This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json) Hash identifier: 1O9nD65BLSd7U1RP//DVvAxy6ho9M14EqtQ9v8j2CB8= Subject key identifier: 15:FF:51:9E:D7:D5:5F:E9:FB:DA:38:01:52:73:D1:18:82:C2:81:11 Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Certificate serial: 019B3CEC9CF8F69A1E2B026519AE9B69AAF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft Manifest number: 127B Signing time: Sat 20 Dec 2025 18:01:38 +0000 Manifest this update: Sat 20 Dec 2025 18:01:38 +0000 Manifest next update: Sun 21 Dec 2025 18:01:38 +0000 Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=) 2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: oVweutqdx1ymkNMv652h2DWUL9CIda4waIYJmQfr1NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:9c:f8:f6:9a:1e:2b:02:65:19:ae:9b:69:aa:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a Validity Not Before: Dec 20 18:01:38 2025 GMT Not After : Dec 21 18:01:38 2025 GMT Subject: CN=15ff519ed7d55fe9fbda38015273d11882c28111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:88:83:4b:08:a9:5d:19:e4:5b:f8:3b:a4: 60:2e:8d:a9:bf:1d:26:31:a3:0b:6f:db:53:ad:b6: ea:1a:31:47:5e:4f:0e:3e:52:57:c3:f9:61:86:91: c7:f5:c3:53:4b:cf:13:ae:69:e5:02:da:cf:c8:ac: 1a:e7:62:27:a9:30:99:31:fb:ad:13:e1:b3:9b:2e: c1:85:f7:48:dd:09:30:f9:b1:83:27:7e:94:01:10: 9e:0c:87:7b:26:4a:fe:93:7f:d7:85:2d:e2:ed:ea: f1:4f:72:8b:36:a9:ca:be:9d:a3:fd:2c:ef:bd:54: 5e:45:dd:aa:4b:a5:8c:75:a4:00:93:0b:0b:db:4c: 75:80:01:3f:41:13:25:84:97:0e:05:c4:dd:30:b6: 85:34:fd:17:35:98:f4:38:ed:1a:2d:25:23:cb:61: 9f:2b:74:3a:ac:fd:6c:a4:89:ad:9e:23:34:b3:78: 40:46:ef:f4:30:01:33:ca:82:51:3c:e1:64:58:2a: 78:2a:b0:ca:5b:b2:9e:12:aa:ce:d2:87:69:99:cd: 4e:a3:92:09:de:69:95:fe:c3:66:9d:77:46:75:13: fc:c0:3c:d5:80:87:4e:b4:1e:9b:e4:a1:80:93:1a: b1:05:b5:38:9c:37:b0:b1:bf:1c:fb:fd:37:c1:47: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:51:9E:D7:D5:5F:E9:FB:DA:38:01:52:73:D1:18:82:C2:81:11 X509v3 Authority Key Identifier: keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a4:f3:31:4a:c2:f9:da:f1:02:a0:96:e4:1a:01:20:e1:b4: 37:45:38:d8:80:9e:ea:7c:2e:15:af:14:d5:d7:0c:78:e2:ab: 10:04:4f:b0:a8:b6:3a:e7:49:97:3f:1b:82:3d:cc:ff:e9:bf: 9f:51:e3:6a:54:51:b5:df:7b:e0:40:f8:74:4c:ee:0e:0d:1f: ef:0e:c5:c0:5a:5a:3f:5d:4f:92:0d:0c:25:f2:88:b5:75:c7: 2d:ab:6a:1c:88:71:e8:0f:fd:96:0e:1f:fc:a0:9d:dd:98:2c: a2:e1:66:ea:1f:49:f9:2c:71:2a:cb:44:6e:d4:15:58:31:6b: 09:d0:b3:39:c4:4c:f9:a7:4d:60:7e:f5:39:59:9a:04:77:3a: 07:8c:45:e1:04:b5:b8:21:11:05:62:99:f3:64:35:24:80:86: 4e:1f:48:1d:7d:eb:6b:03:2e:10:94:ed:d7:47:51:1d:6a:2c: 9b:a6:96:15:e2:c5:a9:da:5a:c7:8d:a2:bb:77:21:02:f0:c9: e1:bf:4c:5b:92:56:bc:c3:29:a6:b4:d5:3f:83:e3:67:fd:45: 81:c8:42:9d:e2:1c:5e:cc:88:82:46:8e:32:a0:b5:55:e3:af: 79:9f:15:2b:a2:cf:6f:10:43:14:38:0f:7e:5a:73:fe:00:20: 4b:18:99:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Jz49poeKwJlGa6baarxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw YzgwOGEwHhcNMjUxMjIwMTgwMTM4WhcNMjUxMjIxMTgwMTM4WjAzMTEwLwYDVQQD EygxNWZmNTE5ZWQ3ZDU1ZmU5ZmJkYTM4MDE1MjczZDExODgyYzI4MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhOIg0sIqV0Z5Fv4O6RgLo2pvx0m MaMLb9tTrbbqGjFHXk8OPlJXw/lhhpHH9cNTS88TrmnlAtrPyKwa52InqTCZMfut E+Gzmy7BhfdI3Qkw+bGDJ36UARCeDId7Jkr+k3/XhS3i7erxT3KLNqnKvp2j/Szv vVReRd2qS6WMdaQAkwsL20x1gAE/QRMlhJcOBcTdMLaFNP0XNZj0OO0aLSUjy2Gf K3Q6rP1spImtniM0s3hARu/0MAEzyoJRPOFkWCp4KrDKW7KeEqrO0odpmc1Oo5IJ 3mmV/sNmnXdGdRP8wDzVgIdOtB6b5KGAkxqxBbU4nDewsb8c+/03wUftUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX/UZ7X1V/p+9o4AVJz0RiCwoERMB8GA1UdIwQY MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0 LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6TzMUrC +drxAqCW5BoBIOG0N0U42ICe6nwuFa8U1dcMeOKrEARPsKi2OudJlz8bgj3M/+m/ n1HjalRRtd974ED4dEzuDg0f7w7FwFpaP11Pkg0MJfKItXXHLatqHIhx6A/9lg4f /KCd3ZgsouFm6h9J+SxxKstEbtQVWDFrCdCzOcRM+adNYH71OVmaBHc6B4xF4QS1 uCERBWKZ82Q1JICGTh9IHX3rawMuEJTt10dRHWosm6aWFeLFqdpax42iu3chAvDJ 4b9MW5JWvMMpprTVP4PjZ/1FgchCneIcXsyIgkaOMqC1VeOveZ8VK6LPbxBDFDgP flpz/gAgSxiZ6g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:05 2025 by rpki-client