This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json) Hash identifier: syPfKNYjrMJNO/5tOlRi7BjTd+Oslr3wpJs3jIX8FTE= Subject key identifier: 76:12:64:A1:B5:31:30:A0:EF:12:06:C6:C1:BF:56:20:29:1A:1D:D1 Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31 Certificate serial: 019AF19B27727B4A04C537F8B1CD4F1DB3CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft Manifest number: 0D7D Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: 3BUfoV9KRofa3acEOVlmnZZRK328sRAHG5KAhZEglek=) 2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:27:72:7b:4a:04:c5:37:f8:b1:cd:4f:1d:b3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=761264a1b53130a0ef1206c6c1bf5620291a1dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:9c:13:52:41:be:cc:77:28:d4:d5:0e:5e: a7:06:aa:64:7b:76:23:72:5f:52:a2:0f:de:d7:16: a4:b0:99:62:ba:4d:46:49:25:89:c8:b4:2b:ab:0c: 29:2d:bd:15:4d:99:bb:7f:46:9e:3c:87:ab:30:14: 9f:f9:13:d9:8a:80:2f:a3:0d:10:18:83:84:b7:d2: d4:7f:9a:a1:b2:c6:6f:d2:9b:12:be:22:eb:12:d3: da:32:06:b2:8f:a6:54:96:1b:1a:51:b1:6d:45:6c: 07:bd:10:af:86:8c:c6:0d:28:b1:63:89:dc:e7:51: 43:ba:7a:8e:43:53:13:dc:41:70:b5:a0:0b:60:71: 7c:38:18:0d:79:0f:1b:88:f5:f8:aa:6a:53:bc:ed: 1e:b1:da:39:db:5e:db:12:2f:25:33:aa:28:7a:0f: 3e:85:f0:cc:0b:40:aa:50:52:33:6c:57:f2:10:c9: 7b:73:fd:8c:03:e7:6f:c3:c2:f2:0d:3e:2b:90:15: 97:3e:c2:4c:10:ba:00:8b:c4:a7:1e:98:c8:0d:1f: ba:03:0e:7a:db:c7:98:bf:98:cb:a4:35:8e:f3:e5: dc:ed:b9:87:b6:7a:32:92:c1:23:b6:e7:31:71:b6: 57:ec:7c:9b:ee:c1:e8:cf:10:b5:a9:83:b3:d0:95: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:12:64:A1:B5:31:30:A0:EF:12:06:C6:C1:BF:56:20:29:1A:1D:D1 X509v3 Authority Key Identifier: keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:79:35:52:d0:d7:35:47:48:2b:63:ab:80:43:95:c2:c6:87: 4d:91:c3:bf:12:77:df:79:24:bd:99:a4:23:a3:56:c3:2f:02: ea:26:48:78:87:e0:88:b6:c6:f7:bf:e2:dc:74:83:02:a8:e5: ab:55:0a:c0:33:b0:f4:f8:73:c9:39:2f:29:52:56:3f:b6:54: 5b:eb:08:91:2a:d8:83:22:3d:3f:83:e8:07:af:19:d0:d2:a9: 97:96:03:09:de:a6:4a:37:78:3f:ea:53:28:68:f1:07:77:b9: 38:eb:34:5d:94:52:68:c3:dc:cc:fd:ed:50:2a:df:dc:0d:55: 97:cf:da:eb:92:ed:ea:81:e2:35:40:8a:71:90:96:1a:f1:3c: 28:00:39:58:fc:9d:01:f7:95:9b:0b:03:42:11:37:c4:f8:98: 72:bc:7f:3e:82:1a:20:f1:9c:60:01:40:00:1e:00:12:e6:98: 14:67:c4:b2:84:5f:d6:ad:00:f5:ad:4d:7a:00:f9:b5:c6:6d: 9f:54:47:4b:e4:cd:90:1a:75:f5:85:4a:e8:fd:ea:89:4d:f6: 7f:c4:62:e9:d0:69:78:32:40:ef:b7:0a:13:21:aa:a1:9a:de: e5:ab:a9:6a:ef:0f:9c:c3:bc:d3:f0:1c:69:1f:7b:36:c6:c5: b2:69:95:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmydye0oExTf4sc1PHbPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYTc2MjZkNjAwZGFmNzU5Mzc2YTY1MDdlMWQ2ODQzODY5 OTJkMzEwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg3NjEyNjRhMWI1MzEzMGEwZWYxMjA2YzZjMWJmNTYyMDI5MWExZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU2cE1JBvsx3KNTVDl6nBqpke3Yj cl9Sog/e1xaksJliuk1GSSWJyLQrqwwpLb0VTZm7f0aePIerMBSf+RPZioAvow0Q GIOEt9LUf5qhssZv0psSviLrEtPaMgayj6ZUlhsaUbFtRWwHvRCvhozGDSixY4nc 51FDunqOQ1MT3EFwtaALYHF8OBgNeQ8biPX4qmpTvO0esdo5217bEi8lM6ooeg8+ hfDMC0CqUFIzbFfyEMl7c/2MA+dvw8LyDT4rkBWXPsJMELoAi8SnHpjIDR+6Aw56 28eYv5jLpDWO8+Xc7bmHtnoyksEjtucxcbZX7Hyb7sHozxC1qYOz0JUzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYSZKG1MTCg7xIGxsG/ViApGh3RMB8GA1UdIwQY MBaAFC6nYm1gDa91k3amUH4daEOGmS0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMt NmU1NjIxMmNkZjVjLzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMtNmU1NjIxMmNkZjVj LzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXk1UtDX NUdIK2OrgEOVwsaHTZHDvxJ333kkvZmkI6NWwy8C6iZIeIfgiLbG97/i3HSDAqjl q1UKwDOw9PhzyTkvKVJWP7ZUW+sIkSrYgyI9P4PoB68Z0NKpl5YDCd6mSjd4P+pT KGjxB3e5OOs0XZRSaMPczP3tUCrf3A1Vl8/a65Lt6oHiNUCKcZCWGvE8KAA5WPyd AfeVmwsDQhE3xPiYcrx/PoIaIPGcYAFAAB4AEuaYFGfEsoRf1q0A9a1NegD5tcZt n1RHS+TNkBp19YVK6P3qiU32f8Ri6dBpeDJA77cKEyGqoZre5aupau8PnMO80/Ac aR97NsbFsmmV5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:07 2025 by rpki-client