This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json) Hash identifier: 78bBbl7Y6iCO3OoMIi5XZloYQ9NTT9RAghDJYHYMPIU= Subject key identifier: EF:99:76:FC:FF:7E:14:A2:67:A2:11:8B:40:80:54:96:5C:74:A2:3C Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c Certificate serial: 019AF50AB5941A2D5DD6983A77AA725EB284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft Manifest number: 1737 Signing time: Sat 06 Dec 2025 19:01:50 +0000 Manifest this update: Sat 06 Dec 2025 19:01:50 +0000 Manifest next update: Sun 07 Dec 2025 19:01:50 +0000 Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: LqViisVwQPYRRSGnDR8kII3ZXhPu/IFJFyLYSPuruTQ=) 2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=) 3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:b5:94:1a:2d:5d:d6:98:3a:77:aa:72:5e:b2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c Validity Not Before: Dec 6 19:01:50 2025 GMT Not After : Dec 7 19:01:50 2025 GMT Subject: CN=ef9976fcff7e14a267a2118b408054965c74a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:bc:a0:bc:93:d0:45:90:87:6b:a7:30:4e: f3:b0:50:30:f1:32:18:e3:8c:4b:2e:3f:2a:4a:a0: a0:6b:bf:d6:68:aa:ec:03:13:9b:3e:ee:c3:c2:1e: 6e:8b:cd:0f:7a:92:68:2f:b0:f9:da:25:cd:24:3c: 6b:c9:b2:0c:6d:81:9a:cd:12:d3:de:d0:6a:0b:1f: 3c:b0:bc:c7:c7:01:7e:a7:1f:60:38:90:bf:79:0c: 76:be:e5:de:55:d8:1a:bd:ac:dd:21:f3:38:83:e6: ca:09:60:9a:95:38:23:4d:e8:8a:ce:76:8b:ad:d1: c7:35:e2:70:13:06:38:0d:55:7f:e2:6f:00:0c:7d: f2:e4:c3:b8:d2:74:bb:7f:39:d2:e0:c3:e6:ba:d9: 05:90:37:8e:ed:6b:d9:38:ab:c0:e5:14:fa:8e:42: 36:f8:df:be:b2:9d:07:d0:ec:ed:4e:d8:a4:a6:63: 40:aa:07:08:9f:9f:f9:57:9d:d1:ba:b8:84:81:ee: eb:f2:dc:29:68:81:96:75:4a:12:da:55:0e:bc:1e: f5:c4:95:99:02:b3:4d:39:37:a8:ec:71:81:d3:74: 15:84:12:4a:d6:dd:00:72:bd:8c:30:61:ef:50:88: e6:4d:e4:8d:9f:fb:36:99:e4:39:f6:a3:d1:a7:a6: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:99:76:FC:FF:7E:14:A2:67:A2:11:8B:40:80:54:96:5C:74:A2:3C X509v3 Authority Key Identifier: keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:34:57:ee:d4:fb:d7:e7:d2:02:c0:79:81:c3:03:69:64:47: 5f:51:b4:67:7e:ea:4c:f9:4a:9b:ae:bd:87:a2:a1:bc:e6:46: ab:8d:1e:bc:bf:d2:09:17:32:50:6c:45:ea:8c:c2:8f:cb:de: 16:5a:41:20:be:e2:b0:e1:79:90:d8:e0:51:b6:0b:05:e9:f9: 74:81:e2:43:42:82:e7:a4:e0:28:4b:5a:37:25:c5:38:21:ea: 02:3d:b5:ed:38:19:ef:f2:ab:6e:da:ce:14:e7:54:a3:ef:fd: c6:96:6e:48:ee:91:93:87:67:60:8e:d7:5b:ac:5f:97:45:6f: 0b:7b:1b:eb:f1:91:2d:58:45:0b:d8:33:0f:f4:43:ff:ac:52: 69:1f:44:b6:e7:26:32:5e:31:48:b2:1a:1c:90:ae:d2:16:8b: 41:5d:8b:f0:86:63:9c:ad:73:6b:03:5e:e5:f3:92:a2:9d:51: df:7e:fa:2d:32:4b:d1:60:5a:2a:e7:01:a7:64:99:9a:56:71: 27:db:1c:12:a4:92:6b:ef:76:9a:6c:7f:cb:81:03:31:18:b9: 2c:b6:b4:c1:03:7a:5e:14:84:2d:b2:0c:61:34:35:a7:ad:8b: 2b:b7:d2:f4:d8:1b:53:57:e5:0b:26:f2:fb:64:16:aa:5c:a6: 56:b1:d1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CrWUGi1d1pg6d6pyXrKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl NjY4MWMwHhcNMjUxMjA2MTkwMTUwWhcNMjUxMjA3MTkwMTUwWjAzMTEwLwYDVQQD EyhlZjk5NzZmY2ZmN2UxNGEyNjdhMjExOGI0MDgwNTQ5NjVjNzRhMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUi8oLyT0EWQh2unME7zsFAw8TIY 44xLLj8qSqCga7/WaKrsAxObPu7Dwh5ui80PepJoL7D52iXNJDxrybIMbYGazRLT 3tBqCx88sLzHxwF+px9gOJC/eQx2vuXeVdgavazdIfM4g+bKCWCalTgjTeiKznaL rdHHNeJwEwY4DVV/4m8ADH3y5MO40nS7fznS4MPmutkFkDeO7WvZOKvA5RT6jkI2 +N++sp0H0OztTtikpmNAqgcIn5/5V53RuriEge7r8twpaIGWdUoS2lUOvB71xJWZ ArNNOTeo7HGB03QVhBJK1t0Acr2MMGHvUIjmTeSNn/s2meQ59qPRp6aN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+Zdvz/fhSiZ6IRi0CAVJZcdKI8MB8GA1UdIwQY MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDRX7tT7 1+fSAsB5gcMDaWRHX1G0Z37qTPlKm669h6KhvOZGq40evL/SCRcyUGxF6ozCj8ve FlpBIL7isOF5kNjgUbYLBen5dIHiQ0KC56TgKEtaNyXFOCHqAj217TgZ7/KrbtrO FOdUo+/9xpZuSO6Rk4dnYI7XW6xfl0VvC3sb6/GRLVhFC9gzD/RD/6xSaR9Etucm Ml4xSLIaHJCu0haLQV2L8IZjnK1zawNe5fOSop1R3376LTJL0WBaKucBp2SZmlZx J9scEqSSa+92mmx/y4EDMRi5LLa0wQN6XhSELbIMYTQ1p62LK7fS9NgbU1flCyby +2QWqlymVrHRhA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:23 2025 by rpki-client