This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft File: LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json) Hash identifier: /Cgt50e6FKsz2qyomTPubxK/n2XXkzdEl0r4+cilEh8= Subject key identifier: 36:9C:EE:86:58:B6:B2:1E:10:08:24:0D:40:8D:87:90:38:1C:E7:C3 Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61 Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61 Certificate serial: 019B3E6C5A901BB2C41B93594AC334E873FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft Manifest number: 176B Signing time: Sun 21 Dec 2025 01:00:46 +0000 Manifest this update: Sun 21 Dec 2025 01:00:46 +0000 Manifest next update: Mon 22 Dec 2025 01:00:46 +0000 Files and hashes: 1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: EW5BP7FchixKGV28g4IKBoD+KGrVs4RW1w/rGiRFe7s=) 2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:5a:90:1b:b2:c4:1b:93:59:4a:c3:34:e8:73:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61 Validity Not Before: Dec 21 01:00:46 2025 GMT Not After : Dec 22 01:00:46 2025 GMT Subject: CN=369cee8658b6b21e1008240d408d8790381ce7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:32:73:bd:1a:a6:e9:27:f8:9e:65:db:ef: e7:5e:25:bc:b8:a3:f3:c5:78:9f:a4:ac:dc:cb:b9: 52:bc:e5:0b:6b:34:76:de:77:b3:e6:d6:82:35:34: bd:01:93:ef:1f:c6:5a:60:38:4d:03:2e:61:e9:ad: 8e:85:f5:6d:65:93:a7:99:f7:40:e3:66:a1:ee:4e: 6c:24:8e:59:c5:19:5f:ae:79:40:ce:13:08:1a:5d: dd:e8:a7:1c:95:b2:c5:7d:18:97:9e:56:5f:67:ef: 5d:64:51:19:a4:05:6f:bc:4a:82:c9:2c:5b:01:49: f0:eb:ff:c6:88:be:e7:83:43:7b:7f:b6:ac:e2:5e: 01:ce:b4:db:29:dd:e9:5a:2c:0b:14:89:ba:2a:01: 4b:f5:92:be:a5:30:6d:7a:d7:91:0a:a1:82:49:0b: a8:70:8c:d6:10:95:a2:a1:83:08:db:d7:2d:1e:5b: e9:24:16:83:29:7e:7c:5c:10:e2:78:3d:6c:75:d0: 1a:6f:2f:0d:a9:ad:df:71:83:d4:4f:8b:88:f5:13: cf:c1:1a:87:bf:4b:ee:84:61:2e:69:2b:7d:21:bb: eb:97:f4:2f:bb:dd:c2:bb:c4:78:57:e1:1f:c8:5e: 86:fe:d0:6a:aa:aa:e5:bf:2b:72:3f:50:90:ce:8e: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:EE:86:58:B6:B2:1E:10:08:24:0D:40:8D:87:90:38:1C:E7:C3 X509v3 Authority Key Identifier: keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:44:3a:e1:dd:35:f4:52:1c:f6:d8:f0:e3:39:03:4e:53:fc: f7:2e:59:1d:56:f6:ed:17:c9:d0:28:66:cd:2e:96:2a:14:e5: d1:93:25:d4:1a:29:43:e8:8e:4a:f8:36:2f:a0:42:e8:f0:80: b1:96:53:22:2e:01:ad:d5:28:63:fb:07:8a:8a:d5:bc:d8:e3: 20:a1:73:1d:c5:3c:46:a2:64:fe:77:f3:14:4c:da:e1:0d:28: 00:e2:2e:4f:66:a4:35:c0:66:34:ca:55:84:2b:77:75:ae:93: bf:78:55:81:cc:a3:88:95:32:6d:28:25:91:f2:6b:4b:a2:bc: f9:4c:87:19:5a:3d:e4:8d:6b:37:56:ac:84:bc:31:a4:9b:cc: 88:79:3d:c2:e2:3f:ce:79:d3:cb:57:1c:9e:15:9e:16:4d:ce: 1d:b8:ed:a4:b1:2b:92:f2:35:f1:c0:de:a3:c2:8d:4f:a0:78: a2:d8:eb:66:ef:25:9b:bc:68:8f:2e:61:f7:93:f9:5f:c5:05: f5:17:b7:cd:10:23:f0:3b:27:94:f4:f7:49:a7:70:3e:dc:03: a0:35:97:48:4f:40:eb:f7:81:85:f2:16:1b:44:b9:c7:6f:5d: f7:69:b5:39:8d:c3:57:fc:e0:72:2b:64:8b:fe:c2:36:47:18: e3:fb:1c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bFqQG7LEG5NZSsM06HP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTgxNWIwYzlkYzllZTIyMDdlYzk0MTdjZGVjMmJjNGJl MjNjNjEwHhcNMjUxMjIxMDEwMDQ2WhcNMjUxMjIyMDEwMDQ2WjAzMTEwLwYDVQQD EygzNjljZWU4NjU4YjZiMjFlMTAwODI0MGQ0MDhkODc5MDM4MWNlN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hcyc70apukn+J5l2+/nXiW8uKPz xXifpKzcy7lSvOULazR23nez5taCNTS9AZPvH8ZaYDhNAy5h6a2OhfVtZZOnmfdA 42ah7k5sJI5ZxRlfrnlAzhMIGl3d6KcclbLFfRiXnlZfZ+9dZFEZpAVvvEqCySxb AUnw6//GiL7ng0N7f7as4l4BzrTbKd3pWiwLFIm6KgFL9ZK+pTBteteRCqGCSQuo cIzWEJWioYMI29ctHlvpJBaDKX58XBDieD1sddAaby8Nqa3fcYPUT4uI9RPPwRqH v0vuhGEuaSt9Ibvrl/Qvu93Cu8R4V+EfyF6G/tBqqqrlvytyP1CQzo5M1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDac7oZYtrIeEAgkDUCNh5A4HOfDMB8GA1UdIwQY MBaAFC0YFbDJ3J7iIH7JQXzewrxL4jxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQt ZDIwMmYyYTQwMDgxLzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQtZDIwMmYyYTQwMDgx LzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0Q64d01 9FIc9tjw4zkDTlP89y5ZHVb27RfJ0ChmzS6WKhTl0ZMl1BopQ+iOSvg2L6BC6PCA sZZTIi4BrdUoY/sHiorVvNjjIKFzHcU8RqJk/nfzFEza4Q0oAOIuT2akNcBmNMpV hCt3da6Tv3hVgcyjiJUybSglkfJrS6K8+UyHGVo95I1rN1ashLwxpJvMiHk9wuI/ znnTy1ccnhWeFk3OHbjtpLErkvI18cDeo8KNT6B4otjrZu8lm7xojy5h95P5X8UF 9Re3zRAj8DsnlPT3SadwPtwDoDWXSE9A6/eBhfIWG0S5x29d92m1OY3DV/zgcitk i/7CNkcY4/scSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:15 2025 by rpki-client