This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json) Hash identifier: WAJr9ceO7r+eP7dIcsDXA0nclLoCKhNNxfoJlvbaIXE= Subject key identifier: 05:3B:9F:CF:59:BB:2E:0C:8C:55:D7:7F:0F:1E:FA:7A:2F:01:4C:B5 Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b Certificate serial: 019B360EC1CC2D056B6B96AA126FF6FAD708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft Manifest number: 15D3 Signing time: Fri 19 Dec 2025 10:01:35 +0000 Manifest this update: Fri 19 Dec 2025 10:01:35 +0000 Manifest next update: Sat 20 Dec 2025 10:01:35 +0000 Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=) 2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: 1xcNzbHOFEkhvQLDGm2ydKEDvpLzDyCXP8vvm7NwylM=) 3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:c1:cc:2d:05:6b:6b:96:aa:12:6f:f6:fa:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b Validity Not Before: Dec 19 10:01:35 2025 GMT Not After : Dec 20 10:01:35 2025 GMT Subject: CN=053b9fcf59bb2e0c8c55d77f0f1efa7a2f014cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:b5:65:ab:ad:97:5f:23:c6:90:f3:7a:38: 29:9e:65:bf:39:12:e7:fe:7a:10:5e:ad:e9:86:ab: 4e:f5:41:16:2b:08:4a:43:aa:d5:4c:b3:20:65:04: 05:6f:c8:b5:74:08:74:0d:bb:a8:72:07:4d:e1:ae: 46:bd:15:df:33:6d:97:e0:92:84:17:3d:21:5f:37: 29:87:41:0e:55:bd:36:ab:b0:58:78:6f:8c:70:24: 43:c8:78:15:e8:b2:94:b1:9e:34:c9:34:aa:3b:9a: 2e:12:a4:48:6a:83:ad:b5:63:b4:d3:75:10:f3:84: 43:cc:ed:5d:04:69:54:19:28:26:84:f4:93:ee:e6: d2:57:85:4b:61:f3:fe:7a:cf:a2:a4:d3:3a:a1:15: ed:41:6e:14:fc:98:1b:a6:68:81:ee:39:80:15:ab: 1b:ff:01:f7:72:66:07:d3:40:61:29:10:56:9b:80: 2c:0c:23:03:42:3c:76:84:19:dd:eb:50:61:17:ef: 1f:70:2d:26:c2:56:0c:65:96:ba:57:cf:8f:ed:01: b4:93:f2:c8:e5:ad:d8:ee:ac:66:83:fb:c3:3a:86: cc:16:15:4d:ff:00:a4:fe:e8:2e:f6:ff:4a:57:12: 33:bf:02:43:17:5f:fc:d9:73:e9:92:44:24:09:f6: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:9F:CF:59:BB:2E:0C:8C:55:D7:7F:0F:1E:FA:7A:2F:01:4C:B5 X509v3 Authority Key Identifier: keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ce:8f:81:ad:be:63:3a:3a:f2:59:85:b0:47:ee:8e:19:a0: 15:67:5f:71:c6:d4:66:5b:e5:51:c5:de:52:a1:a1:e9:7a:53: e7:41:46:2d:fd:ee:63:4b:07:d5:80:a0:83:0f:9d:3f:64:07: 2c:88:1b:f9:ac:c2:95:3a:19:65:de:d3:f2:5d:1a:4b:c8:a7: ff:4d:0d:99:d6:eb:9f:fd:90:50:e1:03:1a:85:84:38:54:9a: e0:a9:bf:ad:6e:e3:d8:8c:0d:d5:cc:3e:ba:1a:c0:7d:67:ea: c3:a5:44:18:7d:ec:d8:26:b1:25:8c:41:1e:1e:ce:23:5a:b8: 39:56:49:ac:8a:5d:de:26:6a:35:97:43:f2:90:47:f5:5e:41: 19:5a:38:c1:51:f6:57:45:c8:07:fc:f4:1f:8f:26:b7:0b:35: 36:3b:26:35:90:bd:cd:b6:31:83:7c:cc:10:55:4f:55:0d:82: 02:7a:03:b7:56:2a:be:67:55:98:95:3f:6d:6c:e0:f6:9a:d6: 16:ba:bc:94:e5:89:14:ae:c7:55:6f:02:f2:d5:33:65:c3:3a: 20:ba:98:a3:fd:18:7d:cb:31:68:47:09:2b:f6:7f:88:a5:05: 30:bf:52:f0:45:14:2d:e9:55:42:e1:4e:0b:7f:a6:6a:77:21: 9a:04:f7:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DsHMLQVra5aqEm/2+tcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWFkZWU1OGY4NjRmNDcyZWI0MjJiMGI5NTQ5N2I4NTA3 NWExMmIwHhcNMjUxMjE5MTAwMTM1WhcNMjUxMjIwMTAwMTM1WjAzMTEwLwYDVQQD EygwNTNiOWZjZjU5YmIyZTBjOGM1NWQ3N2YwZjFlZmE3YTJmMDE0Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuS1Zautl18jxpDzejgpnmW/ORLn /noQXq3phqtO9UEWKwhKQ6rVTLMgZQQFb8i1dAh0DbuocgdN4a5GvRXfM22X4JKE Fz0hXzcph0EOVb02q7BYeG+McCRDyHgV6LKUsZ40yTSqO5ouEqRIaoOttWO003UQ 84RDzO1dBGlUGSgmhPST7ubSV4VLYfP+es+ipNM6oRXtQW4U/JgbpmiB7jmAFasb /wH3cmYH00BhKRBWm4AsDCMDQjx2hBnd61BhF+8fcC0mwlYMZZa6V8+P7QG0k/LI 5a3Y7qxmg/vDOobMFhVN/wCk/ugu9v9KVxIzvwJDF1/82XPpkkQkCfYPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU7n89Zuy4MjFXXfw8e+novAUy1MB8GA1UdIwQY MBaAFCzq3uWPhk9HLrQisLlUl7hQdaErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2It YmM3YTI0YzJlMjE5LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2ItYmM3YTI0YzJlMjE5 LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd86Pga2+ Yzo68lmFsEfujhmgFWdfccbUZlvlUcXeUqGh6XpT50FGLf3uY0sH1YCggw+dP2QH LIgb+azClToZZd7T8l0aS8in/00Nmdbrn/2QUOEDGoWEOFSa4Km/rW7j2IwN1cw+ uhrAfWfqw6VEGH3s2CaxJYxBHh7OI1q4OVZJrIpd3iZqNZdD8pBH9V5BGVo4wVH2 V0XIB/z0H48mtws1NjsmNZC9zbYxg3zMEFVPVQ2CAnoDt1YqvmdVmJU/bWzg9prW Frq8lOWJFK7HVW8C8tUzZcM6ILqYo/0YfcsxaEcJK/Z/iKUFML9S8EUULelVQuFO C3+manchmgT3fA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:21:22 2025 by rpki-client