This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json) Hash identifier: Ds54SjhU+IUPJYF2BLl4K3T0cS0Fh/eIbqvQQD2ll3o= Subject key identifier: 89:90:DB:63:2B:82:C4:93:41:70:E5:CE:9A:58:C5:A6:9A:97:D6:02 Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e Certificate serial: 019AF1D24C226E6CEBDAAC48D66000252D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft Manifest number: 0C82 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: PNNzDyF86vgo9yGL8LnKSRwus+PFyi9o9x4k9Ztqe44=) 2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4c:22:6e:6c:eb:da:ac:48:d6:60:00:25:2d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=8990db632b82c4934170e5ce9a58c5a69a97d602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:92:ab:54:76:e3:db:f5:03:38:83:0b:81: 78:db:96:0e:55:4c:06:66:2b:4e:9d:d4:be:18:dc: 60:24:9e:d1:39:08:5e:dc:a9:d8:67:91:8f:b8:aa: c4:64:9c:e0:43:1e:16:3a:2a:01:8d:1a:1c:bf:ab: 91:7e:37:1b:11:52:e5:e0:11:7d:4e:fa:5f:46:5f: 6f:84:a0:11:2f:88:d3:fd:95:40:75:9d:5e:f9:9b: 58:c8:f2:c7:dd:d5:ce:cf:f3:10:76:24:34:ee:32: db:35:e1:6e:2a:c4:2a:b5:c3:de:a0:7d:65:ae:e9: 08:e0:18:c7:bf:cb:e1:82:ab:84:35:08:77:a7:eb: 2b:e2:89:a4:8b:2e:57:a1:a4:1d:48:d8:7f:76:a6: 44:75:06:c7:9d:14:76:27:c7:4d:6b:bc:0c:01:a0: 47:58:cf:94:85:ce:88:a4:da:c1:6a:ed:f4:1d:be: 56:b6:04:1d:4d:92:12:08:58:d0:a9:74:4a:8a:f9: bb:a7:e7:32:23:58:37:d0:81:0b:64:e6:89:c3:ab: a9:78:6d:55:2d:2c:41:c1:bf:ff:9f:54:32:fd:f9: 16:c7:fd:d5:45:99:34:db:3f:c6:e0:b1:96:d2:53: 3b:e5:ec:64:ff:fe:04:e8:51:09:d1:9a:81:1b:4a: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:90:DB:63:2B:82:C4:93:41:70:E5:CE:9A:58:C5:A6:9A:97:D6:02 X509v3 Authority Key Identifier: keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4a:27:5b:52:46:dc:b9:55:a9:91:88:cf:b8:ce:b1:82:7b: db:7a:ab:c2:fa:64:ce:41:85:f6:78:ee:e2:22:e8:93:4d:63: 7f:41:2c:d9:f4:92:79:bd:70:62:2a:81:d4:89:74:a0:65:92: a7:3a:28:83:19:4e:76:d5:53:8a:7f:bd:5e:a3:11:d2:59:71: 43:d5:24:d8:30:b7:99:9c:b0:89:95:08:98:08:0c:a7:9d:ca: 27:74:d1:ad:76:a0:22:76:0c:31:6a:34:1a:55:00:21:61:35: 5e:09:32:bc:a6:04:68:57:c8:6b:cc:0e:82:6f:41:fd:73:0b: e0:0e:69:9c:3d:45:b8:97:0f:c7:ab:1c:c4:07:d9:e9:7c:d2: a5:63:43:19:21:c0:26:d1:6c:2d:c8:12:64:d8:3b:6b:ab:1c: f4:64:10:2e:65:31:73:03:ee:08:54:bb:ef:1e:e1:3b:a8:8e: f3:31:1a:69:45:f9:12:be:9c:8b:bc:67:6e:fb:d6:94:0a:c8: 83:17:47:c1:9f:d2:44:8d:d0:65:5b:2e:a9:79:84:80:b0:c5: 4a:86:81:45:26:a7:31:8a:63:2e:1e:96:54:40:be:99:df:e1: c7:1d:d6:eb:89:89:c0:2a:21:f2:9f:2c:80:92:6a:27:db:75: 96:a6:10:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kwibmzr2qxI1mAAJS0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZjAyMmNlNGRjODFmMDNiM2IzMDczMGE2YzIzZWFmMzQy ZWNjNWUwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg4OTkwZGI2MzJiODJjNDkzNDE3MGU1Y2U5YTU4YzVhNjlhOTdkNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueCSq1R249v1AziDC4F425YOVUwG ZitOndS+GNxgJJ7ROQhe3KnYZ5GPuKrEZJzgQx4WOioBjRocv6uRfjcbEVLl4BF9 TvpfRl9vhKARL4jT/ZVAdZ1e+ZtYyPLH3dXOz/MQdiQ07jLbNeFuKsQqtcPeoH1l rukI4BjHv8vhgquENQh3p+sr4omkiy5XoaQdSNh/dqZEdQbHnRR2J8dNa7wMAaBH WM+Uhc6IpNrBau30Hb5WtgQdTZISCFjQqXRKivm7p+cyI1g30IELZOaJw6upeG1V LSxBwb//n1Qy/fkWx/3VRZk02z/G4LGW0lM75exk//4E6FEJ0ZqBG0p5AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImQ22MrgsSTQXDlzppYxaaal9YCMB8GA1UdIwQY MBaAFCzwIs5NyB8Ds7MHMKbCPq80LsxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUt Y2E0ZWQ4MDk3OTcwLzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUtY2E0ZWQ4MDk3OTcw LzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEonW1JG 3LlVqZGIz7jOsYJ723qrwvpkzkGF9nju4iLok01jf0Es2fSSeb1wYiqB1Il0oGWS pzoogxlOdtVTin+9XqMR0llxQ9Uk2DC3mZywiZUImAgMp53KJ3TRrXagInYMMWo0 GlUAIWE1XgkyvKYEaFfIa8wOgm9B/XML4A5pnD1FuJcPx6scxAfZ6XzSpWNDGSHA JtFsLcgSZNg7a6sc9GQQLmUxcwPuCFS77x7hO6iO8zEaaUX5Er6ci7xnbvvWlArI gxdHwZ/SRI3QZVsuqXmEgLDFSoaBRSanMYpjLh6WVEC+md/hxx3W64mJwCoh8p8s gJJqJ9t1lqYQag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:19 2025 by rpki-client