This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json) Hash identifier: /2XPHyO9wK522SkHzMHFJN/hwOLrJSJq9MeJHuxzt90= Subject key identifier: 24:98:C2:6A:BC:38:2E:1F:30:D2:B5:31:21:5F:F4:AC:88:98:3D:94 Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Certificate serial: 019AF42E36F805847E600931E149D4106BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft Manifest number: 06B1 Signing time: Sat 06 Dec 2025 15:01:00 +0000 Manifest this update: Sat 06 Dec 2025 15:01:00 +0000 Manifest next update: Sun 07 Dec 2025 15:01:00 +0000 Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: l5lwtX0nH1ZEl20MbgjR7tL1JNFJH6xJbCNToSiU26I=) 2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:36:f8:05:84:7e:60:09:31:e1:49:d4:10:6b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Validity Not Before: Dec 6 15:01:00 2025 GMT Not After : Dec 7 15:01:00 2025 GMT Subject: CN=2498c26abc382e1f30d2b531215ff4ac88983d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:0f:f1:bc:e3:ff:80:22:5c:06:4d:b1:c3: dd:68:17:11:8f:c6:cf:78:5d:49:2e:ff:bf:c1:04: a3:45:35:a6:a4:0d:be:73:85:03:dc:3c:f8:6f:8b: 82:30:9d:6f:0a:02:88:4c:88:34:76:71:f6:a1:f6: 72:df:42:26:26:5e:dd:45:63:dd:16:a9:28:20:08: 0e:85:82:ad:fa:94:61:fd:06:6b:37:63:50:01:6f: 03:f9:f6:91:f0:18:5c:e3:73:e1:7e:70:57:8d:ed: 82:25:43:94:e4:44:7e:69:90:63:87:c6:0b:75:13: f5:17:6c:f6:75:b6:10:4a:b6:ba:1d:2c:17:b4:d9: ad:7f:36:dd:e3:5b:79:2b:fb:25:df:9f:ec:a2:dd: 2f:0e:74:a2:c4:18:c4:3a:e4:61:8a:a1:bd:d8:6b: 9a:2c:b3:0b:a9:7a:d0:93:0a:35:99:e3:3f:af:ed: ea:10:1b:64:95:b2:1e:1f:d6:89:79:46:1c:a9:0c: bf:e8:32:a7:06:e7:13:05:54:84:c9:c0:9e:1a:2a: 22:0a:5b:7e:db:87:9b:34:72:50:19:b8:65:10:5f: 73:0d:42:dd:8d:62:1e:cc:85:d7:b3:45:21:5d:25: da:ae:9b:45:df:7a:4a:6d:29:a8:d3:fc:7f:e1:a7: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:98:C2:6A:BC:38:2E:1F:30:D2:B5:31:21:5F:F4:AC:88:98:3D:94 X509v3 Authority Key Identifier: keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:68:df:9d:01:b4:d5:7a:09:d9:e6:40:e2:2d:b7:9f:63:10: 86:a1:20:cf:45:9b:3d:fc:b9:11:b7:8a:ef:e9:2e:1c:be:20: 45:aa:d8:19:e9:9e:e0:b2:8e:a5:99:07:8e:a0:6f:e2:a6:fb: 29:da:88:bf:cd:1d:a3:dd:38:73:ef:ed:a3:3b:8a:68:f0:7f: b9:2a:2d:50:f2:d8:d5:3f:48:4b:32:17:8d:f2:25:b2:c7:1e: 9f:5a:dc:43:65:cb:7a:93:b9:db:9e:eb:86:86:6e:39:09:e4: 61:c0:2d:26:f4:d9:fd:e1:16:b3:7f:c5:6e:ea:3d:3b:f8:ba: d9:bc:ed:b8:8e:07:bb:ee:da:11:72:34:a1:26:16:73:53:6d: 4b:9e:e3:9f:df:bb:3c:53:9b:a8:28:cd:c4:12:57:fc:fb:42: 91:ae:d2:d8:3e:20:02:09:4d:a1:8c:54:ae:3d:7d:51:8d:56: 03:0c:72:0d:db:90:76:45:5f:ee:91:e0:43:cf:8b:56:46:78: 06:3e:cc:a7:4a:77:5c:c8:37:5b:23:51:40:da:ed:29:00:45: 7f:38:b9:08:1d:f8:7f:dd:62:c0:2e:20:6e:f9:ea:97:bd:0d: 69:ed:cc:d7:eb:3b:ed:1b:89:da:21:db:96:7d:8f:fe:08:59: 0e:28:2b:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ljb4BYR+YAkx4UnUEGuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx M2QwOTYwHhcNMjUxMjA2MTUwMTAwWhcNMjUxMjA3MTUwMTAwWjAzMTEwLwYDVQQD EygyNDk4YzI2YWJjMzgyZTFmMzBkMmI1MzEyMTVmZjRhYzg4OTgzZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXwP8bzj/4AiXAZNscPdaBcRj8bP eF1JLv+/wQSjRTWmpA2+c4UD3Dz4b4uCMJ1vCgKITIg0dnH2ofZy30ImJl7dRWPd FqkoIAgOhYKt+pRh/QZrN2NQAW8D+faR8Bhc43PhfnBXje2CJUOU5ER+aZBjh8YL dRP1F2z2dbYQSra6HSwXtNmtfzbd41t5K/sl35/sot0vDnSixBjEOuRhiqG92Gua LLMLqXrQkwo1meM/r+3qEBtklbIeH9aJeUYcqQy/6DKnBucTBVSEycCeGioiClt+ 24ebNHJQGbhlEF9zDULdjWIezIXXs0UhXSXarptF33pKbSmo0/x/4aeuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSYwmq8OC4fMNK1MSFf9KyImD2UMB8GA1UdIwQY MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmjfnQG0 1XoJ2eZA4i23n2MQhqEgz0WbPfy5EbeK7+kuHL4gRarYGeme4LKOpZkHjqBv4qb7 KdqIv80do904c+/tozuKaPB/uSotUPLY1T9ISzIXjfIlsscen1rcQ2XLepO5257r hoZuOQnkYcAtJvTZ/eEWs3/Fbuo9O/i62bztuI4Hu+7aEXI0oSYWc1NtS57jn9+7 PFObqCjNxBJX/PtCka7S2D4gAglNoYxUrj19UY1WAwxyDduQdkVf7pHgQ8+LVkZ4 Bj7Mp0p3XMg3WyNRQNrtKQBFfzi5CB34f91iwC4gbvnql70Nae3M1+s77RuJ2iHb ln2P/ghZDigrfA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:29 2025 by rpki-client