This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json) Hash identifier: MtrsAQ64XlwIzxqEb15KwpCdQZTi22vw+HMu5ewTRQk= Subject key identifier: 1C:D3:12:D6:73:F8:DA:84:7D:23:9C:FA:0A:72:40:45:15:BD:B5:35 Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0 Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0 Certificate serial: 019AF051047175867ACA55571A3B371AE534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft Manifest number: 06AA Signing time: Fri 05 Dec 2025 21:00:32 +0000 Manifest this update: Fri 05 Dec 2025 21:00:32 +0000 Manifest next update: Sat 06 Dec 2025 21:00:32 +0000 Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: C1hmz+5mv97UlJ1PZLfzQXjjYIqJN0g92yo7+mecIos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:04:71:75:86:7a:ca:55:57:1a:3b:37:1a:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0 Validity Not Before: Dec 5 21:00:32 2025 GMT Not After : Dec 6 21:00:32 2025 GMT Subject: CN=1cd312d673f8da847d239cfa0a72404515bdb535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:9c:18:65:40:1d:83:85:8e:55:87:c3:77: 2c:ca:e7:cb:38:ed:11:17:a3:14:43:8b:00:a6:41: 9d:da:1d:b7:07:5e:47:8b:28:d1:cf:50:a6:6a:27: 95:5d:27:2d:01:ea:08:04:9d:5a:8f:9b:4f:bd:60: 8f:93:f2:a5:08:fe:47:1d:d6:04:e3:c0:77:f5:50: e0:3e:01:0c:1a:54:67:87:6a:55:57:8b:d4:ec:b3: 23:a5:84:2c:bf:35:40:15:2d:09:59:cd:15:2e:52: a4:11:1c:51:d3:0b:a8:8f:96:a9:82:5a:b5:f9:de: 92:00:2f:ec:7d:cd:37:e0:3a:dd:4c:e5:e7:c1:ea: 5a:ad:cd:67:10:db:ec:92:ac:38:4c:c0:47:ef:96: 89:df:b4:79:8c:80:b9:3b:91:6a:3d:31:8c:9c:a2: 96:91:22:3c:45:4d:07:1b:52:36:e8:27:b3:fa:60: 99:3f:cc:50:ca:2a:58:3d:a7:88:3f:6f:33:42:67: b2:8f:43:e4:7b:bc:be:bd:7f:b0:92:db:bb:52:12: da:5e:5a:65:9e:e9:e5:d2:b4:41:21:f2:44:d4:6a: be:01:29:6f:e6:74:70:cc:c1:7b:aa:8c:93:09:3e: 58:d3:fa:00:29:ec:90:8d:05:a5:d3:51:01:bd:2f: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:12:D6:73:F8:DA:84:7D:23:9C:FA:0A:72:40:45:15:BD:B5:35 X509v3 Authority Key Identifier: keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:76:39:d8:3e:6f:e2:ae:b3:5c:2a:cb:e8:e4:ea:57:62:d5: 9f:7e:9d:bd:59:64:49:fd:ce:f2:f5:f2:e3:af:72:4c:88:49: 82:d2:86:ac:c8:7b:b2:1b:00:60:21:34:d9:9a:11:73:c1:e2: 8d:63:2f:75:86:ff:8c:6d:e7:cd:42:6e:72:27:00:9d:3b:a5: ee:bf:43:e8:7c:1f:ed:42:43:d5:4c:75:c6:d3:71:05:3d:0c: 6d:27:16:39:5d:37:2b:9a:57:38:7b:46:ff:79:2c:86:cb:ab: b7:c8:cb:62:c8:c1:3e:61:b9:d1:34:e0:4c:86:bb:d4:6b:07: 8b:2b:b7:51:55:9e:63:31:58:52:99:58:a5:86:c3:eb:59:36: 39:e7:ca:fc:a6:9a:4d:61:bf:6d:a7:fb:dc:71:e5:63:9a:d5: 92:f9:84:25:7c:63:0c:db:91:4d:d2:b4:5c:a5:4d:1f:35:89: 70:18:6f:8d:6d:70:38:21:3d:b3:8b:03:57:72:d0:cc:2f:7d: fc:41:71:5e:ad:c2:b7:b8:49:f5:97:41:d8:78:02:d9:7c:d3: e3:85:af:78:be:64:eb:52:2f:6c:69:1d:a2:ca:98:1c:c4:de: 7c:31:f9:db:6f:4f:b3:ef:94:42:3d:c3:41:60:6c:3a:1a:23: 0f:97:0b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUQRxdYZ6ylVXGjs3GuU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTJkMjExYzM0MTM3MjhlZjA0ZDI1NDQyNTgyOGE4YjQx ODFlZTAwHhcNMjUxMjA1MjEwMDMyWhcNMjUxMjA2MjEwMDMyWjAzMTEwLwYDVQQD EygxY2QzMTJkNjczZjhkYTg0N2QyMzljZmEwYTcyNDA0NTE1YmRiNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTGcGGVAHYOFjlWHw3csyufLOO0R F6MUQ4sApkGd2h23B15HiyjRz1CmaieVXSctAeoIBJ1aj5tPvWCPk/KlCP5HHdYE 48B39VDgPgEMGlRnh2pVV4vU7LMjpYQsvzVAFS0JWc0VLlKkERxR0wuoj5apglq1 +d6SAC/sfc034DrdTOXnweparc1nENvskqw4TMBH75aJ37R5jIC5O5FqPTGMnKKW kSI8RU0HG1I26Cez+mCZP8xQyipYPaeIP28zQmeyj0Pke7y+vX+wktu7UhLaXlpl nunl0rRBIfJE1Gq+ASlv5nRwzMF7qoyTCT5Y0/oAKeyQjQWl01EBvS+2ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzTEtZz+NqEfSOc+gpyQEUVvbU1MB8GA1UdIwQY MBaAFP/i0hHDQTco7wTSVEJYKKi0GB7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEt OGZkMTAzYjhjYzg5LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEtOGZkMTAzYjhjYzg5 LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnY52D5v 4q6zXCrL6OTqV2LVn36dvVlkSf3O8vXy469yTIhJgtKGrMh7shsAYCE02ZoRc8Hi jWMvdYb/jG3nzUJucicAnTul7r9D6Hwf7UJD1Ux1xtNxBT0MbScWOV03K5pXOHtG /3kshsurt8jLYsjBPmG50TTgTIa71GsHiyu3UVWeYzFYUplYpYbD61k2OefK/Kaa TWG/baf73HHlY5rVkvmEJXxjDNuRTdK0XKVNHzWJcBhvjW1wOCE9s4sDV3LQzC99 /EFxXq3Ct7hJ9ZdB2HgC2XzT44WveL5k61IvbGkdosqYHMTefDH5229Ps++UQj3D QWBsOhojD5cLJw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:10 2025 by rpki-client