:36:46:1f:5d:4f:1f: c6:f1:d2:ef:f9:3c:b4:8e:18:56:58:7a:0c:e6:d9: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:0B:0A:BB:5C:C6:34:8B:61:3E:A3:C2:5C:75:C2:E7:09:68:81 X509v3 Authority Key Identifier: keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e8:a0:e7:6a:5d:b6:4d:90:de:55:63:a4:ea:20:a8:47:fb: 85:13:54:05:f0:5e:78:f6:88:b3:f7:54:48:3c:9d:b6:04:ed: af:19:bf:bc:07:a6:fd:d2:b7:72:53:33:55:d1:c1:64:88:07: d0:fc:3a:bb:c0:ae:f1:09:88:e5:73:5a:9e:a7:7b:0f:a9:54: 84:7d:09:63:91:2c:ee:73:18:52:14:b6:e8:08:c7:09:d8:73: ed:45:b0:93:4a:bb:af:fa:3f:f3:ab:3f:13:46:73:ee:7f:1d: ea:90:9d:79:ee:77:f8:cc:cb:54:0c:1d:1f:5a:7c:1d:c4:a8: dc:03:96:35:df:8e:e9:ca:8c:21:9d:12:05:c6:67:ca:0a:52: 80:e8:51:ab:9e:16:0e:97:78:d1:32:12:95:31:eb:68:17:d5: 0a:37:80:51:aa:0b:4e:89:54:06:4d:0d:0f:6c:8f:55:fe:df: 2d:c9:9e:ce:be:f4:b2:56:3f:3f:eb:f2:30:a8:d3:f8:c1:f8: a9:c8:08:4d:b9:70:4b:39:f4:09:a9:08:24:f6:1b:c7:0f:cb: c4:df:bb:9b:2d:8c:fd:65:42:55:2e:f9:cc:72:2e:e5:4c:e7: a1:04:5c:70:d1:86:16:16:5b:5a:40:6c:56:95:d7:1a:ca:c7: 48:fc:19:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuzNdABq+QI0JDCsobenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx ZjEzOTcwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD Eyg0ODQwMGIwYWJiNWNjNjM0OGI2MTNlYTNjMjVjNzVjMmU3MDk2ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUaUjdwq/u0NY0Qh1vIgomarEi73 LbH+J/iEqsCpo1vq/166NJDumw5XFCWPtFuJ7xnHJnfnFYidpppj4563hQ3jnZ+g aftrIWW2THGo+xCG823SCtQ7E3K350x7O4bmK3vA+k6X4k1dzfqw1SoEGN4XIYlg p37b7GRWfQJ6pgovj+PiJ+2b8kPbChSZYtcrT41XmnlQCDEggXrJOleHI9guKDGA Q9DerpjUbgfRBvorp4eIIbkD08Te/MPrGNn7FHLv1kczu+Sb482i97CZRmKnyNut l1YydMovPsNzJqxP6uJ9+kKje+E2Rh9dTx/G8dLv+Ty0jhhWWHoM5tl+9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhACwq7XMY0i2E+o8JcdcLnCWiBMB8GA1UdIwQY MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0 LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+ig52pd tk2Q3lVjpOogqEf7hRNUBfBeePaIs/dUSDydtgTtrxm/vAem/dK3clMzVdHBZIgH 0Pw6u8Cu8QmI5XNanqd7D6lUhH0JY5Es7nMYUhS26AjHCdhz7UWwk0q7r/o/86s/ E0Zz7n8d6pCdee53+MzLVAwdH1p8HcSo3AOWNd+O6cqMIZ0SBcZnygpSgOhRq54W Dpd40TISlTHraBfVCjeAUaoLTolUBk0ND2yPVf7fLcmezr70slY/P+vyMKjT+MH4 qcgITblwSzn0CakIJPYbxw/LxN+7my2M/WVCVS75zHIu5UznoQRccNGGFhZbWkBs VpXXGsrHSPwZBg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:09 2025 by rpki-client