This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json) Hash identifier: XI0LDtWII4kzOlVHGYxFZsnn14vAkVMtdh07Gd628C0= Subject key identifier: 06:80:21:9D:8D:5C:2E:E9:DA:6C:F4:FF:D0:91:50:3B:DA:DA:C0:42 Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50 Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50 Certificate serial: 019B5ABF2881CB628734DFDBDFA6B68E0BDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft Manifest number: 11D6 Signing time: Fri 26 Dec 2025 13:00:35 +0000 Manifest this update: Fri 26 Dec 2025 13:00:35 +0000 Manifest next update: Sat 27 Dec 2025 13:00:35 +0000 Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: f2jiuQcssRFeCW7ukt4ZpxpPqFft1ux1KcsJGL03wa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:28:81:cb:62:87:34:df:db:df:a6:b6:8e:0b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50 Validity Not Before: Dec 26 13:00:35 2025 GMT Not After : Dec 27 13:00:35 2025 GMT Subject: CN=0680219d8d5c2ee9da6cf4ffd091503bdadac042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:22:47:d6:91:91:33:93:cc:c1:c2:16:32: 0d:1d:8a:3a:4e:b9:65:84:a8:be:76:90:9e:fe:65: d9:28:53:a2:44:2c:cc:56:4f:80:0b:1d:59:d8:b8: 46:16:39:29:09:01:51:82:f6:0c:86:5d:ec:87:16: 49:38:8c:16:9a:31:d8:c7:dc:3c:fb:39:b0:c3:dc: 91:45:09:7a:a0:9c:d7:74:3d:08:40:3e:87:d4:26: 27:3d:1e:c9:9e:f2:af:11:e3:f8:52:58:a4:9b:5e: a6:ac:67:16:32:f7:ab:9f:c9:02:01:0e:ae:20:27: 39:97:1b:e0:25:ad:ea:e1:d1:4c:03:64:ff:a2:eb: 85:2a:85:1a:d0:bd:76:47:5f:f5:4e:dc:be:7b:24: 4c:4a:4c:30:2b:24:2d:e2:94:50:81:1b:e8:49:a8: 52:e0:c4:c7:e7:d7:da:f8:a9:c7:0a:2d:c4:0a:df: a2:b6:60:90:8a:a9:28:9f:ad:8c:17:18:69:dc:75: 22:87:fc:93:fb:4a:29:f8:08:82:e4:e9:29:85:3d: 12:25:9a:d4:b0:2b:04:29:5b:29:3d:cb:32:e5:61: f5:a7:b4:7d:10:1c:ea:81:82:f6:65:d8:0b:70:fd: 59:b9:7b:5c:fb:18:d6:68:ac:ca:c5:89:33:91:99: 69:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:80:21:9D:8D:5C:2E:E9:DA:6C:F4:FF:D0:91:50:3B:DA:DA:C0:42 X509v3 Authority Key Identifier: keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:81:7d:6c:07:e3:68:32:2e:f5:ec:fa:70:d5:ca:55:92:2f: ef:84:c6:42:cb:be:b9:03:c0:38:e1:ef:0e:fc:58:f9:33:b1: 54:64:b5:7d:80:67:fc:1b:7e:e0:65:69:93:bc:13:92:f7:cb: f4:d7:15:9d:03:43:ea:34:5a:7b:cc:32:8f:cb:f3:b3:55:aa: 2d:eb:75:d0:8d:28:dc:b5:cb:50:ea:69:29:0a:37:24:86:96: 31:a8:65:da:1d:40:87:8b:c8:74:cd:7b:11:7f:2f:4c:cd:c9: 1a:32:2b:0c:46:cc:0c:75:55:05:cf:d7:c2:a4:ed:60:32:65: 47:7b:d2:4f:3d:c4:52:b3:8d:17:57:7e:df:f6:33:87:f7:cd: 72:0b:09:ca:7b:f4:df:28:1b:be:ea:fd:51:6b:79:48:70:ac: 79:78:b4:62:20:ab:82:f5:c3:2b:b1:79:c9:79:a2:e3:ca:b9: f9:11:3c:58:a4:17:00:2e:d2:3d:c8:00:1c:df:f3:4f:15:45: 34:1c:3e:27:2e:cc:3c:ca:d6:8c:a8:1f:84:47:27:aa:c2:0f: 88:35:1f:6c:2b:d0:ee:db:25:d9:d9:6b:a6:c2:1e:c6:2a:ec: 2a:30:c1:e1:31:f3:f9:8b:de:b2:db:4d:48:fc:cf:9a:b1:d5: 06:eb:c2:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyiBy2KHNN/b36a2jgvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZjJjMjBkYTRkNjMwMTgyZWVlMzM0NWFkOWQxYzRhZDkx NzBkNTAwHhcNMjUxMjI2MTMwMDM1WhcNMjUxMjI3MTMwMDM1WjAzMTEwLwYDVQQD EygwNjgwMjE5ZDhkNWMyZWU5ZGE2Y2Y0ZmZkMDkxNTAzYmRhZGFjMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQIiR9aRkTOTzMHCFjINHYo6Trll hKi+dpCe/mXZKFOiRCzMVk+ACx1Z2LhGFjkpCQFRgvYMhl3shxZJOIwWmjHYx9w8 +zmww9yRRQl6oJzXdD0IQD6H1CYnPR7JnvKvEeP4Ulikm16mrGcWMvern8kCAQ6u ICc5lxvgJa3q4dFMA2T/ouuFKoUa0L12R1/1Tty+eyRMSkwwKyQt4pRQgRvoSahS 4MTH59fa+KnHCi3ECt+itmCQiqkon62MFxhp3HUih/yT+0op+AiC5OkphT0SJZrU sCsEKVspPcsy5WH1p7R9EBzqgYL2ZdgLcP1ZuXtc+xjWaKzKxYkzkZlprQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaAIZ2NXC7p2mz0/9CRUDva2sBCMB8GA1UdIwQY MBaAFDvywg2k1jAYLu4zRa2dHErZFw1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMt YTBiZGE4YWY3NTZhLzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMtYTBiZGE4YWY3NTZh LzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4F9bAfj aDIu9ez6cNXKVZIv74TGQsu+uQPAOOHvDvxY+TOxVGS1fYBn/Bt+4GVpk7wTkvfL 9NcVnQND6jRae8wyj8vzs1WqLet10I0o3LXLUOppKQo3JIaWMahl2h1Ah4vIdM17 EX8vTM3JGjIrDEbMDHVVBc/XwqTtYDJlR3vSTz3EUrONF1d+3/Yzh/fNcgsJynv0 3ygbvur9UWt5SHCseXi0YiCrgvXDK7F5yXmi48q5+RE8WKQXAC7SPcgAHN/zTxVF NBw+Jy7MPMrWjKgfhEcnqsIPiDUfbCvQ7tsl2dlrpsIexirsKjDB4THz+YvesttN SPzPmrHVBuvC/Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:10 2025 by rpki-client