This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json) Hash identifier: xW40c1g9fOK6lYvfkcWXAf5PEsao2CaAxS1/IL2MWb8= Subject key identifier: 7F:BE:16:54:B8:B7:46:4F:0C:3A:9F:CC:9D:C0:DD:EE:20:F6:3A:0C Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac Certificate serial: 019B3C7E7F62CAF5978F0B6AAE814D313EB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 16:01:21 +0000 Manifest this update: Sat 20 Dec 2025 16:01:21 +0000 Manifest next update: Sun 21 Dec 2025 16:01:21 +0000 Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: dkcqbldL7Kw+ngIttKRrhzIQXIJ7W/+4XZQMJtckkDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:7f:62:ca:f5:97:8f:0b:6a:ae:81:4d:31:3e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac Validity Not Before: Dec 20 16:01:21 2025 GMT Not After : Dec 21 16:01:21 2025 GMT Subject: CN=7fbe1654b8b7464f0c3a9fcc9dc0ddee20f63a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:f0:0d:3e:bf:85:f4:57:e5:1e:a0:c5:d9: 43:70:3b:4d:4d:5a:14:54:07:35:d1:de:5a:d6:22: b3:99:fd:11:2a:55:70:d1:57:93:87:c0:c3:ee:af: 55:1d:22:a5:c5:14:a5:d4:29:19:83:02:ba:75:b1: 21:2f:07:9a:37:fd:44:e4:34:36:fd:4b:18:4e:eb: 92:d7:3e:ab:eb:e7:3a:1e:7d:9c:fe:51:5c:1e:46: e9:b1:43:31:95:eb:a2:e9:21:6e:8b:05:11:bb:7e: 28:38:9c:cc:7e:eb:6e:ef:9f:22:4a:56:d2:09:a6: 14:69:a9:22:1c:a5:88:7c:e3:35:0a:6a:80:c0:80: 92:b8:49:2a:be:ce:b9:7b:2d:fc:fc:f7:03:3e:52: 00:40:8d:bb:5a:68:d6:d9:eb:82:e5:c3:af:b7:f1: 0c:ad:2d:f2:57:67:28:6a:14:8e:82:21:f3:e4:ce: df:f9:38:cd:57:09:bf:43:c0:ec:11:4c:6f:0e:67: 60:e2:5a:bc:5f:7e:27:ee:0a:f6:6c:2a:e1:30:8e: 1e:39:8c:b2:b7:5d:d0:36:54:67:f2:5f:09:c1:d5: 8c:58:fc:e2:4d:51:34:f6:61:36:dc:d3:cb:75:ab: 25:52:1a:a3:d1:26:4a:db:7f:02:36:aa:e3:0a:7d: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BE:16:54:B8:B7:46:4F:0C:3A:9F:CC:9D:C0:DD:EE:20:F6:3A:0C X509v3 Authority Key Identifier: keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7d:2f:87:73:e4:a2:df:16:70:6a:73:e6:cb:ff:4e:42:cd: ae:b9:8a:72:eb:10:f3:b5:9e:f7:7d:2f:91:d5:fe:c9:99:a8: d7:f5:81:c6:03:19:67:f5:c3:b6:54:e2:bc:21:15:ea:d6:71: 38:28:6c:f5:8f:73:79:12:ad:f9:83:a6:c1:6a:8e:21:d8:fb: 49:33:c9:cb:e6:fb:9f:cf:15:d9:d7:46:de:a4:be:d1:19:1c: 40:76:0f:0d:ba:9c:6c:a8:2c:2f:f4:5e:82:b0:b0:44:81:b0: 69:d8:4f:64:c7:66:af:34:f1:7e:89:06:28:c4:3e:7d:2f:97: 9e:a0:9a:ea:fb:42:f8:40:d5:29:4f:d9:c2:de:7b:1a:f2:e6: 0c:f9:93:4e:32:b8:10:2c:cc:9a:27:7d:58:6e:ce:b0:f2:a5: 47:20:93:f5:73:86:fd:02:6a:2e:34:91:1d:a9:08:37:66:61: 56:8a:b2:be:d6:18:08:a5:b7:1a:4e:58:49:f0:6b:96:2d:e4: 4e:96:f6:72:72:89:13:49:b4:d3:f6:c3:2b:40:0f:9f:58:c0: fa:8c:9f:53:ab:b3:62:48:20:c5:d9:f5:a5:88:7a:d8:ae:5c: 94:89:16:85:a1:55:80:c1:8d:af:ee:9f:2c:cc:67:62:70:35: 9c:4f:63:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fn9iyvWXjwtqroFNMT65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWJjMTAzNTRkMzFiZmRmN2MxZDgzNTEwZGYwZGQ2NmNl ODM1YWMwHhcNMjUxMjIwMTYwMTIxWhcNMjUxMjIxMTYwMTIxWjAzMTEwLwYDVQQD Eyg3ZmJlMTY1NGI4Yjc0NjRmMGMzYTlmY2M5ZGMwZGRlZTIwZjYzYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/vwDT6/hfRX5R6gxdlDcDtNTVoU VAc10d5a1iKzmf0RKlVw0VeTh8DD7q9VHSKlxRSl1CkZgwK6dbEhLweaN/1E5DQ2 /UsYTuuS1z6r6+c6Hn2c/lFcHkbpsUMxleui6SFuiwURu34oOJzMfutu758iSlbS CaYUaakiHKWIfOM1CmqAwICSuEkqvs65ey38/PcDPlIAQI27WmjW2euC5cOvt/EM rS3yV2coahSOgiHz5M7f+TjNVwm/Q8DsEUxvDmdg4lq8X34n7gr2bCrhMI4eOYyy t13QNlRn8l8JwdWMWPziTVE09mE23NPLdaslUhqj0SZK238CNqrjCn2wtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH++FlS4t0ZPDDqfzJ3A3e4g9joMMB8GA1UdIwQY MBaAFJTrwQNU0xv998HYNRDfDdZs6DWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3Zjgt Yjc3ODAzOTZmYWY0LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3ZjgtYjc3ODAzOTZmYWY0 LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf30vh3Pk ot8WcGpz5sv/TkLNrrmKcusQ87We930vkdX+yZmo1/WBxgMZZ/XDtlTivCEV6tZx OChs9Y9zeRKt+YOmwWqOIdj7STPJy+b7n88V2ddG3qS+0RkcQHYPDbqcbKgsL/Re grCwRIGwadhPZMdmrzTxfokGKMQ+fS+XnqCa6vtC+EDVKU/Zwt57GvLmDPmTTjK4 ECzMmid9WG7OsPKlRyCT9XOG/QJqLjSRHakIN2ZhVoqyvtYYCKW3Gk5YSfBrli3k Tpb2cnKJE0m00/bDK0APn1jA+oyfU6uzYkggxdn1pYh62K5clIkWhaFVgMGNr+6f LMxnYnA1nE9jFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:49 2025 by rpki-client