This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json) Hash identifier: 7/u3glMEV10sXfvLV9xoPFy/MINKcXGknd0awa9DI30= Subject key identifier: 5B:0F:8B:2F:D4:71:2F:C7:BF:87:C5:ED:2C:19:0E:F9:25:F4:38:60 Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d Certificate serial: 019AF12EC2FDD3D0F02AFE3FDC12BF1F79C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft Manifest number: 09F9 Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: vrrBe8FaA1WS2AZjJS0+VIaCAuM72SkcSCSJbyVCG0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c2:fd:d3:d0:f0:2a:fe:3f:dc:12:bf:1f:79:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=5b0f8b2fd4712fc7bf87c5ed2c190ef925f43860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c0:64:3a:1f:19:01:c9:3c:73:26:5d:35:31: 22:51:43:05:03:52:1e:25:cc:3b:95:9d:4b:da:f3: f2:8f:bf:8a:a6:65:7f:9e:d5:49:69:4d:ed:f2:ba: 8a:9a:59:5d:b1:a7:af:45:25:84:46:9a:3d:4d:14: 04:22:d1:72:c3:e3:1a:5c:fb:0b:d5:f5:f7:62:39: c1:38:c1:c5:02:9c:fb:4e:e8:fb:3a:f7:5f:3c:0c: 73:57:e2:06:f9:f5:3e:77:1d:84:09:d9:52:18:db: c3:09:f1:fd:11:4d:99:b9:b7:33:80:64:cb:f1:fc: bc:c0:e9:28:30:d7:4a:b7:0b:56:52:1c:9b:cb:20: 61:76:98:be:72:64:3b:3a:0f:64:44:05:0b:ee:ff: 6f:8a:ee:18:32:8b:a1:c1:16:5d:b7:9b:7d:8f:9b: c6:65:e9:51:0b:42:77:75:50:52:7b:72:f9:8a:6d: 15:c0:be:57:79:21:80:1b:3c:50:9d:38:cb:1b:c7: 99:48:3d:66:eb:94:89:d5:a7:97:56:5d:b3:1b:7c: 7a:f5:2b:1f:1f:58:b1:e1:16:99:59:a4:64:5f:e8: 6a:02:ed:67:eb:ca:12:c9:21:d7:17:04:e8:5a:1a: 2c:5a:2f:a5:d3:8f:e2:ac:ca:4c:c1:c5:27:5e:d6: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:8B:2F:D4:71:2F:C7:BF:87:C5:ED:2C:19:0E:F9:25:F4:38:60 X509v3 Authority Key Identifier: keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bf:ab:b9:fc:93:c9:f8:d5:c0:2c:e5:56:66:07:d6:30:81: 20:e4:0b:df:69:6b:33:7e:32:f2:50:1f:1f:df:ff:35:91:be: bf:fa:66:39:6d:f3:68:ed:2b:d9:3b:e4:4c:73:a7:35:c1:1d: 58:c1:82:97:c4:f8:22:eb:48:6e:0f:82:e9:f2:9b:7a:fa:47: 3f:21:4a:91:e2:94:62:16:7b:a5:ec:ca:c3:15:e0:cc:5e:8e: 56:eb:72:62:58:d7:9b:eb:fa:06:2b:36:67:66:a1:81:a7:44: 22:dd:60:e9:96:1d:28:8f:4f:9f:4f:a6:ed:9c:69:3c:35:14: a0:15:8d:6c:db:6d:fc:0a:d3:63:19:7d:fa:5f:2a:85:18:6a: dc:11:6a:e7:05:ce:b5:8a:4b:0e:b0:e6:e9:83:0b:55:73:f4: 84:80:35:86:84:8c:fd:8c:25:19:14:f1:1a:73:1d:57:48:ab: 71:36:5d:03:3f:0a:28:e0:52:61:e1:82:7f:e1:f2:4b:28:5e: 5d:79:8e:5c:ab:7c:4b:26:a4:f1:d9:eb:d6:06:51:95:3a:68: ea:45:4b:41:35:e8:ae:13:bf:e0:ff:05:98:de:46:fb:a9:1a: 3c:35:cd:b6:d8:ad:24:df:1e:8d:9b:81:d9:30:8f:ee:fa:36: fd:2a:7d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsL909DwKv4/3BK/H3nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOTQ2ZTQzMzM2Y2EyYTk3OWU5OWRmNWNmNWQ2ZDVlNzE1 NTgzMmQwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD Eyg1YjBmOGIyZmQ0NzEyZmM3YmY4N2M1ZWQyYzE5MGVmOTI1ZjQzODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MBkOh8ZAck8cyZdNTEiUUMFA1Ie Jcw7lZ1L2vPyj7+KpmV/ntVJaU3t8rqKmlldsaevRSWERpo9TRQEItFyw+MaXPsL 1fX3YjnBOMHFApz7Tuj7OvdfPAxzV+IG+fU+dx2ECdlSGNvDCfH9EU2ZubczgGTL 8fy8wOkoMNdKtwtWUhybyyBhdpi+cmQ7Og9kRAUL7v9viu4YMouhwRZdt5t9j5vG ZelRC0J3dVBSe3L5im0VwL5XeSGAGzxQnTjLG8eZSD1m65SJ1aeXVl2zG3x69Ssf H1ix4RaZWaRkX+hqAu1n68oSySHXFwToWhosWi+l04/irMpMwcUnXtb60wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsPiy/UcS/Hv4fF7SwZDvkl9DhgMB8GA1UdIwQY MBaAFC6UbkMzbKKpeemd9c9dbV5xVYMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZjE4NWEtM2JiNS00ZDI1LTlkYzgt ZWUyOGY5NmNmMTI2LzEvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80ZjE4NWEtM2JiNS00ZDI1LTlkYzgtZWUyOGY5NmNmMTI2 LzEvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7+rufyT yfjVwCzlVmYH1jCBIOQL32lrM34y8lAfH9//NZG+v/pmOW3zaO0r2TvkTHOnNcEd WMGCl8T4IutIbg+C6fKbevpHPyFKkeKUYhZ7pezKwxXgzF6OVutyYljXm+v6Bis2 Z2ahgadEIt1g6ZYdKI9Pn0+m7ZxpPDUUoBWNbNtt/ArTYxl9+l8qhRhq3BFq5wXO tYpLDrDm6YMLVXP0hIA1hoSM/YwlGRTxGnMdV0ircTZdAz8KKOBSYeGCf+HySyhe XXmOXKt8Syak8dnr1gZRlTpo6kVLQTXorhO/4P8FmN5G+6kaPDXNttitJN8ejZuB 2TCP7vo2/Sp9/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:22 2025 by rpki-client