This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json) Hash identifier: szEcmCPGZ4Kli+kNtwH0VHGMr/f5FfhpaQFoSMZ8KME= Subject key identifier: 2B:86:9B:DD:5C:8F:66:C6:1E:8E:06:7E:DC:19:54:DD:60:F0:F7:F9 Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab Certificate serial: 019AF577FA0F5975A0E18719D0679C966150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft Manifest number: DE Signing time: Sat 06 Dec 2025 21:01:11 +0000 Manifest this update: Sat 06 Dec 2025 21:01:11 +0000 Manifest next update: Sun 07 Dec 2025 21:01:11 +0000 Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: fpExaXXL3bu3Vc7UGuTX+JtxWF+i/2FPlf7Ljc9nVfg=) 2: qZAKutQPBhqbC3w0uTfHNEl4Oes.roa (hash: WSklXQH6CKCwMHKCLxLhSKAUiLi3+4CRfzgpAwPPYgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fa:0f:59:75:a0:e1:87:19:d0:67:9c:96:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab Validity Not Before: Dec 6 21:01:11 2025 GMT Not After : Dec 7 21:01:11 2025 GMT Subject: CN=2b869bdd5c8f66c61e8e067edc1954dd60f0f7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:36:e9:e8:c4:15:76:54:07:5e:94:14:a0:ad: 68:42:02:d6:37:6f:c0:7c:ae:a3:97:40:1d:b8:07: 47:e6:97:35:3e:d0:77:6e:f3:f3:3b:0d:fc:73:ff: b0:40:fc:1a:78:8f:e5:54:92:7f:bc:3d:e0:5f:46: d2:d0:05:fe:84:ef:78:c0:61:ba:4d:07:bc:00:6c: 21:9b:3e:8d:24:0a:73:31:f8:d7:53:17:5e:d9:d0: 52:1a:3d:7a:22:a8:0c:cc:6b:91:ea:08:6c:f7:e4: f9:21:01:22:c1:db:36:61:08:69:ee:29:e8:1a:f7: f7:52:2e:41:13:ec:65:c4:57:ca:98:f8:ed:65:c2: 85:96:66:f2:d4:14:ab:50:22:fc:46:00:3b:d8:bf: 2e:e3:60:a2:1d:29:57:d1:67:29:ff:11:06:7b:71: 41:43:7d:18:7a:84:f7:86:5a:58:9b:7e:eb:2c:d3: c3:b3:31:12:ec:db:dc:de:b0:6f:85:ac:ab:3d:ab: c3:28:66:3f:55:e9:6b:c0:26:2d:d2:31:d8:dd:18: 5f:24:da:c5:f9:c9:42:46:2c:17:39:3f:e5:c3:73: 7b:cb:7c:44:3c:67:a9:72:6b:c4:89:cc:97:55:ae: 27:06:f3:7c:60:e5:fe:a7:4f:26:44:94:82:27:16: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:9B:DD:5C:8F:66:C6:1E:8E:06:7E:DC:19:54:DD:60:F0:F7:F9 X509v3 Authority Key Identifier: keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d9:e3:f3:ff:7c:db:c0:65:c5:8d:7f:dd:0a:93:81:2c:07: 0f:97:11:7f:60:c6:c9:bc:9e:9f:98:eb:ba:46:21:c4:b8:4c: 4c:66:06:2d:2b:f9:e6:a9:4e:8f:e4:92:f7:68:b0:d1:97:ae: ab:ac:f7:e5:5d:a5:fa:e5:11:ec:da:6f:5c:81:d4:b8:6e:a2: 5d:f1:39:c0:eb:6c:c9:6a:8a:fa:25:36:64:41:20:e0:0e:de: 21:01:d3:0d:33:d4:d8:70:35:35:0c:a6:02:06:e3:41:93:78: 11:f3:0c:87:64:0c:1f:89:7d:b4:06:8b:d6:66:e8:fa:54:ad: 55:5c:ce:8a:29:fb:06:b7:31:bf:ba:b3:48:eb:51:1d:f5:b1: aa:61:b4:b7:0e:6e:50:b9:00:5f:98:f2:0e:fb:0f:92:e3:fb: 4e:14:ef:01:b4:0a:8f:05:03:aa:66:e3:6b:cf:0b:4c:e3:ec: 27:45:4a:53:df:6e:66:b2:ce:e9:00:34:89:a8:2b:a1:5e:64: 4c:98:0d:99:fc:f3:07:4b:39:f8:67:9e:73:bf:6a:ab:1c:4e: 33:9b:04:be:e1:fd:00:9b:45:bb:0b:f4:e8:cf:fa:a4:db:0f: a9:37:0e:6f:9e:f0:ca:c8:1a:fc:ed:25:6b:b1:ca:31:51:e0: 8e:b1:b3:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/oPWXWg4YcZ0GeclmFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzNjYjM4NzVkOTEyMTkyNjFiM2FlOTAxMDgxMzExYTVh MDcxYWIwHhcNMjUxMjA2MjEwMTExWhcNMjUxMjA3MjEwMTExWjAzMTEwLwYDVQQD EygyYjg2OWJkZDVjOGY2NmM2MWU4ZTA2N2VkYzE5NTRkZDYwZjBmN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzbp6MQVdlQHXpQUoK1oQgLWN2/A fK6jl0AduAdH5pc1PtB3bvPzOw38c/+wQPwaeI/lVJJ/vD3gX0bS0AX+hO94wGG6 TQe8AGwhmz6NJApzMfjXUxde2dBSGj16IqgMzGuR6ghs9+T5IQEiwds2YQhp7ino Gvf3Ui5BE+xlxFfKmPjtZcKFlmby1BSrUCL8RgA72L8u42CiHSlX0Wcp/xEGe3FB Q30YeoT3hlpYm37rLNPDszES7Nvc3rBvhayrPavDKGY/VelrwCYt0jHY3RhfJNrF +clCRiwXOT/lw3N7y3xEPGepcmvEicyXVa4nBvN8YOX+p08mRJSCJxYySwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuGm91cj2bGHo4GftwZVN1g8Pf5MB8GA1UdIwQY MBaAFC5zyzh12RIZJhs66QEIExGloHGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUt ZjRhZmZjODAyOGYzLzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUtZjRhZmZjODAyOGYz LzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9nj8/98 28BlxY1/3QqTgSwHD5cRf2DGybyen5jrukYhxLhMTGYGLSv55qlOj+SS92iw0Zeu q6z35V2l+uUR7NpvXIHUuG6iXfE5wOtsyWqK+iU2ZEEg4A7eIQHTDTPU2HA1NQym AgbjQZN4EfMMh2QMH4l9tAaL1mbo+lStVVzOiin7Brcxv7qzSOtRHfWxqmG0tw5u ULkAX5jyDvsPkuP7ThTvAbQKjwUDqmbja88LTOPsJ0VKU99uZrLO6QA0iagroV5k TJgNmfzzB0s5+Geec79qqxxOM5sEvuH9AJtFuwv06M/6pNsPqTcOb57wysga/O0l a7HKMVHgjrGz7Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:18 2025 by rpki-client