This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json) Hash identifier: xP+zPFjoTtH1y9Wpc4aVVoym/WENDqZBHKvaqeij7dU= Subject key identifier: 86:1B:5E:A5:5D:06:4D:1F:EF:1D:60:1D:B9:20:43:32:46:04:AC:A8 Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a Certificate serial: 019AF31B720BF0EA6C830B0EAFE1FA452FA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft Manifest number: 16B8 Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: 5xHClmVWs03al0/kLhD+eguBsSOcIGZT/t6LQ2FH8HY=) 2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:72:0b:f0:ea:6c:83:0b:0e:af:e1:fa:45:2f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=861b5ea55d064d1fef1d601db92043324604aca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:f6:79:1f:81:65:7d:f4:68:90:0c:6b:db: 3d:26:8e:20:1b:0a:9f:07:a0:f5:cf:f5:33:2e:69: 7b:92:7f:fb:fc:8a:2a:07:42:55:92:42:3e:ad:af: 85:86:b2:c2:71:8f:dc:4e:c6:06:af:fd:54:49:9a: 46:6d:59:ad:1a:ab:1b:c4:1c:1e:f7:2f:50:ad:90: d1:62:5f:1d:ee:62:66:65:7b:c3:a4:61:50:91:22: 2c:6d:1c:cd:83:4c:d9:8e:ac:11:25:28:4e:21:a9: 2e:ed:90:31:75:66:32:21:69:1f:2b:08:01:e7:ed: 85:d9:28:07:eb:93:59:01:d8:78:ae:a4:a2:ac:70: e4:26:86:b9:ad:d8:7f:a9:ce:7a:91:49:37:76:a4: 7c:0a:43:c4:f8:43:7e:42:7a:bb:4e:f0:d4:83:97: 13:b9:bb:cd:9e:27:db:9d:32:13:86:54:53:bf:17: 1f:10:f2:ff:8e:3c:2a:b3:a1:22:bb:f0:08:8e:8f: 4c:64:84:2b:1e:4f:81:04:40:ed:38:ff:d6:5e:f6: d4:7c:89:5e:eb:72:8a:b0:5d:5b:4f:f5:9e:32:62: 93:57:58:2e:29:11:ae:24:28:ab:80:f2:a1:24:76: 00:22:39:60:69:69:5b:26:28:06:ed:1e:e2:ba:82: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1B:5E:A5:5D:06:4D:1F:EF:1D:60:1D:B9:20:43:32:46:04:AC:A8 X509v3 Authority Key Identifier: keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:92:b2:d5:7f:1e:f6:c6:16:af:35:26:39:60:36:c9:10:58: 75:01:e5:e0:31:42:8f:e0:2f:3d:b2:13:93:a3:e2:01:e4:8c: a4:b6:a4:fb:70:96:86:6a:49:d9:ad:b3:24:e9:15:a8:9c:23: 95:0b:d3:3c:a7:cd:6b:9e:d4:ae:11:8b:99:fd:e0:94:05:a1: b9:d1:d7:15:ea:cc:db:e1:cb:60:10:fc:df:b5:2b:3b:ec:8d: 84:70:a8:fd:72:8c:ee:03:57:7c:3f:1f:66:75:26:9a:61:14: 73:b4:76:69:f3:df:7f:93:76:c8:27:eb:a7:94:d4:e8:f6:f9: af:f1:70:e3:b5:33:48:94:86:ba:ae:53:37:7a:24:7b:7a:09: 0d:c0:72:98:24:25:82:5c:eb:35:79:86:17:fe:ad:b3:7c:9e: cf:8b:02:a3:d7:e4:50:fa:f9:4d:02:45:bd:3b:8c:e4:4d:a1: cd:42:1a:22:a5:b6:48:a2:95:17:f0:27:5c:3b:12:91:45:0c: a6:28:85:f9:2a:df:cf:f4:52:d3:30:83:41:80:d5:ee:1d:51: 2b:8e:55:26:27:79:cc:de:01:a1:05:b5:1f:02:a9:49:2c:47: 65:07:98:6b:1c:a3:55:5e:76:1b:9f:4a:37:23:c2:a1:ac:40: 6c:15:40:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3IL8OpsgwsOr+H6RS+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNjI3NjEzNjI1NDgzMGJiNDkwN2U5OGMyNThlNDkzYjQy YWFhM2EwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD Eyg4NjFiNWVhNTVkMDY0ZDFmZWYxZDYwMWRiOTIwNDMzMjQ2MDRhY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirP2eR+BZX30aJAMa9s9Jo4gGwqf B6D1z/UzLml7kn/7/IoqB0JVkkI+ra+FhrLCcY/cTsYGr/1USZpGbVmtGqsbxBwe 9y9QrZDRYl8d7mJmZXvDpGFQkSIsbRzNg0zZjqwRJShOIaku7ZAxdWYyIWkfKwgB 5+2F2SgH65NZAdh4rqSirHDkJoa5rdh/qc56kUk3dqR8CkPE+EN+Qnq7TvDUg5cT ubvNnifbnTIThlRTvxcfEPL/jjwqs6Eiu/AIjo9MZIQrHk+BBEDtOP/WXvbUfIle 63KKsF1bT/WeMmKTV1guKRGuJCirgPKhJHYAIjlgaWlbJigG7R7iuoLPtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYbXqVdBk0f7x1gHbkgQzJGBKyoMB8GA1UdIwQY MBaAFC5idhNiVIMLtJB+mMJY5JO0Kqo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMt OTNiOTE0NzAxNDcwLzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMtOTNiOTE0NzAxNDcw LzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApKy1X8e 9sYWrzUmOWA2yRBYdQHl4DFCj+AvPbITk6PiAeSMpLak+3CWhmpJ2a2zJOkVqJwj lQvTPKfNa57UrhGLmf3glAWhudHXFerM2+HLYBD837UrO+yNhHCo/XKM7gNXfD8f ZnUmmmEUc7R2afPff5N2yCfrp5TU6Pb5r/Fw47UzSJSGuq5TN3oke3oJDcBymCQl glzrNXmGF/6ts3yez4sCo9fkUPr5TQJFvTuM5E2hzUIaIqW2SKKVF/AnXDsSkUUM piiF+Srfz/RS0zCDQYDV7h1RK45VJid5zN4BoQW1HwKpSSxHZQeYaxyjVV52G59K NyPCoaxAbBVAtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:46 2025 by rpki-client