This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json) Hash identifier: GYB+nTeQdXhfUKvpYG4Zcagn3ayTkGdzdVlnNxVh9Zw= Subject key identifier: 93:E6:EB:D4:D6:65:2E:C2:84:2D:5C:96:CC:37:41:AF:E3:F4:F4:95 Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75 Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275 Certificate serial: 019AF12D3E293E8A8F3ACEB980239B7A87A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft Manifest number: 16C7 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: dK6tipLYhkZIQJFiiEdenAZUMjasJI4CEAch4s7F76E=) 2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=) 3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3e:29:3e:8a:8f:3a:ce:b9:80:23:9b:7a:87:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275 Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=93e6ebd4d6652ec2842d5c96cc3741afe3f4f495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:d6:29:05:b6:49:37:76:d6:97:d1:57:0f: 0e:73:2d:41:c1:be:ed:b3:48:ca:f8:81:32:28:58: a7:39:e9:29:57:dc:db:71:2b:78:8c:0f:db:07:41: 83:16:71:b2:25:17:d9:8c:14:39:55:90:10:dc:b0: b8:c7:b9:fe:2c:b4:ca:e1:1f:95:dc:41:25:44:59: 1a:48:c1:e8:c8:54:d7:33:80:ae:52:14:09:a0:f8: ad:68:d1:53:2d:2c:d7:c0:8e:48:a9:92:70:f4:a5: 57:6d:dd:23:dd:f6:8b:85:7c:1a:d4:54:2e:8c:9e: 31:e4:ec:dc:6d:ae:e8:6f:e8:d2:97:c4:f1:b9:d7: e0:44:54:1a:68:65:d2:ea:95:b8:ea:51:17:91:18: 39:7a:d4:8f:51:06:8c:18:d1:e5:1f:c1:2d:de:ad: 07:91:84:99:50:0a:5e:8e:27:ff:2a:b7:3f:03:16: 49:c4:a9:67:12:34:53:a6:c8:d8:d6:ae:d1:d0:a2: f6:a7:7f:83:ac:68:17:16:25:3f:f2:d1:30:fa:47: 91:ac:0b:f2:fe:dc:0e:a7:2d:7b:a9:11:98:e5:ee: dc:37:56:f6:91:d6:eb:2b:62:b1:4c:1a:46:2c:2c: 79:ab:6b:62:56:77:cf:be:1e:0f:e3:6a:31:31:4c: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:EB:D4:D6:65:2E:C2:84:2D:5C:96:CC:37:41:AF:E3:F4:F4:95 X509v3 Authority Key Identifier: keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:56:60:5c:e1:2d:b4:5b:92:e8:1e:37:3a:22:25:ee:0e:6b: 35:0f:91:82:5e:43:6d:c3:82:2b:de:2c:0c:0e:88:6f:60:00: 92:d4:c7:d9:fa:e1:4f:11:9d:cf:d3:50:81:d4:2d:81:05:39: a2:64:fa:c0:60:af:db:d3:1d:a9:c3:6d:6e:06:b4:0b:b2:54: 6b:dc:09:8c:5e:42:35:55:08:2e:da:be:1f:3b:df:c8:1f:f0: 38:6a:14:16:ab:57:bd:c6:d9:8d:d2:94:f8:88:fe:88:32:8c: 9b:36:a3:11:13:c4:00:07:15:b6:00:21:5c:51:2a:f6:6e:99: 83:aa:13:b9:77:df:8f:9d:e7:be:77:85:76:d0:84:2e:cc:e8: ad:36:ea:56:80:28:6c:72:cb:56:97:02:29:b0:3f:6d:ec:97: a5:08:38:2a:b0:ff:2d:b5:52:28:4c:d2:b1:c2:35:e1:6e:8e: 18:43:39:ab:8c:d7:8c:5a:dc:09:1d:87:c1:67:94:76:8b:87: c4:8e:86:1b:12:95:67:08:2d:f0:5b:55:5c:bc:e0:33:f0:ae: 51:be:5d:79:b7:f9:cd:01:66:f4:b5:60:91:a3:4b:a8:bd:60: f3:29:25:eb:8b:fb:e4:18:f9:41:f3:38:66:94:36:1f:7f:52: 46:f2:52:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT4pPoqPOs65gCObeoeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjAzNTcwNzIwMmQ0MDEzYTQ0NzliZTUxMTJkN2ZhMjI3 YjcyNzUwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD Eyg5M2U2ZWJkNGQ2NjUyZWMyODQyZDVjOTZjYzM3NDFhZmUzZjRmNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNbWKQW2STd21pfRVw8Ocy1Bwb7t s0jK+IEyKFinOekpV9zbcSt4jA/bB0GDFnGyJRfZjBQ5VZAQ3LC4x7n+LLTK4R+V 3EElRFkaSMHoyFTXM4CuUhQJoPitaNFTLSzXwI5IqZJw9KVXbd0j3faLhXwa1FQu jJ4x5Ozcba7ob+jSl8TxudfgRFQaaGXS6pW46lEXkRg5etSPUQaMGNHlH8Et3q0H kYSZUApejif/Krc/AxZJxKlnEjRTpsjY1q7R0KL2p3+DrGgXFiU/8tEw+keRrAvy /twOpy17qRGY5e7cN1b2kdbrK2KxTBpGLCx5q2tiVnfPvh4P42oxMUz9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPm69TWZS7ChC1clsw3Qa/j9PSVMB8GA1UdIwQY MBaAFCywNXByAtQBOkR5vlES1/oie3J1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEt MDYzMDhhNDQ4NTZkLzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEtMDYzMDhhNDQ4NTZk LzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFZgXOEt tFuS6B43OiIl7g5rNQ+Rgl5DbcOCK94sDA6Ib2AAktTH2frhTxGdz9NQgdQtgQU5 omT6wGCv29MdqcNtbga0C7JUa9wJjF5CNVUILtq+HzvfyB/wOGoUFqtXvcbZjdKU +Ij+iDKMmzajERPEAAcVtgAhXFEq9m6Zg6oTuXffj53nvneFdtCELszorTbqVoAo bHLLVpcCKbA/beyXpQg4KrD/LbVSKEzSscI14W6OGEM5q4zXjFrcCR2HwWeUdouH xI6GGxKVZwgt8FtVXLzgM/CuUb5debf5zQFm9LVgkaNLqL1g8ykl64v75Bj5QfM4 ZpQ2H39SRvJSkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:04 2025 by rpki-client