This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json) Hash identifier: fFGatI56L+mPJXiAuHW24u88KGJNaZ0KTf6G/44OqIs= Subject key identifier: E3:F8:83:7B:7E:4A:48:9E:4A:95:CC:E2:73:1D:01:1D:33:62:4E:69 Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Certificate serial: 019AF1D18D8FD02B968CF54A46184817EB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=) 2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: F5LweOzMhTa1UAsYrM8jnrd7FtJ30uE7Y39ie+p0dMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8d:8f:d0:2b:96:8c:f5:4a:46:18:48:17:eb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=e3f8837b7e4a489e4a95cce2731d011d33624e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:17:19:c6:85:72:b4:89:e2:5b:e4:2d:54: 4e:a6:1f:bf:7e:32:a1:25:d3:85:ce:b9:76:0b:71: 4d:c3:79:c4:1f:d5:30:7f:b9:94:e6:2a:42:0a:6a: 4d:a8:3b:48:0b:c8:c9:10:7c:8e:d9:e0:50:56:64: b1:06:07:92:15:b2:ca:d8:00:c5:57:70:33:0d:85: a4:55:a6:ac:67:83:1b:01:6a:c9:38:3a:2c:45:fc: fd:c6:d0:d4:8c:c9:82:dd:7c:aa:a7:a8:54:a4:86: f1:9b:b3:93:74:b1:c2:6c:dc:a9:0b:93:0d:19:c4: 5d:b0:9f:21:d1:b6:f3:ed:c0:4d:82:7b:41:b2:aa: ff:b7:ba:77:ca:2a:8b:c0:29:4a:cc:3b:6f:d3:b5: 48:61:7e:f1:c6:66:5f:e6:9d:98:8a:25:9e:8b:68: 25:60:44:0a:4e:bd:c9:45:23:65:42:f8:61:69:f5: 80:36:3e:14:ee:ee:71:6c:43:24:d0:42:9e:32:22: 31:69:4c:8c:70:6d:b2:44:67:12:d5:13:f4:6c:8f: 95:0a:f1:60:95:4c:5c:5d:80:89:89:b1:3a:c3:4f: c0:c3:44:4c:07:74:12:05:71:4c:a3:30:59:20:f9: 6b:20:33:2f:02:db:f4:74:39:c8:19:38:38:6a:32: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:83:7B:7E:4A:48:9E:4A:95:CC:E2:73:1D:01:1D:33:62:4E:69 X509v3 Authority Key Identifier: keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a2:7b:a5:39:23:79:78:51:60:8b:e9:53:2d:3f:b6:19:2a: 8c:31:eb:79:44:55:5d:67:db:63:d2:15:3b:e8:d5:45:73:2d: 73:8d:8d:a0:3a:83:16:30:75:69:5c:50:c5:f7:f0:36:2a:e9: 71:84:9f:d9:69:5d:3b:58:3b:e2:1f:d2:17:51:bd:69:99:99: 73:11:e4:64:b4:77:08:08:ca:93:90:10:4c:d2:a4:57:f7:a8: b3:29:8d:70:87:79:d4:7d:1f:fb:af:83:0f:94:58:f0:19:24: 10:83:7e:d2:75:6d:ee:72:6d:84:2d:e9:c9:80:e2:6c:a3:12: 23:ad:8f:40:85:40:57:b2:65:de:c7:16:4d:48:ce:c9:b4:cf: 24:de:c9:9e:9f:3f:67:e0:41:5d:09:f6:54:ba:6d:db:80:54: d6:11:c4:4f:31:e7:b8:c0:ec:cf:67:23:bc:cb:b4:19:80:47: f1:3b:d1:12:6f:b9:c9:90:ae:bb:08:e3:bc:20:b0:2f:9f:ca: c9:47:9d:d7:fc:78:37:30:bc:eb:59:b6:66:09:c0:81:ff:77: 4a:7c:ae:df:2f:ca:7c:c4:41:cc:50:33:d7:02:ab:c1:7b:8d: 70:c5:d9:dc:0f:2d:6f:a0:4e:08:4b:cc:3d:ef:a2:01:6d:18: 91:af:de:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y2P0CuWjPVKRhhIF+t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGVkYWIxMjIxNWUyOWJkMzhjMWRhOWI1ZTM5NmJkMGM5 NmJlMDkwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EyhlM2Y4ODM3YjdlNGE0ODllNGE5NWNjZTI3MzFkMDExZDMzNjI0ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZIXGcaFcrSJ4lvkLVROph+/fjKh JdOFzrl2C3FNw3nEH9Uwf7mU5ipCCmpNqDtIC8jJEHyO2eBQVmSxBgeSFbLK2ADF V3AzDYWkVaasZ4MbAWrJODosRfz9xtDUjMmC3Xyqp6hUpIbxm7OTdLHCbNypC5MN GcRdsJ8h0bbz7cBNgntBsqr/t7p3yiqLwClKzDtv07VIYX7xxmZf5p2YiiWei2gl YEQKTr3JRSNlQvhhafWANj4U7u5xbEMk0EKeMiIxaUyMcG2yRGcS1RP0bI+VCvFg lUxcXYCJibE6w0/Aw0RMB3QSBXFMozBZIPlrIDMvAtv0dDnIGTg4ajKlHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP4g3t+SkieSpXM4nMdAR0zYk5pMB8GA1UdIwQY MBaAFC6O2rEiFeKb04wdqbXjlr0Mlr4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEt NjQzYTJmYzQ0NzNlLzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEtNjQzYTJmYzQ0NzNl LzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKJ7pTkj eXhRYIvpUy0/thkqjDHreURVXWfbY9IVO+jVRXMtc42NoDqDFjB1aVxQxffwNirp cYSf2WldO1g74h/SF1G9aZmZcxHkZLR3CAjKk5AQTNKkV/eosymNcId51H0f+6+D D5RY8BkkEIN+0nVt7nJthC3pyYDibKMSI62PQIVAV7Jl3scWTUjOybTPJN7Jnp8/ Z+BBXQn2VLpt24BU1hHETzHnuMDsz2cjvMu0GYBH8TvREm+5yZCuuwjjvCCwL5/K yUed1/x4NzC861m2ZgnAgf93Snyu3y/KfMRBzFAz1wKrwXuNcMXZ3A8tb6BOCEvM Pe+iAW0Yka/exw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:49 2025 by rpki-client