This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json) Hash identifier: Wbv1NbjBQjWoHuRsb3v4WzhgpoK9kcYaPLuiIhFC7Oc= Subject key identifier: 91:CA:0D:CC:E9:6B:4E:A5:CB:66:D5:81:69:A1:01:D9:49:F3:1A:3A Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71 Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71 Certificate serial: 019B6CC5B5305F5F6D8215493FA56F91EEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft Manifest number: 12B4 Signing time: Tue 30 Dec 2025 01:00:54 +0000 Manifest this update: Tue 30 Dec 2025 01:00:54 +0000 Manifest next update: Wed 31 Dec 2025 01:00:54 +0000 Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: wdmcchlmCDP2Y4kcfZoJDbe7eQwBlSCyKRDEyiMFy24=) 2: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (hash: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:b5:30:5f:5f:6d:82:15:49:3f:a5:6f:91:ee:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71 Validity Not Before: Dec 30 01:00:54 2025 GMT Not After : Dec 31 01:00:54 2025 GMT Subject: CN=91ca0dcce96b4ea5cb66d58169a101d949f31a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:8d:5b:ab:d0:25:a1:a1:7f:93:37:cb:77: 78:81:d7:ec:9e:6a:5c:d2:32:c9:f7:6b:46:41:12: bb:2e:84:a0:92:21:36:34:c2:16:b8:0a:6b:1a:6d: c9:16:e6:32:b5:ea:ab:a5:06:34:71:44:54:98:f7: 74:0f:5a:7e:12:82:14:1e:e9:43:75:d1:fd:37:89: 86:b2:e5:7d:4c:ca:f2:29:77:f5:0e:3b:6b:3c:a2: 5b:f0:12:5b:cc:a5:2c:69:12:75:a4:d6:9f:70:5c: 8e:fb:3d:1a:4c:5e:e1:21:54:84:0f:b0:39:ff:bb: e8:92:7e:4b:f1:0c:18:3e:a7:60:35:4e:37:89:87: 26:ae:0d:d6:31:05:cb:57:6d:c6:93:c1:29:57:ca: 48:46:87:7d:77:4a:59:be:b2:75:bb:2a:ed:a2:dc: 31:7e:dc:ba:c9:36:f6:75:ca:62:d4:56:2b:4b:2d: 0e:d1:01:5a:86:c2:70:24:a3:ba:5f:ea:b4:66:30: d0:bd:4b:df:90:45:fb:55:2f:a8:ac:a6:0b:f9:47: 54:0f:13:fe:3a:cb:20:c3:84:de:81:59:a8:d9:ed: 8f:ec:48:e1:0d:9f:73:34:01:01:57:11:57:41:d5: 01:64:df:fa:ee:44:60:33:51:33:05:bd:d1:44:cd: 98:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CA:0D:CC:E9:6B:4E:A5:CB:66:D5:81:69:A1:01:D9:49:F3:1A:3A X509v3 Authority Key Identifier: keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4f:09:da:7f:4f:d9:ca:43:18:47:b9:0f:1c:d6:f3:1e:a0: b1:52:b6:93:30:0e:af:fc:9d:aa:68:a4:d3:fd:ad:eb:58:77: 54:67:74:3c:3e:7b:7c:6d:ac:57:00:1a:9e:eb:13:f2:30:44: 4c:a5:0a:f0:96:c4:8f:ca:40:3a:53:3a:d2:bb:fd:93:d1:29: 28:0a:2d:1e:d6:c0:94:d6:a9:f8:d8:d3:4f:bf:6a:8a:29:28: 72:50:0f:f5:2c:a7:a3:95:76:74:99:99:59:53:cb:f7:6a:67: 8e:06:1d:58:c9:ee:6b:1a:d7:d5:e7:5a:b7:85:f6:8e:96:b8: 9c:c6:b6:29:06:35:89:63:46:2e:90:a2:12:8b:50:2c:0c:fa: 17:69:81:58:23:29:94:d6:57:e5:f7:52:34:c0:9e:e8:05:5e: 76:b9:b1:33:c0:50:5e:24:03:ee:fd:72:e6:63:d0:4c:1d:bd: 49:18:58:bd:fc:07:8a:5e:5e:9e:c2:d5:31:5e:d8:6e:4b:28: 5a:13:b7:b1:23:38:12:51:90:07:bb:38:f1:55:93:9e:45:85: 48:d3:6d:85:17:1d:35:24:f9:b2:fd:8e:97:d0:fc:77:f9:f4: 88:b5:54:68:5d:ec:a0:e5:f2:85:41:03:62:f6:a3:eb:80:15: d7:e1:d4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxbUwX19tghVJP6Vvke6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmJlZDcwZGI1ZTY3M2M4MWYxMmU3MzY1YTM2YzRmM2Rh MjdiNzEwHhcNMjUxMjMwMDEwMDU0WhcNMjUxMjMxMDEwMDU0WjAzMTEwLwYDVQQD Eyg5MWNhMGRjY2U5NmI0ZWE1Y2I2NmQ1ODE2OWExMDFkOTQ5ZjMxYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIKNW6vQJaGhf5M3y3d4gdfsnmpc 0jLJ92tGQRK7LoSgkiE2NMIWuAprGm3JFuYyteqrpQY0cURUmPd0D1p+EoIUHulD ddH9N4mGsuV9TMryKXf1DjtrPKJb8BJbzKUsaRJ1pNafcFyO+z0aTF7hIVSED7A5 /7vokn5L8QwYPqdgNU43iYcmrg3WMQXLV23Gk8EpV8pIRod9d0pZvrJ1uyrtotwx fty6yTb2dcpi1FYrSy0O0QFahsJwJKO6X+q0ZjDQvUvfkEX7VS+orKYL+UdUDxP+ Ossgw4TegVmo2e2P7EjhDZ9zNAEBVxFXQdUBZN/67kRgM1EzBb3RRM2YmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHKDczpa06ly2bVgWmhAdlJ8xo6MB8GA1UdIwQY MBaAFC5r7XDbXmc8gfEuc2WjbE89ontxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1Mjct NjIzMTU2NDRiM2NlLzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1MjctNjIzMTU2NDRiM2Nl LzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhE8J2n9P 2cpDGEe5DxzW8x6gsVK2kzAOr/ydqmik0/2t61h3VGd0PD57fG2sVwAanusT8jBE TKUK8JbEj8pAOlM60rv9k9EpKAotHtbAlNap+NjTT79qiikoclAP9Syno5V2dJmZ WVPL92pnjgYdWMnuaxrX1edat4X2jpa4nMa2KQY1iWNGLpCiEotQLAz6F2mBWCMp lNZX5fdSNMCe6AVedrmxM8BQXiQD7v1y5mPQTB29SRhYvfwHil5ensLVMV7Ybkso WhO3sSM4ElGQB7s48VWTnkWFSNNthRcdNST5sv2Ol9D8d/n0iLVUaF3soOXyhUED Yvaj64AV1+HUPA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:53:11 2025 by rpki-client