This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json) Hash identifier: DWc4QkXaCqteyEm8Jl/Sc/SAEHg+nEnPX5mnRwcc9iw= Subject key identifier: 89:2A:70:D3:32:CD:62:78:DF:0E:8B:60:1F:34:50:55:DD:42:E1:61 Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31 Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731 Certificate serial: 019AF12DBCD41EF4B61F0F70C0F9440F8420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft Manifest number: 1723 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: N+lUsfoQtEymgkcgxsWw7kfUjASCJ68s8YphOoIIl68=) 2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bc:d4:1e:f4:b6:1f:0f:70:c0:f9:44:0f:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731 Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=892a70d332cd6278df0e8b601f345055dd42e161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:0e:2e:c2:35:fc:b2:a0:df:d1:46:00:de: bd:23:58:11:5b:0f:b2:18:98:aa:4c:fd:8d:cc:7d: 72:b7:2f:d1:9a:4c:4f:94:94:16:b7:ce:4a:c5:71: db:eb:5b:0d:3f:84:85:d4:2e:b8:bb:ca:3c:ed:2d: 27:ea:d2:76:15:70:b0:16:06:84:b7:7d:b4:21:7c: a2:24:8f:9d:38:d6:33:77:5e:9b:29:b1:1e:73:b0: 4b:04:0d:06:f2:53:b6:6a:da:9a:99:9c:1e:bf:49: 3f:e1:65:a2:59:6d:83:7d:26:ff:be:62:ec:79:31: f4:88:f7:7d:5f:07:26:0a:47:e2:dc:67:73:64:8c: ba:6d:cc:5c:70:73:be:7b:9f:6b:e5:34:70:1e:1e: 0d:0f:62:33:e4:a6:22:d9:57:fc:e1:99:8d:18:9b: 7d:4e:1c:41:e2:b2:83:55:fd:70:25:c8:7d:ca:6e: 0b:1e:3c:11:67:bc:c1:7c:45:e6:f4:20:20:a9:eb: 66:b0:1c:30:0d:fd:89:39:66:79:6a:05:46:f7:65: 33:4f:93:57:10:3d:f0:f1:ae:87:a9:d4:e1:51:82: 56:82:75:b4:c9:64:1a:4f:90:1c:1e:de:52:2f:67: 75:a6:c4:94:d4:9f:23:90:7f:c0:89:e2:3e:33:87: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2A:70:D3:32:CD:62:78:DF:0E:8B:60:1F:34:50:55:DD:42:E1:61 X509v3 Authority Key Identifier: keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:43:f6:a9:c8:d1:ba:cf:b8:d2:04:0d:dd:d8:6a:e1:c8:fd: 9f:b5:fd:2e:8f:b4:67:09:fc:b3:a4:4a:4f:85:99:db:13:60: 34:eb:44:f0:5b:ed:c0:cd:a0:ad:d5:cf:01:6e:aa:0a:6d:5a: cd:85:09:15:b4:f7:75:7d:02:b8:34:12:1c:89:79:dd:68:04: f3:7c:b5:a9:63:55:0c:31:43:ee:fa:c4:bc:ae:87:83:b2:9d: 39:a5:07:80:e6:bc:9e:d3:fe:0c:0b:c9:4b:25:c0:cf:fa:23: 47:3e:6c:82:1c:81:40:1d:6f:d3:96:75:d9:f1:6c:c3:6d:a0: 43:aa:0f:d1:43:4f:02:b4:5b:3b:be:17:da:2e:01:f7:d1:5c: ff:d1:00:ff:71:a9:61:93:f2:79:46:75:cf:69:26:d2:e4:ad: e3:5c:78:30:fa:ac:60:e9:f9:76:eb:e9:15:1d:13:01:5f:5a: d8:64:6d:72:29:6d:20:43:f3:ae:13:01:f2:c1:23:8a:f5:5d: a7:b6:64:f9:68:d1:36:5f:66:5f:81:94:17:48:8e:fc:62:d5: c5:c6:00:b7:6e:c7:93:74:7e:67:61:ca:80:69:61:71:d7:67: 55:f2:07:39:7d:01:bb:ab:f2:d1:89:cb:88:b4:56:5b:07:00: 8a:12:c0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbzUHvS2Hw9wwPlED4QgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGUzMzhkNzNlNzU4NDY4NDU2NjMyZjViY2FhZTA3YWYw ZDg3MzEwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD Eyg4OTJhNzBkMzMyY2Q2Mjc4ZGYwZThiNjAxZjM0NTA1NWRkNDJlMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSkOLsI1/LKg39FGAN69I1gRWw+y GJiqTP2NzH1yty/RmkxPlJQWt85KxXHb61sNP4SF1C64u8o87S0n6tJ2FXCwFgaE t320IXyiJI+dONYzd16bKbEec7BLBA0G8lO2atqamZwev0k/4WWiWW2DfSb/vmLs eTH0iPd9XwcmCkfi3GdzZIy6bcxccHO+e59r5TRwHh4ND2Iz5KYi2Vf84ZmNGJt9 ThxB4rKDVf1wJch9ym4LHjwRZ7zBfEXm9CAgqetmsBwwDf2JOWZ5agVG92UzT5NX ED3w8a6HqdThUYJWgnW0yWQaT5AcHt5SL2d1psSU1J8jkH/AieI+M4eFoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkqcNMyzWJ43w6LYB80UFXdQuFhMB8GA1UdIwQY MBaAFC4OM41z51hGhFZjL1vKrgevDYcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGIt YTViNzgzMWE4Y2UxLzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGItYTViNzgzMWE4Y2Ux LzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUP2qcjR us+40gQN3dhq4cj9n7X9Lo+0Zwn8s6RKT4WZ2xNgNOtE8FvtwM2grdXPAW6qCm1a zYUJFbT3dX0CuDQSHIl53WgE83y1qWNVDDFD7vrEvK6Hg7KdOaUHgOa8ntP+DAvJ SyXAz/ojRz5sghyBQB1v05Z12fFsw22gQ6oP0UNPArRbO74X2i4B99Fc/9EA/3Gp YZPyeUZ1z2km0uSt41x4MPqsYOn5duvpFR0TAV9a2GRtciltIEPzrhMB8sEjivVd p7Zk+WjRNl9mX4GUF0iO/GLVxcYAt27Hk3R+Z2HKgGlhcddnVfIHOX0Bu6vy0YnL iLRWWwcAihLA7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:36 2025 by rpki-client