This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json) Hash identifier: VjO17WcoNeND4irgoRHep87QDftlB8GRCc8pNDqeoeo= Subject key identifier: AC:1B:09:C9:CD:DD:2B:03:C1:23:61:D9:29:47:58:DA:33:B0:37:CB Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb Certificate serial: 019B1F86A5641BBF5173DC2D499A1F9F3BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft Manifest number: 04A0 Signing time: Mon 15 Dec 2025 01:01:16 +0000 Manifest this update: Mon 15 Dec 2025 01:01:16 +0000 Manifest next update: Tue 16 Dec 2025 01:01:16 +0000 Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: 64CH8tp68jd/ALg18pXLsaMe4sIdIKsqk8e1xKkvT1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:a5:64:1b:bf:51:73:dc:2d:49:9a:1f:9f:3b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb Validity Not Before: Dec 15 01:01:16 2025 GMT Not After : Dec 16 01:01:16 2025 GMT Subject: CN=ac1b09c9cddd2b03c12361d9294758da33b037cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:fc:6a:20:92:a3:f9:e2:50:a2:b0:05:d5: e7:bd:8a:df:24:26:8e:3a:22:c5:2c:33:da:0a:40: 1d:c5:35:cd:97:d4:d9:9f:89:15:5d:54:e3:c3:56: 3e:34:fd:85:1b:72:ca:5e:bf:f4:d7:fe:96:e5:f9: a8:67:4e:f4:09:11:e2:02:d3:df:76:24:03:a0:3f: 1c:e0:0a:a0:8e:ff:2a:47:64:c8:ef:c0:4b:b8:b4: 61:4c:d7:94:c5:dd:c4:cc:b6:3f:5a:20:a7:b4:58: 24:c9:60:f9:89:7b:27:65:6e:c9:b8:03:83:b0:93: c0:37:9b:db:e4:07:43:56:48:a3:c7:d2:48:06:0c: 6e:95:b5:3e:42:88:95:39:f1:80:d3:40:5a:e2:e6: 06:d7:8a:ac:61:8b:b7:02:3c:fa:ed:12:86:fb:7a: 5d:d0:be:ea:b6:1e:29:54:88:e1:8f:b3:64:ec:79: 48:8f:fe:ba:fb:8c:62:6b:a4:33:c0:7e:a0:c7:93: 35:a1:98:04:78:f9:27:33:e9:12:08:9f:54:71:d4: 0b:8b:25:81:d4:4c:bb:23:58:4f:43:82:1c:ec:5a: ef:93:1b:1d:3c:f5:1c:9b:02:d2:f9:f5:9b:14:ac: 0d:90:24:04:35:81:9c:d6:64:f2:26:50:b0:47:62: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1B:09:C9:CD:DD:2B:03:C1:23:61:D9:29:47:58:DA:33:B0:37:CB X509v3 Authority Key Identifier: keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3c:75:a4:86:5d:fa:e5:df:61:aa:0b:1d:50:e7:c2:bd:e6: 2c:72:1e:82:49:1d:19:d2:f6:7f:65:e6:75:2e:7b:d6:9c:2c: 13:ba:a3:8a:55:b6:f5:ee:be:23:ae:05:8d:5a:34:ad:63:ee: 5c:35:d7:aa:f5:a7:0c:e8:27:b1:da:35:cf:31:95:93:30:b9: 09:92:89:fd:f2:32:50:ff:ef:9e:5c:9a:6a:94:f3:10:71:fe: eb:0f:ac:02:16:cd:e8:6d:18:d8:8e:5a:2e:a7:b2:44:4c:01: bd:be:6b:f6:0a:17:32:0a:35:59:28:63:b7:b3:96:46:5b:aa: 49:a3:73:85:e1:64:76:b1:b9:8b:77:1d:25:09:a8:f9:65:1b: db:55:bb:90:49:95:2a:a2:67:f4:39:82:60:7e:1f:d7:59:17: 6b:20:de:8b:15:21:27:7b:99:6e:9e:99:46:ef:95:d2:86:7b: 4f:1c:1e:ac:2a:4d:e2:09:9b:0e:f7:8b:a9:78:b4:d9:16:10: de:53:86:e6:f8:7a:4d:58:2c:3f:ee:fe:23:25:cc:95:ec:c1: 92:4e:bf:ac:02:6e:3d:8c:85:33:a1:88:2a:58:c4:34:f3:f3: ea:3b:12:61:da:77:33:57:84:c0:56:14:c9:bb:d4:e1:76:dd: f3:4e:31:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhqVkG79Rc9wtSZofnzu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWQzYzAwZGU4MmZiZWViM2IzOGFlYzMyZmQ3ZDJjN2M5 YTk4ZWIwHhcNMjUxMjE1MDEwMTE2WhcNMjUxMjE2MDEwMTE2WjAzMTEwLwYDVQQD EyhhYzFiMDljOWNkZGQyYjAzYzEyMzYxZDkyOTQ3NThkYTMzYjAzN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFr8aiCSo/niUKKwBdXnvYrfJCaO OiLFLDPaCkAdxTXNl9TZn4kVXVTjw1Y+NP2FG3LKXr/01/6W5fmoZ070CRHiAtPf diQDoD8c4Aqgjv8qR2TI78BLuLRhTNeUxd3EzLY/WiCntFgkyWD5iXsnZW7JuAOD sJPAN5vb5AdDVkijx9JIBgxulbU+QoiVOfGA00Ba4uYG14qsYYu3Ajz67RKG+3pd 0L7qth4pVIjhj7Nk7HlIj/66+4xia6QzwH6gx5M1oZgEePknM+kSCJ9UcdQLiyWB 1Ey7I1hPQ4Ic7FrvkxsdPPUcmwLS+fWbFKwNkCQENYGc1mTyJlCwR2I46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwbCcnN3SsDwSNh2SlHWNozsDfLMB8GA1UdIwQY MBaAFC0dPADegvvus7OK7DL9fSx8mpjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFIwOEFONkMtLTZ6czRyc012MTlMSHlhbU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82NmFiOGItYmIzOC00MWJlLTlhOGIt ZTM1OWM5ZDdiOTA3LzEvTFIwOEFONkMtLTZ6czRyc012MTlMSHlhbU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS82NmFiOGItYmIzOC00MWJlLTlhOGItZTM1OWM5ZDdiOTA3 LzEvTFIwOEFONkMtLTZ6czRyc012MTlMSHlhbU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzx1pIZd +uXfYaoLHVDnwr3mLHIegkkdGdL2f2XmdS571pwsE7qjilW29e6+I64FjVo0rWPu XDXXqvWnDOgnsdo1zzGVkzC5CZKJ/fIyUP/vnlyaapTzEHH+6w+sAhbN6G0Y2I5a LqeyREwBvb5r9goXMgo1WShjt7OWRluqSaNzheFkdrG5i3cdJQmo+WUb21W7kEmV KqJn9DmCYH4f11kXayDeixUhJ3uZbp6ZRu+V0oZ7TxwerCpN4gmbDveLqXi02RYQ 3lOG5vh6TVgsP+7+IyXMlezBkk6/rAJuPYyFM6GIKljENPPz6jsSYdp3M1eEwFYU ybvU4Xbd804xnw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:20 2025 by rpki-client