This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json) Hash identifier: ldXiAu8B2UBZvit5CE9SzYchYisOeVRucn/pWSXIShY= Subject key identifier: 93:94:EB:6B:4B:C3:3C:A3:1E:10:D3:E4:02:61:04:A8:64:75:29:31 Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Certificate serial: 019B1013F76A8FBF05E42837C26D657D718A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 01:01:42 +0000 Manifest this update: Fri 12 Dec 2025 01:01:42 +0000 Manifest next update: Sat 13 Dec 2025 01:01:42 +0000 Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: LOQe4zEIp5AG7gAFbtGIE8kFmDQuMODDLrXlr7gDaAM=) 2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f7:6a:8f:bf:05:e4:28:37:c2:6d:65:7d:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Validity Not Before: Dec 12 01:01:42 2025 GMT Not After : Dec 13 01:01:42 2025 GMT Subject: CN=9394eb6b4bc33ca31e10d3e4026104a864752931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:d7:3e:f5:7a:af:61:f4:64:f3:f1:2f:9e: 4e:79:d7:5e:3a:32:3b:61:0d:00:bd:52:1d:dd:ef: 78:ac:27:f2:77:67:8d:42:67:69:0d:91:ff:0b:87: f1:25:d7:86:3e:05:9d:5e:d2:66:60:7e:ab:78:95: f1:c6:63:77:ed:f1:3f:85:81:a0:f2:c6:ac:22:23: 8b:93:5d:db:33:a8:be:57:65:44:4d:dc:08:3c:bb: 38:fb:6a:4f:7d:2a:80:7f:2f:20:a0:08:56:cf:57: ab:ad:6f:04:bb:47:87:4d:6a:45:60:37:66:50:81: 86:13:03:ec:e0:9b:12:1f:ec:46:aa:ec:9e:bc:79: 33:b7:17:e6:14:4a:07:49:b2:ab:b7:f3:d6:5f:c1: 73:44:87:a7:7c:4c:5a:bc:dd:3e:e6:22:c6:24:1b: 47:ed:f8:fe:ef:00:7a:66:36:08:46:de:00:4a:4b: ec:01:a0:9a:88:44:ee:5b:e3:94:f7:fc:27:99:f3: 27:72:e3:5f:e9:84:45:1b:4b:95:39:00:e3:bb:e8: d8:ca:fd:8f:a0:6f:ed:ca:c7:3f:b8:d5:e9:eb:16: a3:97:f6:8b:a9:ac:0a:82:2d:6a:96:1c:9c:77:84: b2:f6:2d:d5:9c:f2:88:13:db:3f:84:f6:a7:d0:97: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:94:EB:6B:4B:C3:3C:A3:1E:10:D3:E4:02:61:04:A8:64:75:29:31 X509v3 Authority Key Identifier: keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9a:cf:c3:a1:26:7d:d7:2f:85:f9:86:16:c6:79:16:4d:e2: 54:5b:6d:3f:4f:a6:a7:d8:ba:22:0d:80:b8:78:70:86:f5:77: 58:7d:c2:e4:c6:67:aa:0c:b9:74:d5:79:aa:6c:02:72:81:ab: 10:a2:f0:94:ab:b7:d4:64:55:56:75:ba:f3:7b:4e:e5:7f:55: bd:5e:8d:f2:f7:47:7b:2c:cc:04:81:e3:71:d6:89:cd:25:a0: 25:31:b2:43:d3:04:a1:9b:8f:7a:96:32:f0:6a:d2:fc:de:ce: 7b:33:6d:fb:e8:a1:1d:4f:c1:df:8f:95:9e:35:b7:b8:58:81: 66:3a:0b:7d:e9:46:f1:bb:ab:b1:43:ad:bf:62:83:11:ae:61: d2:5e:2b:98:d2:3c:77:90:64:5e:1a:6c:a1:01:35:3b:84:00: 0c:a2:99:0b:6c:fb:78:5c:77:31:c1:9d:b8:08:11:d0:59:32: 44:99:28:aa:66:9e:e8:bb:69:b9:b2:73:22:fa:c9:5a:ab:68: f7:31:06:4a:45:bc:1a:9f:4b:9e:3b:76:70:38:f1:6c:b5:d8: 57:6f:ac:8d:21:36:b4:79:5c:62:3e:dc:42:79:d8:ac:e1:af: d1:35:cf:2f:f2:93:a0:a6:2b:d3:70:88:9a:83:f7:0b:9d:e8: 85:fd:60:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/dqj78F5Cg3wm1lfXGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1 YWFjMTgwHhcNMjUxMjEyMDEwMTQyWhcNMjUxMjEzMDEwMTQyWjAzMTEwLwYDVQQD Eyg5Mzk0ZWI2YjRiYzMzY2EzMWUxMGQzZTQwMjYxMDRhODY0NzUyOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxXXPvV6r2H0ZPPxL55OeddeOjI7 YQ0AvVId3e94rCfyd2eNQmdpDZH/C4fxJdeGPgWdXtJmYH6reJXxxmN37fE/hYGg 8sasIiOLk13bM6i+V2VETdwIPLs4+2pPfSqAfy8goAhWz1errW8Eu0eHTWpFYDdm UIGGEwPs4JsSH+xGquyevHkztxfmFEoHSbKrt/PWX8FzRIenfExavN0+5iLGJBtH 7fj+7wB6ZjYIRt4ASkvsAaCaiETuW+OU9/wnmfMncuNf6YRFG0uVOQDju+jYyv2P oG/tysc/uNXp6xajl/aLqawKgi1qlhycd4Sy9i3VnPKIE9s/hPan0Jc8qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOU62tLwzyjHhDT5AJhBKhkdSkxMB8GA1UdIwQY MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1 LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbprPw6Em fdcvhfmGFsZ5Fk3iVFttP0+mp9i6Ig2AuHhwhvV3WH3C5MZnqgy5dNV5qmwCcoGr EKLwlKu31GRVVnW683tO5X9VvV6N8vdHeyzMBIHjcdaJzSWgJTGyQ9MEoZuPepYy 8GrS/N7OezNt++ihHU/B34+VnjW3uFiBZjoLfelG8bursUOtv2KDEa5h0l4rmNI8 d5BkXhpsoQE1O4QADKKZC2z7eFx3McGduAgR0FkyRJkoqmae6LtpubJzIvrJWqto 9zEGSkW8Gp9Lnjt2cDjxbLXYV2+sjSE2tHlcYj7cQnnYrOGv0TXPL/KToKYr03CI moP3C53ohf1g2g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:44:22 2025 by rpki-client