This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json) Hash identifier: Ee/SSz9wnYO9P+jM/DeAU2DCX5IINz7cgXJ7hWIPWMw= Subject key identifier: A4:9D:0E:10:68:5E:FD:EB:9E:6E:1A:49:7F:86:99:C6:6F:42:04:4D Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Certificate serial: 019B5A88CA4680B1B3BFC56C86D5AB49ED9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft Manifest number: 06E6 Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: bV58cnAlkzcE/2TAKO+iLswsRlmlhYPTtDLxg4/s+xY=) 2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ca:46:80:b1:b3:bf:c5:6c:86:d5:ab:49:ed:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=a49d0e10685efdeb9e6e1a497f8699c66f42044d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:9c:5f:a7:42:fe:5e:f5:60:f6:9b:62:6c: 5d:e8:ba:39:a4:2f:51:19:d8:ec:58:fa:d3:8d:9c: bd:00:fb:87:c5:ca:93:3e:ac:86:59:ec:46:f5:40: 61:3c:99:ec:ab:e5:ea:39:1f:f1:6e:08:40:33:c2: 3d:07:82:ce:24:3f:89:1a:20:2c:11:d7:f6:c3:a0: 3e:41:74:9d:a3:98:b0:39:8e:a3:e0:01:ba:1f:7c: bf:87:fc:d5:b0:67:61:85:21:3a:81:78:be:4b:47: 43:28:65:e2:29:92:28:6a:8e:42:00:a4:46:89:00: de:14:d5:cc:b6:fc:eb:62:1a:10:7c:25:39:4c:ca: 36:09:ea:3d:ca:bf:2d:27:b4:82:67:ec:fb:66:1b: e1:9d:ee:f4:81:be:8b:44:c6:61:50:f7:d7:7e:9e: db:d7:ba:19:5f:9a:19:3e:04:ea:26:6f:7b:24:db: 77:3b:1c:48:47:59:62:2b:33:b0:f4:c7:ae:b8:35: d6:d1:5a:70:31:ab:7e:ed:3f:42:2a:ed:ab:d6:e5: 95:bf:fc:26:a6:8c:14:4d:fb:5b:c8:e4:99:85:ff: 7f:ba:94:c5:8e:e3:ea:99:00:0c:87:1a:a4:3a:8e: af:a8:11:4d:17:aa:4e:6e:39:37:89:16:cc:21:14: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:0E:10:68:5E:FD:EB:9E:6E:1A:49:7F:86:99:C6:6F:42:04:4D X509v3 Authority Key Identifier: keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b7:09:1f:93:a9:3c:7b:5b:cc:fb:f1:bd:12:b7:bb:64:f0: e0:75:c0:ea:57:78:fa:e9:23:7e:a5:fc:99:d1:9a:87:53:d5: 3b:b5:36:97:0d:61:ee:a1:56:11:69:f4:e0:00:d4:09:78:7e: d0:ea:b4:4e:4d:a1:f3:6b:a1:96:fb:8b:8e:0d:bc:ba:4d:e0: dc:a3:c3:90:e0:4b:63:e4:0a:54:65:2f:9f:6f:5f:53:70:6b: 22:de:41:cb:7c:78:1e:bd:d7:59:37:ac:cd:be:37:4a:9c:5b: 9c:67:3d:e1:2f:71:f9:14:4d:83:a4:7a:d0:7f:5d:7b:77:89: 1a:21:3a:17:7a:d2:9d:4d:e0:30:a6:92:70:41:f1:9b:ad:6a: 40:d0:e2:fc:2c:12:79:66:4f:d5:08:ff:0b:ea:08:db:5e:da: 00:fe:42:c7:2b:88:d7:dd:d2:0c:d5:65:ed:d8:ae:4d:4c:40: 6a:30:55:cd:ac:c0:e7:e5:a5:76:bb:b8:30:4a:22:e8:aa:36: b7:dd:04:66:12:53:fe:11:e5:c5:ba:a0:9a:b5:8a:38:57:af: 80:f3:ac:b7:21:8a:af:87:e2:27:cf:d2:8b:e6:10:47:c9:c9: df:35:95:72:e1:14:ff:71:a4:5a:8e:c8:27:49:42:51:23:36: fc:fb:a9:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMpGgLGzv8VshtWrSe2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx M2QwOTYwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD EyhhNDlkMGUxMDY4NWVmZGViOWU2ZTFhNDk3Zjg2OTljNjZmNDIwNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFycX6dC/l71YPabYmxd6Lo5pC9R GdjsWPrTjZy9APuHxcqTPqyGWexG9UBhPJnsq+XqOR/xbghAM8I9B4LOJD+JGiAs Edf2w6A+QXSdo5iwOY6j4AG6H3y/h/zVsGdhhSE6gXi+S0dDKGXiKZIoao5CAKRG iQDeFNXMtvzrYhoQfCU5TMo2Ceo9yr8tJ7SCZ+z7Zhvhne70gb6LRMZhUPfXfp7b 17oZX5oZPgTqJm97JNt3OxxIR1liKzOw9MeuuDXW0VpwMat+7T9CKu2r1uWVv/wm powUTftbyOSZhf9/upTFjuPqmQAMhxqkOo6vqBFNF6pObjk3iRbMIRQRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSdDhBoXv3rnm4aSX+GmcZvQgRNMB8GA1UdIwQY MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrcJH5Op PHtbzPvxvRK3u2Tw4HXA6ld4+ukjfqX8mdGah1PVO7U2lw1h7qFWEWn04ADUCXh+ 0Oq0Tk2h82uhlvuLjg28uk3g3KPDkOBLY+QKVGUvn29fU3BrIt5By3x4Hr3XWTes zb43SpxbnGc94S9x+RRNg6R60H9de3eJGiE6F3rSnU3gMKaScEHxm61qQNDi/CwS eWZP1Qj/C+oI217aAP5CxyuI193SDNVl7diuTUxAajBVzazA5+Wldru4MEoi6Ko2 t90EZhJT/hHlxbqgmrWKOFevgPOstyGKr4fiJ8/Si+YQR8nJ3zWVcuEU/3GkWo7I J0lCUSM2/PupbA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client