This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json) Hash identifier: tG5gv3ecTNVm28gFb3REYwMO99z2arMQkOplUjX8LRI= Subject key identifier: 54:95:94:B1:1F:C9:48:23:C5:E3:D6:98:37:AD:32:24:E3:B4:A9:60 Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6 Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6 Certificate serial: 019AF540E17008D3525F4F76FD52EED94F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft Manifest number: 0B8E Signing time: Sat 06 Dec 2025 20:01:01 +0000 Manifest this update: Sat 06 Dec 2025 20:01:01 +0000 Manifest next update: Sun 07 Dec 2025 20:01:01 +0000 Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: u8RW0BGyZQmPrhwm+0JTNXCQLLG4AotBCleAeovpT90=) 2: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (hash: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:e1:70:08:d3:52:5f:4f:76:fd:52:ee:d9:4f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6 Validity Not Before: Dec 6 20:01:01 2025 GMT Not After : Dec 7 20:01:01 2025 GMT Subject: CN=549594b11fc94823c5e3d69837ad3224e3b4a960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:28:5d:9b:28:0d:d2:b2:bc:51:73:b6:09: b1:81:3e:b9:bb:65:a7:78:64:13:5e:0b:30:a0:d8: c2:15:3d:16:37:8b:7b:d2:9f:65:cc:e9:0a:3d:7e: 62:ee:8b:53:21:2a:67:36:6a:db:9e:33:31:0a:e5: c4:83:b3:c5:45:63:16:6b:7c:29:66:be:36:96:50: 24:ec:e2:01:f8:b4:5a:5e:52:25:8b:a4:5f:cb:fe: b3:43:13:0f:ef:08:11:7c:49:e1:7d:e9:5a:02:4b: 81:95:0e:82:c2:d6:43:68:0b:d3:09:cd:a6:a6:5a: a4:78:8e:1e:31:2c:43:cc:d8:23:b0:ac:59:05:fc: 0c:e6:76:92:6c:24:24:52:17:5d:f6:7f:76:e2:5d: 43:41:4e:4c:e8:c4:e5:6d:e9:d2:5c:d5:d9:b6:63: 3d:d5:a6:79:3e:ea:94:d7:94:5b:f7:a9:e9:23:81: df:c0:3d:56:48:be:40:5d:9a:0d:bb:26:e0:d0:3c: 37:d3:0a:e5:2e:30:b8:fb:6f:4c:65:5d:3e:eb:d9: 1c:f3:e7:bd:65:c1:99:04:6b:c3:e8:38:d6:db:45: 7d:1f:b7:bf:98:4a:2e:f4:88:0a:2b:54:02:91:c5: 25:65:9d:3b:7c:8d:8d:31:57:eb:4a:ae:44:5a:54: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:95:94:B1:1F:C9:48:23:C5:E3:D6:98:37:AD:32:24:E3:B4:A9:60 X509v3 Authority Key Identifier: keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:5b:b5:f6:bf:7a:62:23:a5:31:75:34:a9:c1:c1:86:64: ec:03:65:53:91:f2:f2:d6:d1:85:a6:58:b4:4f:fb:d0:f2:cf: 0f:a3:5a:30:47:b7:c4:db:75:c2:d8:fd:47:a2:ad:72:cb:96: 2f:75:5b:bb:08:0b:ab:1b:56:c2:00:c3:ee:45:f5:2f:58:c2: c9:32:6b:ff:a2:04:b0:a5:51:7b:e1:a6:ef:5f:a9:f1:5d:21: b6:71:29:e0:26:fa:b4:8f:f0:11:38:ac:3f:eb:da:61:2a:a0: d4:24:c6:d9:84:e1:ca:24:ff:e4:45:44:69:5e:1b:3f:f9:e4: 9e:32:1b:f2:f9:71:3c:9b:59:a9:d5:d7:8c:b9:91:00:50:58: 1f:4a:2c:57:ff:7d:ff:14:54:e4:04:9b:99:51:1b:3d:b1:c4: 34:e6:2f:a0:9b:62:59:68:62:71:5c:fb:ca:eb:b1:37:77:a9: ed:8a:43:42:47:c5:21:bb:7e:94:8e:48:db:53:f8:ef:ce:48: 1f:10:89:79:48:f8:df:08:85:64:15:59:59:40:dc:79:4e:4c: fd:61:e0:e0:87:38:e9:2c:59:dd:95:47:c7:86:f2:ca:80:75: 13:2a:b5:57:81:91:e7:04:b2:18:75:03:e1:4a:84:3b:3a:bd: b6:45:5a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QOFwCNNSX092/VLu2U9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjQyOTFkZjk3OTYzYzVhOWI3MzJiMTM5NmYwZjFjODg3 NTA0ZDYwHhcNMjUxMjA2MjAwMTAxWhcNMjUxMjA3MjAwMTAxWjAzMTEwLwYDVQQD Eyg1NDk1OTRiMTFmYzk0ODIzYzVlM2Q2OTgzN2FkMzIyNGUzYjRhOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobooXZsoDdKyvFFztgmxgT65u2Wn eGQTXgswoNjCFT0WN4t70p9lzOkKPX5i7otTISpnNmrbnjMxCuXEg7PFRWMWa3wp Zr42llAk7OIB+LRaXlIli6Rfy/6zQxMP7wgRfEnhfelaAkuBlQ6CwtZDaAvTCc2m plqkeI4eMSxDzNgjsKxZBfwM5naSbCQkUhdd9n924l1DQU5M6MTlbenSXNXZtmM9 1aZ5PuqU15Rb96npI4HfwD1WSL5AXZoNuybg0Dw30wrlLjC4+29MZV0+69kc8+e9 ZcGZBGvD6DjW20V9H7e/mEou9IgKK1QCkcUlZZ07fI2NMVfrSq5EWlRrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSVlLEfyUgjxePWmDetMiTjtKlgMB8GA1UdIwQY MBaAFCy0KR35eWPFqbcysTlvDxyIdQTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQt YWY0YzA2ZjMxYWZmLzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQtYWY0YzA2ZjMxYWZm LzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/9btfa/ emIjpTF1NKnBwYZk7ANlU5Hy8tbRhaZYtE/70PLPD6NaMEe3xNt1wtj9R6KtcsuW L3VbuwgLqxtWwgDD7kX1L1jCyTJr/6IEsKVRe+Gm71+p8V0htnEp4Cb6tI/wETis P+vaYSqg1CTG2YThyiT/5EVEaV4bP/nknjIb8vlxPJtZqdXXjLmRAFBYH0osV/99 /xRU5ASbmVEbPbHENOYvoJtiWWhicVz7yuuxN3ep7YpDQkfFIbt+lI5I21P4785I HxCJeUj43wiFZBVZWUDceU5M/WHg4Ic46SxZ3ZVHx4byyoB1Eyq1V4GR5wSyGHUD 4UqEOzq9tkVaKw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:41 2025 by rpki-client