This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json) Hash identifier: V81OuwHjwb2dkf5jXYVwwTlxsRF3bjzMZlvqxgmkS70= Subject key identifier: 79:D3:86:83:AC:82:27:69:AD:E8:5A:E3:8E:91:90:1A:21:03:D5:AB Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019AF16460CF1005C4F3287C431657028EC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=) 2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=) 3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: 3ezn7C+6efpIPNpApxXzTSg7N8mD6LIusRHrdfAYOcY=) 4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:60:cf:10:05:c4:f3:28:7c:43:16:57:02:8e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=79d38683ac822769ade85ae38e91901a2103d5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:b0:8b:1b:f1:6a:46:05:43:e4:ba:a9:d8: 4d:ba:9f:e1:58:d4:ce:7c:b6:0c:d0:03:34:a1:b2: f6:43:44:3d:3b:b8:8a:6f:ec:5d:eb:14:fd:de:38: 3c:42:ca:24:c2:ea:59:a9:f3:34:8a:cb:d0:f1:f1: fa:8e:21:54:3d:0f:b8:00:a3:dd:b5:b4:e8:a1:ee: 06:6d:e3:4c:b0:68:04:d0:59:cb:7c:c3:97:5d:ea: 48:cd:03:a7:26:48:a7:62:71:fd:70:b5:2d:3d:cc: 82:20:ba:a0:a6:cc:45:cd:c9:33:bf:92:40:53:62: 4d:aa:34:8f:93:e1:8a:ae:6a:62:c8:53:b8:0c:13: 28:3f:9d:52:16:ce:03:dc:32:bd:fd:aa:f6:1a:ae: d5:c3:ba:e7:57:a2:19:a0:68:d6:55:f9:8e:80:37: ad:f6:56:c6:8a:f6:da:cf:24:7a:19:d1:77:2e:6d: 1e:9b:e9:d9:87:5f:6b:af:1c:08:02:8d:ad:6f:fa: 5d:da:7e:84:6c:9c:a4:f8:36:5f:d5:1e:21:b6:f4: 54:ec:7d:80:6a:82:a4:4c:ad:c4:59:50:81:d8:69: 3a:ba:8d:f0:fa:51:ce:8c:fe:98:f0:ad:52:3b:00: c7:32:99:80:e6:16:db:90:d7:a9:3f:3e:35:da:95: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D3:86:83:AC:82:27:69:AD:E8:5A:E3:8E:91:90:1A:21:03:D5:AB X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:44:e4:ac:6d:e8:57:a1:db:73:a9:0f:38:1a:b9:57:ba:d8: 20:3e:ba:63:55:1b:9d:bc:bc:56:b4:cd:a1:f2:71:a0:04:6f: a2:32:b2:31:f4:e9:30:2d:3e:f0:d8:d8:e4:2d:f6:2c:d4:82: bc:fd:2d:c9:b7:a6:c9:83:80:ca:24:f3:05:a7:44:2a:32:8b: 77:ca:9e:d9:1b:12:8a:25:b3:32:e6:a3:24:19:cc:a4:3a:47: 56:21:c7:1f:de:f3:db:3c:a5:a8:34:4f:9c:68:4d:b4:b8:69: e3:42:fa:5f:aa:67:66:d3:47:fb:1e:e0:2d:b6:f4:fe:4c:7c: c5:a9:0b:68:73:b0:28:1a:70:af:6d:43:fb:35:9f:0f:2b:88: 7d:11:f0:32:62:88:f9:53:ad:f1:3a:db:24:d7:7c:7e:eb:e3: ff:63:9e:af:9f:0a:35:c1:ff:06:92:4a:dd:a0:52:23:18:af: 89:39:b6:34:f8:4a:d0:f9:06:ad:07:25:95:36:e1:74:00:70: 5b:88:d4:db:0f:1f:bd:a5:ba:ae:3b:95:72:83:55:3a:dc:f7: 87:81:61:ea:23:29:b1:08:82:51:13:8e:6e:fb:c6:1b:bc:fb: 47:9f:b9:0c:17:bd:6c:be:eb:40:4c:60:84:87:d2:b3:c9:8c: 74:f5:b4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGDPEAXE8yh8QxZXAo7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD Eyg3OWQzODY4M2FjODIyNzY5YWRlODVhZTM4ZTkxOTAxYTIxMDNkNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqGwixvxakYFQ+S6qdhNup/hWNTO fLYM0AM0obL2Q0Q9O7iKb+xd6xT93jg8QsokwupZqfM0isvQ8fH6jiFUPQ+4AKPd tbTooe4GbeNMsGgE0FnLfMOXXepIzQOnJkinYnH9cLUtPcyCILqgpsxFzckzv5JA U2JNqjSPk+GKrmpiyFO4DBMoP51SFs4D3DK9/ar2Gq7Vw7rnV6IZoGjWVfmOgDet 9lbGivbazyR6GdF3Lm0em+nZh19rrxwIAo2tb/pd2n6EbJyk+DZf1R4htvRU7H2A aoKkTK3EWVCB2Gk6uo3w+lHOjP6Y8K1SOwDHMpmA5hbbkNepPz412pXn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnThoOsgidpreha446RkBohA9WrMB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUTkrG3o V6Hbc6kPOBq5V7rYID66Y1Ubnby8VrTNofJxoARvojKyMfTpMC0+8NjY5C32LNSC vP0tybemyYOAyiTzBadEKjKLd8qe2RsSiiWzMuajJBnMpDpHViHHH97z2zylqDRP nGhNtLhp40L6X6pnZtNH+x7gLbb0/kx8xakLaHOwKBpwr21D+zWfDyuIfRHwMmKI +VOt8TrbJNd8fuvj/2Oer58KNcH/BpJK3aBSIxiviTm2NPhK0PkGrQcllTbhdABw W4jU2w8fvaW6rjuVcoNVOtz3h4Fh6iMpsQiCUROObvvGG7z7R5+5DBe9bL7rQExg hIfSs8mMdPW0Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:02 2025 by rpki-client