This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json) Hash identifier: Qt/8P9uKORWg18QdGWFe3dSC4QY/+Ka7pqlI2XeoJOc= Subject key identifier: 5F:C6:8E:23:86:CD:F4:93:2C:E1:E2:81:9C:D5:13:F7:C6:EF:F0:79 Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e Certificate serial: 019B48EFCC5BACDD6B7775A0C07EEA797267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft Manifest number: 0610 Signing time: Tue 23 Dec 2025 02:00:33 +0000 Manifest this update: Tue 23 Dec 2025 02:00:33 +0000 Manifest next update: Wed 24 Dec 2025 02:00:33 +0000 Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: YFfuw4JTuFciX67rNqZ+ARya7CCl7cJXI7WdAhpSHTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:cc:5b:ac:dd:6b:77:75:a0:c0:7e:ea:79:72:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e Validity Not Before: Dec 23 02:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=5fc68e2386cdf4932ce1e2819cd513f7c6eff079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:21:4d:dc:ab:be:42:b7:38:1c:5a:89:c4: c7:10:ea:b6:e3:af:6a:d6:30:31:da:30:3e:75:8d: 85:30:d4:4a:fc:f8:67:a3:99:c7:a8:96:77:25:db: 87:9e:4d:28:e0:e5:aa:4c:2e:a4:8b:5a:6a:e6:ef: b1:da:7d:1a:ba:dc:ff:65:df:c6:de:b2:ed:2d:34: 72:f7:d6:b2:da:60:6d:52:d7:c0:9e:20:71:98:25: dd:d6:a4:b1:f9:a4:8e:4a:25:d4:0e:b7:81:c5:dc: b7:7c:02:e6:c1:ba:5f:da:01:a5:66:85:f6:93:35: 8e:98:50:ff:4f:fa:0f:11:13:b2:8a:0e:91:70:f8: ec:67:83:af:e8:13:32:70:4e:0c:f7:32:dd:08:71: dc:bc:1e:6c:73:00:37:74:c6:1e:27:34:64:f0:e0: 19:39:e9:d5:d9:d2:99:25:41:7b:3c:f3:84:3c:9b: 18:fa:4c:3f:58:69:ab:30:c8:51:02:98:01:ce:84: 4d:dc:09:d8:2d:b0:75:81:b8:92:4d:f3:7f:c6:32: 8d:40:c4:47:4d:8e:0b:4c:f0:4c:5a:06:33:f9:99: 25:2f:a3:cf:e3:42:5a:9c:04:e3:fa:70:79:2f:64: 34:41:86:0e:7d:46:21:cc:a4:0c:77:10:23:9e:c5: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:8E:23:86:CD:F4:93:2C:E1:E2:81:9C:D5:13:F7:C6:EF:F0:79 X509v3 Authority Key Identifier: keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:59:67:a6:24:80:fc:b5:84:cd:ad:18:02:30:41:49:7b:44: 1e:df:ea:ce:0c:bd:b5:7e:e7:48:0b:57:2d:9c:0e:49:01:6d: 1a:44:5c:ed:0f:4a:be:9d:58:0e:48:26:d8:9b:9d:07:90:50: 5f:fe:74:6c:b3:1c:83:0e:82:cf:cd:07:ba:f8:d6:2a:eb:68: 87:db:ed:ae:8b:91:b2:ae:93:7f:9c:c0:26:a9:dd:f1:ba:a1: fc:fa:42:33:fc:64:e8:7c:fa:5a:16:63:60:4d:5c:8c:8c:c7: a9:59:99:e1:06:c0:f9:7c:d0:6e:c9:a6:b0:89:64:91:7a:9c: e8:73:47:e7:b0:39:94:97:37:b9:71:33:f6:d4:fe:76:50:45: c3:44:68:a0:e0:af:79:44:d3:0f:57:5c:db:79:b2:9d:5e:18: 65:49:c1:73:62:28:7d:6e:d5:a3:fb:69:4c:a9:91:10:26:29: 53:8b:ee:cd:32:b3:5e:a7:5b:ea:f5:59:b6:21:87:31:60:47: a6:8c:81:17:bd:8b:57:46:5d:06:58:76:9e:b8:cb:eb:c7:dd: 26:61:f0:b4:dc:10:c1:f7:a3:fe:f8:ae:05:10:31:5d:e9:6e: 69:f3:f7:48:81:ef:88:48:28:05:8c:2f:fb:90:57:ce:a9:ae: 2c:1a:69:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI78xbrN1rd3WgwH7qeXJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjEwYzg3NTBjMzM3ZGYwNDc5YzVhMGViNWI3OGI0OWEx N2ZmM2UwHhcNMjUxMjIzMDIwMDMzWhcNMjUxMjI0MDIwMDMzWjAzMTEwLwYDVQQD Eyg1ZmM2OGUyMzg2Y2RmNDkzMmNlMWUyODE5Y2Q1MTNmN2M2ZWZmMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xghTdyrvkK3OBxaicTHEOq2469q 1jAx2jA+dY2FMNRK/Phno5nHqJZ3JduHnk0o4OWqTC6ki1pq5u+x2n0autz/Zd/G 3rLtLTRy99ay2mBtUtfAniBxmCXd1qSx+aSOSiXUDreBxdy3fALmwbpf2gGlZoX2 kzWOmFD/T/oPEROyig6RcPjsZ4Ov6BMycE4M9zLdCHHcvB5scwA3dMYeJzRk8OAZ OenV2dKZJUF7PPOEPJsY+kw/WGmrMMhRApgBzoRN3AnYLbB1gbiSTfN/xjKNQMRH TY4LTPBMWgYz+ZklL6PP40JanATj+nB5L2Q0QYYOfUYhzKQMdxAjnsVYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/GjiOGzfSTLOHigZzVE/fG7/B5MB8GA1UdIwQY MBaAFJRhDIdQwzffBHnFoOtbeLSaF/8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUt YTJlZmYzZjFhY2Q1LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUtYTJlZmYzZjFhY2Q1 LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACllnpiSA /LWEza0YAjBBSXtEHt/qzgy9tX7nSAtXLZwOSQFtGkRc7Q9Kvp1YDkgm2JudB5BQ X/50bLMcgw6Cz80HuvjWKutoh9vtrouRsq6Tf5zAJqnd8bqh/PpCM/xk6Hz6WhZj YE1cjIzHqVmZ4QbA+XzQbsmmsIlkkXqc6HNH57A5lJc3uXEz9tT+dlBFw0RooOCv eUTTD1dc23mynV4YZUnBc2IofW7Vo/tpTKmRECYpU4vuzTKzXqdb6vVZtiGHMWBH poyBF72LV0ZdBlh2nrjL68fdJmHwtNwQwfej/viuBRAxXeluafP3SIHviEgoBYwv +5BXzqmuLBppOA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:20:12 2025 by rpki-client