This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft File: LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json) Hash identifier: JWe5k9I8g8xIYSIQ/zGKz3ByNgeqRz//ulJj51K8hFg= Subject key identifier: BD:F4:F1:B4:68:0C:0B:22:15:4C:35:11:32:F1:C2:8A:A7:DE:E1:30 Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61 Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61 Certificate serial: 019B255326EE378835B64602468C2253C5D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft Manifest number: 175E Signing time: Tue 16 Dec 2025 04:02:44 +0000 Manifest this update: Tue 16 Dec 2025 04:02:44 +0000 Manifest next update: Wed 17 Dec 2025 04:02:44 +0000 Files and hashes: 1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: VhdLY+TNVmtHyWAqczJYyRA5cpBNhsiVTqqDCjSg1UU=) 2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:26:ee:37:88:35:b6:46:02:46:8c:22:53:c5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61 Validity Not Before: Dec 16 04:02:44 2025 GMT Not After : Dec 17 04:02:44 2025 GMT Subject: CN=bdf4f1b4680c0b22154c351132f1c28aa7dee130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:99:6e:1f:01:df:e2:eb:14:57:82:c1:f9: a2:8e:7a:72:61:31:ba:ba:be:d7:4b:8c:70:e5:24: 27:2f:c7:e9:62:3b:55:9d:dc:0e:77:1f:7c:8b:d1: 75:9e:66:b9:f7:24:f9:5f:10:52:5b:e9:96:70:d4: 5e:1e:70:b4:a0:30:f5:ff:13:1a:38:c3:5a:f3:a4: 29:d1:5a:74:fb:e1:b9:89:09:f3:e9:c8:f5:c2:65: fe:33:be:29:da:3f:43:9b:96:87:d1:1b:9f:95:6a: 99:50:5e:56:b1:f4:94:c7:cb:9a:0b:81:08:dd:28: e9:93:83:a9:a6:ff:41:92:09:c1:b1:7e:12:0f:98: a2:86:50:67:5f:58:21:9e:c1:e7:d6:a1:d9:ad:95: f0:63:14:c9:de:e6:a1:2f:72:e4:ff:cd:b6:19:26: 27:99:b5:b4:58:5b:b6:42:20:98:74:1f:97:ce:d1: 51:0c:32:b8:99:e8:68:f9:79:9b:69:ca:a3:37:fb: 2d:1f:cc:bc:5a:4f:6d:32:07:9d:3b:91:ff:75:eb: 19:bb:f9:a2:dd:cd:75:8c:09:70:b7:dc:c6:11:f6: 4e:1e:eb:6b:16:be:43:26:59:1c:ad:62:49:43:72: b2:c7:ee:7e:a3:5a:ff:b5:91:6e:c6:a3:40:6b:7f: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:F1:B4:68:0C:0B:22:15:4C:35:11:32:F1:C2:8A:A7:DE:E1:30 X509v3 Authority Key Identifier: keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:a4:0a:20:a5:ad:5b:dc:9e:63:ee:56:7a:6e:a4:52:bb: 53:c3:4e:69:ff:df:b3:ae:8e:d1:ca:95:a6:09:20:f3:8f:4c: f3:7d:37:d7:8a:a0:f2:79:ea:15:d2:5b:0d:00:e0:4c:f1:37: 2c:87:c0:2a:af:86:de:bc:85:b1:d5:ad:b4:28:4a:08:87:f2: e5:00:57:bf:17:64:6a:c3:e7:9b:a4:69:35:22:04:7a:a4:f4: 41:35:0c:c2:2a:57:89:08:88:6b:07:29:53:3d:47:fc:07:97: a5:d1:e7:cf:91:31:29:10:a6:e6:21:bc:10:1a:b9:36:e7:90: 16:1e:d3:07:ad:3c:55:ee:46:95:9b:2f:86:19:c8:2b:18:08: 8a:93:44:be:dc:e3:f1:90:de:4c:bf:44:73:43:1c:6b:4e:34: 4f:c9:7b:02:ae:4d:21:5b:8a:68:ea:9c:63:ae:22:0c:a9:cf: 4b:b2:cf:41:2d:c5:8a:69:9d:0e:fc:d0:1f:1a:c0:69:c6:c4: 6a:4e:9e:69:03:16:bb:64:68:1c:36:aa:d6:94:9c:a6:f4:a5: 2b:5f:92:29:ef:a7:ec:11:eb:3a:06:34:99:f7:4f:0e:04:59: 8d:78:a8:c3:c6:7d:b3:c3:0d:40:17:b4:b8:b7:8f:42:2c:bb: f8:8c:d9:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUybuN4g1tkYCRowiU8XZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTgxNWIwYzlkYzllZTIyMDdlYzk0MTdjZGVjMmJjNGJl MjNjNjEwHhcNMjUxMjE2MDQwMjQ0WhcNMjUxMjE3MDQwMjQ0WjAzMTEwLwYDVQQD EyhiZGY0ZjFiNDY4MGMwYjIyMTU0YzM1MTEzMmYxYzI4YWE3ZGVlMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0CZbh8B3+LrFFeCwfmijnpyYTG6 ur7XS4xw5SQnL8fpYjtVndwOdx98i9F1nma59yT5XxBSW+mWcNReHnC0oDD1/xMa OMNa86Qp0Vp0++G5iQnz6cj1wmX+M74p2j9Dm5aH0RuflWqZUF5WsfSUx8uaC4EI 3Sjpk4Oppv9BkgnBsX4SD5iihlBnX1ghnsHn1qHZrZXwYxTJ3uahL3Lk/822GSYn mbW0WFu2QiCYdB+XztFRDDK4meho+XmbacqjN/stH8y8Wk9tMgedO5H/desZu/mi 3c11jAlwt9zGEfZOHutrFr5DJlkcrWJJQ3Kyx+5+o1r/tZFuxqNAa38qtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL308bRoDAsiFUw1ETLxwoqn3uEwMB8GA1UdIwQY MBaAFC0YFbDJ3J7iIH7JQXzewrxL4jxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQt ZDIwMmYyYTQwMDgxLzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQtZDIwMmYyYTQwMDgx LzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1ukCiCl rVvcnmPuVnpupFK7U8NOaf/fs66O0cqVpgkg849M830314qg8nnqFdJbDQDgTPE3 LIfAKq+G3ryFsdWttChKCIfy5QBXvxdkasPnm6RpNSIEeqT0QTUMwipXiQiIawcp Uz1H/AeXpdHnz5ExKRCm5iG8EBq5NueQFh7TB608Ve5GlZsvhhnIKxgIipNEvtzj 8ZDeTL9Ec0Mca040T8l7Aq5NIVuKaOqcY64iDKnPS7LPQS3FimmdDvzQHxrAacbE ak6eaQMWu2RoHDaq1pScpvSlK1+SKe+n7BHrOgY0mfdPDgRZjXiow8Z9s8MNQBe0 uLePQiy7+IzZFQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:32 2025 by rpki-client