This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json) Hash identifier: Nr94mLz954s1vcOhYT8C3r6fA+JSfKmpwMykulYxhTQ= Subject key identifier: FA:15:44:37:76:AE:13:76:E0:8D:0F:7C:FB:B8:99:1A:E4:13:06:8E Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Certificate serial: 019AF2E43DC003305B5E4059802948329745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft Manifest number: 0EDE Signing time: Sat 06 Dec 2025 09:00:35 +0000 Manifest this update: Sat 06 Dec 2025 09:00:35 +0000 Manifest next update: Sun 07 Dec 2025 09:00:35 +0000 Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: ewPy5k8LTQoD+JjqOSxDwkMu/QLTcUf3HeyfZ9YmxcE=) 2: R0X5CGrlz-qNmdyzKn23WLaBWOU.roa (hash: MjFGDxvVFvoovmBL50Thb1o1GoniTb6rSndKoBikSDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3d:c0:03:30:5b:5e:40:59:80:29:48:32:97:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Validity Not Before: Dec 6 09:00:35 2025 GMT Not After : Dec 7 09:00:35 2025 GMT Subject: CN=fa15443776ae1376e08d0f7cfbb8991ae413068e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:77:00:c9:78:a9:8d:3f:81:86:77:9f:8e: 64:61:42:d1:6c:7f:3f:50:43:15:fd:b1:14:49:1d: a7:2e:34:fb:26:d7:95:84:a3:21:20:cb:dd:14:42: b4:65:76:bd:34:a9:bf:20:16:19:a2:e8:4b:f1:ed: 0a:1e:83:fb:b2:03:68:53:16:5c:78:b3:ce:98:9b: 68:2f:fa:23:6e:25:91:b8:ee:cd:a1:a8:aa:c7:34: 31:fa:18:ec:dd:d9:b2:44:4d:b7:15:a6:e3:a2:a9: c2:de:a2:9c:66:b3:f8:14:55:6e:31:8d:13:fb:04: 75:7f:ab:5c:b0:2f:dc:82:e1:a0:8f:57:cd:3c:38: a5:4a:6f:46:57:37:be:50:2e:d8:e1:a8:5d:67:b3: f3:e7:4a:ea:03:d5:b8:bf:99:d3:9c:66:7e:7b:9f: 20:2f:69:1b:3a:45:0c:b0:fc:72:68:fd:8f:b5:54: 47:6e:ae:c0:bb:ca:8f:b4:9b:e0:11:5d:fb:4d:c2: cf:e8:20:59:9d:6b:4a:d7:45:e9:80:0f:6e:6f:82: e6:e8:ca:2e:ab:ab:30:7f:0a:fe:f0:05:e4:db:ed: b4:d3:aa:b8:84:98:a8:05:eb:3e:5b:af:09:9e:66: fc:8f:c5:08:af:0b:a6:2f:04:5a:3a:f6:ba:ff:2d: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:44:37:76:AE:13:76:E0:8D:0F:7C:FB:B8:99:1A:E4:13:06:8E X509v3 Authority Key Identifier: keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b2:59:5d:95:00:2e:2b:b6:4f:41:fa:b2:32:43:90:bf:d0: 9c:61:97:39:40:9d:09:c3:52:e4:19:27:8c:af:6e:d5:f6:4a: 12:08:86:0f:04:de:8d:b1:e3:96:b8:8f:0e:3b:5a:6d:27:54: a6:65:6e:25:19:46:fa:50:ee:66:ea:2d:8f:6f:a7:83:5c:cc: 4d:9e:98:e4:95:8e:8e:15:6b:b0:f8:42:c1:3f:e2:9c:c4:99: ec:b5:8a:c6:14:9b:69:83:4c:d5:1f:fb:2e:bb:87:ed:51:7c: 6a:45:76:4f:c8:e7:6f:f2:bb:e2:fd:05:f0:9c:51:d1:c5:33: 0a:8d:43:3e:47:72:a2:af:28:e3:e3:29:6c:cd:6c:93:b6:24: 55:70:d3:d7:a0:0c:e5:71:78:07:d6:22:38:66:a3:1f:8d:fc: 1c:34:a5:76:9a:0c:9f:ed:55:07:50:9e:77:a8:ef:ea:6b:8b: db:c2:23:7b:d5:55:06:9d:9a:c0:01:4c:a1:b3:ac:e7:be:1b: 8b:89:73:1a:a7:39:78:32:5f:7e:5f:9d:f2:8f:c6:2c:bc:41: f1:89:a9:85:ff:81:dc:e9:78:cf:22:8a:5a:fa:dd:e2:80:6f: 8c:21:39:52:a9:f8:b8:25:41:e7:0a:20:a7:e4:c6:cf:80:e8: c5:aa:d1:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5D3AAzBbXkBZgClIMpdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTk1NTNhOWIyYzdiY2ExMmI2ODFiYzBhNjMwNWUzM2Zi NjQwYzgwHhcNMjUxMjA2MDkwMDM1WhcNMjUxMjA3MDkwMDM1WjAzMTEwLwYDVQQD EyhmYTE1NDQzNzc2YWUxMzc2ZTA4ZDBmN2NmYmI4OTkxYWU0MTMwNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysZ3AMl4qY0/gYZ3n45kYULRbH8/ UEMV/bEUSR2nLjT7JteVhKMhIMvdFEK0ZXa9NKm/IBYZouhL8e0KHoP7sgNoUxZc eLPOmJtoL/ojbiWRuO7NoaiqxzQx+hjs3dmyRE23FabjoqnC3qKcZrP4FFVuMY0T +wR1f6tcsC/cguGgj1fNPDilSm9GVze+UC7Y4ahdZ7Pz50rqA9W4v5nTnGZ+e58g L2kbOkUMsPxyaP2PtVRHbq7Au8qPtJvgEV37TcLP6CBZnWtK10XpgA9ub4Lm6Mou q6swfwr+8AXk2+2006q4hJioBes+W68Jnmb8j8UIrwumLwRaOva6/y2hcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoVRDd2rhN24I0PfPu4mRrkEwaOMB8GA1UdIwQY MBaAFCzpVTqbLHvKEraBvApjBeM/tkDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUt OGJhYmFjOGE0NjVhLzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUtOGJhYmFjOGE0NjVh LzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrJZXZUA Liu2T0H6sjJDkL/QnGGXOUCdCcNS5BknjK9u1fZKEgiGDwTejbHjlriPDjtabSdU pmVuJRlG+lDuZuotj2+ng1zMTZ6Y5JWOjhVrsPhCwT/inMSZ7LWKxhSbaYNM1R/7 LruH7VF8akV2T8jnb/K74v0F8JxR0cUzCo1DPkdyoq8o4+MpbM1sk7YkVXDT16AM 5XF4B9YiOGajH438HDSldpoMn+1VB1Ced6jv6muL28Ije9VVBp2awAFMobOs574b i4lzGqc5eDJffl+d8o/GLLxB8Ymphf+B3Ol4zyKKWvrd4oBvjCE5Uqn4uCVB5wog p+TGz4DoxarRyw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:51 2025 by rpki-client