This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json) Hash identifier: IVCw0CiNiC2JoSErEoqJ2avm5tD0XbUf19otYasOW4U= Subject key identifier: F1:53:27:E6:63:19:42:52:0D:A6:ED:A1:13:4A:1B:C2:30:3B:41:76 Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d Certificate serial: 019AF50AC1732FB31AEE8E0EAF2D492D76A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft Manifest number: 174A Signing time: Sat 06 Dec 2025 19:01:53 +0000 Manifest this update: Sat 06 Dec 2025 19:01:53 +0000 Manifest next update: Sun 07 Dec 2025 19:01:53 +0000 Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=) 2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=) 3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: ObLsfAX/k+0Wkq5x1rDtG0RdKwqVJ8wNJNBctPj06D0=) 4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c1:73:2f:b3:1a:ee:8e:0e:af:2d:49:2d:76:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d Validity Not Before: Dec 6 19:01:53 2025 GMT Not After : Dec 7 19:01:53 2025 GMT Subject: CN=f15327e6631942520da6eda1134a1bc2303b4176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:22:71:12:b1:5c:6f:c6:3e:e7:5b:2f:fe: 8b:49:65:87:f2:1c:25:36:a6:95:97:71:95:65:d3: 70:a2:e1:15:a4:b0:0d:18:4a:ce:b7:a6:e5:1a:60: 7a:e4:16:d1:00:b7:63:0e:2b:b9:21:de:3d:b8:8f: 83:20:1b:46:40:a6:ac:1e:87:8a:be:a8:8d:42:e4: 6f:83:98:7d:ee:62:d1:f7:f9:34:12:0d:80:2a:21: 6d:1e:7e:45:dc:ea:28:39:6b:60:bc:bf:c3:61:0a: bd:3a:09:e0:13:67:72:2f:5b:9e:4f:04:be:df:33: 8d:85:95:6d:46:fd:4b:f9:a4:6f:e3:58:da:82:9f: 8d:d6:37:6e:31:70:40:53:a5:c6:4a:e4:34:99:d7: 0b:43:e1:30:7e:d8:2f:38:54:fd:e7:60:86:54:c6: db:bb:05:94:80:35:e0:e3:86:ba:c7:3b:d0:b9:9f: 64:59:62:f8:2c:cb:ad:b2:55:4a:2a:c8:1a:af:e7: b9:61:52:54:36:7d:32:fd:3e:b7:60:92:39:21:34: 4a:1a:76:4e:dc:60:c7:d0:6e:65:f5:20:ad:71:b9: 49:e6:3c:43:27:fe:cc:74:c2:f9:0a:b7:84:08:05: 6b:4b:e1:48:7f:e3:ab:5b:bc:f0:75:6e:98:83:26: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:53:27:E6:63:19:42:52:0D:A6:ED:A1:13:4A:1B:C2:30:3B:41:76 X509v3 Authority Key Identifier: keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f4:e0:27:d0:b2:9c:06:9d:66:d1:40:05:d6:f8:e2:3c:ec: 2d:b5:b6:61:7e:0e:09:3c:1f:46:ba:b9:24:50:41:11:bd:11: f8:12:81:e8:bf:a8:6c:73:45:71:71:61:a9:04:95:17:6b:dd: 09:11:e7:15:08:a8:a0:f1:45:a7:20:59:98:11:62:d6:40:8a: 62:0a:58:b3:9c:03:2d:aa:75:4b:3f:bd:3d:da:fa:1e:f5:b4: cb:f3:49:b7:86:b4:d5:a5:00:79:aa:83:99:da:31:2b:a6:39: 9d:5a:75:41:55:d3:7a:fa:c2:91:43:dc:10:2d:03:29:4d:c9: a5:27:99:b3:42:e0:41:0d:4f:51:1a:c8:6e:39:5a:0e:82:ca: 1d:b8:55:15:5f:6d:42:72:64:4c:67:53:df:3e:a5:8d:20:08: c3:16:7e:2b:34:2c:67:dc:79:c7:fe:c3:54:c1:7d:43:2e:11: b2:1e:da:c3:eb:04:6f:f4:30:a0:08:06:e5:b3:da:56:84:94: dd:e3:43:61:ac:3d:1e:8e:4a:57:ab:cd:fb:5e:cc:d6:85:e9: 05:f5:cc:b4:8e:24:0d:ec:2a:44:f7:2d:28:ab:83:10:5c:b3: f1:39:1b:37:29:48:de:fa:b2:98:9c:6f:48:0b:56:e5:d9:6b: d2:78:18:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsFzL7Ma7o4Ory1JLXakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5 MmUzN2QwHhcNMjUxMjA2MTkwMTUzWhcNMjUxMjA3MTkwMTUzWjAzMTEwLwYDVQQD EyhmMTUzMjdlNjYzMTk0MjUyMGRhNmVkYTExMzRhMWJjMjMwM2I0MTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8icRKxXG/GPudbL/6LSWWH8hwl NqaVl3GVZdNwouEVpLANGErOt6blGmB65BbRALdjDiu5Id49uI+DIBtGQKasHoeK vqiNQuRvg5h97mLR9/k0Eg2AKiFtHn5F3OooOWtgvL/DYQq9OgngE2dyL1ueTwS+ 3zONhZVtRv1L+aRv41jagp+N1jduMXBAU6XGSuQ0mdcLQ+EwftgvOFT952CGVMbb uwWUgDXg44a6xzvQuZ9kWWL4LMutslVKKsgar+e5YVJUNn0y/T63YJI5ITRKGnZO 3GDH0G5l9SCtcblJ5jxDJ/7MdML5CreECAVrS+FIf+OrW7zwdW6YgyZ/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFTJ+ZjGUJSDabtoRNKG8IwO0F2MB8GA1UdIwQY MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt NjM4ZGNmYTEzMDAzLzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/TgJ9Cy nAadZtFABdb44jzsLbW2YX4OCTwfRrq5JFBBEb0R+BKB6L+obHNFcXFhqQSVF2vd CRHnFQiooPFFpyBZmBFi1kCKYgpYs5wDLap1Sz+9Pdr6HvW0y/NJt4a01aUAeaqD mdoxK6Y5nVp1QVXTevrCkUPcEC0DKU3JpSeZs0LgQQ1PURrIbjlaDoLKHbhVFV9t QnJkTGdT3z6ljSAIwxZ+KzQsZ9x5x/7DVMF9Qy4Rsh7aw+sEb/QwoAgG5bPaVoSU 3eNDYaw9Ho5KV6vN+17M1oXpBfXMtI4kDewqRPctKKuDEFyz8TkbNylI3vqymJxv SAtW5dlr0ngY4A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:04 2025 by rpki-client