This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json) Hash identifier: +0mDadXx8J6kJc8w4wHjDMNqrws45YjqILFQddwW0gg= Subject key identifier: 63:28:1E:D2:2B:AC:EB:8B:66:89:A0:4A:94:99:E9:43:89:D7:28:CB Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e Certificate serial: 019AF208AA4732B136EE2DBB08B71C7B3A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft Manifest number: 05E3 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: GoXndqK5BtdjjKk+p6ZdFTfqbnppQScfWwB09sG+kCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:aa:47:32:b1:36:ee:2d:bb:08:b7:1c:7b:3a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=63281ed22baceb8b6689a04a9499e94389d728cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:26:96:7f:4d:1c:8d:65:67:2e:49:fc:94: df:4a:da:fc:b9:32:df:1e:60:d6:20:44:78:06:4b: da:09:b3:d2:1c:06:39:b3:33:d8:6d:6e:0c:d6:f4: a4:83:1e:61:ff:11:82:39:08:51:4b:ee:22:14:4b: 2c:e3:9c:27:ed:7d:d9:24:f1:4a:23:f6:0c:b8:fb: 93:3e:8d:da:af:db:c3:dd:75:81:82:34:9e:1d:ee: ca:82:c8:bc:73:39:e2:4b:65:53:85:29:43:88:49: 5a:63:9b:6d:49:41:d6:60:f2:68:84:e8:9c:3b:5f: 84:08:53:32:65:ac:55:aa:28:57:b0:19:41:1a:2e: 03:21:64:31:b2:6c:75:9a:2e:24:7b:f0:3f:58:41: 73:a6:ee:7d:c5:11:aa:e3:4e:dc:2e:11:98:4a:c2: 4a:78:66:f4:fc:54:c8:39:04:72:7b:31:38:6f:84: 9c:9e:e4:53:ef:c1:41:f7:0f:2c:ce:64:18:8b:14: 21:0e:1f:af:c8:35:2a:90:d9:dd:ca:36:d8:cd:fa: 5c:9b:f3:7e:61:95:5b:c3:7d:68:45:86:9a:62:ec: a6:0d:e4:da:f8:c7:5c:bb:80:52:94:b1:1b:93:75: 0d:a7:b3:85:37:01:d8:26:15:c7:41:6d:cd:ba:4f: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:1E:D2:2B:AC:EB:8B:66:89:A0:4A:94:99:E9:43:89:D7:28:CB X509v3 Authority Key Identifier: keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:04:7c:18:49:c9:b7:29:7a:14:c9:6a:49:0e:37:9b:3d:16: 6e:73:4d:ef:ed:21:cf:7b:60:14:1b:ac:c8:b4:c3:9b:71:91: b7:4d:a5:fb:86:f0:69:8d:cd:3d:22:36:e9:fa:28:c9:c5:9d: 61:1c:64:7f:17:61:db:78:74:6c:26:5f:a0:a1:11:20:6e:29: 39:d0:db:44:ef:25:6e:47:d7:2f:3a:d9:80:19:ff:fc:54:b4: a5:aa:e5:9c:74:0c:ef:5c:36:ef:8f:e6:8d:1c:c5:4d:71:d9: f5:8d:0d:90:f0:10:f6:eb:7c:1e:a4:4b:d7:b9:9e:75:32:17: 71:09:14:99:a0:dd:5a:e9:ce:fd:13:94:c5:c5:d1:bb:1e:90: d8:ab:81:ba:fc:81:cf:49:62:ba:20:2f:18:85:82:a3:d2:f3: 8b:8c:97:f7:1c:3f:2a:97:9b:3d:d6:bf:d4:27:90:4e:0d:31: 13:e4:fc:a4:f1:4a:4c:6f:54:2a:a2:db:b9:4c:ff:49:27:8a: 6f:d2:ee:da:ae:53:bb:9d:ec:c9:8c:8f:41:c5:3c:32:78:66: ac:3c:63:ce:c2:05:2f:65:de:6b:1a:1f:86:d0:72:92:a6:ca: 6d:65:9b:ff:b5:e7:2e:f6:6e:00:c9:e7:08:3d:58:26:97:a2: 35:dd:21:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKpHMrE27i27CLccezphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjEwYzg3NTBjMzM3ZGYwNDc5YzVhMGViNWI3OGI0OWEx N2ZmM2UwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD Eyg2MzI4MWVkMjJiYWNlYjhiNjY4OWEwNGE5NDk5ZTk0Mzg5ZDcyOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvcmln9NHI1lZy5J/JTfStr8uTLf HmDWIER4BkvaCbPSHAY5szPYbW4M1vSkgx5h/xGCOQhRS+4iFEss45wn7X3ZJPFK I/YMuPuTPo3ar9vD3XWBgjSeHe7Kgsi8czniS2VThSlDiElaY5ttSUHWYPJohOic O1+ECFMyZaxVqihXsBlBGi4DIWQxsmx1mi4ke/A/WEFzpu59xRGq407cLhGYSsJK eGb0/FTIOQRyezE4b4ScnuRT78FB9w8szmQYixQhDh+vyDUqkNndyjbYzfpcm/N+ YZVbw31oRYaaYuymDeTa+Mdcu4BSlLEbk3UNp7OFNwHYJhXHQW3Nuk9I+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMoHtIrrOuLZomgSpSZ6UOJ1yjLMB8GA1UdIwQY MBaAFJRhDIdQwzffBHnFoOtbeLSaF/8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUt YTJlZmYzZjFhY2Q1LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUtYTJlZmYzZjFhY2Q1 LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQR8GEnJ tyl6FMlqSQ43mz0WbnNN7+0hz3tgFBusyLTDm3GRt02l+4bwaY3NPSI26fooycWd YRxkfxdh23h0bCZfoKERIG4pOdDbRO8lbkfXLzrZgBn//FS0parlnHQM71w274/m jRzFTXHZ9Y0NkPAQ9ut8HqRL17medTIXcQkUmaDdWunO/ROUxcXRux6Q2KuBuvyB z0liuiAvGIWCo9Lzi4yX9xw/KpebPda/1CeQTg0xE+T8pPFKTG9UKqLbuUz/SSeK b9Lu2q5Tu53syYyPQcU8MnhmrDxjzsIFL2XeaxofhtBykqbKbWWb/7XnLvZuAMnn CD1YJpeiNd0hXw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:45 2025 by rpki-client