This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json) Hash identifier: okPQL8a9Y1P3xKRoxBePy4+ArbJ6ZmYasRBi3Km2rdU= Subject key identifier: A1:CA:A0:D7:9A:02:B9:E4:3B:C4:D2:9B:7A:9E:2A:70:CA:1F:71:BC Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Certificate serial: 019AF19B8DCB89CCCE7A114CBCE437444362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft Manifest number: 1254 Signing time: Sat 06 Dec 2025 03:01:34 +0000 Manifest this update: Sat 06 Dec 2025 03:01:34 +0000 Manifest next update: Sun 07 Dec 2025 03:01:34 +0000 Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=) 2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: APFjutfZgKiVquKHgOTyalb1dY8hPMjGNMy3sJpb2KI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8d:cb:89:cc:ce:7a:11:4c:bc:e4:37:44:43:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Validity Not Before: Dec 6 03:01:34 2025 GMT Not After : Dec 7 03:01:34 2025 GMT Subject: CN=a1caa0d79a02b9e43bc4d29b7a9e2a70ca1f71bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:91:71:72:30:88:8b:66:b8:c7:97:b5:d2: a8:35:3e:70:ed:a1:10:a1:af:8b:57:80:85:7b:04: cf:87:45:6c:d8:d4:4e:89:fb:6d:47:ad:e0:27:f5: 95:4e:b1:3a:40:f3:5e:f6:f3:ec:bf:8e:d7:a3:d5: ef:cb:97:cc:fa:75:04:87:a3:db:9b:04:3d:5e:96: bf:89:d4:57:33:8f:b1:c2:91:ca:f2:ca:c5:01:4a: f5:72:d9:b2:46:2a:f5:ca:4a:12:83:13:ac:4b:35: 65:14:70:fc:19:82:67:47:43:e6:b2:12:84:53:bc: 80:31:fa:d7:44:30:9d:d1:21:a5:4a:bb:b2:ac:b6: 13:14:fd:76:87:77:12:74:35:14:f2:82:0d:0a:2a: 56:62:0e:35:ad:05:ab:ab:ce:1b:05:88:b5:43:01: 27:83:f8:3d:d1:6d:ad:35:cf:c9:15:ec:28:ca:ae: 5a:83:ed:26:6e:8c:1c:07:f9:b7:dd:74:cb:b5:4f: 22:6c:c7:a9:5b:44:99:62:07:a9:9d:f8:8d:1c:c0: c8:19:a5:b5:7b:2a:29:0a:b8:86:52:32:3c:20:f9: a1:1e:cb:c2:ee:eb:7c:59:86:16:30:d7:1d:c0:e4: 16:79:6a:84:5f:e4:74:a5:44:d9:35:11:0d:4f:88: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:A0:D7:9A:02:B9:E4:3B:C4:D2:9B:7A:9E:2A:70:CA:1F:71:BC X509v3 Authority Key Identifier: keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:af:85:9a:d5:45:9e:69:1f:5d:c2:be:c5:37:d3:e9:3b:0d: 54:d8:2e:a1:f3:ec:36:73:ee:32:eb:dc:69:3f:09:bc:36:26: d6:3d:bf:31:7c:d6:00:7a:61:91:f7:39:09:c1:1f:01:4c:8a: ca:a3:c3:37:df:4c:84:a3:45:db:93:9d:6c:86:d2:33:01:71: 46:b5:2d:09:1c:84:7e:ec:cc:0d:26:cf:ee:72:8a:9d:f7:32: 04:cf:62:2b:da:ca:b2:ac:fb:f0:b7:07:56:8c:98:f9:a5:ee: 80:4c:5e:f7:e9:16:b5:2e:57:51:19:74:c4:a6:8a:39:63:16: 2c:7c:45:04:0b:bc:9e:68:45:f3:13:4c:58:0a:67:a1:4f:5b: 92:7b:c7:35:fe:9f:d1:ce:d9:4c:8e:58:55:42:12:27:29:5a: 6d:ce:57:8a:63:70:93:3b:40:0a:2b:d1:b5:02:1c:36:02:71: 6a:9c:cf:3e:51:d2:a5:d1:69:e5:99:94:59:cf:05:a6:f0:ec: eb:7b:14:02:ac:d8:29:f6:93:1b:ef:50:e3:65:55:5c:c8:7c: 77:bc:35:e9:73:6f:29:1f:f4:3a:57:d6:b6:5a:65:97:3d:8a: 9a:97:32:22:7e:a0:c4:be:f0:93:9e:58:b1:28:b0:4c:a6:98: 9f:6d:79:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm43LiczOehFMvOQ3RENiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw YzgwOGEwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD EyhhMWNhYTBkNzlhMDJiOWU0M2JjNGQyOWI3YTllMmE3MGNhMWY3MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucyRcXIwiItmuMeXtdKoNT5w7aEQ oa+LV4CFewTPh0Vs2NROifttR63gJ/WVTrE6QPNe9vPsv47Xo9Xvy5fM+nUEh6Pb mwQ9Xpa/idRXM4+xwpHK8srFAUr1ctmyRir1ykoSgxOsSzVlFHD8GYJnR0PmshKE U7yAMfrXRDCd0SGlSruyrLYTFP12h3cSdDUU8oINCipWYg41rQWrq84bBYi1QwEn g/g90W2tNc/JFewoyq5ag+0mbowcB/m33XTLtU8ibMepW0SZYgepnfiNHMDIGaW1 eyopCriGUjI8IPmhHsvC7ut8WYYWMNcdwOQWeWqEX+R0pUTZNRENT4gP6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHKoNeaArnkO8TSm3qeKnDKH3G8MB8GA1UdIwQY MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0 LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApa+FmtVF nmkfXcK+xTfT6TsNVNguofPsNnPuMuvcaT8JvDYm1j2/MXzWAHphkfc5CcEfAUyK yqPDN99MhKNF25OdbIbSMwFxRrUtCRyEfuzMDSbP7nKKnfcyBM9iK9rKsqz78LcH VoyY+aXugExe9+kWtS5XURl0xKaKOWMWLHxFBAu8nmhF8xNMWApnoU9bknvHNf6f 0c7ZTI5YVUISJylabc5XimNwkztACivRtQIcNgJxapzPPlHSpdFp5ZmUWc8FpvDs 63sUAqzYKfaTG+9Q42VVXMh8d7w16XNvKR/0OlfWtlpllz2KmpcyIn6gxL7wk55Y sSiwTKaYn215sA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:36 2025 by rpki-client