This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft File: LphQiZ2cq14AM9C-lyKn6zBdfGA.mft (raw, json) Hash identifier: Xs+gnFW9r3onAjVhbADZ8cE9/hg8vZkWK17/zldPw5Y= Subject key identifier: 27:01:BB:9A:2D:F4:DE:6A:B7:3F:1D:93:94:37:23:94:21:4B:B7:67 Authority key identifier: 2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60 Certificate issuer: /CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60 Certificate serial: 019AF31B9E5A3A956B1F47411F4AA654369C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: LphQiZ2cq14AM9C-lyKn6zBdfGA.crl (hash: Dbs6C0aS1BkcDOyfVecqMR4QPn+wMCiIDhfydoVE4OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9e:5a:3a:95:6b:1f:47:41:1f:4a:a6:54:36:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=2701bb9a2df4de6ab73f1d9394372394214bb767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:e2:50:b8:0e:d7:90:37:79:d7:7e:b8:08: 2b:29:52:c0:e8:73:3e:7f:ac:97:45:0c:85:1a:29: 3e:20:37:4e:12:0d:14:0d:a1:1a:fe:c8:f9:23:f2: 0c:ea:f6:19:fb:74:63:f7:6e:89:71:b1:b8:69:79: 33:ad:c6:ac:cb:66:e7:20:74:fc:89:55:49:45:11: 07:fc:92:d1:0c:6b:ad:d1:ee:15:cd:99:dd:53:3a: de:a1:95:0e:1e:5c:30:de:99:6d:e2:78:de:c2:2e: a1:92:1d:7a:b7:ce:5a:8c:c5:32:84:e5:8f:41:3b: 71:95:3b:6a:b1:3c:92:dd:8b:31:bf:ef:2b:92:bb: b2:56:10:74:41:89:55:4f:09:36:aa:6f:17:3e:d6: d0:1c:9d:35:b0:1f:f5:09:41:44:31:e8:06:a0:57: f3:bf:a4:8b:85:32:7a:37:2d:6c:c9:f3:0e:56:a9: 8b:be:4f:c7:34:b2:22:8c:41:a4:45:2f:13:8e:c8: d5:3f:4f:96:c2:12:f5:2c:3b:29:76:85:20:a1:c4: 1c:e7:07:b4:a7:27:b3:65:4a:41:46:21:69:e3:35: 71:b1:bf:93:b2:85:c9:21:cb:ed:92:79:6e:79:a1: 1f:8c:af:e4:64:ef:16:74:cd:29:34:6c:1a:cf:8b: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:BB:9A:2D:F4:DE:6A:B7:3F:1D:93:94:37:23:94:21:4B:B7:67 X509v3 Authority Key Identifier: keyid:2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:97:90:95:87:78:40:6f:d9:a8:cb:ad:c0:c6:1f:23:70:3a: 15:c7:d9:e7:de:f4:9f:0e:cd:6b:d6:25:41:70:0b:2b:62:7d: 93:f8:df:74:02:e4:58:8a:c0:b0:f1:56:57:5c:14:1a:6b:f4: 08:75:9a:8a:da:3f:51:77:99:33:ab:83:cd:7a:5b:7a:82:73: e9:38:94:78:32:df:18:d3:50:d5:5d:d6:50:b3:dc:b3:54:0d: 76:ff:14:39:e6:bc:47:2a:7e:ae:8c:74:dc:8c:b6:2d:07:d7: ae:84:d2:26:b1:5e:8c:d0:f8:77:ca:d3:38:cd:4a:6f:64:6d: 59:54:10:44:e7:96:47:17:eb:94:6f:57:00:e5:96:fc:2a:78: 40:e6:95:79:3f:7c:9f:0a:79:92:5f:c3:83:c7:cd:26:dd:13: aa:83:d9:cd:fc:33:fc:dc:51:8b:fc:b8:9d:2c:37:6a:38:72: 19:ac:dc:ce:8d:b8:2f:b2:ed:ef:ac:19:cb:65:98:f2:df:8a: 56:02:7a:e7:0a:ce:a4:95:41:e4:17:3d:97:42:43:10:d6:bc: 2f:b8:a1:37:f1:db:66:2b:63:8a:46:96:01:a9:53:aa:3e:31: 14:20:90:c5:2e:ac:0b:f4:22:57:87:63:d0:bd:03:f8:f2:12: 56:a2:7c:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG55aOpVrH0dBH0qmVDacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOTg1MDg5OWQ5Y2FiNWUwMDMzZDBiZTk3MjJhN2ViMzA1 ZDdjNjAwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EygyNzAxYmI5YTJkZjRkZTZhYjczZjFkOTM5NDM3MjM5NDIxNGJiNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0riULgO15A3edd+uAgrKVLA6HM+ f6yXRQyFGik+IDdOEg0UDaEa/sj5I/IM6vYZ+3Rj926JcbG4aXkzrcasy2bnIHT8 iVVJRREH/JLRDGut0e4VzZndUzreoZUOHlww3plt4njewi6hkh16t85ajMUyhOWP QTtxlTtqsTyS3Ysxv+8rkruyVhB0QYlVTwk2qm8XPtbQHJ01sB/1CUFEMegGoFfz v6SLhTJ6Ny1syfMOVqmLvk/HNLIijEGkRS8TjsjVP0+WwhL1LDspdoUgocQc5we0 pyezZUpBRiFp4zVxsb+TsoXJIcvtknlueaEfjK/kZO8WdM0pNGwaz4tC/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcBu5ot9N5qtz8dk5Q3I5QhS7dnMB8GA1UdIwQY MBaAFC6YUImdnKteADPQvpcip+swXXxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBoUWlaMmNxMTRBTTlDLWx5S242ekJkZkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zN2ZkOWQtNjFlNi00ZGYzLTljMDct NmI2YWQwNDU2YjY1LzEvTHBoUWlaMmNxMTRBTTlDLWx5S242ekJkZkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zN2ZkOWQtNjFlNi00ZGYzLTljMDctNmI2YWQwNDU2YjY1 LzEvTHBoUWlaMmNxMTRBTTlDLWx5S242ekJkZkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5eQlYd4 QG/ZqMutwMYfI3A6FcfZ5970nw7Na9YlQXALK2J9k/jfdALkWIrAsPFWV1wUGmv0 CHWaito/UXeZM6uDzXpbeoJz6TiUeDLfGNNQ1V3WULPcs1QNdv8UOea8Ryp+rox0 3Iy2LQfXroTSJrFejND4d8rTOM1Kb2RtWVQQROeWRxfrlG9XAOWW/Cp4QOaVeT98 nwp5kl/Dg8fNJt0TqoPZzfwz/NxRi/y4nSw3ajhyGazczo24L7Lt76wZy2WY8t+K VgJ65wrOpJVB5Bc9l0JDENa8L7ihN/HbZitjikaWAalTqj4xFCCQxS6sC/QiV4dj 0L0D+PISVqJ88g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:21 2025 by rpki-client