This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json) Hash identifier: A63ZAyQWMljW/Vh79Si9zvJTKLXrCHUZCh1i7H4KKWA= Subject key identifier: BA:B4:2B:60:C2:DB:40:A4:FD:38:88:9F:2E:C4:04:0D:F7:1A:53:CF Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a Certificate serial: 019B424A2E12DDCEDC56D406B05C94223618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft Manifest number: 135C Signing time: Sun 21 Dec 2025 19:01:56 +0000 Manifest this update: Sun 21 Dec 2025 19:01:56 +0000 Manifest next update: Mon 22 Dec 2025 19:01:56 +0000 Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: NFvkIs4GAQQHWYVUVh1aeL5YtQgXJm1t86+50bM+ISI=) 2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:2e:12:dd:ce:dc:56:d4:06:b0:5c:94:22:36:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a Validity Not Before: Dec 21 19:01:56 2025 GMT Not After : Dec 22 19:01:56 2025 GMT Subject: CN=bab42b60c2db40a4fd38889f2ec4040df71a53cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:fb:3b:c3:59:e5:ae:68:c1:f2:dc:2a:55: 07:7f:e4:5a:66:2c:95:6c:7c:ad:33:93:10:20:94: 54:c0:34:70:62:70:91:18:18:12:ff:f6:c2:ac:f4: dc:12:2d:b4:a1:4c:2e:c0:4b:23:a9:f9:10:20:b7: aa:18:c6:3b:85:bf:9c:b4:ce:84:2c:b9:a4:62:a4: f4:10:b4:cc:1b:67:3e:32:d4:56:a3:d9:00:19:70: c8:80:0e:92:29:1f:39:98:4d:e6:46:a2:69:6d:1e: f5:be:b0:45:b4:44:34:bc:ad:71:a7:76:6e:81:ec: bf:e8:9a:46:2d:39:73:74:39:89:8d:14:31:e6:ea: 4d:a0:b6:78:ea:dd:f9:6b:97:b4:58:64:69:34:00: 0f:bc:27:11:03:18:70:3b:cb:13:92:e5:fb:27:20: c4:05:9f:75:8e:7d:60:06:ad:da:44:bb:c8:92:e8: 8c:01:ee:b2:d9:9e:e5:82:76:f6:bc:e6:7c:73:91: ea:78:23:8e:eb:fe:30:3e:9c:c7:38:94:07:f1:1f: 21:ab:de:85:57:a4:4e:b2:bb:66:d1:a4:fa:68:3c: e5:c9:4a:35:37:2b:52:01:28:e1:0c:67:61:05:29: db:c1:e5:c1:1f:4e:13:3b:31:cb:d9:91:5f:4f:1d: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:2B:60:C2:DB:40:A4:FD:38:88:9F:2E:C4:04:0D:F7:1A:53:CF X509v3 Authority Key Identifier: keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:63:99:32:7d:da:4f:52:df:f2:d2:d7:d3:b4:4e:59:da:60: b9:a8:3a:46:c3:ba:b0:d3:fc:f1:d5:d4:ae:5e:ba:9f:2a:f9: a4:22:69:2c:4e:6e:ca:78:38:56:f9:11:5f:6b:7b:19:79:4f: 1f:d1:8d:a2:fe:81:f0:02:00:3d:3f:f0:da:eb:a9:b1:c7:b6: 8d:7b:36:d0:dc:c5:2f:b3:46:eb:e7:00:08:aa:43:80:57:0f: 24:d0:55:1d:17:74:bc:fc:e8:01:33:66:18:e6:71:1d:d7:5c: 67:95:1b:37:f9:7f:19:c9:a1:9c:ad:47:d4:21:7e:7f:09:bd: 27:c7:87:39:ee:dc:32:6f:cb:6b:5d:22:86:76:04:ec:d0:95: 3a:66:a3:4d:44:ff:05:9d:c1:66:8c:3f:04:8c:af:8a:b0:35: d5:6b:a8:0b:b8:8e:bb:f1:94:e0:a7:26:c7:ca:f4:00:61:c6: bd:d4:5e:4d:e7:cd:be:2a:e3:8e:d6:45:10:78:54:d9:20:a5: d2:4b:41:2c:92:a3:51:fb:60:4b:38:68:04:b8:87:a3:9f:a9: 33:3d:8d:3a:5a:c0:0a:89:ec:c6:09:bf:24:95:a8:28:a4:8d: d3:bf:10:33:59:bf:6e:0c:1e:5b:3a:68:12:65:13:ea:0b:ee: ce:f2:8b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSi4S3c7cVtQGsFyUIjYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl MDk5MGEwHhcNMjUxMjIxMTkwMTU2WhcNMjUxMjIyMTkwMTU2WjAzMTEwLwYDVQQD EyhiYWI0MmI2MGMyZGI0MGE0ZmQzODg4OWYyZWM0MDQwZGY3MWE1M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWn7O8NZ5a5owfLcKlUHf+RaZiyV bHytM5MQIJRUwDRwYnCRGBgS//bCrPTcEi20oUwuwEsjqfkQILeqGMY7hb+ctM6E LLmkYqT0ELTMG2c+MtRWo9kAGXDIgA6SKR85mE3mRqJpbR71vrBFtEQ0vK1xp3Zu gey/6JpGLTlzdDmJjRQx5upNoLZ46t35a5e0WGRpNAAPvCcRAxhwO8sTkuX7JyDE BZ91jn1gBq3aRLvIkuiMAe6y2Z7lgnb2vOZ8c5HqeCOO6/4wPpzHOJQH8R8hq96F V6ROsrtm0aT6aDzlyUo1NytSASjhDGdhBSnbweXBH04TOzHL2ZFfTx1EYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq0K2DC20Ck/TiIny7EBA33GlPPMB8GA1UdIwQY MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWOZMn3a T1Lf8tLX07ROWdpguag6RsO6sNP88dXUrl66nyr5pCJpLE5uyng4VvkRX2t7GXlP H9GNov6B8AIAPT/w2uupsce2jXs20NzFL7NG6+cACKpDgFcPJNBVHRd0vPzoATNm GOZxHddcZ5UbN/l/GcmhnK1H1CF+fwm9J8eHOe7cMm/La10ihnYE7NCVOmajTUT/ BZ3BZow/BIyvirA11WuoC7iOu/GU4Kcmx8r0AGHGvdReTefNvirjjtZFEHhU2SCl 0ktBLJKjUftgSzhoBLiHo5+pMz2NOlrAConsxgm/JJWoKKSN078QM1m/bgweWzpo EmUT6gvuzvKLcw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:09 2025 by rpki-client