This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json) Hash identifier: wjvqW3C7g/L1lgjhd4hpPBMZiJI66Xs1fNNEk4WKGXA= Subject key identifier: 7A:40:96:13:42:45:E3:6A:6F:67:75:27:7D:2C:42:03:A3:D6:7D:D2 Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37 Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37 Certificate serial: 019AF2092CC96B54479AFBB12B6141E2CFD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft Manifest number: 03B5 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: Y0qtxxwnN5QO3yY5l0osFSBQDpaiYUiszlEpdZS9lOs=) 2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=) 3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=) 4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=) 5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2c:c9:6b:54:47:9a:fb:b1:2b:61:41:e2:cf:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=7a4096134245e36a6f6775277d2c4203a3d67dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:d9:7d:a7:e3:0e:98:8d:e1:87:ad:f1:a2: 6e:37:45:84:83:fb:df:bf:bd:38:57:e8:44:45:9d: b0:b3:30:8d:3f:51:f2:28:7a:5a:bc:59:2e:b8:b5: 6e:e0:95:83:ca:4b:90:ac:be:b9:10:73:b3:88:6b: 49:cc:66:3b:1c:ff:3b:36:dd:be:61:b5:e4:bd:c2: 40:1a:a6:f3:dc:02:c6:b9:90:ce:90:c3:52:a3:8d: 4e:fc:df:56:fe:5c:3f:04:b4:8b:c1:ca:b2:d9:3c: e9:b4:d3:f4:0b:80:b6:55:ed:8a:2f:ae:df:02:6e: 54:32:79:ae:f6:24:bd:8d:4d:4b:f2:1a:58:77:52: 32:e2:11:9b:eb:34:39:27:0a:5a:2e:78:20:ae:01: c6:d7:fd:19:1b:d8:b9:14:77:56:66:64:04:e7:be: ed:4b:30:db:02:41:55:ec:67:b5:8d:e4:a2:c3:9b: 9a:bd:64:0c:f7:15:35:b4:33:4e:70:1b:3f:ec:a2: cb:1b:c3:44:39:08:68:42:02:e6:69:bb:18:0b:98: 76:e1:dc:a1:68:2f:df:71:50:71:d9:fe:25:d5:ec: 83:58:4b:3c:34:15:cb:22:a8:b8:02:a6:69:ce:29: 61:39:7e:e9:99:b5:5c:7c:9c:d6:7e:20:c1:d9:ce: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:40:96:13:42:45:E3:6A:6F:67:75:27:7D:2C:42:03:A3:D6:7D:D2 X509v3 Authority Key Identifier: keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d9:2a:a2:f5:29:b9:47:bc:16:fd:e2:96:56:d7:6d:ea:0d: 0a:35:44:d2:b6:29:78:6a:4e:3b:49:6b:3f:17:53:d7:4e:23: 97:3a:34:9b:ca:07:aa:71:c2:73:5e:ec:77:f1:2f:a9:1c:f4: 27:fb:3f:ab:56:cc:98:1b:47:0c:ba:be:04:53:8b:55:0c:79: dc:f2:5f:44:06:dc:c8:6c:2e:e1:6d:cf:30:62:48:e0:a4:da: 5b:2e:ec:75:23:04:0c:62:40:35:b1:e9:46:42:17:11:de:e2: 05:e1:5e:55:d6:a5:13:7a:38:88:a4:6d:9e:48:bd:d3:f9:85: 9b:1d:c6:4b:fc:de:79:c2:5c:0b:f2:d9:54:ba:ec:b1:92:f6: a8:06:04:9f:e5:eb:e4:64:e2:37:0f:10:84:56:a9:da:eb:90: 43:10:fe:e2:34:53:f1:6e:e1:78:08:20:b3:30:77:a1:b2:6a: 2f:8c:88:9e:9c:88:07:91:4c:13:34:3f:dc:4f:73:e3:57:98: 6f:1f:30:2c:19:63:ed:92:97:25:a3:6d:7c:48:8c:1e:38:61: 53:ab:0a:84:f8:97:b8:54:df:ff:d9:e8:c0:78:b6:a9:78:29: 3f:bf:4e:92:98:10:9e:89:f9:32:10:32:f8:84:3e:fa:ff:1f: 16:bf:5e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSzJa1RHmvuxK2FB4s/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODcyODI2ZmNlMDJiZDk0ODVlZjI3NjY0MWQyYjU4NGY1 OTliMzcwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD Eyg3YTQwOTYxMzQyNDVlMzZhNmY2Nzc1Mjc3ZDJjNDIwM2EzZDY3ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPHZfafjDpiN4Yet8aJuN0WEg/vf v704V+hERZ2wszCNP1HyKHpavFkuuLVu4JWDykuQrL65EHOziGtJzGY7HP87Nt2+ YbXkvcJAGqbz3ALGuZDOkMNSo41O/N9W/lw/BLSLwcqy2TzptNP0C4C2Ve2KL67f Am5UMnmu9iS9jU1L8hpYd1Iy4hGb6zQ5JwpaLnggrgHG1/0ZG9i5FHdWZmQE577t SzDbAkFV7Ge1jeSiw5uavWQM9xU1tDNOcBs/7KLLG8NEOQhoQgLmabsYC5h24dyh aC/fcVBx2f4l1eyDWEs8NBXLIqi4AqZpzilhOX7pmbVcfJzWfiDB2c7JAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpAlhNCReNqb2d1J30sQgOj1n3SMB8GA1UdIwQY MBaAFC6HKCb84CvZSF7ydmQdK1hPWZs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0Yzct MjRjNzliMWNiNGRhLzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0YzctMjRjNzliMWNiNGRh LzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtkqovUp uUe8Fv3illbXbeoNCjVE0rYpeGpOO0lrPxdT104jlzo0m8oHqnHCc17sd/EvqRz0 J/s/q1bMmBtHDLq+BFOLVQx53PJfRAbcyGwu4W3PMGJI4KTaWy7sdSMEDGJANbHp RkIXEd7iBeFeVdalE3o4iKRtnki90/mFmx3GS/zeecJcC/LZVLrssZL2qAYEn+Xr 5GTiNw8QhFap2uuQQxD+4jRT8W7heAggszB3obJqL4yInpyIB5FMEzQ/3E9z41eY bx8wLBlj7ZKXJaNtfEiMHjhhU6sKhPiXuFTf/9nowHi2qXgpP79OkpgQnon5MhAy +IQ++v8fFr9eNg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:19 2025 by rpki-client