This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft File: Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json) Hash identifier: S2huTFhBGnIG7qqCf3YTcizgubr7RsQUjORjMMsZbeU= Subject key identifier: 8F:FB:9F:7D:BA:BD:D1:69:B7:8B:03:3E:9D:99:13:33:2B:E9:D7:23 Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D Certificate issuer: /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d Certificate serial: 019AF1646A115810577CEF9B7DC989A50324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft Manifest number: 02E3 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: TRgRd5n5q/2wU1mrsEd1FBX0MpLYFPzvQh61knbDFPI=) 2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6a:11:58:10:57:7c:ef:9b:7d:c9:89:a5:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=8ffb9f7dbabdd169b78b033e9d9913332be9d723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:3e:57:1f:aa:8d:9d:72:af:28:84:33:23: a3:4c:cc:d5:6b:7e:47:9a:c2:9a:2f:8b:b4:82:8e: e4:fe:d3:b1:09:af:e8:05:c3:ae:0e:00:10:65:4c: 6e:95:a8:7d:c3:2d:e6:1d:dc:95:0b:52:e4:9d:53: ab:2c:a8:21:67:97:3f:98:24:51:e7:6c:e5:60:e2: ae:73:9f:6f:3d:82:f4:0a:3f:bb:ba:51:f5:7e:01: 48:ce:76:ea:eb:a0:f6:14:4f:27:45:82:7d:b0:0f: 27:d6:ff:d5:a0:37:4f:6f:7b:84:c8:2f:53:33:a8: e6:84:c7:4d:04:b4:e9:5e:92:75:56:a1:c1:5b:a1: b6:e6:43:78:13:27:87:91:ba:a6:af:5b:c2:43:07: 83:cb:7f:c8:cd:f8:e0:21:f4:47:23:a5:a4:11:80: cf:a6:ab:68:b9:e1:ce:ce:4c:ae:24:63:27:4d:bb: ce:f5:1e:f8:9e:6e:d4:9b:40:e8:ff:de:81:73:80: c4:a6:94:d7:b3:2f:7e:08:ff:d1:8b:55:d7:da:25: df:5f:d2:f4:9a:00:b2:49:d0:f8:5e:84:22:b3:b9: 64:86:3a:0b:27:01:a9:fe:63:4d:79:9a:a8:8f:6e: 6d:e2:5d:dd:f0:22:38:ab:8b:77:c9:46:bc:9d:f0: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FB:9F:7D:BA:BD:D1:69:B7:8B:03:3E:9D:99:13:33:2B:E9:D7:23 X509v3 Authority Key Identifier: keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:08:7f:2c:00:a5:a6:3f:da:21:18:84:aa:de:c2:18:56:59: ce:2f:07:5b:8a:7f:93:1f:c1:62:46:57:4b:f2:00:d9:71:78: ac:fb:2b:81:89:a9:8f:d2:81:87:9e:ac:bc:e3:e9:dc:d0:89: a1:f0:f2:49:ac:c6:91:84:d3:2a:e3:e4:9e:5b:e6:2c:97:c0: fe:e1:61:a6:32:5f:a8:d7:50:3d:73:1e:44:20:6c:47:77:7a: 98:3b:5b:c9:28:1c:62:44:5a:00:18:11:8c:37:93:2e:25:92: f1:ae:75:bf:ef:71:97:1f:39:52:8d:0b:18:1a:c4:e8:5a:da: 27:b0:c0:e4:60:22:3e:25:3d:32:f0:b3:6d:c5:a8:0f:31:64: 17:59:3d:9e:0b:f4:a9:b0:4d:e5:7d:29:3c:ba:eb:38:7e:13: 3d:67:e2:80:d6:40:81:11:d2:58:ea:57:40:46:8c:ea:a3:c3: d1:f7:ac:61:97:38:b8:46:e4:68:c3:29:f7:d6:aa:e2:0e:c4: 26:a2:fd:d9:62:ca:6e:4f:1f:99:37:8a:07:4c:a1:80:91:40: f3:73:03:5b:a9:f6:4d:ca:e4:3b:a2:b3:61:87:cd:13:1d:e5: 09:45:04:3d:7f:ec:8a:8b:97:36:23:12:f6:3a:b1:87:ad:2f: f8:4c:be:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGoRWBBXfO+bfcmJpQMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjkyNjlhYjdmNjE0YzFlY2ZhMjM1OTkyOGVlZTVkZWYz OWEwOWQwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD Eyg4ZmZiOWY3ZGJhYmRkMTY5Yjc4YjAzM2U5ZDk5MTMzMzJiZTlkNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvY+Vx+qjZ1yryiEMyOjTMzVa35H msKaL4u0go7k/tOxCa/oBcOuDgAQZUxulah9wy3mHdyVC1LknVOrLKghZ5c/mCRR 52zlYOKuc59vPYL0Cj+7ulH1fgFIznbq66D2FE8nRYJ9sA8n1v/VoDdPb3uEyC9T M6jmhMdNBLTpXpJ1VqHBW6G25kN4EyeHkbqmr1vCQweDy3/IzfjgIfRHI6WkEYDP pqtoueHOzkyuJGMnTbvO9R74nm7Um0Do/96Bc4DEppTXsy9+CP/Ri1XX2iXfX9L0 mgCySdD4XoQis7lkhjoLJwGp/mNNeZqoj25t4l3d8CI4q4t3yUa8nfBcjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/7n326vdFpt4sDPp2ZEzMr6dcjMB8GA1UdIwQY MBaAFC75Jpq39hTB7PojWZKO7l3vOaCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wNGNiOGItMGY1NC00NWZiLTlmMWUt YWMyYjc0ZDBjNjk5LzEvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wNGNiOGItMGY1NC00NWZiLTlmMWUtYWMyYjc0ZDBjNjk5 LzEvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgh/LACl pj/aIRiEqt7CGFZZzi8HW4p/kx/BYkZXS/IA2XF4rPsrgYmpj9KBh56svOPp3NCJ ofDySazGkYTTKuPknlvmLJfA/uFhpjJfqNdQPXMeRCBsR3d6mDtbySgcYkRaABgR jDeTLiWS8a51v+9xlx85Uo0LGBrE6FraJ7DA5GAiPiU9MvCzbcWoDzFkF1k9ngv0 qbBN5X0pPLrrOH4TPWfigNZAgRHSWOpXQEaM6qPD0fesYZc4uEbkaMMp99aq4g7E JqL92WLKbk8fmTeKB0yhgJFA83MDW6n2TcrkO6KzYYfNEx3lCUUEPX/siouXNiMS 9jqxh60v+Ey+JA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:12 2025 by rpki-client