This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json) Hash identifier: voJktOobQ0m6J6wIg1X0slLOYwf/y5+746wPJBGiYCc= Subject key identifier: 89:8C:25:2B:10:84:98:FA:70:9C:DA:56:D2:32:CF:02:A8:50:27:F4 Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c Certificate serial: 019AF5E5B7CD089263A161649A201BC91836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft Manifest number: 03D6 Signing time: Sat 06 Dec 2025 23:01:03 +0000 Manifest this update: Sat 06 Dec 2025 23:01:03 +0000 Manifest next update: Sun 07 Dec 2025 23:01:03 +0000 Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: YcwgRmHo5tF29aQX4XR3i03BHV3pINgceowBkNcWRco=) 2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b7:cd:08:92:63:a1:61:64:9a:20:1b:c9:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c Validity Not Before: Dec 6 23:01:03 2025 GMT Not After : Dec 7 23:01:03 2025 GMT Subject: CN=898c252b108498fa709cda56d232cf02a85027f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:15:e4:d2:25:e1:e2:2e:2f:01:2f:47:77: e7:94:c2:b4:db:2e:d1:ff:c3:d2:5f:df:f2:d3:cc: a6:f8:32:67:1c:7c:30:a4:66:48:5c:11:60:0d:d8: dd:de:9c:b2:a0:08:f0:4b:c8:f5:a9:38:f0:20:f2: fb:cf:20:e4:17:08:d3:aa:16:51:a2:10:65:be:82: 21:cc:dd:58:cf:34:ae:3f:a3:7c:c3:35:79:58:29: 66:61:40:eb:a9:44:b6:10:a0:c8:d1:30:a3:63:e7: ca:b1:ff:b8:2b:65:40:ef:c8:98:c8:23:56:bf:c4: a2:fc:1b:e0:fa:19:8f:b2:7e:4c:e9:1f:c8:ad:66: 47:80:80:71:18:aa:91:ed:00:3a:cd:77:a5:dc:a9: 80:78:fa:ae:ca:6a:2f:7a:e7:de:aa:99:cd:10:c5: 71:ad:20:62:b1:97:31:67:68:55:3c:9e:18:9f:fe: 2d:69:e5:17:72:eb:8d:17:37:62:af:02:00:87:ab: de:50:fc:3d:32:91:a9:1e:a5:f2:2a:3a:e5:16:82: 7b:1a:07:6f:b0:65:43:32:aa:06:6b:36:5f:0b:b5: 44:bf:d4:71:54:7d:f7:5d:de:43:ba:04:4c:98:71: 51:27:ff:7f:7e:7d:65:8e:10:6b:9e:cd:40:ab:ba: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8C:25:2B:10:84:98:FA:70:9C:DA:56:D2:32:CF:02:A8:50:27:F4 X509v3 Authority Key Identifier: keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b2:9d:4a:09:d4:c9:b4:2e:6b:9e:c3:19:8b:d0:1e:10:31: f2:00:07:ef:34:0b:45:ac:66:d0:8d:67:0e:8e:af:c7:3b:4b: c7:4d:90:77:3e:00:6c:cb:e4:4f:08:6e:a6:99:b6:42:e6:cf: f1:07:e6:ac:1c:20:0a:e8:64:c9:88:e7:df:9b:d9:9e:6d:c0: 39:6f:6d:e5:d3:c0:7c:6a:fb:76:16:5d:bf:8b:d7:e6:44:dd: 84:57:c9:2e:ac:b3:7c:46:ad:b5:41:38:0a:38:fc:be:db:74: 5a:47:88:57:a2:da:46:d5:ce:ef:5b:e5:fa:37:bf:21:a1:c0: 93:8e:bb:3b:3f:22:2d:00:13:0d:c7:db:06:06:49:87:d1:2f: 5d:80:28:5b:b2:5c:13:ee:f5:96:1e:45:2e:82:40:4a:06:76: dc:ad:85:b8:da:14:a0:c8:50:c8:e1:1f:3f:1a:27:ad:45:59: e9:56:6f:bd:94:df:81:79:eb:3f:db:31:5e:69:4f:93:01:09: 5e:90:36:bf:0d:6d:7d:60:00:b1:f4:e8:05:0a:89:ae:9e:da: 90:05:7d:0f:20:c2:af:3b:83:fd:56:a7:f6:50:9e:97:e3:73: 0e:0a:49:08:b3:e7:6e:b5:9c:c3:11:de:b9:56:a9:ef:63:62: 37:46:db:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bfNCJJjoWFkmiAbyRg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZjU4YWE1MjZjODFlMzJjMWI5NTliZmNhZGYwOGMxOWFk YzQxMmMwHhcNMjUxMjA2MjMwMTAzWhcNMjUxMjA3MjMwMTAzWjAzMTEwLwYDVQQD Eyg4OThjMjUyYjEwODQ5OGZhNzA5Y2RhNTZkMjMyY2YwMmE4NTAyN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0V5NIl4eIuLwEvR3fnlMK02y7R /8PSX9/y08ym+DJnHHwwpGZIXBFgDdjd3pyyoAjwS8j1qTjwIPL7zyDkFwjTqhZR ohBlvoIhzN1YzzSuP6N8wzV5WClmYUDrqUS2EKDI0TCjY+fKsf+4K2VA78iYyCNW v8Si/Bvg+hmPsn5M6R/IrWZHgIBxGKqR7QA6zXel3KmAePquymoveufeqpnNEMVx rSBisZcxZ2hVPJ4Yn/4taeUXcuuNFzdirwIAh6veUPw9MpGpHqXyKjrlFoJ7Ggdv sGVDMqoGazZfC7VEv9RxVH33Xd5DugRMmHFRJ/9/fn1ljhBrns1Aq7pfvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImMJSsQhJj6cJzaVtIyzwKoUCf0MB8GA1UdIwQY MBaAFC31iqUmyB4ywblZv8rfCMGa3EEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODkt N2U4Yjk3NTI4YjFjLzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODktN2U4Yjk3NTI4YjFj LzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLKdSgnU ybQua57DGYvQHhAx8gAH7zQLRaxm0I1nDo6vxztLx02Qdz4AbMvkTwhuppm2QubP 8QfmrBwgCuhkyYjn35vZnm3AOW9t5dPAfGr7dhZdv4vX5kTdhFfJLqyzfEattUE4 Cjj8vtt0WkeIV6LaRtXO71vl+je/IaHAk467Oz8iLQATDcfbBgZJh9EvXYAoW7Jc E+71lh5FLoJASgZ23K2FuNoUoMhQyOEfPxonrUVZ6VZvvZTfgXnrP9sxXmlPkwEJ XpA2vw1tfWAAsfToBQqJrp7akAV9DyDCrzuD/Van9lCel+NzDgpJCLPnbrWcwxHe uVap72NiN0bbfA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:27 2025 by rpki-client