This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json) Hash identifier: OCpeTYqbwUogrfAeq3seOgmxcfVOB1G2UXTqSm9Ov8g= Subject key identifier: 61:87:1E:2E:2B:97:62:C7:03:23:18:F1:05:CE:3A:83:64:42:05:C3 Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Certificate serial: 019B08C7E3131A77FE06EF4097B0DB3EBE5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft Manifest number: 1260 Signing time: Wed 10 Dec 2025 15:01:16 +0000 Manifest this update: Wed 10 Dec 2025 15:01:16 +0000 Manifest next update: Thu 11 Dec 2025 15:01:16 +0000 Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=) 2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: w0KIUN3ZfCIyRKTJMTeQ4heZDLtKgmvFpCbN1zAKsE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:e3:13:1a:77:fe:06:ef:40:97:b0:db:3e:be:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Validity Not Before: Dec 10 15:01:16 2025 GMT Not After : Dec 11 15:01:16 2025 GMT Subject: CN=61871e2e2b9762c7032318f105ce3a83644205c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:18:b5:0b:e6:00:94:11:ce:43:16:af:d9:98: d0:3a:ae:05:42:1d:a3:2d:88:fc:c8:27:cf:18:65: 04:66:80:dc:5c:7c:c6:7b:89:0c:89:b2:3e:b8:d7: c6:d1:f6:00:ed:ca:70:33:65:b5:df:da:f4:8e:85: 70:35:d0:d9:1b:6a:8b:85:8e:07:00:e3:9d:92:59: 1f:40:79:19:4f:d3:8f:8f:b6:c1:5b:9c:a1:00:67: 65:65:98:a0:b0:fe:7d:74:03:a2:ec:ba:21:38:f2: 54:88:e0:9c:48:aa:b2:f7:f8:97:fa:43:1b:96:47: 60:c2:3d:8b:69:e5:24:55:d5:02:6c:ea:51:00:37: 2b:c6:ef:8b:79:3a:e9:17:f9:62:3c:02:2a:f8:35: d0:d4:a8:48:29:e6:2a:cd:fe:91:95:ed:f4:54:f5: 94:c1:a2:3f:54:00:99:27:4a:d8:39:2c:33:e8:6b: a3:12:c1:0e:b7:27:7a:b7:ae:93:41:cd:29:fe:c6: e6:21:fd:f1:5b:13:7d:cc:2a:4f:8e:51:81:d1:b0: f3:c5:47:cf:fa:bc:b5:a3:da:08:13:1b:09:fd:07: c0:30:60:cc:da:fa:41:d9:c1:65:66:16:a3:90:e9: 91:b2:78:43:76:c0:e5:d5:5f:9d:ff:12:61:08:72: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:1E:2E:2B:97:62:C7:03:23:18:F1:05:CE:3A:83:64:42:05:C3 X509v3 Authority Key Identifier: keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:83:cb:fc:c0:a7:e1:39:77:a9:63:da:f2:62:42:92:8d:53: 0f:26:64:64:1a:e7:83:3f:a1:4a:d0:9a:13:0f:98:36:90:09: 4b:4c:5e:86:88:8d:58:ff:54:d6:2b:3e:62:af:05:47:c6:95: fc:83:c6:a1:57:e4:c2:89:2c:a1:04:cb:b7:b0:89:6d:37:66: a3:9c:d9:9d:73:e1:fb:69:0e:3f:d4:ca:de:55:de:cc:cc:b0: 1d:26:0d:18:8d:07:04:d6:93:71:a2:41:4b:86:eb:37:40:10: 7f:ba:68:1c:00:08:1f:7e:90:df:24:48:0c:96:b0:5c:62:b8: 90:9a:c6:ab:d0:fc:87:c6:e3:8e:ff:55:e6:ba:d7:1a:92:b1: 26:52:7c:f0:85:f4:11:18:9a:eb:76:0e:56:0a:86:33:56:a6: 50:ae:e5:8e:07:9d:1f:2e:fe:91:af:3f:35:87:92:f6:3a:e7: e4:f7:2e:b0:dd:f6:62:e0:d9:aa:ca:19:cb:54:d7:96:4b:f0: ba:9a:da:13:2b:e3:61:df:54:d7:1c:de:3f:24:0c:21:27:5d: 05:6d:46:ae:77:ea:1a:7a:c5:86:fb:3d:a5:3c:5f:5f:a8:e9: 94:54:15:da:29:2c:21:83:b8:6d:5f:5f:b7:99:87:00:cd:94: c2:80:4f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx+MTGnf+Bu9Al7DbPr5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw YzgwOGEwHhcNMjUxMjEwMTUwMTE2WhcNMjUxMjExMTUwMTE2WjAzMTEwLwYDVQQD Eyg2MTg3MWUyZTJiOTc2MmM3MDMyMzE4ZjEwNWNlM2E4MzY0NDIwNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xi1C+YAlBHOQxav2ZjQOq4FQh2j LYj8yCfPGGUEZoDcXHzGe4kMibI+uNfG0fYA7cpwM2W139r0joVwNdDZG2qLhY4H AOOdklkfQHkZT9OPj7bBW5yhAGdlZZigsP59dAOi7LohOPJUiOCcSKqy9/iX+kMb lkdgwj2LaeUkVdUCbOpRADcrxu+LeTrpF/liPAIq+DXQ1KhIKeYqzf6Rle30VPWU waI/VACZJ0rYOSwz6GujEsEOtyd6t66TQc0p/sbmIf3xWxN9zCpPjlGB0bDzxUfP +ry1o9oIExsJ/QfAMGDM2vpB2cFlZhajkOmRsnhDdsDl1V+d/xJhCHI0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGHHi4rl2LHAyMY8QXOOoNkQgXDMB8GA1UdIwQY MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0 LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4PL/MCn 4Tl3qWPa8mJCko1TDyZkZBrngz+hStCaEw+YNpAJS0xehoiNWP9U1is+Yq8FR8aV /IPGoVfkwoksoQTLt7CJbTdmo5zZnXPh+2kOP9TK3lXezMywHSYNGI0HBNaTcaJB S4brN0AQf7poHAAIH36Q3yRIDJawXGK4kJrGq9D8h8bjjv9V5rrXGpKxJlJ88IX0 ERia63YOVgqGM1amUK7ljgedHy7+ka8/NYeS9jrn5PcusN32YuDZqsoZy1TXlkvw upraEyvjYd9U1xzePyQMISddBW1GrnfqGnrFhvs9pTxfX6jplFQV2iksIYO4bV9f t5mHAM2UwoBPZQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:53 2025 by rpki-client