This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json) Hash identifier: ztmxmlDyR+tKG680f+AlRH/anzAyVISwJGgx+fp+lrM= Subject key identifier: 62:F6:70:AB:FC:26:43:9D:34:85:39:D3:DD:7D:B7:0A:44:95:CA:FF Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19 Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19 Certificate serial: 019AF208D11FFF17C2274542A4C8C0F1DBA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft Manifest number: 066F Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: FYJbETxK4pK89OSkPlsFqkj9u1iXH6Gtkpd36EaKeno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d1:1f:ff:17:c2:27:45:42:a4:c8:c0:f1:db:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=62f670abfc26439d348539d3dd7db70a4495caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:32:76:ed:47:49:2e:a5:4a:36:c9:2b:0d:08: bd:6c:1c:df:ee:12:e6:36:6f:4c:55:e9:0a:0d:db: eb:f8:5c:d9:88:e2:5f:fa:f9:f6:44:cd:9a:b3:8c: e6:5a:50:77:d3:6b:2b:18:8a:66:fe:4d:b8:9d:1d: 98:98:26:68:bc:51:ab:ed:36:e7:6a:29:92:8d:75: 3e:01:cc:f4:28:3a:f4:93:26:7c:24:74:d1:ed:a1: 24:80:32:b8:17:87:f0:c1:47:1f:17:fc:bb:2d:59: d1:08:69:eb:f1:47:d2:2b:d2:15:9e:69:8f:29:7c: 87:97:d2:6a:f2:3f:84:38:f2:56:97:96:41:51:61: 44:29:42:47:2d:54:54:44:5a:4e:16:27:38:a2:31: 9d:77:5d:65:cf:b5:b2:44:3d:c4:b8:34:ca:2e:ae: ea:64:56:c0:f3:aa:e4:84:c9:f8:59:3a:71:76:5b: 55:08:de:74:cd:d8:2e:ad:04:a8:dc:e5:45:40:e1: b0:f4:2f:b4:79:e5:af:6a:3b:54:ee:e0:fd:48:98: f4:58:6b:35:e9:ba:f0:f8:e5:40:ca:42:b3:36:cf: 15:60:ac:2a:14:b2:f6:5c:d0:9e:15:27:b2:90:f9: 46:36:82:8c:5c:84:df:f2:77:18:b7:a6:03:62:2c: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F6:70:AB:FC:26:43:9D:34:85:39:D3:DD:7D:B7:0A:44:95:CA:FF X509v3 Authority Key Identifier: keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:05:00:ee:29:ea:b1:5c:6a:8c:4f:2c:10:6a:e9:b8:16:9a: 5b:5c:4e:78:1d:a8:7c:93:09:8e:85:76:e6:51:3f:6d:a9:c1: 2e:0d:3d:58:a7:43:8c:f5:ff:7e:21:15:e2:b4:91:fd:2b:ba: 70:3a:35:ff:16:14:d9:a5:cb:fb:cf:f4:29:8b:b6:4f:ec:94: c8:d5:78:85:0a:9a:10:fa:10:29:09:d3:8e:51:f2:7c:f4:6f: c1:29:69:d4:dd:d6:c3:7e:78:17:ee:ad:95:89:86:29:68:56: d3:92:fd:94:c7:47:3d:4d:51:f3:70:3a:e0:d4:95:5d:2f:c5: 60:7b:11:42:da:ea:c2:21:b6:28:99:40:27:06:60:c0:72:2c: 33:59:ad:f1:ae:3b:cd:8b:63:57:1d:6f:dd:17:20:21:05:24: 36:d2:ef:1e:2c:92:66:db:f4:ca:8e:47:b5:12:32:cd:d2:ee: 21:43:64:f2:00:11:7d:7c:2e:53:ae:c0:df:75:98:f9:cd:20: b1:d5:18:6a:cd:6c:ce:5f:47:07:b6:b4:22:95:de:f0:53:d6: 9d:96:11:d5:2b:2a:0b:70:66:83:1a:79:80:a5:fe:f4:a9:73: d8:4a:4c:d8:4a:ed:c9:ba:1b:83:72:9e:4e:ce:15:83:84:85: b8:60:a5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNEf/xfCJ0VCpMjA8dukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOWMwOGJmMjFjN2Y1OTg4NWJiNWE2ZDQ4MWZmYzMwNjc5 NjlhMTkwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg2MmY2NzBhYmZjMjY0MzlkMzQ4NTM5ZDNkZDdkYjcwYTQ0OTVjYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizJ27UdJLqVKNskrDQi9bBzf7hLm Nm9MVekKDdvr+FzZiOJf+vn2RM2as4zmWlB302srGIpm/k24nR2YmCZovFGr7Tbn aimSjXU+Acz0KDr0kyZ8JHTR7aEkgDK4F4fwwUcfF/y7LVnRCGnr8UfSK9IVnmmP KXyHl9Jq8j+EOPJWl5ZBUWFEKUJHLVRURFpOFic4ojGdd11lz7WyRD3EuDTKLq7q ZFbA86rkhMn4WTpxdltVCN50zdgurQSo3OVFQOGw9C+0eeWvajtU7uD9SJj0WGs1 6brw+OVAykKzNs8VYKwqFLL2XNCeFSeykPlGNoKMXITf8ncYt6YDYixfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL2cKv8JkOdNIU50919twpElcr/MB8GA1UdIwQY MBaAFCycCL8hx/WYhbtabUgf/DBnlpoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjIt MTJlYTEwNzE0YTU2LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjItMTJlYTEwNzE0YTU2 LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgUA7inq sVxqjE8sEGrpuBaaW1xOeB2ofJMJjoV25lE/banBLg09WKdDjPX/fiEV4rSR/Su6 cDo1/xYU2aXL+8/0KYu2T+yUyNV4hQqaEPoQKQnTjlHyfPRvwSlp1N3Ww354F+6t lYmGKWhW05L9lMdHPU1R83A64NSVXS/FYHsRQtrqwiG2KJlAJwZgwHIsM1mt8a47 zYtjVx1v3RcgIQUkNtLvHiySZtv0yo5HtRIyzdLuIUNk8gARfXwuU67A33WY+c0g sdUYas1szl9HB7a0IpXe8FPWnZYR1SsqC3Bmgxp5gKX+9Klz2EpM2Ertybobg3Ke Ts4Vg4SFuGClqw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:13 2025 by rpki-client