This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft File: Lamd3TmQcoABaWYXi_aOXEY8LrY.mft (raw, json) Hash identifier: b1RdcGQpPXzWNvx1FXSdfWkCO0WxuDWQMUT9vo+7Xzo= Subject key identifier: EE:72:1D:D2:12:87:6C:DE:6D:DB:DB:BB:BF:E9:77:0B:9C:FD:2D:BD Authority key identifier: 2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6 Certificate issuer: /CN=2da99ddd39907280016966178bf68e5c463c2eb6 Certificate serial: 019AF6F94C4CE58E76CF839FAD35D7015878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft Manifest number: 0218 Signing time: Sun 07 Dec 2025 04:02:04 +0000 Manifest this update: Sun 07 Dec 2025 04:02:04 +0000 Manifest next update: Mon 08 Dec 2025 04:02:04 +0000 Files and hashes: 1: Lamd3TmQcoABaWYXi_aOXEY8LrY.crl (hash: ZHUR5CWIUWzxZsBTAKHYfgi44ppltZ8uAl9J0vvVkE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:4c:4c:e5:8e:76:cf:83:9f:ad:35:d7:01:58:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da99ddd39907280016966178bf68e5c463c2eb6 Validity Not Before: Dec 7 04:02:04 2025 GMT Not After : Dec 8 04:02:04 2025 GMT Subject: CN=ee721dd212876cde6ddbdbbbbfe9770b9cfd2dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:4a:9c:a6:8a:3d:23:ec:8d:61:c6:00:d5: 9c:73:de:aa:17:d7:6b:20:56:63:b8:3b:90:c3:98: 43:ee:5b:00:a0:7d:6b:b7:9d:27:29:69:62:c0:53: f5:51:14:22:3f:89:c0:67:6e:6d:07:e9:73:13:0b: 71:24:43:a8:ef:7d:d6:11:a3:eb:6c:7e:13:25:53: ae:fc:14:20:49:c1:46:92:a6:e4:2a:62:23:4e:9e: 0f:74:70:a7:5e:5d:06:11:9d:b3:f9:eb:74:7b:15: e7:12:65:3e:14:60:d3:27:2b:14:4e:e2:26:f4:d8: fa:a5:6f:30:55:b8:9b:50:b6:01:1e:c3:7c:02:14: 9f:7e:22:a7:50:aa:d5:a0:60:6f:9e:26:e5:85:51: ef:35:a2:ee:46:b2:fd:03:da:30:0c:e9:c0:e3:5c: ae:fd:11:da:48:28:d3:94:c1:b7:e6:93:2d:58:d1: e4:19:09:39:77:3e:e8:98:95:cb:a9:e2:7d:e0:1a: d4:17:33:b6:03:ab:2d:4e:bb:0d:eb:34:04:d6:d3: 67:9f:a3:13:c3:f5:9d:48:22:fb:28:99:0b:75:c9: 1e:e3:ff:4d:7f:cd:e2:57:fa:b3:40:f0:89:f6:81: 88:cc:50:e2:9e:66:a3:e2:b5:f8:7c:a2:94:9f:d5: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:1D:D2:12:87:6C:DE:6D:DB:DB:BB:BF:E9:77:0B:9C:FD:2D:BD X509v3 Authority Key Identifier: keyid:2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:36:08:3f:8d:cc:85:6e:07:97:4c:77:6b:69:89:eb:0e:78: 79:e4:2a:47:9a:74:c4:6d:7a:79:29:c4:d8:6c:24:18:1b:3c: 75:d4:d3:45:e5:3e:29:d9:f3:2f:32:f4:77:8a:60:cc:86:1b: 50:30:e2:3c:ce:5e:87:72:83:0d:a9:04:14:ac:9a:c1:93:ef: f8:66:76:09:5b:30:68:41:31:5e:81:9e:b0:0a:d4:5e:bc:9c: 6f:e4:fa:e6:fb:ec:d9:0e:3d:e9:e5:44:eb:2d:c7:0e:ee:89: 2d:fd:a5:17:17:ca:a6:ff:64:7a:8f:43:19:de:11:05:a4:fe: 43:ab:49:98:05:10:7c:4a:d5:3c:b1:8d:dd:6a:a4:e6:81:a3: 79:84:d0:68:79:86:82:2c:c2:06:f5:b2:84:47:58:69:2e:fa: aa:84:09:11:79:4c:0d:e5:7c:7a:cb:a9:bc:41:04:bd:91:85: f2:18:3a:4f:19:48:89:a7:e8:09:f5:eb:fc:b9:19:90:3d:f9: 7a:9d:46:65:a2:84:13:ad:25:d3:06:b9:56:d2:f8:11:4c:db: 18:b2:1c:3d:d0:f6:71:6d:4e:f4:bb:94:90:a3:76:ed:90:e3: d6:8f:e4:ba:fd:d8:48:40:57:3f:9e:df:08:7a:3e:55:ae:22: 33:2e:a0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+UxM5Y52z4OfrTXXAVh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYTk5ZGRkMzk5MDcyODAwMTY5NjYxNzhiZjY4ZTVjNDYz YzJlYjYwHhcNMjUxMjA3MDQwMjA0WhcNMjUxMjA4MDQwMjA0WjAzMTEwLwYDVQQD EyhlZTcyMWRkMjEyODc2Y2RlNmRkYmRiYmJiZmU5NzcwYjljZmQyZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFVKnKaKPSPsjWHGANWcc96qF9dr IFZjuDuQw5hD7lsAoH1rt50nKWliwFP1URQiP4nAZ25tB+lzEwtxJEOo733WEaPr bH4TJVOu/BQgScFGkqbkKmIjTp4PdHCnXl0GEZ2z+et0exXnEmU+FGDTJysUTuIm 9Nj6pW8wVbibULYBHsN8AhSffiKnUKrVoGBvniblhVHvNaLuRrL9A9owDOnA41yu /RHaSCjTlMG35pMtWNHkGQk5dz7omJXLqeJ94BrUFzO2A6stTrsN6zQE1tNnn6MT w/WdSCL7KJkLdcke4/9Nf83iV/qzQPCJ9oGIzFDinmaj4rX4fKKUn9UtkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5yHdISh2zebdvbu7/pdwuc/S29MB8GA1UdIwQY MBaAFC2pnd05kHKAAWlmF4v2jlxGPC62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGFtZDNUbVFjb0FCYVdZWGlfYU9YRVk4THJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jMDdiNzgtZGFlZC00OTkxLTlkYjct YmVjMWE5MmEyZjlmLzEvTGFtZDNUbVFjb0FCYVdZWGlfYU9YRVk4THJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jMDdiNzgtZGFlZC00OTkxLTlkYjctYmVjMWE5MmEyZjlm LzEvTGFtZDNUbVFjb0FCYVdZWGlfYU9YRVk4THJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTYIP43M hW4Hl0x3a2mJ6w54eeQqR5p0xG16eSnE2GwkGBs8ddTTReU+KdnzLzL0d4pgzIYb UDDiPM5eh3KDDakEFKyawZPv+GZ2CVswaEExXoGesArUXrycb+T65vvs2Q496eVE 6y3HDu6JLf2lFxfKpv9keo9DGd4RBaT+Q6tJmAUQfErVPLGN3Wqk5oGjeYTQaHmG gizCBvWyhEdYaS76qoQJEXlMDeV8esupvEEEvZGF8hg6TxlIiafoCfXr/LkZkD35 ep1GZaKEE60l0wa5VtL4EUzbGLIcPdD2cW1O9LuUkKN27ZDj1o/kuv3YSEBXP57f CHo+Va4iMy6gdQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:53:17 2025 by rpki-client