This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json) Hash identifier: sDvdb9/5lZknkhb4eGkQTPcNpyo+GRR/qBfpahwxQA0= Subject key identifier: BE:D0:E4:98:16:84:82:22:DB:FD:65:01:29:76:0D:81:26:2C:B2:72 Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5 Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5 Certificate serial: 019B3E6D332DB9EAA9B08E1F1678568D9FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft Manifest number: 1217 Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: a8NACrE//Jp3LiEsA17VokKh2Ld4/nPQx9OQ33eRx7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:33:2d:b9:ea:a9:b0:8e:1f:16:78:56:8d:9f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=bed0e49816848222dbfd650129760d81262cb272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:bd:69:11:85:1b:ef:5d:6b:ab:05:e5:94: 4a:21:d7:ad:17:03:32:9a:3f:22:01:3a:df:20:b2: ec:12:e4:db:93:b7:8c:fb:98:8d:d5:43:92:ae:99: 5d:9d:ce:17:52:70:88:ee:a5:a2:b8:2e:22:94:47: 44:41:df:e7:20:30:6a:10:a0:1c:6b:a3:05:ea:f7: 03:fe:e4:dd:06:4d:b4:c4:15:60:fa:8b:48:6d:13: 2a:08:2b:12:e5:3e:96:9b:fd:04:98:aa:cd:a7:10: 9b:10:7d:89:c1:2d:ef:8d:99:3b:fe:c5:b9:19:f3: 84:eb:ae:a6:3b:67:ea:f1:5a:bf:47:b8:61:9d:fc: 56:e0:11:13:ad:8f:9a:3f:bb:3a:7c:9d:9a:46:0d: 42:34:2b:49:b3:a0:89:13:d0:ba:15:ee:78:6e:f9: d7:5a:7f:56:04:7f:2c:65:72:81:f6:c3:2c:27:ed: 66:d0:9f:b9:ce:b3:15:5a:39:eb:37:69:5f:d8:a5: 5e:fe:2e:83:de:63:1a:36:77:c5:33:51:f2:28:58: a7:41:4c:57:18:ab:2c:57:a1:f6:b2:87:b8:f0:08: dc:11:c9:f4:1b:46:09:75:0c:44:87:75:64:c1:5a: 86:9a:1c:1a:fe:b2:e1:2f:b8:14:3b:79:6d:87:cb: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D0:E4:98:16:84:82:22:DB:FD:65:01:29:76:0D:81:26:2C:B2:72 X509v3 Authority Key Identifier: keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:a4:e3:75:aa:66:c2:0e:d0:75:63:32:e0:7b:2c:50:19: 9c:ff:e1:46:ac:68:fe:a5:ef:a1:9d:dd:ed:48:d3:4f:43:3d: 9c:69:78:e2:72:72:d6:27:8f:1a:a3:9c:f3:0c:fe:c9:e2:87: 4a:c2:cb:ba:7b:fb:a3:e2:f6:f9:2a:cc:5c:d7:e4:7d:fd:c9: 7a:07:52:7c:8f:8b:ee:23:38:78:7d:cc:c6:b9:34:28:60:9b: 52:f3:68:19:63:cc:ac:55:6b:28:a7:b6:dc:e6:c1:fd:42:ad: f9:cb:49:d4:05:00:e8:a2:e5:45:7e:fc:e5:73:8c:6c:dd:6b: ce:e7:85:c5:4d:f4:f3:68:5f:fd:04:d0:f5:43:f2:2b:54:b1: a7:73:2d:81:f0:48:6c:ba:02:81:b9:c4:5f:4f:af:5d:83:a6: 3b:05:5a:e1:b8:46:d4:bb:7d:a6:08:b4:33:3d:8f:a7:31:1a: ae:1a:c6:77:41:8a:2a:aa:c4:16:29:5a:f2:35:a3:1f:50:66: 52:7e:3a:2a:92:f2:7f:24:8d:62:d3:7d:b9:f5:2e:5e:a3:66: 14:6a:91:2c:21:fc:18:16:af:56:45:a2:1e:46:1b:d1:94:d6: 05:c5:24:a8:72:11:c2:a3:52:88:31:a8:d7:ed:41:19:d8:de: b5:d3:2c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTMtueqpsI4fFnhWjZ/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGIwNGFkNjkwYjczMzhmN2MwZmU3NWNmM2IzYTc4NTY5 YmFhZTUwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD EyhiZWQwZTQ5ODE2ODQ4MjIyZGJmZDY1MDEyOTc2MGQ4MTI2MmNiMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdm9aRGFG+9da6sF5ZRKIdetFwMy mj8iATrfILLsEuTbk7eM+5iN1UOSrpldnc4XUnCI7qWiuC4ilEdEQd/nIDBqEKAc a6MF6vcD/uTdBk20xBVg+otIbRMqCCsS5T6Wm/0EmKrNpxCbEH2JwS3vjZk7/sW5 GfOE666mO2fq8Vq/R7hhnfxW4BETrY+aP7s6fJ2aRg1CNCtJs6CJE9C6Fe54bvnX Wn9WBH8sZXKB9sMsJ+1m0J+5zrMVWjnrN2lf2KVe/i6D3mMaNnfFM1HyKFinQUxX GKssV6H2soe48AjcEcn0G0YJdQxEh3VkwVqGmhwa/rLhL7gUO3lth8umswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Q5JgWhIIi2/1lASl2DYEmLLJyMB8GA1UdIwQY MBaAFC6LBK1pC3M498D+dc87OnhWm6rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEt NGI5MTg3ZDkxYzY2LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEtNGI5MTg3ZDkxYzY2 LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh+k43Wq ZsIO0HVjMuB7LFAZnP/hRqxo/qXvoZ3d7UjTT0M9nGl44nJy1iePGqOc8wz+yeKH SsLLunv7o+L2+SrMXNfkff3JegdSfI+L7iM4eH3Mxrk0KGCbUvNoGWPMrFVrKKe2 3ObB/UKt+ctJ1AUA6KLlRX785XOMbN1rzueFxU3082hf/QTQ9UPyK1Sxp3MtgfBI bLoCgbnEX0+vXYOmOwVa4bhG1Lt9pgi0Mz2PpzEarhrGd0GKKqrEFila8jWjH1Bm Un46KpLyfySNYtN9ufUuXqNmFGqRLCH8GBavVkWiHkYb0ZTWBcUkqHIRwqNSiDGo 1+1BGdjetdMs/w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:15 2025 by rpki-client