This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json) Hash identifier: VPtYWVIGuCTg/NoZMtS2ke3VGwIApQGlk2LsJ2xlABQ= Subject key identifier: 13:DE:20:E8:B0:F5:E7:D2:DB:27:A8:F4:2E:46:BF:90:9F:2A:94:58 Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d Certificate serial: 019AF8E670A21C9CA64CA01F04DE096733FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 13:00:42 +0000 Manifest this update: Sun 07 Dec 2025 13:00:42 +0000 Manifest next update: Mon 08 Dec 2025 13:00:42 +0000 Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: S8Bq7qH22qUfmYo/n+olOZD4jlyPAtWlFOdN90k5U2k=) 2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e6:70:a2:1c:9c:a6:4c:a0:1f:04:de:09:67:33:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d Validity Not Before: Dec 7 13:00:42 2025 GMT Not After : Dec 8 13:00:42 2025 GMT Subject: CN=13de20e8b0f5e7d2db27a8f42e46bf909f2a9458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:d6:74:12:b5:79:47:7c:e1:8b:85:c8:b2: 1a:1b:ad:50:08:ff:82:36:54:5c:44:5a:0a:d3:1a: 45:75:a8:59:33:1a:8d:4f:0e:9e:99:a5:39:55:e9: 8f:1c:0b:49:49:dd:15:59:7d:79:6c:ba:ba:f9:cf: 43:a9:b5:8f:e4:8b:f8:c7:28:dc:af:5c:38:42:de: 6a:74:08:20:5a:1e:c6:5c:e3:31:0b:f6:ef:4c:6a: 03:91:87:6e:3e:47:af:de:09:a0:ae:1a:1d:b2:e8: d9:77:82:d3:46:38:0d:1d:de:e2:77:b5:16:a1:94: 5b:5d:79:ae:69:33:73:49:ec:e4:b0:19:8e:3b:9f: b6:1f:ad:79:73:0e:1e:38:ee:5b:49:83:07:5b:d0: 08:b5:e7:99:98:b9:5f:cc:52:de:7c:bd:42:fe:0a: db:7f:20:01:cc:17:6d:b4:fc:f6:cc:58:a4:23:e1: 3c:ec:50:98:ac:c8:c0:3d:27:47:8e:86:ce:ea:7a: 7f:8e:9e:b4:d0:b6:c8:74:61:43:ac:74:27:77:37: 08:03:4e:45:06:ec:5b:2f:fd:5b:f0:b9:48:87:bd: 2f:0f:95:a1:cc:01:0e:3b:24:22:7e:c6:ab:d0:7e: 8d:9b:0c:cf:a3:f2:5f:db:28:54:44:33:6f:0b:cc: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DE:20:E8:B0:F5:E7:D2:DB:27:A8:F4:2E:46:BF:90:9F:2A:94:58 X509v3 Authority Key Identifier: keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:89:37:dc:ce:a3:9b:07:8d:49:d0:60:b6:84:15:b9:f2: 00:b5:b3:7d:62:46:f3:fa:9f:1a:e3:c1:d0:09:00:9b:70:ba: 8f:10:9a:9f:fe:c9:6c:c4:05:c6:99:e6:2c:4b:2a:78:be:c6: 71:c2:d1:a2:7d:93:69:ad:37:25:ea:6c:c1:4e:73:32:70:ff: b9:1e:70:6e:c9:a6:f5:96:4a:7a:ef:9c:29:bc:3c:01:06:a7: bf:c7:19:ca:a2:fe:1e:87:8f:83:8e:1b:46:be:a0:02:65:ee: e3:90:29:bc:fa:c4:fd:62:c4:c8:06:6b:69:ac:c5:ff:5f:c5: 67:76:65:86:da:ca:b3:13:42:af:72:e1:20:9b:b2:d7:ee:d5: 4e:2e:12:82:6a:4a:f9:99:70:bc:9a:e6:35:bf:da:16:88:ef: cc:82:d0:33:ff:30:81:7d:ba:9c:f1:03:9d:9c:34:cd:e5:b0: 86:67:a0:65:3d:01:78:2c:22:f2:b6:c7:ff:f2:95:eb:95:e2: 91:2b:ee:7b:ed:34:d2:cd:6c:eb:ed:d5:f4:e3:d5:34:31:01: 70:b7:25:0b:99:19:cb:07:ca:df:dc:37:3f:c9:56:8a:e5:7f: 89:6a:26:97:f0:49:81:2b:a4:42:c0:6a:54:98:12:a3:df:6b: 16:c0:a9:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr45nCiHJymTKAfBN4JZzP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzNhZDQ1ZjhhM2ViZTY2N2FiYjE5NmEyODlkNjcxOWJl YmI4MmQwHhcNMjUxMjA3MTMwMDQyWhcNMjUxMjA4MTMwMDQyWjAzMTEwLwYDVQQD EygxM2RlMjBlOGIwZjVlN2QyZGIyN2E4ZjQyZTQ2YmY5MDlmMmE5NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSzWdBK1eUd84YuFyLIaG61QCP+C NlRcRFoK0xpFdahZMxqNTw6emaU5VemPHAtJSd0VWX15bLq6+c9DqbWP5Iv4xyjc r1w4Qt5qdAggWh7GXOMxC/bvTGoDkYduPkev3gmgrhodsujZd4LTRjgNHd7id7UW oZRbXXmuaTNzSezksBmOO5+2H615cw4eOO5bSYMHW9AIteeZmLlfzFLefL1C/grb fyABzBdttPz2zFikI+E87FCYrMjAPSdHjobO6np/jp600LbIdGFDrHQndzcIA05F BuxbL/1b8LlIh70vD5WhzAEOOyQifsar0H6NmwzPo/Jf2yhURDNvC8yTfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPeIOiw9efS2yeo9C5Gv5CfKpRYMB8GA1UdIwQY MBaAFC5zrUX4o+vmZ6uxlqKJ1nGb67gtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85YTYwY2YtOWQ5NC00NTg1LWEyNWIt NWU3Zjk1ODExNTYyLzEvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85YTYwY2YtOWQ5NC00NTg1LWEyNWItNWU3Zjk1ODExNTYy LzEvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREeJN9zO o5sHjUnQYLaEFbnyALWzfWJG8/qfGuPB0AkAm3C6jxCan/7JbMQFxpnmLEsqeL7G ccLRon2Taa03JepswU5zMnD/uR5wbsmm9ZZKeu+cKbw8AQanv8cZyqL+HoePg44b Rr6gAmXu45ApvPrE/WLEyAZraazF/1/FZ3ZlhtrKsxNCr3LhIJuy1+7VTi4SgmpK +ZlwvJrmNb/aFojvzILQM/8wgX26nPEDnZw0zeWwhmegZT0BeCwi8rbH//KV65Xi kSvue+000s1s6+3V9OPVNDEBcLclC5kZywfK39w3P8lWiuV/iWoml/BJgSukQsBq VJgSo99rFsCpGg== -----END CERTIFICATE-----Generated at Sun Dec 7 14:42:54 2025 by rpki-client