This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json) Hash identifier: 5Mk1/eLpuOKaiSIDhJF5Da1TnB7fS7OlpsxKeCG3elk= Subject key identifier: D4:F0:91:C5:90:D1:83:EF:D6:2E:98:19:A5:BB:41:FE:CA:84:78:21 Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d Certificate serial: 019AF31BBFA3A7E45FE750B06F31E20C0292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft Manifest number: 1630 Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: 5t0WOxG0bw0SWUVjH0HYsHdtCZJZoi7xNotjysbOotw=) 2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:bf:a3:a7:e4:5f:e7:50:b0:6f:31:e2:0c:02:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=d4f091c590d183efd62e9819a5bb41feca847821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:33:59:c8:6e:eb:0a:56:b1:ef:df:be:35: 05:78:b1:4f:26:18:f6:97:a6:2e:2c:d9:11:74:7e: 47:56:a4:59:86:1a:e4:8b:28:58:10:7e:bf:5a:4a: 5b:88:66:ef:fb:7e:77:96:df:3d:a7:23:1d:80:e0: 76:f7:d8:f9:66:88:7d:e0:a6:3e:36:ec:dc:e0:4d: f3:e9:5a:3a:f3:7d:b6:f3:1a:ea:cf:47:52:19:0c: e4:d9:76:f7:86:23:ad:c6:aa:db:5f:18:a2:78:18: d5:da:69:15:83:d8:25:87:c4:3f:9b:b0:5a:5f:ed: 0d:08:80:f9:b2:9c:2f:04:36:ff:ec:3b:12:51:b3: c1:36:47:ba:a2:a5:88:bb:a4:fb:c2:c9:4d:b0:c2: ce:e6:cb:9f:ae:be:cd:a4:c1:37:ef:a1:aa:1f:19: c3:a6:66:61:0d:db:87:6e:6a:17:1d:73:e9:64:b8: 22:76:6b:27:95:6b:11:10:85:92:e5:25:a3:bb:2f: 2e:ba:4c:39:c8:e0:3a:83:c7:ac:7d:77:e5:09:16: 40:14:bf:18:5e:00:ec:f2:87:68:fc:bd:70:2b:bf: 9a:d1:88:7a:09:d3:e2:b2:a4:c5:cc:35:b0:29:5c: ed:34:c8:0d:5d:58:fc:fd:6b:9d:b7:07:73:6e:64: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:91:C5:90:D1:83:EF:D6:2E:98:19:A5:BB:41:FE:CA:84:78:21 X509v3 Authority Key Identifier: keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1b:d8:e8:4b:32:f3:1b:4b:52:16:68:b7:9f:cf:bf:d1:47: c5:4c:1e:a9:47:0f:41:21:2c:6c:e3:67:77:1a:3d:05:0f:f9: 77:93:04:1a:93:86:9e:a6:52:e9:11:1c:7b:07:89:a0:e7:1e: 39:2c:f4:27:cb:0d:96:fa:ee:3c:76:26:da:4b:ec:b1:5a:c6: a7:39:be:6d:80:ab:9b:be:fc:30:12:c5:73:2e:70:20:41:b7: 06:06:cf:80:3d:2e:f6:ae:98:c7:84:4f:e0:a7:32:30:f5:94: 9c:f4:82:e2:c6:87:91:7a:fa:ff:e2:97:ca:30:6e:8f:51:db: fd:bb:70:02:bd:c8:b8:c3:36:9e:a5:3e:c3:5e:8b:08:9b:f2: 92:57:a3:c5:1d:91:47:99:dd:af:b9:b0:8f:17:3c:8c:c6:c0: c9:30:5e:d6:07:e1:f8:8e:61:e6:74:a3:65:af:34:41:4c:df: a3:8c:0f:10:3f:1e:ef:4c:a0:04:a3:58:23:eb:3d:36:c3:55: 77:8d:c3:66:d1:14:d4:21:0b:2b:e1:13:27:e0:9a:2d:ef:c8: 12:fe:4f:22:6d:54:e0:98:2d:a0:05:1b:f6:d0:7b:0f:4b:10: 25:4c:41:69:06:78:22:53:35:f5:90:18:df:95:79:1b:e2:c3: 1c:74:9b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7+jp+Rf51CwbzHiDAKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYmEzNTU2NjliNGY5YjkwMzVmMDViMWZiYTIxMWVmODY5 NjEwMWQwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD EyhkNGYwOTFjNTkwZDE4M2VmZDYyZTk4MTlhNWJiNDFmZWNhODQ3ODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR8zWchu6wpWse/fvjUFeLFPJhj2 l6YuLNkRdH5HVqRZhhrkiyhYEH6/WkpbiGbv+353lt89pyMdgOB299j5Zoh94KY+ Nuzc4E3z6Vo683228xrqz0dSGQzk2Xb3hiOtxqrbXxiieBjV2mkVg9glh8Q/m7Ba X+0NCID5spwvBDb/7DsSUbPBNke6oqWIu6T7wslNsMLO5sufrr7NpME376GqHxnD pmZhDduHbmoXHXPpZLgidmsnlWsREIWS5SWjuy8uukw5yOA6g8esfXflCRZAFL8Y XgDs8odo/L1wK7+a0Yh6CdPisqTFzDWwKVztNMgNXVj8/WudtwdzbmSMJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTwkcWQ0YPv1i6YGaW7Qf7KhHghMB8GA1UdIwQY MBaAFCy6NVZptPm5A18FsfuiEe+GlhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzct MzY1YzUxYTVmOWZmLzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzctMzY1YzUxYTVmOWZm LzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURvY6Esy 8xtLUhZot5/Pv9FHxUweqUcPQSEsbONndxo9BQ/5d5MEGpOGnqZS6REceweJoOce OSz0J8sNlvruPHYm2kvssVrGpzm+bYCrm778MBLFcy5wIEG3BgbPgD0u9q6Yx4RP 4KcyMPWUnPSC4saHkXr6/+KXyjBuj1Hb/btwAr3IuMM2nqU+w16LCJvyklejxR2R R5ndr7mwjxc8jMbAyTBe1gfh+I5h5nSjZa80QUzfo4wPED8e70ygBKNYI+s9NsNV d43DZtEU1CELK+ETJ+CaLe/IEv5PIm1U4JgtoAUb9tB7D0sQJUxBaQZ4IlM19ZAY 35V5G+LDHHSb2w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:54 2025 by rpki-client