This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json) Hash identifier: Aq7KiKp3oguSFVCGX68lKARPU3HYzSDyHLVf2fYFu3M= Subject key identifier: 7F:69:FA:93:62:2A:53:E5:64:A3:D7:C2:EB:EE:83:FD:BD:6A:77:D8 Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d Certificate serial: 019B22198A6D00BA572B0EF04B928044F38B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft Manifest number: 0430 Signing time: Mon 15 Dec 2025 13:00:57 +0000 Manifest this update: Mon 15 Dec 2025 13:00:57 +0000 Manifest next update: Tue 16 Dec 2025 13:00:57 +0000 Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: 7ygU46OtT53U/xxoAHq8a4IJU/URo9CilGzE3lyqPho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:8a:6d:00:ba:57:2b:0e:f0:4b:92:80:44:f3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d Validity Not Before: Dec 15 13:00:57 2025 GMT Not After : Dec 16 13:00:57 2025 GMT Subject: CN=7f69fa93622a53e564a3d7c2ebee83fdbd6a77d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:04:f4:7d:cf:dd:18:ed:dc:23:d9:79:87: e6:e9:3b:b9:af:6a:45:2f:51:d7:2b:e7:16:95:dd: 74:85:ea:4d:8d:0e:67:a5:0b:64:9d:78:7a:e3:16: c2:7e:68:3e:c9:cf:f2:6c:b4:c5:6a:84:8d:af:d1: 1e:eb:7a:09:19:b4:d4:4c:59:2f:1c:cc:f0:aa:36: 55:bb:4e:aa:ae:ae:af:53:c9:0c:5e:4d:37:17:d6: 49:dd:fd:78:7c:18:67:c3:8f:98:0f:f3:d3:10:d9: 86:d7:43:6b:a3:00:c0:4f:98:eb:eb:b1:7b:35:7d: 29:11:b7:73:49:08:28:8b:64:28:e1:c4:25:71:72: 9a:92:dc:87:ec:6f:f7:3e:d4:33:f8:03:d0:b9:ea: 20:bb:25:3d:ce:77:e1:5c:a0:ed:5d:42:ee:1c:90: 34:ee:f4:f6:1e:06:e5:f4:18:0b:00:01:3b:82:e3: ee:24:a8:e1:35:05:e1:3f:06:61:63:d4:1d:15:7f: 97:2d:de:b4:08:33:c9:6b:b7:bd:89:0f:4a:2e:63: 59:48:bb:b9:1b:40:8f:df:7a:e7:54:a7:a2:16:7d: 88:f1:10:66:40:2f:3a:5e:8b:43:90:3d:3e:fc:6f: 88:b3:29:dc:c1:5b:a2:ae:7e:2a:1e:d6:cb:bf:4b: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:FA:93:62:2A:53:E5:64:A3:D7:C2:EB:EE:83:FD:BD:6A:77:D8 X509v3 Authority Key Identifier: keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:13:88:b9:02:b7:12:52:d6:3e:e0:dc:81:23:72:52:82:c1: 5e:87:4c:e6:be:df:35:24:72:6f:e3:27:f4:1f:ee:ae:6d:cd: 0d:32:4d:73:75:d9:b8:7c:25:d0:4d:65:7b:21:77:5e:a9:f2: 27:b8:ce:68:ad:3f:ba:fc:c0:83:8d:cc:1a:11:1f:f0:7b:a6: 40:57:8d:8f:ed:ff:b2:0d:3d:c8:64:20:38:6e:e5:53:19:b7: e5:f5:a0:16:3e:f0:c8:05:3f:a0:56:c0:ef:bc:d4:c9:2f:44: c7:70:f7:2d:be:fb:87:78:30:fc:6a:6b:46:0d:6f:d9:92:90: dd:e1:44:e8:8f:e9:f5:61:a5:77:5b:30:07:e9:42:a5:e0:04: 8a:eb:e8:ea:f7:d8:0d:02:17:d1:c4:d8:98:c2:e3:51:b7:d0: f2:a7:ae:99:72:cb:e5:3f:0e:2e:b2:8f:ad:97:89:86:98:25: f1:d0:8d:9d:cc:19:79:70:05:74:20:83:09:df:10:3a:8f:a2: bb:1b:ea:19:83:6a:81:17:31:65:b8:a7:56:c0:e4:05:18:eb: 88:11:76:f5:ac:92:a0:5d:ca:49:dc:e6:43:1a:ea:ff:7f:81: f9:c8:ef:67:f9:52:ac:f3:8c:fb:4d:68:99:53:34:eb:ff:68: b9:51:98:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGYptALpXKw7wS5KARPOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzQ2ZDNiZDNlMmRkZTYxNjQwMjBkZWIwYjVkODkyMmM2 NDc2NmQwHhcNMjUxMjE1MTMwMDU3WhcNMjUxMjE2MTMwMDU3WjAzMTEwLwYDVQQD Eyg3ZjY5ZmE5MzYyMmE1M2U1NjRhM2Q3YzJlYmVlODNmZGJkNmE3N2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVEE9H3P3Rjt3CPZeYfm6Tu5r2pF L1HXK+cWld10hepNjQ5npQtknXh64xbCfmg+yc/ybLTFaoSNr9Ee63oJGbTUTFkv HMzwqjZVu06qrq6vU8kMXk03F9ZJ3f14fBhnw4+YD/PTENmG10NrowDAT5jr67F7 NX0pEbdzSQgoi2Qo4cQlcXKaktyH7G/3PtQz+APQueoguyU9znfhXKDtXULuHJA0 7vT2Hgbl9BgLAAE7guPuJKjhNQXhPwZhY9QdFX+XLd60CDPJa7e9iQ9KLmNZSLu5 G0CP33rnVKeiFn2I8RBmQC86XotDkD0+/G+IsyncwVuirn4qHtbLv0tiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9p+pNiKlPlZKPXwuvug/29anfYMB8GA1UdIwQY MBaAFJZ0bTvT4t3mFkAg3rC12JIsZHZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMt MDgwNTQxOWQ3MjFhLzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMtMDgwNTQxOWQ3MjFh LzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShOIuQK3 ElLWPuDcgSNyUoLBXodM5r7fNSRyb+Mn9B/urm3NDTJNc3XZuHwl0E1leyF3Xqny J7jOaK0/uvzAg43MGhEf8HumQFeNj+3/sg09yGQgOG7lUxm35fWgFj7wyAU/oFbA 77zUyS9Ex3D3Lb77h3gw/GprRg1v2ZKQ3eFE6I/p9WGld1swB+lCpeAEiuvo6vfY DQIX0cTYmMLjUbfQ8qeumXLL5T8OLrKPrZeJhpgl8dCNncwZeXAFdCCDCd8QOo+i uxvqGYNqgRcxZbinVsDkBRjriBF29aySoF3KSdzmQxrq/3+B+cjvZ/lSrPOM+01o mVM06/9ouVGYZA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:45:08 2025 by rpki-client