This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json) Hash identifier: seRYuAJ0EzNa4XRIAIOYUiN494Ti0RedtYON/0DbTS4= Subject key identifier: F7:25:74:8C:02:9D:19:3B:73:6E:81:A3:9F:41:90:EC:97:CC:92:AB Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1 Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1 Certificate serial: 019AF3BFEA15F76E99250A9C6EFCD7FE093E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 13:00:31 +0000 Manifest this update: Sat 06 Dec 2025 13:00:31 +0000 Manifest next update: Sun 07 Dec 2025 13:00:31 +0000 Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: rBWhSCl2cVCnkWGluVAcIdAwEN6lICa6XCG0EndtoeE=) 2: pb4QZ95Peoa-v89w9IfVF9OInYI.roa (hash: mVmSldgY3RuIKYBpTP9fbMVJ33NM7M6bAyGk/0LxYwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:ea:15:f7:6e:99:25:0a:9c:6e:fc:d7:fe:09:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1 Validity Not Before: Dec 6 13:00:31 2025 GMT Not After : Dec 7 13:00:31 2025 GMT Subject: CN=f725748c029d193b736e81a39f4190ec97cc92ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:d3:7b:73:d6:90:28:70:39:3e:5f:e7:96: b0:99:fc:c6:57:53:cc:8d:d5:d2:7a:a4:6a:a8:1f: a2:42:4f:5c:fa:cf:ad:86:df:a7:d4:7c:9e:b2:0d: 7e:f2:ac:20:36:7a:c5:67:c5:e6:16:b0:51:b9:d4: d2:ce:fa:90:bb:ee:4a:7e:15:7a:b7:84:be:53:c9: fb:9f:2f:ff:de:3e:6e:82:6f:51:f1:d2:85:af:ae: c6:1c:82:9e:20:9c:39:c5:f7:15:2e:74:80:b0:15: 3a:b5:f8:a3:8c:bf:c6:b7:63:30:fa:72:c3:be:bb: 83:01:14:dd:b1:bb:e0:84:81:89:ac:89:95:f6:44: 80:46:ef:90:39:3f:c2:fc:5b:bb:03:07:1f:ed:b8: 6c:23:e0:26:d6:e6:3c:05:fe:fa:7a:c7:c8:99:38: 40:b1:cb:2e:6f:1e:4a:ba:8d:09:31:29:06:93:bd: 01:64:d6:af:25:de:ca:96:05:96:92:f5:11:60:9f: 58:ed:07:8f:91:25:0a:07:a6:cd:19:0d:12:f7:f2: 77:14:41:61:a1:0d:1a:c5:4f:99:92:6e:a4:63:92: c4:1d:8b:c1:4c:29:9d:2e:e8:76:83:88:40:2e:87: 6d:e3:ed:72:e0:48:c0:72:8e:7a:8f:88:59:94:72: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:74:8C:02:9D:19:3B:73:6E:81:A3:9F:41:90:EC:97:CC:92:AB X509v3 Authority Key Identifier: keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d8:d0:1f:c5:af:bd:f3:85:89:f7:12:e8:8c:3f:d1:fb:5d: d8:ff:e7:f7:f5:6f:48:7c:52:17:5b:65:e8:25:a4:ad:99:b5: a0:df:e5:b9:56:8e:e6:a0:9a:25:66:c2:9e:56:19:26:7d:cf: d9:79:15:6c:2c:bf:e6:be:d7:30:40:1b:c8:76:fa:81:b9:3e: 4a:5d:16:00:5b:c4:bc:e1:16:bf:af:e5:8d:ee:20:de:bd:21: 26:fa:ac:5e:08:86:a6:8a:cb:a8:4a:64:c6:cd:d5:57:8c:7e: a3:68:e3:0d:5f:18:5a:e4:68:45:8b:07:ee:83:02:78:2f:3d: 9c:1a:00:ff:8d:ad:8f:3a:1c:b3:b5:fb:e0:24:c8:ff:d1:6b: 19:4c:43:ac:c1:d2:10:ae:05:79:9d:e2:66:c5:1b:84:77:6e: 8d:68:8f:fd:f1:35:54:82:e1:36:e7:8e:85:ad:f5:90:e1:9a: 04:ff:74:6f:7d:9b:93:31:70:95:b1:b1:62:41:bb:ee:7c:3d: 68:55:2a:96:c8:cf:f5:f0:82:9b:c0:11:09:93:99:82:f0:1c: 04:ff:43:7a:23:53:77:41:31:5a:95:10:24:ae:31:8d:3b:1b: 71:3a:60:6c:ec:93:b5:12:9c:71:8d:46:f8:c4:05:c6:8f:1e: cc:e6:28:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+oV926ZJQqcbvzX/gk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjk3MDllZjMxYjc1ZDY4ZTIyMDhhYWJmMmEyYzNjM2Q4 NzZmYzEwHhcNMjUxMjA2MTMwMDMxWhcNMjUxMjA3MTMwMDMxWjAzMTEwLwYDVQQD EyhmNzI1NzQ4YzAyOWQxOTNiNzM2ZTgxYTM5ZjQxOTBlYzk3Y2M5MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EXTe3PWkChwOT5f55awmfzGV1PM jdXSeqRqqB+iQk9c+s+tht+n1Hyesg1+8qwgNnrFZ8XmFrBRudTSzvqQu+5KfhV6 t4S+U8n7ny//3j5ugm9R8dKFr67GHIKeIJw5xfcVLnSAsBU6tfijjL/Gt2Mw+nLD vruDARTdsbvghIGJrImV9kSARu+QOT/C/Fu7Awcf7bhsI+Am1uY8Bf76esfImThA scsubx5Kuo0JMSkGk70BZNavJd7KlgWWkvURYJ9Y7QePkSUKB6bNGQ0S9/J3FEFh oQ0axU+Zkm6kY5LEHYvBTCmdLuh2g4hALodt4+1y4EjAco56j4hZlHIqTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcldIwCnRk7c26Bo59BkOyXzJKrMB8GA1UdIwQY MBaAFC65cJ7zG3XWjiIIqr8qLDw9h2/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEt Y2VjMzVjNDUzYzVlLzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEtY2VjMzVjNDUzYzVl LzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9jQH8Wv vfOFifcS6Iw/0ftd2P/n9/VvSHxSF1tl6CWkrZm1oN/luVaO5qCaJWbCnlYZJn3P 2XkVbCy/5r7XMEAbyHb6gbk+Sl0WAFvEvOEWv6/lje4g3r0hJvqsXgiGporLqEpk xs3VV4x+o2jjDV8YWuRoRYsH7oMCeC89nBoA/42tjzocs7X74CTI/9FrGUxDrMHS EK4FeZ3iZsUbhHdujWiP/fE1VILhNueOha31kOGaBP90b32bkzFwlbGxYkG77nw9 aFUqlsjP9fCCm8ARCZOZgvAcBP9DeiNTd0ExWpUQJK4xjTsbcTpgbOyTtRKccY1G +MQFxo8ezOYoVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:08 2025 by rpki-client