This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json) Hash identifier: tj11dXr2FgQG9NSsrfJ4b7jyEMHNN4OD8Neh7iW00ic= Subject key identifier: 33:C9:BF:22:2B:31:FC:A9:36:36:B4:3F:EF:83:B0:A2:CE:13:C3:2C Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d Certificate serial: 019AF1D1FE0E3F7C2A9D0D3D9CC378F73AAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft Manifest number: 0417 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: kC1EqIuutbziW+/NF9jGkJo/0z4VSEiLvqR8YyJLJZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fe:0e:3f:7c:2a:9d:0d:3d:9c:c3:78:f7:3a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=33c9bf222b31fca93636b43fef83b0a2ce13c32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:f5:2e:34:30:77:fa:8e:3a:0f:86:0f:9c: 72:d3:9b:15:3e:ce:f0:a6:56:f0:b3:65:d5:1a:c2: a0:50:22:7b:47:c1:7e:af:c9:f0:cc:41:b9:cf:c4: 73:ce:48:19:47:e2:37:ec:79:85:2f:c0:84:15:eb: ec:be:4c:24:00:2d:48:03:48:39:6f:6a:4c:13:cb: 65:a3:18:34:7c:fb:c6:37:14:18:c7:1e:46:07:82: 76:ab:77:5d:d3:24:b4:99:d0:2d:aa:88:68:be:fb: 3c:82:60:76:87:29:c5:eb:99:f9:9f:60:f7:97:46: 8e:5c:a9:f6:23:09:35:89:ae:d9:5f:97:c5:ac:76: c2:83:c3:39:f5:e1:b2:e7:75:ef:9e:79:12:4d:68: 1f:a9:20:28:89:a0:14:e3:ef:43:c7:8f:da:d6:c8: 5b:38:a5:a7:d2:72:c9:53:c4:cc:ec:4e:0f:4f:86: 26:81:74:51:cc:10:66:4d:c5:6b:62:82:db:71:4c: e7:37:1f:0e:a5:b3:3f:b1:df:13:ad:73:b3:ed:24: 94:00:78:e1:1e:af:c2:57:f3:73:95:94:8d:df:79: d7:d7:f5:e8:3f:b6:fc:2c:a4:d6:ce:a5:12:0c:e4: d4:56:e2:e3:ce:97:d3:35:94:6d:33:a4:cb:82:5b: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:BF:22:2B:31:FC:A9:36:36:B4:3F:EF:83:B0:A2:CE:13:C3:2C X509v3 Authority Key Identifier: keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cd:c9:22:9b:f2:52:44:d5:ed:57:70:85:33:ff:07:67:37: 86:e1:eb:59:ce:3f:70:ee:c2:7e:ef:d0:57:0c:d5:67:e9:8e: eb:17:5b:f0:12:2b:4d:b5:51:cc:0c:bc:c6:b4:f6:d2:39:62: cf:ae:32:e3:50:c0:25:06:a2:04:fb:1a:91:18:b1:01:23:b8: c7:2d:5a:2e:53:e8:ab:59:0a:48:55:14:f4:cb:b1:96:2b:0d: a0:28:79:79:19:33:ac:a0:bb:86:f2:f2:df:f6:e5:b2:3a:df: f0:6e:44:21:98:88:ce:32:98:92:2e:07:71:38:d5:1a:6e:28: c2:45:d8:6a:ed:3e:dc:8f:7e:c8:6d:94:b1:7c:a7:06:ae:30: b1:a9:43:c6:f7:4c:a2:3a:de:61:40:c4:d3:3c:f0:83:67:d3: 17:8b:37:05:1f:ff:78:ab:d8:0c:9c:99:61:30:7b:bf:19:46: 2e:8b:28:29:4b:61:cb:2a:4d:ba:c2:e3:18:a7:6e:d6:78:1d: f8:31:91:21:6f:7d:87:e6:71:46:6d:e7:66:8d:85:4d:2d:46: f8:a3:a2:c5:8d:e9:ca:49:28:9e:7e:fe:05:5f:cb:d2:e4:0f: b2:48:8f:2d:dc:b0:d0:99:c7:3c:a1:f7:e8:8b:11:a7:4f:39: 12:1f:93:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0f4OP3wqnQ09nMN49zquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzQ2ZDNiZDNlMmRkZTYxNjQwMjBkZWIwYjVkODkyMmM2 NDc2NmQwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EygzM2M5YmYyMjJiMzFmY2E5MzYzNmI0M2ZlZjgzYjBhMmNlMTNjMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lP1LjQwd/qOOg+GD5xy05sVPs7w plbws2XVGsKgUCJ7R8F+r8nwzEG5z8RzzkgZR+I37HmFL8CEFevsvkwkAC1IA0g5 b2pME8tloxg0fPvGNxQYxx5GB4J2q3dd0yS0mdAtqohovvs8gmB2hynF65n5n2D3 l0aOXKn2Iwk1ia7ZX5fFrHbCg8M59eGy53XvnnkSTWgfqSAoiaAU4+9Dx4/a1shb OKWn0nLJU8TM7E4PT4YmgXRRzBBmTcVrYoLbcUznNx8OpbM/sd8TrXOz7SSUAHjh Hq/CV/NzlZSN33nX1/XoP7b8LKTWzqUSDOTUVuLjzpfTNZRtM6TLglv1PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPJvyIrMfypNja0P++DsKLOE8MsMB8GA1UdIwQY MBaAFJZ0bTvT4t3mFkAg3rC12JIsZHZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMt MDgwNTQxOWQ3MjFhLzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMtMDgwNTQxOWQ3MjFh LzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc3JIpvy UkTV7VdwhTP/B2c3huHrWc4/cO7Cfu/QVwzVZ+mO6xdb8BIrTbVRzAy8xrT20jli z64y41DAJQaiBPsakRixASO4xy1aLlPoq1kKSFUU9MuxlisNoCh5eRkzrKC7hvLy 3/blsjrf8G5EIZiIzjKYki4HcTjVGm4owkXYau0+3I9+yG2UsXynBq4wsalDxvdM ojreYUDE0zzwg2fTF4s3BR//eKvYDJyZYTB7vxlGLosoKUthyypNusLjGKdu1ngd +DGRIW99h+ZxRm3nZo2FTS1G+KOixY3pykkonn7+BV/L0uQPskiPLdyw0JnHPKH3 6IsRp085Eh+T5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:35 2025 by rpki-client