This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json) Hash identifier: oIc4yOwfCvEOH9nDB8efQY886qbw/rsK4BT3V9jdhEk= Subject key identifier: A3:D8:68:7F:EC:94:CB:FE:68:58:E1:1C:78:49:20:16:3E:8C:E5:20 Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71 Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71 Certificate serial: 019AF12DEBAAC79436850DD0365D31CADAA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft Manifest number: 1274 Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: 2b+fJJ+SMLfu6efR/7AyHFOa2fmGhBdpQiT+2lhk3P0=) 2: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (hash: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:eb:aa:c7:94:36:85:0d:d0:36:5d:31:ca:da:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71 Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=a3d8687fec94cbfe6858e11c784920163e8ce520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:b4:b0:8d:04:65:38:2d:df:5d:4b:6a:ed: 66:18:58:cc:59:7a:c8:69:12:63:2b:13:01:f2:ec: 26:5e:26:4d:fc:1e:64:52:97:52:b0:12:74:54:12: c5:0b:b5:4a:ea:f9:f0:d2:07:eb:3b:af:bd:96:9c: 2c:60:fe:bf:5f:fd:e2:44:44:9d:0e:06:93:32:27: 99:26:ae:f0:0e:cf:0d:da:c7:c7:0d:04:dc:ce:5c: 7a:bc:24:2b:7e:d0:9c:14:94:8c:e2:81:0b:ad:be: ef:57:85:55:ad:6b:ec:08:e9:ab:d6:91:47:04:82: 60:37:9e:ba:3c:df:e6:e5:ec:97:50:1a:f1:01:e7: 6e:1e:9e:5e:8c:88:96:3f:07:5c:62:04:9c:45:dd: e5:aa:f8:5b:e9:11:d6:08:62:37:ee:78:8e:6c:4e: f2:f7:3f:20:00:9d:69:e1:84:7c:f4:78:72:c2:fc: e7:34:05:3f:9a:d3:32:6c:13:81:df:a8:59:07:e2: 37:77:7c:35:36:a7:7e:39:d0:31:d0:ba:cf:4f:56: 94:4b:88:8c:c0:b2:63:bd:4d:a5:eb:95:7f:9a:c3: 76:1d:d9:bd:70:1d:78:16:bb:b3:a6:94:a9:2a:4f: d3:9d:73:70:02:e1:19:e7:83:85:07:73:e5:fa:4c: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D8:68:7F:EC:94:CB:FE:68:58:E1:1C:78:49:20:16:3E:8C:E5:20 X509v3 Authority Key Identifier: keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:54:1f:70:d8:07:0f:16:8b:6a:be:4d:ee:f1:38:9f:86:9f: b5:9a:b4:d1:24:5f:6f:b3:00:66:e7:75:58:55:0c:be:88:d5: 24:29:92:30:85:7b:06:eb:be:3b:ec:f7:6a:46:16:48:64:0d: 5d:3f:ce:8b:67:2e:5e:9c:ec:23:b4:2d:f9:52:1d:bf:ef:cf: 6a:c9:35:f2:31:6d:ac:96:b5:f7:f4:f4:63:1d:b3:7f:ff:66: b2:18:6a:79:6e:f7:a3:2c:64:1b:1a:41:e2:ce:ef:e1:94:6c: 23:2f:38:dd:92:1d:c9:2e:10:ac:1b:4d:e8:4b:72:f5:23:c1: cd:33:ad:02:3a:96:5c:ad:7a:a3:40:60:ab:fd:b3:fe:cd:ad: 89:10:39:c1:11:a8:6b:dd:fe:a4:5e:49:da:ae:7c:b5:b6:dd: 28:b7:db:ac:7c:be:35:6a:39:6a:07:f3:8c:ff:4b:0b:8c:94: a3:33:dc:27:1e:a3:22:62:f6:10:81:27:56:1f:93:3f:13:d8: 74:28:f4:dd:2a:5e:f7:62:8c:a8:66:de:8c:79:d4:56:91:c1: f4:8d:01:d4:a0:5c:48:19:f0:2c:39:6b:3c:d7:b8:24:04:c1: 36:78:44:46:b9:e7:38:d2:ab:01:2d:11:22:68:1f:25:75:a4: 41:0c:47:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeuqx5Q2hQ3QNl0xytqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmJlZDcwZGI1ZTY3M2M4MWYxMmU3MzY1YTM2YzRmM2Rh MjdiNzEwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD EyhhM2Q4Njg3ZmVjOTRjYmZlNjg1OGUxMWM3ODQ5MjAxNjNlOGNlNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRW0sI0EZTgt311Lau1mGFjMWXrI aRJjKxMB8uwmXiZN/B5kUpdSsBJ0VBLFC7VK6vnw0gfrO6+9lpwsYP6/X/3iRESd DgaTMieZJq7wDs8N2sfHDQTczlx6vCQrftCcFJSM4oELrb7vV4VVrWvsCOmr1pFH BIJgN566PN/m5eyXUBrxAeduHp5ejIiWPwdcYgScRd3lqvhb6RHWCGI37niObE7y 9z8gAJ1p4YR89HhywvznNAU/mtMybBOB36hZB+I3d3w1Nqd+OdAx0LrPT1aUS4iM wLJjvU2l65V/msN2Hdm9cB14FruzppSpKk/TnXNwAuEZ54OFB3Pl+kydZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPYaH/slMv+aFjhHHhJIBY+jOUgMB8GA1UdIwQY MBaAFC5r7XDbXmc8gfEuc2WjbE89ontxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1Mjct NjIzMTU2NDRiM2NlLzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1MjctNjIzMTU2NDRiM2Nl LzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVQfcNgH DxaLar5N7vE4n4aftZq00SRfb7MAZud1WFUMvojVJCmSMIV7Buu+O+z3akYWSGQN XT/Oi2cuXpzsI7Qt+VIdv+/Pask18jFtrJa19/T0Yx2zf/9mshhqeW73oyxkGxpB 4s7v4ZRsIy843ZIdyS4QrBtN6Ety9SPBzTOtAjqWXK16o0Bgq/2z/s2tiRA5wRGo a93+pF5J2q58tbbdKLfbrHy+NWo5agfzjP9LC4yUozPcJx6jImL2EIEnVh+TPxPY dCj03Spe92KMqGbejHnUVpHB9I0B1KBcSBnwLDlrPNe4JATBNnhERrnnONKrAS0R ImgfJXWkQQxHeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:21 2025 by rpki-client