This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json) Hash identifier: POQehF6dcXgUx4A5KVXtOce2jexpj7bmOqjidYi1t4M= Subject key identifier: 9B:95:9D:35:6D:C0:2A:CA:5F:39:9D:00:D2:4A:D9:57:F5:5A:58:1D Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6 Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6 Certificate serial: 019B72C75F927EAEB340AC2CE6C9383E304D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft Manifest number: 0BCF Signing time: Wed 31 Dec 2025 05:00:27 +0000 Manifest this update: Wed 31 Dec 2025 05:00:27 +0000 Manifest next update: Thu 01 Jan 2026 05:00:27 +0000 Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: faplc6owiJnVFbeEuuxp6zhjAUBbfCh90fgQlM8C69s=) 2: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (hash: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:5f:92:7e:ae:b3:40:ac:2c:e6:c9:38:3e:30:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6 Validity Not Before: Dec 31 05:00:27 2025 GMT Not After : Jan 1 05:00:27 2026 GMT Subject: CN=9b959d356dc02aca5f399d00d24ad957f55a581d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:23:96:75:06:35:59:d3:34:89:cf:8c:3b: 7e:d8:32:10:8a:7a:1f:5c:d1:4e:c2:e1:a3:a3:45: ca:d8:b1:ea:fa:6e:3a:4d:07:4e:34:34:64:4b:62: 9f:c8:ec:50:e5:d3:a0:b5:9e:be:6c:cd:52:d6:46: a7:9d:7d:a4:06:cd:46:1c:c5:de:bd:a7:0f:39:3f: bc:94:e8:70:9d:e5:8b:b1:80:f2:2c:5e:18:5c:40: 26:28:54:b9:a6:4b:67:cd:31:68:ed:c1:ad:cd:1f: 87:bb:12:46:b8:42:d4:f0:d8:c5:fc:6c:44:84:98: f7:cf:69:3d:83:8b:26:b3:d1:ad:e0:cb:5b:cb:46: 47:59:ee:13:7a:c2:74:fa:fd:ed:68:49:90:f6:ef: b7:d3:86:81:bd:d4:ae:8c:3c:f8:38:6e:8b:de:17: ef:fa:ac:eb:4b:a8:d7:64:ea:16:27:47:b1:09:b1: 2d:45:a8:e3:e6:41:b6:91:92:f7:2a:60:a5:11:03: c4:fd:f2:e5:36:30:a0:e5:38:5b:eb:4a:07:51:d3: d5:67:6f:b6:f7:16:a8:9b:77:84:15:a3:fc:bf:65: de:64:b4:f2:97:39:8a:cb:bd:5d:78:c4:e8:75:a0: 2a:31:0e:c1:97:53:03:5f:00:47:6a:aa:cb:77:7d: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:9D:35:6D:C0:2A:CA:5F:39:9D:00:D2:4A:D9:57:F5:5A:58:1D X509v3 Authority Key Identifier: keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:80:30:7a:94:96:9d:06:1c:58:e2:7a:43:4d:ee:0c:6f:bb: ce:4c:70:78:43:17:d2:28:e6:c9:48:96:3f:1d:78:e3:0e:bc: a6:0e:d8:c9:d6:d5:65:43:4e:70:a9:d8:b0:e4:9f:42:e4:79: 2c:ab:87:bf:92:9f:88:ea:cf:ac:a0:64:e6:b5:b2:6a:7b:8c: d1:1a:1d:49:80:8a:e3:6c:a1:d3:c1:5e:30:81:cd:1e:b1:ce: f5:4b:e3:25:02:c3:82:14:8f:0c:d6:89:4d:51:10:71:f4:8d: 1c:72:2e:8c:d5:2c:ce:90:f4:b7:33:dc:09:37:a2:b6:20:5b: 2a:5c:96:7c:a5:13:91:16:c1:ba:dd:f7:5f:cb:11:5d:c9:b3: ff:79:01:e5:6f:16:f2:b8:7b:10:05:c8:58:83:0e:ed:ea:b7: 6e:50:95:bb:a6:b2:87:c5:23:2a:32:9d:e8:f8:3d:c9:50:9b: 26:77:ea:cc:f2:0b:ae:93:e6:a3:47:b2:67:de:c3:8a:52:f2: 48:80:f1:06:d9:61:24:a9:ae:7c:a2:49:9c:d2:e9:37:a6:ea: 61:df:b3:b3:a7:59:b3:63:f4:d5:53:57:d5:ee:50:cb:df:85: 87:c7:74:cb:c8:b3:09:f9:8f:96:21:ca:2f:fe:0d:82:cc:b3: 95:c5:c9:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx1+Sfq6zQKws5sk4PjBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjQyOTFkZjk3OTYzYzVhOWI3MzJiMTM5NmYwZjFjODg3 NTA0ZDYwHhcNMjUxMjMxMDUwMDI3WhcNMjYwMTAxMDUwMDI3WjAzMTEwLwYDVQQD Eyg5Yjk1OWQzNTZkYzAyYWNhNWYzOTlkMDBkMjRhZDk1N2Y1NWE1ODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbIjlnUGNVnTNInPjDt+2DIQinof XNFOwuGjo0XK2LHq+m46TQdONDRkS2KfyOxQ5dOgtZ6+bM1S1kannX2kBs1GHMXe vacPOT+8lOhwneWLsYDyLF4YXEAmKFS5pktnzTFo7cGtzR+HuxJGuELU8NjF/GxE hJj3z2k9g4sms9Gt4Mtby0ZHWe4TesJ0+v3taEmQ9u+304aBvdSujDz4OG6L3hfv +qzrS6jXZOoWJ0exCbEtRajj5kG2kZL3KmClEQPE/fLlNjCg5Thb60oHUdPVZ2+2 9xaom3eEFaP8v2XeZLTylzmKy71deMTodaAqMQ7Bl1MDXwBHaqrLd331bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuVnTVtwCrKXzmdANJK2Vf1WlgdMB8GA1UdIwQY MBaAFCy0KR35eWPFqbcysTlvDxyIdQTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQt YWY0YzA2ZjMxYWZmLzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mOTY4NGUtMDllMi00OWNjLTg1MWQtYWY0YzA2ZjMxYWZm LzEvTExRcEhmbDVZOFdwdHpLeE9XOFBISWgxQk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4AwepSW nQYcWOJ6Q03uDG+7zkxweEMX0ijmyUiWPx144w68pg7YydbVZUNOcKnYsOSfQuR5 LKuHv5KfiOrPrKBk5rWyanuM0RodSYCK42yh08FeMIHNHrHO9UvjJQLDghSPDNaJ TVEQcfSNHHIujNUszpD0tzPcCTeitiBbKlyWfKUTkRbBut33X8sRXcmz/3kB5W8W 8rh7EAXIWIMO7eq3blCVu6ayh8UjKjKd6Pg9yVCbJnfqzPILrpPmo0eyZ97DilLy SIDxBtlhJKmufKJJnNLpN6bqYd+zs6dZs2P01VNX1e5Qy9+Fh8d0y8izCfmPliHK L/4NgsyzlcXJoQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:03:13 2025 by rpki-client