This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json) Hash identifier: 9hROU5Mnjbj9NZQ/osyVh3jhbPgsTuB8UHbbVPLjcaA= Subject key identifier: 66:71:BA:CF:4A:B9:49:6E:33:9E:08:52:87:40:E0:19:7F:BE:BC:4D Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90 Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90 Certificate serial: 019B5A1B0560F0845647709CE888B408086D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft Manifest number: 142B Signing time: Fri 26 Dec 2025 10:01:18 +0000 Manifest this update: Fri 26 Dec 2025 10:01:18 +0000 Manifest next update: Sat 27 Dec 2025 10:01:18 +0000 Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: DOozLZ0IH4g3dq0f70CHUvW5H0yMuxwCC4E5LtglCFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:05:60:f0:84:56:47:70:9c:e8:88:b4:08:08:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90 Validity Not Before: Dec 26 10:01:18 2025 GMT Not After : Dec 27 10:01:18 2025 GMT Subject: CN=6671bacf4ab9496e339e08528740e0197fbebc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:5b:d8:45:2e:c9:fa:f0:82:5c:be:3f:e6: 51:ee:44:21:9d:c2:8c:ed:8f:0f:6e:50:a2:c2:a2: 78:69:c3:60:34:ae:7c:df:48:21:47:a6:07:a8:6b: 9e:c0:5e:fb:34:eb:32:7d:14:76:ac:b1:20:e0:fc: 32:9b:a9:6b:3a:d1:23:82:55:34:77:b4:0a:4b:a1: 7a:62:04:c7:48:30:e3:f6:e9:90:d7:ca:f8:0c:c6: e0:a7:94:c1:24:33:85:bb:e7:b7:7f:a1:67:9c:9d: 73:0a:16:1f:f3:51:28:d0:46:2a:fb:d8:93:3f:00: 35:7e:a3:d6:57:ef:9d:db:c3:c4:c6:d4:cf:e7:0d: d5:48:a7:db:e9:b7:bd:75:4d:ad:5b:68:a8:f7:31: b8:bd:cb:d6:85:18:44:b4:b5:b6:53:04:14:67:6b: fa:47:c7:d2:31:02:18:44:5a:1c:bd:bd:ea:a4:ee: c6:13:f4:0b:f4:ec:30:78:e9:7e:07:f2:2d:81:92: 69:5e:ac:43:5c:2c:13:de:58:3b:a2:3e:ed:68:b2: 79:b4:8d:2c:07:49:f5:49:b9:53:18:e7:d9:b3:e2: de:f8:77:07:bd:01:33:40:cf:ff:e5:d9:8e:cf:28: fe:fd:92:a5:a4:cf:ca:06:1a:0e:7b:37:a1:34:8e: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:71:BA:CF:4A:B9:49:6E:33:9E:08:52:87:40:E0:19:7F:BE:BC:4D X509v3 Authority Key Identifier: keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c8:6e:42:79:d4:5d:15:14:35:b0:9a:d6:d7:32:f2:61:6d: a7:a7:9d:7e:a7:1e:1c:cb:1e:41:6b:d7:c8:f0:76:45:42:bf: d1:17:07:56:28:40:66:be:66:33:5c:ef:35:e8:3e:a0:20:f5: 97:ee:07:eb:2e:12:80:f9:13:b9:a3:aa:59:7e:c5:e4:4b:93: 6b:ed:ce:14:ac:6b:66:58:fe:c8:20:14:fb:20:88:04:15:9f: 8e:0a:a5:7b:0b:e2:a5:1b:35:96:84:3a:0d:5a:f2:f3:b8:1a: ca:2d:ee:37:6a:9c:e3:a1:95:ca:a6:9e:b8:36:22:8d:a4:f2: 59:17:d3:fd:d4:f0:3c:a1:fa:34:58:a6:5e:fb:25:65:73:4c: 92:01:71:9e:59:8a:5f:f8:6e:8e:ad:05:0d:d9:57:5a:f0:4f: d2:fe:bb:98:b5:a3:d3:fa:0c:af:50:f6:65:e9:6e:21:cc:3c: d1:c2:5f:82:8a:85:e8:7f:a7:dc:b4:3f:1a:06:a7:2c:2b:dc: 4f:8b:ad:d2:8d:a7:4c:8d:a8:37:ff:0b:64:40:3c:86:27:a6: ae:9f:97:cc:e3:bd:58:e0:05:ee:fc:c4:e1:f9:73:77:68:ea: fa:61:5a:c0:cd:30:a7:d4:e5:fa:75:b9:15:eb:8b:59:9d:26: 5a:68:02:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwVg8IRWR3Cc6Ii0CAhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0 MDZiOTAwHhcNMjUxMjI2MTAwMTE4WhcNMjUxMjI3MTAwMTE4WjAzMTEwLwYDVQQD Eyg2NjcxYmFjZjRhYjk0OTZlMzM5ZTA4NTI4NzQwZTAxOTdmYmViYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOdb2EUuyfrwgly+P+ZR7kQhncKM 7Y8PblCiwqJ4acNgNK5830ghR6YHqGuewF77NOsyfRR2rLEg4Pwym6lrOtEjglU0 d7QKS6F6YgTHSDDj9umQ18r4DMbgp5TBJDOFu+e3f6FnnJ1zChYf81Eo0EYq+9iT PwA1fqPWV++d28PExtTP5w3VSKfb6be9dU2tW2io9zG4vcvWhRhEtLW2UwQUZ2v6 R8fSMQIYRFocvb3qpO7GE/QL9OwweOl+B/ItgZJpXqxDXCwT3lg7oj7taLJ5tI0s B0n1SblTGOfZs+Le+HcHvQEzQM//5dmOzyj+/ZKlpM/KBhoOezehNI5ftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZxus9KuUluM54IUodA4Bl/vrxNMB8GA1UdIwQY MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALshuQnnU XRUUNbCa1tcy8mFtp6edfqceHMseQWvXyPB2RUK/0RcHVihAZr5mM1zvNeg+oCD1 l+4H6y4SgPkTuaOqWX7F5EuTa+3OFKxrZlj+yCAU+yCIBBWfjgqlewvipRs1loQ6 DVry87gayi3uN2qc46GVyqaeuDYijaTyWRfT/dTwPKH6NFimXvslZXNMkgFxnlmK X/hujq0FDdlXWvBP0v67mLWj0/oMr1D2ZeluIcw80cJfgoqF6H+n3LQ/GganLCvc T4ut0o2nTI2oN/8LZEA8hiemrp+XzOO9WOAF7vzE4flzd2jq+mFawM0wp9Tl+nW5 FeuLWZ0mWmgCmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client