This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft File: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json) Hash identifier: xbMuChiegQ5FZR7eHfH+xEgZZq91KK5rh1/g2GDCrik= Subject key identifier: E9:EF:05:FD:F9:10:B7:F2:91:6F:E2:49:34:36:03:EA:68:6C:B0:23 Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8 Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8 Certificate serial: 019AF16438DA018CF8DC846AE799433AD791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft Manifest number: 090B Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: NqGic3CoDvZg490fT5MZXtWibxQsLokmOJ4Sq4cKu80=) 2: s4AKgCvHin14a0p0jz13CHksENw.roa (hash: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:38:da:01:8c:f8:dc:84:6a:e7:99:43:3a:d7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=e9ef05fdf910b7f2916fe249343603ea686cb023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:90:0b:76:22:44:8a:f7:be:79:16:20:7d: 3b:43:d7:32:db:36:49:8b:77:a7:bc:f7:b9:73:1a: ea:23:25:7f:47:83:ba:73:54:c9:56:b5:a8:06:69: 69:24:96:46:13:6f:60:5d:25:b8:b5:78:3e:8e:5d: 03:4a:71:4a:4e:5d:5a:3a:81:36:c1:ec:16:f9:5e: 9e:b0:ba:7f:f4:93:7a:0a:86:88:8e:7a:11:87:c6: 24:57:44:4a:38:5e:e3:9c:df:e4:b1:54:47:a2:d5: 9c:a8:c9:d0:fb:51:af:8e:56:08:9b:1d:13:7c:e5: ea:d1:05:07:a7:22:ac:1b:62:60:7c:4b:ac:6b:28: 75:65:85:5a:ec:92:8a:a8:b4:74:d7:98:95:d3:45: 51:a4:bb:e6:34:d7:d2:07:5d:3b:9a:de:36:b3:c1: 00:2c:4f:97:e2:63:d8:26:1f:91:d0:02:30:3f:91: ca:5d:f9:2b:3e:bd:fc:c2:a3:ce:9b:a0:83:3b:d7: 9c:a8:77:99:2f:8b:e7:3f:fe:39:71:b6:83:5b:8e: 33:6e:83:1b:56:f8:97:c7:11:f0:c2:ab:fc:25:20: aa:28:14:15:aa:66:4a:12:97:24:93:fa:db:f1:f2: 10:0a:9a:22:cd:29:5d:cc:de:46:20:fb:5e:2a:8c: 46:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EF:05:FD:F9:10:B7:F2:91:6F:E2:49:34:36:03:EA:68:6C:B0:23 X509v3 Authority Key Identifier: keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a2:5f:1e:ba:e9:66:e1:64:5e:28:3c:c7:82:48:3b:b7:69: 7a:cb:66:36:6d:33:76:63:17:58:60:f4:25:a9:6a:96:9b:5f: 92:c1:4b:ff:5c:43:09:25:70:3b:b8:4d:52:01:e1:62:1f:c8: d1:44:4d:a0:19:c8:91:9d:9b:1c:69:e7:4e:cf:79:22:08:0d: 9b:30:cc:80:6a:3a:d6:c5:e8:bf:80:40:e3:72:99:34:c0:e4: c7:fe:65:08:5c:d5:62:f5:d0:7f:27:23:eb:c7:59:26:03:f9: 5b:b6:6b:d4:28:e1:65:5f:0a:ca:b6:9d:14:aa:57:aa:2a:f5: 7b:6e:6a:a1:0d:db:65:ff:7a:3c:04:24:d8:18:b2:70:bd:6f: f6:69:dd:7a:2b:53:bb:e8:17:dd:1e:1d:71:c7:05:cb:0c:16: ac:ca:14:50:1e:31:89:6b:76:18:fb:4a:81:dd:70:7f:b8:6d: fb:8f:a7:f3:ed:ff:6d:dd:5d:a6:52:02:ad:59:37:29:f6:23: ee:4a:8b:d6:eb:95:2a:99:5a:c6:9c:6a:21:22:78:d8:f1:9a: d0:f4:9e:0f:72:6a:19:a1:5f:43:ea:e8:f1:c6:ea:7a:0d:96: 56:85:c1:d4:86:c0:6c:10:fe:1d:a7:04:79:e9:a7:20:ff:e8: 26:59:92:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDjaAYz43IRq55lDOteRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkY2Y2ZjM2MTMwNzA5NWMyODNiMGQ4OTE0MDU2OGFhNGVj OGQ0YTgwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD EyhlOWVmMDVmZGY5MTBiN2YyOTE2ZmUyNDkzNDM2MDNlYTY4NmNiMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NOQC3YiRIr3vnkWIH07Q9cy2zZJ i3envPe5cxrqIyV/R4O6c1TJVrWoBmlpJJZGE29gXSW4tXg+jl0DSnFKTl1aOoE2 wewW+V6esLp/9JN6CoaIjnoRh8YkV0RKOF7jnN/ksVRHotWcqMnQ+1GvjlYImx0T fOXq0QUHpyKsG2JgfEusayh1ZYVa7JKKqLR015iV00VRpLvmNNfSB107mt42s8EA LE+X4mPYJh+R0AIwP5HKXfkrPr38wqPOm6CDO9ecqHeZL4vnP/45cbaDW44zboMb VviXxxHwwqv8JSCqKBQVqmZKEpckk/rb8fIQCpoizSldzN5GIPteKoxGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnvBf35ELfykW/iSTQ2A+pobLAjMB8GA1UdIwQY MBaAFC3PbzYTBwlcKDsNiRQFaKpOyNSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGM5dk5oTUhDVndvT3cySkZBVm9xazdJMUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NzA3YzUtYWMzMi00OTA1LWE4M2Mt NWZkNjkwMTg3ODJmLzEvTGM5dk5oTUhDVndvT3cySkZBVm9xazdJMUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NzA3YzUtYWMzMi00OTA1LWE4M2MtNWZkNjkwMTg3ODJm LzEvTGM5dk5oTUhDVndvT3cySkZBVm9xazdJMUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaJfHrrp ZuFkXig8x4JIO7dpestmNm0zdmMXWGD0JalqlptfksFL/1xDCSVwO7hNUgHhYh/I 0URNoBnIkZ2bHGnnTs95IggNmzDMgGo61sXov4BA43KZNMDkx/5lCFzVYvXQfycj 68dZJgP5W7Zr1CjhZV8KyradFKpXqir1e25qoQ3bZf96PAQk2BiycL1v9mndeitT u+gX3R4dcccFywwWrMoUUB4xiWt2GPtKgd1wf7ht+4+n8+3/bd1dplICrVk3KfYj 7kqL1uuVKplaxpxqISJ42PGa0PSeD3JqGaFfQ+ro8cbqeg2WVoXB1IbAbBD+HacE eemnIP/oJlmSCw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:09 2025 by rpki-client