This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json) Hash identifier: pAxXK3CdZBt5YrN1LF97iNozbt5nkPxyN1iYus+l3cI= Subject key identifier: 05:4A:18:8D:5A:67:4A:8E:6B:64:E8:2D:6A:91:E8:D1:94:61:C6:F4 Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a Certificate serial: 019B0E252D6E82BDB42F2AAAA5FAD3253435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft Manifest number: 16C6 Signing time: Thu 11 Dec 2025 16:01:16 +0000 Manifest this update: Thu 11 Dec 2025 16:01:16 +0000 Manifest next update: Fri 12 Dec 2025 16:01:16 +0000 Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: khbSZr0pJFEKz0tesPWQNTyumdOiqqUQqCOkDAhbn+w=) 2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:2d:6e:82:bd:b4:2f:2a:aa:a5:fa:d3:25:34:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a Validity Not Before: Dec 11 16:01:16 2025 GMT Not After : Dec 12 16:01:16 2025 GMT Subject: CN=054a188d5a674a8e6b64e82d6a91e8d19461c6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:92:93:23:ae:eb:0a:1f:c0:04:82:c3:74: 1b:89:33:cb:2e:5a:82:d5:33:78:81:46:96:a6:a1: dd:ac:65:71:16:56:8a:4b:1f:43:b9:6c:85:25:d7: 46:32:05:2f:4f:16:74:a1:2d:60:e6:8d:77:af:43: 7d:ff:39:94:2b:46:5c:6c:40:65:d5:83:5c:80:3b: 57:b2:a1:d8:c1:0b:d9:cf:24:9e:6d:7c:dd:b3:f8: ba:48:da:1f:22:92:44:79:12:57:04:ee:ef:71:67: c4:fb:6d:dd:0f:3c:9c:41:a0:48:0a:ec:29:65:66: c2:33:4e:2e:8b:cd:8d:41:29:85:10:39:22:32:51: c2:0f:f4:cb:ad:27:25:b4:39:9e:3d:7a:7a:6f:d0: 2d:d0:3d:ed:c2:d6:39:2c:e5:cf:95:53:35:0f:1a: 2f:ef:07:23:bc:0d:66:ba:43:f0:07:1b:1c:0b:e7: e9:ff:71:18:af:0d:ae:3e:52:01:33:12:57:52:32: d6:15:86:45:bf:1a:9d:29:11:19:2c:bf:95:0b:83: 84:5d:b4:e0:58:8d:80:87:c0:0e:d2:a5:b8:4c:e9: 05:27:f2:1f:fe:54:83:fd:89:99:c3:9a:1a:8c:c2: d0:78:22:6a:39:cd:c7:78:c6:58:ef:f2:09:1b:a4: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:18:8D:5A:67:4A:8E:6B:64:E8:2D:6A:91:E8:D1:94:61:C6:F4 X509v3 Authority Key Identifier: keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e0:5e:68:f4:f3:03:ca:bc:8e:06:93:00:e6:e5:05:c6:35: ea:bf:e1:d6:c7:55:0b:0c:1c:73:29:1b:eb:c1:ab:1f:e4:fe: f2:7a:df:81:a3:66:76:ef:54:1b:a7:03:3d:c6:b8:d4:07:84: b8:7d:eb:51:32:03:a2:ee:2f:a9:a9:4e:58:40:17:58:d5:13: 4f:64:c5:02:ee:26:41:3e:ca:06:9a:26:31:49:a2:0b:76:46: 2d:5d:fe:8a:18:01:b7:3d:2c:4b:34:6d:a2:e5:54:db:a7:18: fc:ab:2f:7f:d5:8d:fc:18:a6:ae:68:ba:9e:e1:b3:6b:cc:d3: 56:cd:5a:89:17:6f:80:63:08:3a:75:dd:6b:1a:29:8e:b6:eb: b1:ad:d7:2c:4c:39:6f:78:43:fb:42:f3:8a:a1:c0:0e:57:3a: 58:d8:90:e5:31:cc:ec:19:94:01:ae:5f:79:e9:cb:e7:32:96: 6d:e9:2c:23:9b:97:23:00:57:b2:ca:63:e8:95:3a:f9:48:22: d3:19:bc:c3:2b:bd:dc:47:65:6f:58:b9:f4:fa:ca:10:ad:1e: 63:ed:6f:88:f7:60:49:ea:5c:5a:87:e2:f7:0d:16:c7:a1:92: 5c:41:09:c8:4a:c5:aa:62:7a:42:39:b2:50:ac:be:6d:2c:92: a7:10:7d:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJS1ugr20LyqqpfrTJTQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNjI3NjEzNjI1NDgzMGJiNDkwN2U5OGMyNThlNDkzYjQy YWFhM2EwHhcNMjUxMjExMTYwMTE2WhcNMjUxMjEyMTYwMTE2WjAzMTEwLwYDVQQD EygwNTRhMTg4ZDVhNjc0YThlNmI2NGU4MmQ2YTkxZThkMTk0NjFjNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0biSkyOu6wofwASCw3QbiTPLLlqC 1TN4gUaWpqHdrGVxFlaKSx9DuWyFJddGMgUvTxZ0oS1g5o13r0N9/zmUK0ZcbEBl 1YNcgDtXsqHYwQvZzySebXzds/i6SNofIpJEeRJXBO7vcWfE+23dDzycQaBICuwp ZWbCM04ui82NQSmFEDkiMlHCD/TLrScltDmePXp6b9At0D3twtY5LOXPlVM1Dxov 7wcjvA1mukPwBxscC+fp/3EYrw2uPlIBMxJXUjLWFYZFvxqdKREZLL+VC4OEXbTg WI2Ah8AO0qW4TOkFJ/If/lSD/YmZw5oajMLQeCJqOc3HeMZY7/IJG6QvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVKGI1aZ0qOa2ToLWqR6NGUYcb0MB8GA1UdIwQY MBaAFC5idhNiVIMLtJB+mMJY5JO0Kqo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMt OTNiOTE0NzAxNDcwLzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMtOTNiOTE0NzAxNDcw LzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeBeaPTz A8q8jgaTAOblBcY16r/h1sdVCwwccykb68GrH+T+8nrfgaNmdu9UG6cDPca41AeE uH3rUTIDou4vqalOWEAXWNUTT2TFAu4mQT7KBpomMUmiC3ZGLV3+ihgBtz0sSzRt ouVU26cY/Ksvf9WN/Bimrmi6nuGza8zTVs1aiRdvgGMIOnXdaxopjrbrsa3XLEw5 b3hD+0LziqHADlc6WNiQ5THM7BmUAa5feenL5zKWbeksI5uXIwBXsspj6JU6+Ugi 0xm8wyu93Edlb1i59PrKEK0eY+1viPdgSepcWofi9w0Wx6GSXEEJyErFqmJ6Qjmy UKy+bSySpxB9tQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:48 2025 by rpki-client