This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json) Hash identifier: ykJoRTdg5vRfInpUL8s34cc2eqAVnilkFCQPvuc/5gU= Subject key identifier: 14:8E:7D:82:BE:F0:40:E5:74:56:71:11:BC:92:9B:5A:A5:B9:79:F8 Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1 Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1 Certificate serial: 019B5A1A540FE140AD2FF47E5801853467BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: jXbAs/T4pSskZNJC6bbrZJEkDsfbiGVUHJOQ7Sm1P3o=) 2: pb4QZ95Peoa-v89w9IfVF9OInYI.roa (hash: mVmSldgY3RuIKYBpTP9fbMVJ33NM7M6bAyGk/0LxYwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:54:0f:e1:40:ad:2f:f4:7e:58:01:85:34:67:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1 Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=148e7d82bef040e574567111bc929b5aa5b979f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:6f:3f:b1:50:d3:d2:6c:c4:e7:cb:d6:77: df:cb:f2:63:b3:84:b2:d8:04:4c:af:3f:8f:fc:73: 12:bd:31:39:3b:1e:f3:bb:dc:9d:29:44:38:af:44: dc:6b:60:a4:61:fb:76:1f:87:6a:d1:92:a2:0e:92: 9f:1c:df:ac:2a:b0:64:54:29:20:3c:fa:e4:20:6e: 3b:80:86:3a:0d:1e:13:30:d4:fb:5f:2a:de:be:e1: 56:0a:43:7f:9b:d9:41:3e:91:2b:1b:17:e5:58:90: 97:0c:17:23:7e:b1:ae:fe:e4:f1:62:b6:ab:f9:f9: 42:a9:04:03:01:d7:fa:43:62:91:51:64:c6:84:53: 79:4e:2d:91:99:ef:0e:1f:a7:12:0d:22:b6:82:fc: ad:fc:55:9c:94:d2:09:13:75:d7:a0:e2:31:3a:99: ae:a9:5e:f3:3f:f0:f7:34:ca:4c:aa:f2:17:b3:6d: 68:f0:f5:00:0e:fa:66:da:f6:3a:3a:47:60:8c:e3: 41:6b:f1:15:36:7d:50:ca:23:97:ff:ab:2b:0b:01: f8:5f:57:78:84:f6:92:a8:4f:ba:9e:78:29:bd:84: 86:19:bd:35:01:1c:21:34:9a:c4:8b:74:62:67:70: a7:df:ae:ba:eb:5c:e7:72:25:d3:3a:e4:bf:39:03: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:7D:82:BE:F0:40:E5:74:56:71:11:BC:92:9B:5A:A5:B9:79:F8 X509v3 Authority Key Identifier: keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c2:42:52:7b:49:d8:bd:c5:ab:97:5e:91:73:e6:a0:87:74: cf:37:51:89:14:e9:42:d0:9a:5f:60:96:9c:9f:52:04:ad:a0: 03:f0:6c:7a:57:d4:d5:1d:37:d9:9e:e3:b1:30:19:ca:13:b3: 4d:a9:50:70:4c:47:a4:a4:10:45:7a:78:a4:49:dc:32:d3:cb: a2:d8:27:68:ee:10:00:ee:41:35:71:ec:f3:53:81:9f:87:49: 12:44:4f:48:ae:93:88:86:64:f7:64:4a:38:ce:8d:23:17:e8: b0:c9:56:ef:e2:6c:95:c8:f0:5b:14:5f:32:6c:79:b0:24:6c: a4:2f:b9:2e:b8:2a:3a:5a:08:86:57:89:27:f0:5f:57:1c:3d: ed:75:89:43:2e:1e:d0:01:fa:a3:88:8f:38:95:03:df:7b:a1: 8e:2e:18:63:85:54:5b:ae:f4:3d:ad:d3:b3:cc:7e:f5:57:20: d0:d5:f2:a1:0b:55:44:f0:ca:19:66:ef:0d:2f:d6:b8:3b:72: fe:c1:be:82:ee:28:75:d9:ac:07:e4:49:04:62:ad:ee:9c:be: 82:1b:a1:17:8d:13:df:1f:6c:69:d8:3c:c4:bd:e2:ec:85:32: 53:2b:16:49:e2:45:88:58:75:77:5f:b7:28:04:a8:41:69:5c: f9:b9:bc:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlQP4UCtL/R+WAGFNGe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjk3MDllZjMxYjc1ZDY4ZTIyMDhhYWJmMmEyYzNjM2Q4 NzZmYzEwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD EygxNDhlN2Q4MmJlZjA0MGU1NzQ1NjcxMTFiYzkyOWI1YWE1Yjk3OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxxvP7FQ09JsxOfL1nffy/Jjs4Sy 2ARMrz+P/HMSvTE5Ox7zu9ydKUQ4r0Tca2CkYft2H4dq0ZKiDpKfHN+sKrBkVCkg PPrkIG47gIY6DR4TMNT7XyrevuFWCkN/m9lBPpErGxflWJCXDBcjfrGu/uTxYrar +flCqQQDAdf6Q2KRUWTGhFN5Ti2Rme8OH6cSDSK2gvyt/FWclNIJE3XXoOIxOpmu qV7zP/D3NMpMqvIXs21o8PUADvpm2vY6OkdgjONBa/EVNn1QyiOX/6srCwH4X1d4 hPaSqE+6nngpvYSGGb01ARwhNJrEi3RiZ3Cn366661znciXTOuS/OQMuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSOfYK+8EDldFZxEbySm1qluXn4MB8GA1UdIwQY MBaAFC65cJ7zG3XWjiIIqr8qLDw9h2/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEt Y2VjMzVjNDUzYzVlLzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEtY2VjMzVjNDUzYzVl LzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsJCUntJ 2L3Fq5dekXPmoId0zzdRiRTpQtCaX2CWnJ9SBK2gA/BselfU1R032Z7jsTAZyhOz TalQcExHpKQQRXp4pEncMtPLotgnaO4QAO5BNXHs81OBn4dJEkRPSK6TiIZk92RK OM6NIxfosMlW7+JslcjwWxRfMmx5sCRspC+5LrgqOloIhleJJ/BfVxw97XWJQy4e 0AH6o4iPOJUD33uhji4YY4VUW670Pa3Ts8x+9Vcg0NXyoQtVRPDKGWbvDS/WuDty /sG+gu4oddmsB+RJBGKt7py+ghuhF40T3x9sadg8xL3i7IUyUysWSeJFiFh1d1+3 KASoQWlc+bm8sA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client