This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json) Hash identifier: gIKvXiP2/b+bOfEkIidyET3f1HIMbu0lvGx9YFblAak= Subject key identifier: 78:79:84:3D:32:D2:B3:22:ED:78:02:19:5F:3B:AF:BC:F0:66:29:36 Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd Certificate serial: 019AF208C02F8112626B4FF806C32775D730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft Manifest number: 0841 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=) 2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: nq4BAglzVxiCYzHYTPfoAeIg1ACePiUBNiHHjcugp98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c0:2f:81:12:62:6b:4f:f8:06:c3:27:75:d7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=7879843d32d2b322ed7802195f3bafbcf0662936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:a1:2e:4d:61:1a:0f:f9:ab:19:2f:28:12: f0:87:93:77:82:e2:ba:c5:c4:2a:80:97:52:15:03: 69:23:a2:81:0e:c9:71:f2:05:99:f1:69:cb:42:4c: 0c:d4:d1:2a:11:67:d5:87:84:67:c4:4a:3c:01:22: 14:74:37:91:f3:6a:8a:e9:c4:46:de:df:a4:a3:68: e6:33:24:93:b2:82:99:e1:08:31:dd:29:29:33:cc: db:4c:9d:8f:ec:09:50:1a:14:83:ae:97:0a:d6:d6: b6:26:81:87:72:6c:be:a4:1f:26:73:88:08:30:bc: ee:9b:c9:91:64:ec:d6:91:b3:54:05:cd:1f:10:fb: 5b:38:1b:95:97:b8:27:65:37:cc:3d:c2:90:80:90: 3e:a0:ef:d9:18:85:a8:3f:dd:b2:c2:74:e0:b1:ff: d4:f0:9f:37:e0:72:e3:b9:22:99:e3:12:91:59:5b: 10:95:d6:06:30:14:29:ce:13:95:76:18:4a:8c:75: 2d:45:04:a9:da:3b:de:e6:8a:e1:c5:94:33:72:db: d3:7e:a1:f6:bf:dd:18:1f:79:ad:1b:83:c2:f9:26: a0:2f:ce:3b:c3:b3:b2:c2:72:ec:99:0f:08:a8:36: d2:22:6d:9d:ab:e0:05:ad:e3:b9:7c:33:3c:64:38: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:79:84:3D:32:D2:B3:22:ED:78:02:19:5F:3B:AF:BC:F0:66:29:36 X509v3 Authority Key Identifier: keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5b:16:32:dd:9b:ac:8f:98:c5:9c:b2:b1:84:7a:92:95:bc: 26:8c:5e:b5:92:80:da:07:41:6a:98:16:1a:bd:6e:56:77:f4: 34:6b:06:27:67:88:5d:ec:50:cc:aa:8d:f6:53:ab:d1:8f:0c: 5a:f7:bb:d4:fe:20:8e:a5:31:e2:b3:8f:d3:7b:67:1f:13:73: 79:11:01:4c:31:3c:a9:0c:51:08:5b:75:e3:2e:c0:5f:31:8d: 18:e7:c3:8b:70:29:19:c3:66:5f:7f:1e:8f:02:07:83:21:e4: 57:e5:8a:f8:78:de:b6:01:1f:2d:67:52:eb:77:1b:b0:ba:ef: 5d:77:62:74:bf:ca:9e:8e:ae:9a:83:32:d1:90:99:6c:ab:0d: 7b:ba:89:9d:17:b6:62:d0:fb:3d:3e:ec:af:96:0b:48:c8:a5: 11:3a:e4:c2:b5:89:66:94:ac:a6:86:8a:97:dd:44:8a:89:20: 33:8d:93:4d:d6:89:ff:c1:87:82:0f:48:6a:3d:ec:d0:29:18: b7:4d:87:4c:52:06:95:ae:76:50:51:4f:39:c7:77:1a:b6:c6: 4c:71:e9:93:4a:51:7d:e5:a7:09:8b:4c:1d:ea:57:be:a2:e0: 65:e3:15:ab:a7:45:ce:74:f4:c2:8e:25:b6:54:fd:06:c1:2b: 7e:e1:8d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMAvgRJia0/4BsMnddcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmZmNmNmYjgzMjZiNDQ3Mjk1YTExYjEwNzg2ODIxMmU2 NjVmZGQwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD Eyg3ODc5ODQzZDMyZDJiMzIyZWQ3ODAyMTk1ZjNiYWZiY2YwNjYyOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a6hLk1hGg/5qxkvKBLwh5N3guK6 xcQqgJdSFQNpI6KBDslx8gWZ8WnLQkwM1NEqEWfVh4RnxEo8ASIUdDeR82qK6cRG 3t+ko2jmMySTsoKZ4Qgx3SkpM8zbTJ2P7AlQGhSDrpcK1ta2JoGHcmy+pB8mc4gI MLzum8mRZOzWkbNUBc0fEPtbOBuVl7gnZTfMPcKQgJA+oO/ZGIWoP92ywnTgsf/U 8J834HLjuSKZ4xKRWVsQldYGMBQpzhOVdhhKjHUtRQSp2jve5orhxZQzctvTfqH2 v90YH3mtG4PC+SagL847w7OywnLsmQ8IqDbSIm2dq+AFreO5fDM8ZDiNIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh5hD0y0rMi7XgCGV87r7zwZik2MB8GA1UdIwQY MBaAFC6/9s+4MmtEcpWhGxB4aCEuZl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYt YTc4NmNlYmUyMGQzLzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYtYTc4NmNlYmUyMGQz LzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVsWMt2b rI+YxZyysYR6kpW8JoxetZKA2gdBapgWGr1uVnf0NGsGJ2eIXexQzKqN9lOr0Y8M Wve71P4gjqUx4rOP03tnHxNzeREBTDE8qQxRCFt14y7AXzGNGOfDi3ApGcNmX38e jwIHgyHkV+WK+HjetgEfLWdS63cbsLrvXXdidL/Kno6umoMy0ZCZbKsNe7qJnRe2 YtD7PT7sr5YLSMilETrkwrWJZpSspoaKl91EiokgM42TTdaJ/8GHgg9Iaj3s0CkY t02HTFIGla52UFFPOcd3GrbGTHHpk0pRfeWnCYtMHepXvqLgZeMVq6dFznT0wo4l tlT9BsErfuGNMg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:31 2025 by rpki-client