This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json) Hash identifier: 7ot8XWANVZfEt+Quj7sdNLNwgBFpzXmSglyOtW4n6l8= Subject key identifier: 85:B7:7C:1C:58:CC:67:8C:8A:E4:96:0A:6A:F2:11:A5:88:48:AA:93 Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a Certificate serial: 019AF6F94004AB65D0F19AA51884C6FBD13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft Manifest number: 1335 Signing time: Sun 07 Dec 2025 04:02:01 +0000 Manifest this update: Sun 07 Dec 2025 04:02:01 +0000 Manifest next update: Mon 08 Dec 2025 04:02:01 +0000 Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: 0WWB2NYFmwtE6Fumze6oM8K8NN8fqskwhwxwtqC7gGU=) 2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:40:04:ab:65:d0:f1:9a:a5:18:84:c6:fb:d1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a Validity Not Before: Dec 7 04:02:01 2025 GMT Not After : Dec 8 04:02:01 2025 GMT Subject: CN=85b77c1c58cc678c8ae4960a6af211a58848aa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8a:10:f1:79:17:60:c8:c8:86:a9:d9:49:44: 4e:90:ce:30:f2:ab:21:6e:6c:aa:16:55:9e:07:25: f2:3c:36:79:3f:c2:fc:12:b2:5e:de:4b:1a:6f:80: db:96:e5:96:5c:87:4b:71:d3:59:2f:95:f7:e3:ed: 7b:ea:d2:ab:a1:c4:0b:0b:d8:c2:6a:94:c3:3c:13: 78:af:3f:2a:b3:35:4f:ef:62:5a:9b:48:f2:aa:a0: c6:8c:63:d3:5e:4b:66:f0:fd:be:06:01:03:46:1b: 7a:24:ed:19:a1:b2:0b:5b:ea:81:f3:1b:76:e0:49: b2:d8:41:29:f7:82:ff:c9:3e:f1:66:1b:4a:60:07: 92:e5:04:b5:79:80:b6:21:34:ed:26:4a:1e:ea:57: 7e:12:23:da:e7:68:53:a4:7f:72:46:d2:7f:9c:f7: 46:07:79:f2:f5:de:d9:29:5f:1e:0b:cb:7d:f7:23: 75:a0:43:91:d3:99:03:e4:46:a1:08:f0:b2:66:00: c2:98:46:0d:e1:bb:b3:c1:1c:37:00:0a:da:da:d1: 1f:92:65:8b:17:80:82:66:96:63:04:b6:4d:73:9a: 8b:e9:dd:9e:6d:5a:fa:64:fe:92:b6:bc:22:d5:2f: 4f:b8:17:0a:34:a4:1f:58:be:51:76:bb:59:b0:fd: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:7C:1C:58:CC:67:8C:8A:E4:96:0A:6A:F2:11:A5:88:48:AA:93 X509v3 Authority Key Identifier: keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b9:33:0e:98:c9:f8:2a:0d:46:bd:db:3d:a0:86:7c:47:c5: 21:0b:4d:2e:22:ab:ee:cb:ec:90:83:87:b2:be:a2:72:40:f5: a2:c0:95:88:52:38:93:db:4d:35:83:29:47:d1:f8:e8:14:02: 19:71:e2:c3:d3:e5:61:59:06:c0:11:ab:81:23:07:7f:b2:c7: 65:19:d4:18:cc:22:a6:bd:dd:f5:5c:aa:f3:36:4f:db:b5:b0: 06:0d:f3:76:59:4d:9e:52:73:a2:03:d3:15:0f:38:73:57:6a: 1d:62:7b:27:be:3d:9c:ea:bd:10:4e:4f:d4:f2:f3:7e:98:e6: f2:85:8f:2b:01:ac:a0:d6:28:b3:88:cb:d0:50:bc:82:67:a1: 4d:f6:c2:60:a6:45:01:d4:6b:de:6c:bf:56:d7:a8:07:9f:ab: a1:bc:47:b4:6d:72:12:b5:e2:9c:1d:85:36:34:77:f4:c6:2b: 5e:b9:ea:f1:3e:6c:dd:6c:fd:de:e3:9e:cd:e9:96:23:4a:a7: 97:2f:48:23:cc:5a:73:5a:10:66:a9:d9:85:45:4c:2d:07:eb: 08:eb:c3:52:16:f0:8c:64:0f:e5:50:bd:0b:32:bb:ce:57:34: 88:77:24:96:c1:8f:00:0a:46:37:ea:a8:25:71:1a:98:ac:b5: f6:2d:cd:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+UAEq2XQ8ZqlGITG+9E7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl MDk5MGEwHhcNMjUxMjA3MDQwMjAxWhcNMjUxMjA4MDQwMjAxWjAzMTEwLwYDVQQD Eyg4NWI3N2MxYzU4Y2M2NzhjOGFlNDk2MGE2YWYyMTFhNTg4NDhhYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/IoQ8XkXYMjIhqnZSUROkM4w8qsh bmyqFlWeByXyPDZ5P8L8ErJe3ksab4DbluWWXIdLcdNZL5X34+176tKrocQLC9jC apTDPBN4rz8qszVP72Jam0jyqqDGjGPTXktm8P2+BgEDRht6JO0ZobILW+qB8xt2 4Emy2EEp94L/yT7xZhtKYAeS5QS1eYC2ITTtJkoe6ld+EiPa52hTpH9yRtJ/nPdG B3ny9d7ZKV8eC8t99yN1oEOR05kD5EahCPCyZgDCmEYN4buzwRw3AAra2tEfkmWL F4CCZpZjBLZNc5qL6d2ebVr6ZP6Strwi1S9PuBcKNKQfWL5RdrtZsP0QKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW3fBxYzGeMiuSWCmryEaWISKqTMB8GA1UdIwQY MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7kzDpjJ +CoNRr3bPaCGfEfFIQtNLiKr7svskIOHsr6ickD1osCViFI4k9tNNYMpR9H46BQC GXHiw9PlYVkGwBGrgSMHf7LHZRnUGMwipr3d9Vyq8zZP27WwBg3zdllNnlJzogPT FQ84c1dqHWJ7J749nOq9EE5P1PLzfpjm8oWPKwGsoNYos4jL0FC8gmehTfbCYKZF AdRr3my/VteoB5+robxHtG1yErXinB2FNjR39MYrXrnq8T5s3Wz93uOezemWI0qn ly9II8xac1oQZqnZhUVMLQfrCOvDUhbwjGQP5VC9CzK7zlc0iHcklsGPAApGN+qo JXEamKy19i3NFw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:49 2025 by rpki-client