This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json) Hash identifier: ez0j/5hibAxy0f0/HbCjkWJPOf9C7bbB3e2/fxZacw0= Subject key identifier: 3B:B8:E2:BC:9E:A8:FB:C1:E2:BE:36:02:BD:76:EF:C0:EA:C0:BD:C5 Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7 Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7 Certificate serial: 019AF12E2228CADCBCD73C6E3269D98F564F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft Manifest number: 0FB1 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: KmVTWTWQsjuLa+/z3FhvqKsVKO6JEtUg3T4Bc0Aiu18=) 2: QDqzI6mtk0OSKHPd6aEPhi6zaB8.roa (hash: EsH+qC6DrpZNrpMwjRlDLqXBAg493TRAVaOfxpJfUMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:22:28:ca:dc:bc:d7:3c:6e:32:69:d9:8f:56:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=3bb8e2bc9ea8fbc1e2be3602bd76efc0eac0bdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:d0:b7:31:54:1d:9c:77:f9:0c:73:e1:3d: 2d:a7:41:70:35:b1:38:1d:8c:ea:19:26:88:40:8c: 64:b5:77:7c:74:49:05:02:d4:a3:a0:d8:58:18:67: 81:ff:9a:57:83:98:0f:8e:64:97:9e:52:69:93:45: 46:13:32:74:11:16:51:bf:45:b6:55:b5:17:6e:99: 85:24:70:d8:e1:5c:18:ee:25:5d:6e:ae:fa:46:c2: 68:7a:c5:83:df:d4:8e:8a:e8:f0:5b:d1:09:d4:01: 85:48:ac:3c:da:50:4d:bc:16:68:e2:13:e7:75:6d: 75:3f:f5:7a:16:9b:7f:cd:fb:c0:ed:88:f4:86:4a: 82:9d:d4:56:45:d7:dc:4d:0d:6b:ae:63:6f:c6:97: 8d:8f:cd:66:c4:58:18:12:0f:a4:cf:72:a0:fc:b5: 88:31:5a:d5:c9:c7:c1:cd:55:c1:18:b4:2f:d4:7d: b0:5d:e5:e3:97:f0:eb:25:eb:e1:d4:74:71:3e:5c: 3d:25:ea:61:62:80:09:df:77:1c:91:cb:14:25:24: c4:be:ed:21:24:24:c1:f8:d5:f7:2a:63:f2:c2:5b: b6:20:52:ab:a8:e4:34:68:a7:73:5d:00:d7:01:37: 77:0a:d8:31:6c:05:a7:9a:02:de:ac:ca:2f:da:26: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:E2:BC:9E:A8:FB:C1:E2:BE:36:02:BD:76:EF:C0:EA:C0:BD:C5 X509v3 Authority Key Identifier: keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:4d:61:e8:df:8c:89:f2:3d:44:e2:aa:73:49:25:2b:71:44: 44:44:df:ab:84:bd:f8:60:f8:61:a8:17:d2:8f:d8:26:15:30: b0:77:87:f2:c2:36:9a:89:b5:8e:93:97:4d:2c:88:17:19:76: 7f:fc:3b:4f:c7:fe:be:5c:3f:e6:f6:e4:b6:12:ee:f9:f8:a7: b6:67:ba:ef:59:ef:b9:3d:2a:bc:3e:7e:64:a4:29:be:d4:76: 59:1a:04:53:5c:53:7e:06:74:47:d5:6d:fc:d6:c0:58:6d:38: fd:67:21:88:27:c4:fa:13:92:be:00:8f:00:c9:4a:9d:52:68: 37:1b:04:4a:bf:0d:4c:62:a8:d2:da:db:e0:ae:83:27:5c:60: 18:b1:80:08:c6:40:b5:e0:74:0f:38:9a:61:7c:6c:7f:29:e0: 71:83:48:ab:9a:5b:5f:d6:a9:b7:69:bd:17:c3:32:e6:20:e1: 2e:00:e7:7e:0d:7e:e5:83:01:a4:72:f0:3c:16:1c:d2:bb:3a: 10:e2:7e:c2:f0:7f:9e:5e:77:b1:7f:8f:58:0f:c7:6e:88:77: 67:25:d5:69:3f:fb:b7:85:5a:a2:a8:e7:80:c9:90:22:be:98: a9:e3:1b:6c:3a:84:18:76:54:fb:03:f4:8b:d0:04:aa:f9:f1: 69:26:00:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiIoyty81zxuMmnZj1ZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODdjM2Q1ZjQ1ZmVmMzhjMTA1YjkzZGQ0NGRkMjRmNWJl ZTYwZTcwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD EygzYmI4ZTJiYzllYThmYmMxZTJiZTM2MDJiZDc2ZWZjMGVhYzBiZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps7QtzFUHZx3+Qxz4T0tp0FwNbE4 HYzqGSaIQIxktXd8dEkFAtSjoNhYGGeB/5pXg5gPjmSXnlJpk0VGEzJ0ERZRv0W2 VbUXbpmFJHDY4VwY7iVdbq76RsJoesWD39SOiujwW9EJ1AGFSKw82lBNvBZo4hPn dW11P/V6Fpt/zfvA7Yj0hkqCndRWRdfcTQ1rrmNvxpeNj81mxFgYEg+kz3Kg/LWI MVrVycfBzVXBGLQv1H2wXeXjl/DrJevh1HRxPlw9JephYoAJ33cckcsUJSTEvu0h JCTB+NX3KmPywlu2IFKrqOQ0aKdzXQDXATd3CtgxbAWnmgLerMov2ibjPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu44ryeqPvB4r42Ar1278DqwL3FMB8GA1UdIwQY MBaAFC6Hw9X0X+84wQW5PdRN0k9b7mDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEt N2MyYmQ5ODRkNzM1LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEtN2MyYmQ5ODRkNzM1 LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1U1h6N+M ifI9ROKqc0klK3FERETfq4S9+GD4YagX0o/YJhUwsHeH8sI2mom1jpOXTSyIFxl2 f/w7T8f+vlw/5vbkthLu+fintme671nvuT0qvD5+ZKQpvtR2WRoEU1xTfgZ0R9Vt /NbAWG04/WchiCfE+hOSvgCPAMlKnVJoNxsESr8NTGKo0trb4K6DJ1xgGLGACMZA teB0DziaYXxsfyngcYNIq5pbX9apt2m9F8My5iDhLgDnfg1+5YMBpHLwPBYc0rs6 EOJ+wvB/nl53sX+PWA/Hboh3ZyXVaT/7t4VaoqjngMmQIr6YqeMbbDqEGHZU+wP0 i9AEqvnxaSYABg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:12 2025 by rpki-client