This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json) Hash identifier: LTW/zM6YKfC/f/TMSQ9ghn+EorZqkedPDofIBIwO2uc= Subject key identifier: E9:8D:94:25:C1:86:A9:94:16:7A:EB:A3:C9:0A:8C:CC:C0:4D:00:1F Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab Certificate serial: 019AF7663E2DDFE484F7711CC3FC1140F69D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft Manifest number: DF Signing time: Sun 07 Dec 2025 06:01:04 +0000 Manifest this update: Sun 07 Dec 2025 06:01:04 +0000 Manifest next update: Mon 08 Dec 2025 06:01:04 +0000 Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: bDFKnKyvUEaR1AwTfXfWYSiD4zojrHYCAFZ+8PmScrQ=) 2: qZAKutQPBhqbC3w0uTfHNEl4Oes.roa (hash: WSklXQH6CKCwMHKCLxLhSKAUiLi3+4CRfzgpAwPPYgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:3e:2d:df:e4:84:f7:71:1c:c3:fc:11:40:f6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab Validity Not Before: Dec 7 06:01:04 2025 GMT Not After : Dec 8 06:01:04 2025 GMT Subject: CN=e98d9425c186a994167aeba3c90a8cccc04d001f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:d1:54:86:73:51:20:82:98:43:7f:79:49: 80:11:51:6e:4d:8a:16:b9:2d:04:6d:9d:17:fb:cb: 08:b3:f4:54:ef:33:59:25:9b:2a:41:c0:a0:ce:27: 71:ac:0b:53:93:c9:39:bb:4d:49:9b:c3:1b:b4:ae: e2:b8:27:f7:93:a9:ed:b0:ba:51:02:06:8b:7d:40: ec:0e:52:22:8b:ce:57:32:37:45:e0:eb:6e:b6:71: 89:40:4b:30:92:34:96:ea:97:23:0a:47:e7:ce:89: af:6d:14:b8:98:71:b8:60:ad:fd:de:8c:41:df:18: 79:78:e0:d7:31:bc:8f:79:97:a0:8e:ea:12:bf:7e: 76:fc:7f:55:62:8a:d8:64:b5:6a:61:02:aa:40:b7: 09:ac:5b:fd:16:d6:48:87:bb:ec:c0:7f:96:72:b4: fd:c1:a0:22:2c:97:b2:64:97:b7:f6:f0:8e:a6:4a: 0f:6c:4f:70:b6:c3:6a:94:8b:ae:5f:b7:3c:8e:88: de:d1:3f:9c:bb:0f:56:66:70:d6:2e:90:55:d2:05: 1e:a0:ef:68:10:0f:c6:31:f6:28:ae:00:ce:54:8d: fa:e8:f9:49:1b:91:e1:13:3b:bc:9b:58:5e:1a:91: 1a:96:6c:04:2d:9c:a7:fa:65:f5:ac:df:37:81:0b: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8D:94:25:C1:86:A9:94:16:7A:EB:A3:C9:0A:8C:CC:C0:4D:00:1F X509v3 Authority Key Identifier: keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:37:4d:37:64:92:ae:3a:b8:f1:b4:fe:f5:39:96:3a:df:b0: 01:36:35:1f:03:c7:c7:f8:c5:c2:78:31:f3:a9:a8:3c:4d:0e: 96:e5:da:59:64:2e:b4:4d:67:b1:21:5d:dc:3f:77:7f:7d:94: 24:59:8b:87:d4:40:fc:13:a6:b2:11:11:c3:3e:84:8d:ae:09: 54:e2:fd:5e:e1:ac:ea:1a:ec:b4:aa:a1:5a:27:0d:c8:77:0d: 6a:35:66:bd:8e:68:2f:64:bc:17:d2:ca:6e:dc:1e:52:86:af: 4f:6e:e3:93:94:91:1c:14:e4:42:ce:b2:24:80:c3:3f:fe:06: 0a:0f:f2:69:85:4c:d9:cb:4f:ec:e4:25:26:ad:6a:d2:99:79: 9a:06:fe:63:3f:86:a7:3b:fd:e9:54:55:62:68:54:1a:50:68: 33:3e:de:a9:13:43:c9:99:d6:91:75:3c:58:6c:ff:58:1b:9f: fd:bb:58:ac:6c:64:3f:13:8e:3a:0b:8d:3e:07:3d:15:48:82: c6:d3:f6:23:db:c1:7e:0d:b6:5c:42:d1:0c:a2:12:eb:ff:17: e6:1a:61:52:a8:77:9b:3b:a0:9e:43:57:da:2a:da:e2:70:e4: 88:e4:3d:d3:61:f1:ea:25:ff:98:2f:6f:5e:b5:81:64:26:7c: 1e:49:07:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Zj4t3+SE93Ecw/wRQPadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzNjYjM4NzVkOTEyMTkyNjFiM2FlOTAxMDgxMzExYTVh MDcxYWIwHhcNMjUxMjA3MDYwMTA0WhcNMjUxMjA4MDYwMTA0WjAzMTEwLwYDVQQD EyhlOThkOTQyNWMxODZhOTk0MTY3YWViYTNjOTBhOGNjY2MwNGQwMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteTRVIZzUSCCmEN/eUmAEVFuTYoW uS0EbZ0X+8sIs/RU7zNZJZsqQcCgzidxrAtTk8k5u01Jm8MbtK7iuCf3k6ntsLpR AgaLfUDsDlIii85XMjdF4OtutnGJQEswkjSW6pcjCkfnzomvbRS4mHG4YK393oxB 3xh5eODXMbyPeZegjuoSv352/H9VYorYZLVqYQKqQLcJrFv9FtZIh7vswH+WcrT9 waAiLJeyZJe39vCOpkoPbE9wtsNqlIuuX7c8joje0T+cuw9WZnDWLpBV0gUeoO9o EA/GMfYorgDOVI366PlJG5HhEzu8m1heGpEalmwELZyn+mX1rN83gQsaXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmNlCXBhqmUFnrro8kKjMzATQAfMB8GA1UdIwQY MBaAFC5zyzh12RIZJhs66QEIExGloHGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUt ZjRhZmZjODAyOGYzLzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUtZjRhZmZjODAyOGYz LzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITdNN2SS rjq48bT+9TmWOt+wATY1HwPHx/jFwngx86moPE0OluXaWWQutE1nsSFd3D93f32U JFmLh9RA/BOmshERwz6Eja4JVOL9XuGs6hrstKqhWicNyHcNajVmvY5oL2S8F9LK btweUoavT27jk5SRHBTkQs6yJIDDP/4GCg/yaYVM2ctP7OQlJq1q0pl5mgb+Yz+G pzv96VRVYmhUGlBoMz7eqRNDyZnWkXU8WGz/WBuf/btYrGxkPxOOOguNPgc9FUiC xtP2I9vBfg22XELRDKIS6/8X5hphUqh3mzugnkNX2ira4nDkiOQ902Hx6iX/mC9v XrWBZCZ8HkkHIw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:35:31 2025 by rpki-client