This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json) Hash identifier: XIiqT7huroyCo/Z3NsM2tbhaJtknK1gP8+u6CMlcHM0= Subject key identifier: 71:5F:FB:27:00:D1:DC:AE:F0:50:E0:66:68:E2:CE:0F:F8:23:9E:FA Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Certificate serial: 019AF12CB58E8340B094C1128D97AACF6DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: yHDLZwVHCrfUUeF9ZTccTqQjvxob+frFpaH4slopcCM=) 2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b5:8e:83:40:b0:94:c1:12:8d:97:aa:cf:6d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=715ffb2700d1dcaef050e06668e2ce0ff8239efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:72:d5:8d:ad:d1:a0:a1:40:bd:c9:3a:61: 7c:17:e4:4e:c6:7c:28:4c:01:dd:84:7e:d3:c6:90: a0:ba:5a:e9:18:91:45:81:e3:18:44:4f:ec:f6:c2: 63:ed:9a:88:b0:3d:a4:c7:07:af:b9:f7:f5:3e:f4: f5:e6:9f:5a:a9:94:f7:c2:a1:1f:5c:69:38:16:d8: ea:da:3c:84:80:51:e8:27:f4:1b:82:ec:5e:4d:3a: a4:9e:af:78:c3:41:cb:af:ec:45:ba:dd:ff:50:96: 0d:73:21:a7:9f:56:a9:70:e4:f8:52:ae:06:92:25: f4:12:b7:9e:ca:d4:f5:b3:b2:29:f6:e8:21:95:a6: 84:fb:ba:a1:1f:a7:cc:f8:b6:e7:90:c0:84:b8:b3: a2:d9:81:96:10:37:75:fe:45:c5:b0:8d:fc:f8:0b: 7e:a4:ea:70:ab:6d:fc:de:de:54:06:3b:fc:9f:6e: 4f:be:94:42:76:53:c1:4c:36:0e:15:36:ba:fd:a4: 51:25:f2:d1:82:c0:2e:c4:12:61:34:34:0f:78:82: dd:d5:e5:51:8a:80:c2:00:8d:2e:02:26:29:dc:c4: 96:ef:7e:62:5a:e7:74:8f:be:3b:e0:b4:e1:3c:76: d5:a1:51:e5:83:e0:4a:31:a9:86:07:71:aa:a7:3e: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:FB:27:00:D1:DC:AE:F0:50:E0:66:68:E2:CE:0F:F8:23:9E:FA X509v3 Authority Key Identifier: keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e7:5b:99:cf:9c:ba:13:b3:cd:f1:4a:0b:e2:71:c5:03:dd: 59:b8:92:5e:20:c8:23:e1:62:98:55:5b:1c:65:39:56:37:91: d1:b7:23:c7:4b:77:92:8d:f0:01:5c:bd:7f:2b:72:0a:24:eb: f4:60:67:26:97:77:3f:45:71:1b:f0:7e:94:4b:41:0c:a1:e2: 7a:86:ce:bc:ea:0d:7d:a7:91:87:f9:ce:1d:67:4e:e0:4c:6d: ee:b8:71:92:0e:fe:c6:e8:c4:62:a0:25:1c:0b:9e:ea:cd:be: 30:bb:d8:36:ad:ce:72:93:42:81:2a:73:7c:68:bd:e8:8a:10: 26:ee:b1:c2:10:11:09:b4:b2:f0:76:d3:51:07:51:bc:c3:e4: 7c:01:26:bd:46:4d:24:38:f3:fa:5a:6a:2d:c8:f5:4d:41:43: f5:7d:1b:a1:ef:4c:73:5d:3c:5f:ab:f0:64:af:1f:e4:8c:c2: a5:80:73:f1:50:02:3f:87:e8:eb:ab:14:c5:ba:72:4c:0f:3b: 23:b4:cf:a3:4b:38:ed:05:f6:f4:8b:4e:20:4d:f7:b6:37:64: 76:2a:25:9e:a2:c6:31:d9:7d:49:6e:77:49:c4:da:60:f7:df: 4f:44:b0:10:d0:cf:68:9e:60:6e:b8:dd:93:4b:1c:e8:3a:fb: 30:82:30:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLWOg0CwlMESjZeqz23cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1 YWFjMTgwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD Eyg3MTVmZmIyNzAwZDFkY2FlZjA1MGUwNjY2OGUyY2UwZmY4MjM5ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxRy1Y2t0aChQL3JOmF8F+ROxnwo TAHdhH7TxpCgulrpGJFFgeMYRE/s9sJj7ZqIsD2kxwevuff1PvT15p9aqZT3wqEf XGk4Ftjq2jyEgFHoJ/QbguxeTTqknq94w0HLr+xFut3/UJYNcyGnn1apcOT4Uq4G kiX0EreeytT1s7Ip9ughlaaE+7qhH6fM+LbnkMCEuLOi2YGWEDd1/kXFsI38+At+ pOpwq2383t5UBjv8n25PvpRCdlPBTDYOFTa6/aRRJfLRgsAuxBJhNDQPeILd1eVR ioDCAI0uAiYp3MSW735iWud0j7474LThPHbVoVHlg+BKMamGB3Gqpz5QrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFf+ycA0dyu8FDgZmjizg/4I576MB8GA1UdIwQY MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1 LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOdbmc+c uhOzzfFKC+JxxQPdWbiSXiDII+FimFVbHGU5VjeR0bcjx0t3ko3wAVy9fytyCiTr 9GBnJpd3P0VxG/B+lEtBDKHieobOvOoNfaeRh/nOHWdO4Ext7rhxkg7+xujEYqAl HAue6s2+MLvYNq3OcpNCgSpzfGi96IoQJu6xwhARCbSy8HbTUQdRvMPkfAEmvUZN JDjz+lpqLcj1TUFD9X0boe9Mc108X6vwZK8f5IzCpYBz8VACP4fo66sUxbpyTA87 I7TPo0s47QX29ItOIE33tjdkdiolnqLGMdl9SW53ScTaYPffT0SwENDPaJ5gbrjd k0sc6Dr7MIIw8A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:42 2025 by rpki-client