This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json) Hash identifier: +ILoIsJP7FhAb//gBSXBoJhSdfwsx0VzTwoAoBvLdCY= Subject key identifier: 09:F3:D1:FD:96:CE:A0:F5:22:38:99:16:D9:B7:5C:CB:B2:73:16:64 Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84 Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084 Certificate serial: 019AF2768ED9690FDA1A7B6FE0D025A7CAA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft Manifest number: 1725 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: ywSaweTiPGS+HTQAFaFZ+6T9PI0osvFb5pYtlj+KtYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8e:d9:69:0f:da:1a:7b:6f:e0:d0:25:a7:ca:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=09f3d1fd96cea0f522389916d9b75ccbb2731664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:c5:8b:76:6b:c8:4b:51:ed:07:3f:47:13: fe:7b:97:01:30:de:d7:76:b1:b5:7e:fc:3f:9e:9d: 7a:23:aa:be:7c:d5:ff:f8:1c:61:79:55:b7:42:84: 67:e1:a9:33:56:ec:b1:7b:d8:31:0b:42:ed:d5:0f: b6:cc:fa:64:a9:6e:3e:5b:35:0e:a3:37:5b:b1:2f: 39:45:e4:42:a6:65:95:34:79:72:db:e5:b7:44:76: a6:1b:ef:96:ba:9e:10:02:1e:47:de:dd:3f:f6:ac: 52:80:a7:86:ee:4a:1d:bb:97:04:96:60:32:01:f3: 87:9c:42:03:ad:d7:11:42:c6:e1:14:62:c0:37:f6: 98:79:9f:0b:7d:6d:5d:b6:d8:6b:ee:2e:3a:b8:df: 37:0f:5f:af:cd:db:67:da:b7:44:d1:f0:74:e9:76: 4c:c1:0d:21:af:2b:b9:c3:11:3e:be:3e:76:22:68: 5a:4e:58:1e:4f:3a:96:47:07:08:77:45:d1:cb:af: 72:00:55:9e:6b:bd:d0:48:fa:5f:27:ab:be:97:42: 3b:b3:e7:eb:ca:c4:b2:0b:2f:2a:9e:56:64:22:18: 24:5c:4e:df:da:19:1f:37:15:9a:9a:da:8f:c8:01: f8:e9:d2:a0:5b:27:1f:3f:91:6f:18:95:43:f3:09: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F3:D1:FD:96:CE:A0:F5:22:38:99:16:D9:B7:5C:CB:B2:73:16:64 X509v3 Authority Key Identifier: keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:62:92:60:82:9f:ff:8c:a1:95:b5:f2:75:54:7c:8a:ee: 45:5a:5b:ed:1c:26:cc:56:93:59:ed:6b:d2:cb:25:32:36:1a: 53:e6:7a:7e:3d:e5:1a:3e:d5:17:2c:cc:ec:eb:cf:65:c0:3a: a8:e1:2c:ea:ca:3e:12:87:dc:c9:c5:53:93:16:43:b7:c5:2c: 0d:c5:b6:c5:0f:4f:80:95:0f:a2:d8:db:5b:dc:87:e0:1f:3a: b8:b2:09:c8:e9:d7:2d:a9:cc:ad:02:bc:59:55:61:f1:fd:bc: 1b:c3:1c:a4:bb:b5:62:d2:a4:42:24:22:22:8e:49:b0:6e:49: 9f:12:e7:c3:44:4b:02:ab:7f:00:f4:d0:b7:18:a4:03:5d:1c: ac:22:72:cf:ca:8f:ec:db:a9:7f:09:b2:0f:c5:a4:98:45:a0: 4b:40:0a:2f:1f:01:f8:b1:01:a1:73:78:84:c3:33:8b:f6:18: 1a:40:8d:ef:0d:01:41:08:fc:f0:fc:c2:11:3d:e1:d5:80:c3: e0:37:42:8c:1f:0c:64:32:f5:ad:1f:dd:3d:57:10:d0:0d:71: a0:cb:30:00:5e:96:53:27:84:ae:f4:e0:f9:01:9c:a6:03:f0: 95:6e:cb:b6:58:f2:23:b2:0e:c7:5e:35:94:85:1e:91:d5:28: 3f:92:0a:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo7ZaQ/aGntv4NAlp8qoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh MTMwODQwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EygwOWYzZDFmZDk2Y2VhMGY1MjIzODk5MTZkOWI3NWNjYmIyNzMxNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP/Fi3ZryEtR7Qc/RxP+e5cBMN7X drG1fvw/np16I6q+fNX/+BxheVW3QoRn4akzVuyxe9gxC0Lt1Q+2zPpkqW4+WzUO ozdbsS85ReRCpmWVNHly2+W3RHamG++Wup4QAh5H3t0/9qxSgKeG7kodu5cElmAy AfOHnEIDrdcRQsbhFGLAN/aYeZ8LfW1dtthr7i46uN83D1+vzdtn2rdE0fB06XZM wQ0hryu5wxE+vj52ImhaTlgeTzqWRwcId0XRy69yAFWea73QSPpfJ6u+l0I7s+fr ysSyCy8qnlZkIhgkXE7f2hkfNxWamtqPyAH46dKgWycfP5FvGJVD8wmVcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnz0f2WzqD1IjiZFtm3XMuycxZkMB8GA1UdIwQY MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0 LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijZikmCC n/+MoZW18nVUfIruRVpb7RwmzFaTWe1r0sslMjYaU+Z6fj3lGj7VFyzM7OvPZcA6 qOEs6so+EofcycVTkxZDt8UsDcW2xQ9PgJUPotjbW9yH4B86uLIJyOnXLanMrQK8 WVVh8f28G8McpLu1YtKkQiQiIo5JsG5JnxLnw0RLAqt/APTQtxikA10crCJyz8qP 7NupfwmyD8WkmEWgS0AKLx8B+LEBoXN4hMMzi/YYGkCN7w0BQQj88PzCET3h1YDD 4DdCjB8MZDL1rR/dPVcQ0A1xoMswAF6WUyeErvTg+QGcpgPwlW7LtljyI7IOx141 lIUekdUoP5IKpA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:25 2025 by rpki-client