This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json) Hash identifier: yJBoZewpqBodxFelC4vqotgJWSGu4F0As6gv4SIVsW0= Subject key identifier: 06:E8:AA:F5:9A:61:86:13:4B:F0:EA:5C:8D:51:68:9E:32:C6:1A:ED Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53 Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353 Certificate serial: 019AF1D257C5A7F0A488B355CAD79E36DC1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=) 2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: 0jIoqXGdm4zt0g/iWBJB9D78l2lYP/TGxBoXNFCDRnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:57:c5:a7:f0:a4:88:b3:55:ca:d7:9e:36:dc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=06e8aaf59a6186134bf0ea5c8d51689e32c61aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:12:76:f0:71:eb:90:6a:9f:d3:45:75:b0: fa:a7:b9:b8:95:f3:c7:de:5c:74:54:a7:99:7d:66: 06:d5:64:ea:e8:19:99:e7:56:6b:cf:6a:ac:1a:6e: f4:1f:d6:6d:0d:89:ca:91:97:99:f5:44:e2:86:21: c0:8a:4f:6e:43:80:56:11:f5:2c:2b:ef:6d:00:3e: d7:cb:5e:5d:b3:63:a9:64:79:0d:45:30:c9:38:8f: b3:97:67:35:98:d2:6d:d4:5b:e9:44:f2:57:b8:92: 6b:ea:e1:8b:7b:5d:fe:59:46:19:9f:2e:1f:bf:29: fc:1c:36:36:07:b7:c7:9f:55:c0:b0:66:3f:b8:80: 29:20:ce:0f:74:ac:22:95:93:15:78:08:7d:5f:bb: 19:95:ff:b4:a6:6d:d4:71:a8:85:ea:e4:56:6b:b2: 70:bd:c2:36:08:d7:21:d1:8b:00:6b:96:36:15:c6: a1:ba:91:54:3f:09:0d:67:83:76:64:35:4f:c7:f5: 38:85:4f:7c:08:f5:1d:54:39:9d:f7:98:a4:bf:3d: 75:c5:6a:7f:f9:8c:13:cd:ba:27:18:6e:47:ff:cf: 83:ae:98:65:b1:ba:81:7a:72:9f:f6:e0:90:2f:42: b4:19:7d:ee:ed:04:fe:f0:4f:87:dd:f8:c8:69:ea: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E8:AA:F5:9A:61:86:13:4B:F0:EA:5C:8D:51:68:9E:32:C6:1A:ED X509v3 Authority Key Identifier: keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2c:ec:95:19:98:0c:26:ae:2d:37:8b:b5:06:fc:a1:42:94: c9:c2:ef:d7:b3:c6:15:48:d5:db:e0:4b:78:c0:df:7d:fe:6e: 15:63:91:c0:36:28:05:3b:6c:cc:2d:65:e4:cc:48:48:a4:70: 75:a5:29:d3:26:67:53:61:a4:98:6b:bb:c4:b1:12:1c:78:50: 03:56:d0:e9:8a:95:66:b6:89:d7:fe:7c:1c:30:9f:b0:d1:5a: e9:e6:e5:1f:b8:f3:76:e7:d3:19:d9:3f:2d:0c:fa:df:5d:b8: a2:45:be:00:67:ab:b4:bc:41:4c:06:05:db:9f:65:38:e5:b6: 42:fe:4b:01:a9:75:6b:f0:1f:51:e5:21:94:70:37:18:a8:09: 35:81:8d:c2:af:52:13:ed:b5:60:ce:06:4d:8c:2a:6e:13:64: c4:e2:1d:a1:37:0c:f8:c9:8c:22:3c:6b:2d:dc:3e:a1:b8:cd: 13:32:35:a7:06:d9:35:c6:5f:10:b0:3c:93:69:27:4c:f7:22: de:6d:7b:48:67:aa:5a:e3:ff:07:98:d3:63:72:56:a3:4f:a0: 2b:61:53:32:a4:97:1b:b9:81:08:20:1e:98:37:7b:d0:f1:8d: f3:e3:7d:55:80:a9:1e:e6:a1:87:47:0d:df:4e:e5:97:a5:e5: 91:a1:11:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lfFp/CkiLNVyteeNtwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmQyMzViZmQyYmI3N2Q5ODg2YjE0Y2IxMGRjNDljNDIw ODIzNTMwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EygwNmU4YWFmNTlhNjE4NjEzNGJmMGVhNWM4ZDUxNjg5ZTMyYzYxYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KcSdvBx65Bqn9NFdbD6p7m4lfPH 3lx0VKeZfWYG1WTq6BmZ51Zrz2qsGm70H9ZtDYnKkZeZ9UTihiHAik9uQ4BWEfUs K+9tAD7Xy15ds2OpZHkNRTDJOI+zl2c1mNJt1FvpRPJXuJJr6uGLe13+WUYZny4f vyn8HDY2B7fHn1XAsGY/uIApIM4PdKwilZMVeAh9X7sZlf+0pm3UcaiF6uRWa7Jw vcI2CNch0YsAa5Y2FcahupFUPwkNZ4N2ZDVPx/U4hU98CPUdVDmd95ikvz11xWp/ +YwTzbonGG5H/8+DrphlsbqBenKf9uCQL0K0GX3u7QT+8E+H3fjIaeq1pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAboqvWaYYYTS/DqXI1RaJ4yxhrtMB8GA1UdIwQY MBaAFC5tI1v9K7d9mIaxTLENxJxCCCNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUt MWU5ODQ4Y2IxNzQ1LzEvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUtMWU5ODQ4Y2IxNzQ1 LzEvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnizslRmY DCauLTeLtQb8oUKUycLv17PGFUjV2+BLeMDfff5uFWORwDYoBTtszC1l5MxISKRw daUp0yZnU2GkmGu7xLESHHhQA1bQ6YqVZraJ1/58HDCfsNFa6eblH7jzdufTGdk/ LQz63124okW+AGertLxBTAYF259lOOW2Qv5LAal1a/AfUeUhlHA3GKgJNYGNwq9S E+21YM4GTYwqbhNkxOIdoTcM+MmMIjxrLdw+objNEzI1pwbZNcZfELA8k2knTPci 3m17SGeqWuP/B5jTY3JWo0+gK2FTMqSXG7mBCCAemDd70PGN8+N9VYCpHuahh0cN 307ll6XlkaERFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:24 2025 by rpki-client