This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft File: LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json) Hash identifier: i6jKrunhGiHiw+Ah27TnEhNWL9CaJlZWO/c+AFrB3B0= Subject key identifier: D9:33:4C:E4:41:3B:04:C7:EF:32:9A:A9:35:0A:6E:5E:4B:23:AF:04 Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61 Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61 Certificate serial: 019B19BCDE27AC780FB6FE50A7EE639C6F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft Manifest number: 1758 Signing time: Sat 13 Dec 2025 22:02:46 +0000 Manifest this update: Sat 13 Dec 2025 22:02:46 +0000 Manifest next update: Sun 14 Dec 2025 22:02:46 +0000 Files and hashes: 1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: uN5bhT4GNwMupv7Uga2flT0GzaAGYGvXdhf98lLysIE=) 2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:de:27:ac:78:0f:b6:fe:50:a7:ee:63:9c:6f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61 Validity Not Before: Dec 13 22:02:46 2025 GMT Not After : Dec 14 22:02:46 2025 GMT Subject: CN=d9334ce4413b04c7ef329aa9350a6e5e4b23af04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:79:a6:43:98:eb:e4:7b:ef:13:da:a0:fd: 3b:f4:7b:2c:ac:9e:1d:c4:a9:0b:77:c8:3e:f1:9a: 25:f8:2b:ad:79:2b:d1:70:bc:c3:98:fe:9d:02:86: 4e:92:5d:84:64:c0:fc:e8:23:6e:0f:c1:59:55:c5: d9:7d:7f:26:54:83:f9:d6:2f:53:ff:22:d4:39:b0: 5c:ff:83:fd:06:6d:1b:84:cc:c8:53:8e:23:c6:45: 94:70:7b:0b:c2:cb:97:a2:19:6c:fe:f5:6e:d4:8d: d6:63:6d:1c:80:29:3e:e4:59:27:62:4c:ff:b6:0d: 8c:ad:d8:9d:28:3c:44:a9:60:ff:e9:9a:a8:28:96: 52:68:20:0b:55:30:2d:de:b7:9a:f0:60:c2:a1:1e: ee:08:00:04:c9:b3:3f:2c:ed:b8:bb:b1:53:78:82: 48:7a:a2:0a:92:83:c5:a9:8b:32:23:e2:8e:e3:e4: 35:f4:0f:03:59:9e:8a:bd:e3:f8:14:fe:8c:c6:e0: 40:0d:c4:97:bb:8a:23:df:b7:d8:9e:22:ea:91:54: 32:5b:e9:31:ee:7a:f0:08:00:81:de:7d:a8:7b:9b: e5:63:84:0e:02:2b:3a:3f:82:97:4b:1a:51:0e:8f: f0:08:2c:99:2b:a1:1c:ab:89:d4:15:93:aa:38:ee: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:4C:E4:41:3B:04:C7:EF:32:9A:A9:35:0A:6E:5E:4B:23:AF:04 X509v3 Authority Key Identifier: keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:32:70:e9:2b:c8:f7:5b:c9:66:f7:30:3e:bb:96:68:bb:e3: 60:d7:b5:4f:60:5d:dc:d5:65:4f:82:9a:fd:cf:8c:b4:c8:09: 16:e0:5e:73:33:b7:d1:d6:a1:16:bc:61:9d:c2:84:0e:89:8c: 88:06:c3:02:37:fd:f7:b0:0a:2d:70:4c:22:ad:67:b9:9e:51: 1d:ac:44:33:36:3d:9d:78:48:c1:d9:6e:c2:41:83:e1:82:ea: 48:95:54:d5:82:68:b5:ad:47:22:97:53:4b:55:7a:7a:6a:41: c4:53:7c:59:4f:39:fa:0e:74:1f:b1:4c:68:1d:e4:d0:e6:56: d2:87:10:91:09:48:ef:82:f7:c4:5b:3c:33:e1:c1:03:06:a5: 99:9b:f6:ab:cb:d6:e0:2e:bb:0e:3e:bb:97:7c:78:22:5a:fb: 46:04:09:9f:fd:19:b2:e5:9f:45:e3:4b:4b:c7:4d:a2:82:04: 16:64:24:59:fe:6c:21:a1:d5:d9:76:90:62:97:62:97:3a:63: d0:ef:f2:27:f6:71:d2:45:f7:d5:e0:b7:7b:d2:e8:cd:2c:c1: 03:7d:4f:a0:44:a0:a1:ce:3b:28:1f:ef:27:01:c9:67:09:f1: e8:2e:88:70:0f:c5:3b:44:7e:62:70:e2:df:0b:54:3e:a6:2f: 43:b5:7c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvN4nrHgPtv5Qp+5jnG97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTgxNWIwYzlkYzllZTIyMDdlYzk0MTdjZGVjMmJjNGJl MjNjNjEwHhcNMjUxMjEzMjIwMjQ2WhcNMjUxMjE0MjIwMjQ2WjAzMTEwLwYDVQQD EyhkOTMzNGNlNDQxM2IwNGM3ZWYzMjlhYTkzNTBhNmU1ZTRiMjNhZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ip5pkOY6+R77xPaoP079HssrJ4d xKkLd8g+8Zol+CuteSvRcLzDmP6dAoZOkl2EZMD86CNuD8FZVcXZfX8mVIP51i9T /yLUObBc/4P9Bm0bhMzIU44jxkWUcHsLwsuXohls/vVu1I3WY20cgCk+5FknYkz/ tg2MrdidKDxEqWD/6ZqoKJZSaCALVTAt3rea8GDCoR7uCAAEybM/LO24u7FTeIJI eqIKkoPFqYsyI+KO4+Q19A8DWZ6KveP4FP6MxuBADcSXu4oj37fYniLqkVQyW+kx 7nrwCACB3n2oe5vlY4QOAis6P4KXSxpRDo/wCCyZK6Ecq4nUFZOqOO5d2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkzTORBOwTH7zKaqTUKbl5LI68EMB8GA1UdIwQY MBaAFC0YFbDJ3J7iIH7JQXzewrxL4jxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQt ZDIwMmYyYTQwMDgxLzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQtZDIwMmYyYTQwMDgx LzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDJw6SvI 91vJZvcwPruWaLvjYNe1T2Bd3NVlT4Ka/c+MtMgJFuBeczO30dahFrxhncKEDomM iAbDAjf997AKLXBMIq1nuZ5RHaxEMzY9nXhIwdluwkGD4YLqSJVU1YJota1HIpdT S1V6empBxFN8WU85+g50H7FMaB3k0OZW0ocQkQlI74L3xFs8M+HBAwalmZv2q8vW 4C67Dj67l3x4Ilr7RgQJn/0ZsuWfReNLS8dNooIEFmQkWf5sIaHV2XaQYpdilzpj 0O/yJ/Zx0kX31eC3e9LozSzBA31PoESgoc47KB/vJwHJZwnx6C6IcA/FO0R+YnDi 3wtUPqYvQ7V83A== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:45 2025 by rpki-client