This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json) Hash identifier: nhNBCNXcyeD2xpJkgEHYNrQSso2VBDlzk4OX23qAvOI= Subject key identifier: 84:8B:E9:82:25:AB:36:33:A1:0D:81:26:25:3C:68:B7:8D:EE:56:9F Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08 Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08 Certificate serial: 019B3EA365AA53D232191A490232C8821EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft Manifest number: 05B6 Signing time: Sun 21 Dec 2025 02:00:54 +0000 Manifest this update: Sun 21 Dec 2025 02:00:54 +0000 Manifest next update: Mon 22 Dec 2025 02:00:54 +0000 Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: 7sDPCTKmOPczvhw1eEYUiZhVlT6rU8cIcA4+r2NdLew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:65:aa:53:d2:32:19:1a:49:02:32:c8:82:1e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08 Validity Not Before: Dec 21 02:00:54 2025 GMT Not After : Dec 22 02:00:54 2025 GMT Subject: CN=848be98225ab3633a10d8126253c68b78dee569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:1d:ea:d1:b0:51:97:37:61:79:44:96:8c: 65:53:0f:6d:52:b1:a5:75:51:fb:94:a2:ae:3b:f0: cd:a0:b1:5e:66:9a:da:86:79:be:3a:dc:f0:a3:a1: 1e:49:21:02:dc:ab:d8:92:65:ed:a6:ed:e9:de:29: f0:16:fa:bf:26:ae:98:22:b2:f6:c9:0d:0a:af:68: ad:f5:4f:fe:e9:0d:b9:c7:22:36:9f:aa:bd:31:cb: 76:ec:69:b1:de:69:d2:a0:a7:e4:8b:51:51:ef:26: 36:8d:9a:91:54:a8:5a:5c:cf:c6:00:a2:84:3b:2e: d6:76:0d:50:f4:dc:f3:5e:cf:ce:11:0c:d7:37:ec: cd:fc:6d:6d:81:d4:45:b1:5c:3e:05:bd:61:2b:ae: 97:e2:d4:28:9e:a5:43:ff:18:ed:cd:ab:66:96:24: bc:b7:93:a6:60:4f:80:2f:c1:72:e3:54:2e:e7:41: dc:6f:ae:eb:2e:21:61:a0:38:0c:0d:08:c9:80:93: 69:b2:ac:4d:4c:b6:69:ce:1c:70:6e:8e:94:8a:9a: 0a:57:98:bc:66:f5:c2:32:a8:95:24:83:ab:50:d3: 6f:36:36:de:0d:95:9e:cc:3c:74:c5:19:ae:90:85: 5f:e1:e9:ad:35:f8:6c:7f:3e:6a:c1:8b:d5:bc:49: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:E9:82:25:AB:36:33:A1:0D:81:26:25:3C:68:B7:8D:EE:56:9F X509v3 Authority Key Identifier: keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ec:f7:b0:c4:ca:d1:cf:73:a9:d3:d4:17:bd:aa:04:23:e8: 50:3c:94:68:df:a3:b2:78:bf:3f:14:80:c9:1a:64:ad:72:ec: 92:c8:34:28:58:87:38:6d:69:d4:6b:40:f3:59:d3:91:69:d6: d9:50:47:c8:d4:ed:6f:00:32:98:32:5c:6b:11:57:5c:c5:30: a5:bc:12:9d:1c:4c:82:84:65:80:c7:9f:c3:0e:1a:08:7c:32: 1f:5e:21:f9:9f:d1:75:49:d0:aa:6c:ba:c1:72:51:b0:ee:b4: b5:e7:4b:31:f2:ba:ae:48:c0:9f:53:18:f0:81:89:be:cb:ab: 66:3a:a8:8b:00:6a:68:8d:9d:6d:2e:1b:bd:27:cb:b7:0b:b0: 94:90:72:42:95:cd:67:95:51:2f:2f:55:02:27:d9:c9:03:ba: 96:75:da:31:32:49:fa:c9:44:64:44:75:47:1a:fa:e7:4f:f0: a8:c9:a9:26:f1:0f:13:74:e4:98:99:0a:a0:0c:24:a2:00:17: c5:d2:49:8a:69:39:73:d5:a7:ed:4e:e6:11:a0:4c:17:e5:53: 5f:2f:2d:34:dc:c4:2a:02:c2:4f:bc:35:d7:29:c2:b4:d7:7e: fd:85:14:c6:5c:b8:69:a6:d0:53:90:ec:cf:8c:e7:32:8a:2a: 8f:9b:17:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2WqU9IyGRpJAjLIgh6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWYwZDM0MDFkMDA4YWE5ZGFhODI4YTQyMzU5YTk1MWY5 NGJkMDgwHhcNMjUxMjIxMDIwMDU0WhcNMjUxMjIyMDIwMDU0WjAzMTEwLwYDVQQD Eyg4NDhiZTk4MjI1YWIzNjMzYTEwZDgxMjYyNTNjNjhiNzhkZWU1NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Eod6tGwUZc3YXlEloxlUw9tUrGl dVH7lKKuO/DNoLFeZprahnm+Otzwo6EeSSEC3KvYkmXtpu3p3inwFvq/Jq6YIrL2 yQ0Kr2it9U/+6Q25xyI2n6q9Mct27Gmx3mnSoKfki1FR7yY2jZqRVKhaXM/GAKKE Oy7Wdg1Q9NzzXs/OEQzXN+zN/G1tgdRFsVw+Bb1hK66X4tQonqVD/xjtzatmliS8 t5OmYE+AL8Fy41Qu50Hcb67rLiFhoDgMDQjJgJNpsqxNTLZpzhxwbo6UipoKV5i8 ZvXCMqiVJIOrUNNvNjbeDZWezDx0xRmukIVf4emtNfhsfz5qwYvVvEl6YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISL6YIlqzYzoQ2BJiU8aLeN7lafMB8GA1UdIwQY MBaAFJafDTQB0AiqnaqCikI1mpUflL0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHA4Tk5BSFFDS3FkcW9LS1FqV2FsUi1VdlFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YThkYTMtYTdhOS00MmIzLThmYjct ODU4NDg3MzU1YmQzLzEvbHA4Tk5BSFFDS3FkcW9LS1FqV2FsUi1VdlFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80YThkYTMtYTdhOS00MmIzLThmYjctODU4NDg3MzU1YmQz LzEvbHA4Tk5BSFFDS3FkcW9LS1FqV2FsUi1VdlFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOz3sMTK 0c9zqdPUF72qBCPoUDyUaN+jsni/PxSAyRpkrXLsksg0KFiHOG1p1GtA81nTkWnW 2VBHyNTtbwAymDJcaxFXXMUwpbwSnRxMgoRlgMefww4aCHwyH14h+Z/RdUnQqmy6 wXJRsO60tedLMfK6rkjAn1MY8IGJvsurZjqoiwBqaI2dbS4bvSfLtwuwlJByQpXN Z5VRLy9VAifZyQO6lnXaMTJJ+slEZER1Rxr650/wqMmpJvEPE3TkmJkKoAwkogAX xdJJimk5c9Wn7U7mEaBMF+VTXy8tNNzEKgLCT7w11ynCtNd+/YUUxly4aabQU5Ds z4znMooqj5sXiw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:01:24 2025 by rpki-client