This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json) Hash identifier: ds8KWbIxNDmDn9e6vsv/LWni6Gf8CwKpjWbuJIOFegc= Subject key identifier: EA:C9:7B:32:79:A9:B5:FE:22:6A:F1:85:F9:30:2A:3F:37:31:C3:7D Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Certificate serial: 019AF31D425F3390238515B892C1CB8C8117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:52 +0000 Manifest this update: Sat 06 Dec 2025 10:02:52 +0000 Manifest next update: Sun 07 Dec 2025 10:02:52 +0000 Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: k3JKt3FHOJMjNDYPkY0DYEF43UOS67LTbMeKepftwHY=) 2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:42:5f:33:90:23:85:15:b8:92:c1:cb:8c:81:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e Validity Not Before: Dec 6 10:02:52 2025 GMT Not After : Dec 7 10:02:52 2025 GMT Subject: CN=eac97b3279a9b5fe226af185f9302a3f3731c37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a7:fc:8c:ba:d7:f2:93:41:20:09:1b:ce:ee: 56:4a:62:1b:9c:47:9e:fd:49:a9:19:15:47:d3:c3: f4:42:ab:de:e7:02:80:82:96:8e:69:b4:6a:bb:96: 06:c1:2f:a6:1e:b3:ee:31:3c:32:83:a9:61:a6:ea: e7:da:82:63:12:4a:3c:5d:53:76:2e:d7:84:a2:08: cf:fe:dc:e5:95:68:7c:6d:ea:6c:b0:a9:f8:bd:7d: fe:d5:e0:d1:a1:ec:eb:8b:ac:6f:ee:53:e5:f3:44: 98:d5:8c:0a:f1:39:ce:37:01:f4:ae:87:96:a3:fb: 9c:ae:05:7b:d3:86:50:9b:6e:a5:bc:59:9d:ac:4d: b5:73:eb:e8:c8:c7:e9:8f:e2:7c:b3:6f:bc:8b:dc: 2e:9c:9f:d8:e6:82:f3:04:57:81:83:78:20:b8:87: 9d:f8:fc:f3:a0:c0:c2:55:61:87:18:f0:4b:a5:9e: 58:f8:4e:d2:bd:11:9e:89:ab:a7:f0:50:83:d0:e1: 36:99:b9:ca:ca:b7:2c:1d:b1:02:fd:29:d1:e4:55: da:07:28:02:45:4b:a8:3c:6c:ea:40:e1:5d:0d:5e: 60:5c:af:b7:e6:06:3b:a9:2f:dd:7f:fb:9f:25:90: 96:f9:3a:f7:bf:ca:f3:3d:a0:ef:6c:1e:40:6c:b8: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:7B:32:79:A9:B5:FE:22:6A:F1:85:F9:30:2A:3F:37:31:C3:7D X509v3 Authority Key Identifier: keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:1d:09:14:43:b6:49:d7:a7:f7:5d:14:cf:44:00:0b:19:de: fb:15:d3:58:17:28:9f:06:03:a1:43:0b:c0:33:9f:29:2b:90: 87:e3:65:91:13:d1:cb:9f:4f:0f:60:1a:b4:1d:35:ff:25:d4: d2:cf:74:28:3c:92:90:0b:a9:1e:6a:cd:57:d9:54:ad:41:b3: ab:cf:59:1d:18:6c:97:dd:48:9a:65:15:00:d3:97:6c:62:fd: 4c:98:a1:78:bb:90:68:13:1c:fa:05:7a:99:cf:f6:0e:19:92: bc:52:a5:8b:05:46:23:69:3c:43:3a:b0:b9:d6:be:87:68:5e: a0:bd:c3:c1:ad:68:5e:22:35:7d:6e:b8:8c:25:11:8b:80:72: dc:93:d4:20:98:b3:a0:92:5a:cb:63:68:ee:f3:4c:73:4f:cb: 2b:17:72:15:f6:65:dc:0a:ae:10:97:2d:fb:bf:6a:4e:85:95: 4a:57:b9:00:0b:cc:cc:7e:9d:d3:ce:55:93:41:af:c9:71:1e: 27:08:9e:d0:d4:7e:af:ea:e4:09:d3:ea:f7:6b:b9:c8:02:f2: 5d:66:1c:5b:80:be:ea:c4:cb:99:3f:a1:b2:64:36:b0:15:fe: 15:78:4b:b3:e0:d3:e0:6c:2f:9d:16:5a:bc:b8:fc:8b:e2:86: d8:23:2c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUJfM5AjhRW4ksHLjIEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm MGYzNWUwHhcNMjUxMjA2MTAwMjUyWhcNMjUxMjA3MTAwMjUyWjAzMTEwLwYDVQQD EyhlYWM5N2IzMjc5YTliNWZlMjI2YWYxODVmOTMwMmEzZjM3MzFjMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4af8jLrX8pNBIAkbzu5WSmIbnEee /UmpGRVH08P0Qqve5wKAgpaOabRqu5YGwS+mHrPuMTwyg6lhpurn2oJjEko8XVN2 LteEogjP/tzllWh8bepssKn4vX3+1eDRoezri6xv7lPl80SY1YwK8TnONwH0roeW o/ucrgV704ZQm26lvFmdrE21c+voyMfpj+J8s2+8i9wunJ/Y5oLzBFeBg3gguIed +PzzoMDCVWGHGPBLpZ5Y+E7SvRGeiaun8FCD0OE2mbnKyrcsHbEC/SnR5FXaBygC RUuoPGzqQOFdDV5gXK+35gY7qS/df/ufJZCW+Tr3v8rzPaDvbB5AbLgkywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrJezJ5qbX+ImrxhfkwKj83McN9MB8GA1UdIwQY MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3 LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzR0JFEO2 Sden910Uz0QACxne+xXTWBconwYDoUMLwDOfKSuQh+NlkRPRy59PD2AatB01/yXU 0s90KDySkAupHmrNV9lUrUGzq89ZHRhsl91ImmUVANOXbGL9TJiheLuQaBMc+gV6 mc/2DhmSvFKliwVGI2k8Qzqwuda+h2heoL3Dwa1oXiI1fW64jCURi4By3JPUIJiz oJJay2No7vNMc0/LKxdyFfZl3AquEJct+79qToWVSle5AAvMzH6d085Vk0GvyXEe Jwie0NR+r+rkCdPq92u5yALyXWYcW4C+6sTLmT+hsmQ2sBX+FXhLs+DT4GwvnRZa vLj8i+KG2CMsMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:26 2025 by rpki-client