This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json) Hash identifier: +0fX6lhMMsKlk8Q8dxNml8QbYmx3C5NCYU3T/2EZpnM= Subject key identifier: 03:3B:70:C0:4D:73:DE:8D:CD:C4:97:80:90:4B:EF:DD:6B:98:99:15 Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d Certificate serial: 019AF4650A04B19B05A60D4398BFC0A896D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft Manifest number: 09FB Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: FwCtGNU4xbh/PrZOKZXoWMQjur1bQ58lF3Bug6suw0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:0a:04:b1:9b:05:a6:0d:43:98:bf:c0:a8:96:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=033b70c04d73de8dcdc49780904befdd6b989915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:d7:6e:c2:58:dc:04:21:11:c9:f1:88:96: ac:b8:69:2d:5d:7f:d8:74:2f:c7:91:2e:a5:47:b3: eb:cb:6e:8e:01:4d:1b:e7:b8:91:47:70:bd:21:06: 72:37:df:82:86:0d:1c:7d:dc:9a:24:f9:cc:1b:a8: 8e:84:c2:c4:a1:68:89:5f:64:94:c8:b0:22:ce:7d: 5e:40:0b:b9:20:7d:c3:41:02:fc:cb:4a:f1:84:b9: 02:bf:73:a6:c6:67:69:cf:fe:bb:30:3d:a3:94:be: 6d:cc:ca:5d:c4:17:6d:29:34:bb:44:2a:c6:dd:e6: 66:5c:12:57:d4:60:47:c5:bc:2b:4f:40:e4:65:16: 96:f4:e9:b5:58:92:df:d3:b1:5b:eb:74:4c:63:33: d7:03:0e:f5:35:77:26:f8:7b:1a:c5:d2:8e:d1:99: 06:bd:38:25:d4:b3:36:47:62:fc:c7:02:52:4b:01: f8:ea:13:4b:39:6c:1f:d0:bc:8e:52:d9:56:54:c8: ba:15:66:af:1a:60:a2:94:bb:67:e3:b4:52:1f:07: 1d:2f:99:dc:07:d7:20:0b:67:8e:41:f6:d1:27:8c: 52:3b:47:96:93:40:42:1f:f3:ca:03:1e:08:ff:cc: 35:08:84:ee:dd:64:65:cd:07:8f:46:12:e4:ab:65: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3B:70:C0:4D:73:DE:8D:CD:C4:97:80:90:4B:EF:DD:6B:98:99:15 X509v3 Authority Key Identifier: keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ae:64:51:94:a1:2e:8c:48:7f:dc:00:b1:bd:99:fe:7a:bc: 96:04:50:a5:0f:73:b8:ad:54:92:f0:e2:33:90:07:14:9e:b4: 5a:7b:1b:cd:54:03:9e:96:21:3c:a0:14:f1:15:f9:1a:ed:02: a4:65:c1:55:39:86:e9:6d:98:39:a6:a7:8d:50:09:ce:0a:c5: 8a:4b:f8:d2:ea:63:51:9d:ed:1a:63:60:a5:94:e9:b4:94:37: b8:73:51:43:6c:ff:7c:09:91:d2:01:25:ec:18:8d:3f:3d:19: 3a:cd:74:50:ec:02:d7:6b:33:fb:0b:e7:84:2a:e9:37:b9:93: be:7c:73:4d:f7:ac:3e:f9:37:ad:6c:aa:f4:bb:56:55:95:0a: a3:5d:83:2f:36:a2:10:8a:89:d8:59:af:01:0a:4b:e6:52:c7: db:2e:32:d6:ff:60:61:d2:1e:d2:70:9f:ca:7a:81:a5:2c:2c: 0b:bd:86:c8:a7:2b:c7:44:64:75:65:26:f3:15:73:5c:8d:51: 31:2f:41:02:b6:fe:d4:b9:60:75:aa:1d:9c:e0:72:10:d1:73: 60:98:25:11:5e:6f:4e:1d:6d:d2:6f:a4:0b:de:b9:40:f9:b9: 4d:29:48:8f:cf:af:57:da:7a:9d:8e:21:6e:7a:0f:b9:a2:30: d3:45:87:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQoEsZsFpg1DmL/AqJbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMzNhYjAyNzg2MjM4OWNjYzFmMWZjOGIwYTU2NGE2ZWJk N2NiOGQwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD EygwMzNiNzBjMDRkNzNkZThkY2RjNDk3ODA5MDRiZWZkZDZiOTg5OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU/XbsJY3AQhEcnxiJasuGktXX/Y dC/HkS6lR7Pry26OAU0b57iRR3C9IQZyN9+Chg0cfdyaJPnMG6iOhMLEoWiJX2SU yLAizn1eQAu5IH3DQQL8y0rxhLkCv3Omxmdpz/67MD2jlL5tzMpdxBdtKTS7RCrG 3eZmXBJX1GBHxbwrT0DkZRaW9Om1WJLf07Fb63RMYzPXAw71NXcm+HsaxdKO0ZkG vTgl1LM2R2L8xwJSSwH46hNLOWwf0LyOUtlWVMi6FWavGmCilLtn47RSHwcdL5nc B9cgC2eOQfbRJ4xSO0eWk0BCH/PKAx4I/8w1CITu3WRlzQePRhLkq2V2JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM7cMBNc96NzcSXgJBL791rmJkVMB8GA1UdIwQY MBaAFC0zqwJ4YjiczB8fyLClZKbr18uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4Mzct MzAxZmRmMTE0ODQwLzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4MzctMzAxZmRmMTE0ODQw LzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK5kUZSh LoxIf9wAsb2Z/nq8lgRQpQ9zuK1UkvDiM5AHFJ60WnsbzVQDnpYhPKAU8RX5Gu0C pGXBVTmG6W2YOaanjVAJzgrFikv40upjUZ3tGmNgpZTptJQ3uHNRQ2z/fAmR0gEl 7BiNPz0ZOs10UOwC12sz+wvnhCrpN7mTvnxzTfesPvk3rWyq9LtWVZUKo12DLzai EIqJ2FmvAQpL5lLH2y4y1v9gYdIe0nCfynqBpSwsC72GyKcrx0RkdWUm8xVzXI1R MS9BArb+1LlgdaodnOByENFzYJglEV5vTh1t0m+kC965QPm5TSlIj8+vV9p6nY4h bnoPuaIw00WHYg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:56 2025 by rpki-client