This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json) Hash identifier: dY4JDaUER5phxI4yWu7nvYNUxCCOqM2I3WevyxtbHU4= Subject key identifier: B9:16:32:C9:EA:A7:3F:CB:80:89:E0:AB:3A:A5:10:9F:2B:F9:31:7A Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94 Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94 Certificate serial: 019AF46582814E25B449318DF16D49644988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft Manifest number: 0A22 Signing time: Sat 06 Dec 2025 16:01:24 +0000 Manifest this update: Sat 06 Dec 2025 16:01:24 +0000 Manifest next update: Sun 07 Dec 2025 16:01:24 +0000 Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: txLjNJjGgTTFPbADOJ63gSkgEaJ57Jh/zfv8arwUrAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:82:81:4e:25:b4:49:31:8d:f1:6d:49:64:49:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94 Validity Not Before: Dec 6 16:01:24 2025 GMT Not After : Dec 7 16:01:24 2025 GMT Subject: CN=b91632c9eaa73fcb8089e0ab3aa5109f2bf9317a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:63:91:af:bf:77:e3:de:15:22:d2:17:e0: 02:6d:e4:71:85:21:95:39:b8:7e:3b:35:19:d4:0e: a6:72:5c:d9:13:12:97:89:8c:94:cf:9b:96:2f:d7: 22:b9:6a:af:97:de:0a:c3:9b:d4:d5:67:cc:bc:29: f5:78:eb:3e:55:65:09:23:d6:3f:7d:dd:f1:79:bd: 2e:cf:28:91:85:b7:63:a5:fe:b0:ac:5c:6d:a9:55: 5c:47:8a:62:29:9c:a5:39:ac:c4:19:b7:a9:cc:48: f6:46:91:51:43:df:46:e2:38:2b:4c:b6:52:45:d9: 1b:b4:75:4e:3d:7a:05:ab:c3:98:c9:8c:d2:c0:5f: d5:54:d7:d3:9d:cd:a0:d5:02:e2:13:f7:62:20:f8: 54:d5:2f:ad:66:8f:04:67:a4:af:f8:b4:f7:77:ac: 65:86:2a:d2:5a:b2:84:4b:70:b4:c3:c5:72:57:0e: df:ef:09:77:21:ac:bc:2c:44:dc:98:a5:f1:97:20: 21:7b:17:75:40:ad:25:de:73:bd:e8:bf:79:96:6c: ca:62:bf:5d:4d:8c:f0:82:25:c5:38:f3:33:87:dd: 51:37:31:1a:6a:17:c2:a4:9b:06:86:a6:cb:71:7a: a5:3f:76:64:0c:b2:c5:de:24:ae:df:74:25:e8:68: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:16:32:C9:EA:A7:3F:CB:80:89:E0:AB:3A:A5:10:9F:2B:F9:31:7A X509v3 Authority Key Identifier: keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:be:7a:cb:84:60:1a:af:9e:de:87:75:3b:3b:9d:e7:15:1e: 40:a3:21:6f:52:9d:94:fa:ac:ed:16:09:80:c4:ea:f9:ef:6f: 7e:25:19:20:1e:7c:65:d4:3d:fa:e5:da:40:c9:e3:08:2d:63: cb:50:d5:c4:44:e4:b1:3d:e6:85:7f:4b:2d:4b:ca:4b:81:9f: 5b:25:27:6e:67:2d:73:fa:c6:6d:db:b4:6c:76:d3:ff:94:0a: da:cb:b6:35:f9:14:77:17:7c:6d:45:cf:47:31:69:69:f0:0c: 07:5b:dc:04:25:a0:ca:6a:23:7f:05:36:0d:5f:ad:5e:06:64: c6:70:5d:b3:e5:fc:fa:af:2c:0b:56:c9:da:9c:c1:39:dc:58: ac:96:c9:3b:db:98:32:95:7a:ca:c0:66:d6:d4:3d:6c:d2:a2: ed:dd:2e:c3:dc:8d:b7:5a:86:fc:bd:db:05:e7:9d:98:0e:0f: 86:53:8b:50:2c:34:c8:ca:3e:50:32:62:7c:a8:5d:29:68:cf: 6c:c6:49:9a:2e:6e:f3:1a:2a:be:ec:e2:10:9c:e5:58:b4:1f: 90:a0:a9:13:be:5c:06:8f:3d:5e:b7:bc:a6:f6:49:06:60:e1: 34:d1:67:ea:07:08:37:74:10:60:19:2c:16:3b:8d:e7:b6:ea: 81:e2:be:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYKBTiW0STGN8W1JZEmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjlkMzUwNmI3N2MxYWVmNWIxMzcwZGFhMmJiNGJjZTM4 MDZjOTQwHhcNMjUxMjA2MTYwMTI0WhcNMjUxMjA3MTYwMTI0WjAzMTEwLwYDVQQD EyhiOTE2MzJjOWVhYTczZmNiODA4OWUwYWIzYWE1MTA5ZjJiZjkzMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPJjka+/d+PeFSLSF+ACbeRxhSGV Obh+OzUZ1A6mclzZExKXiYyUz5uWL9ciuWqvl94Kw5vU1WfMvCn1eOs+VWUJI9Y/ fd3xeb0uzyiRhbdjpf6wrFxtqVVcR4piKZylOazEGbepzEj2RpFRQ99G4jgrTLZS RdkbtHVOPXoFq8OYyYzSwF/VVNfTnc2g1QLiE/diIPhU1S+tZo8EZ6Sv+LT3d6xl hirSWrKES3C0w8VyVw7f7wl3Iay8LETcmKXxlyAhexd1QK0l3nO96L95lmzKYr9d TYzwgiXFOPMzh91RNzEaahfCpJsGhqbLcXqlP3ZkDLLF3iSu33Ql6GjKYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkWMsnqpz/LgIngqzqlEJ8r+TF6MB8GA1UdIwQY MBaAFJRp01Brd8Gu9bE3DaortLzjgGyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEt NzExNmEzMGRhOTQ1LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEtNzExNmEzMGRhOTQ1 LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqb56y4Rg Gq+e3od1Ozud5xUeQKMhb1KdlPqs7RYJgMTq+e9vfiUZIB58ZdQ9+uXaQMnjCC1j y1DVxETksT3mhX9LLUvKS4GfWyUnbmctc/rGbdu0bHbT/5QK2su2NfkUdxd8bUXP RzFpafAMB1vcBCWgymojfwU2DV+tXgZkxnBds+X8+q8sC1bJ2pzBOdxYrJbJO9uY MpV6ysBm1tQ9bNKi7d0uw9yNt1qG/L3bBeedmA4PhlOLUCw0yMo+UDJifKhdKWjP bMZJmi5u8xoqvuziEJzlWLQfkKCpE75cBo89Xre8pvZJBmDhNNFn6gcIN3QQYBks FjuN57bqgeK+ew== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:54 2025 by rpki-client