This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json) Hash identifier: G45kBKg6TMsYwRGraAqjzDG+5xeC5uTXb2YYssPpo+k= Subject key identifier: 8E:2B:3B:23:7B:17:AE:AA:6B:3E:F8:E2:AA:E1:5E:96:68:FC:32:41 Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b Certificate serial: 019B39EACFB5AD85E74EC790E25C44BB7E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft Manifest number: 15D5 Signing time: Sat 20 Dec 2025 04:00:48 +0000 Manifest this update: Sat 20 Dec 2025 04:00:48 +0000 Manifest next update: Sun 21 Dec 2025 04:00:48 +0000 Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=) 2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: 7/noH9UdhsZEE0y4qNOv2/IYmWgqOih9fPuB59D3p+M=) 3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:cf:b5:ad:85:e7:4e:c7:90:e2:5c:44:bb:7e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b Validity Not Before: Dec 20 04:00:48 2025 GMT Not After : Dec 21 04:00:48 2025 GMT Subject: CN=8e2b3b237b17aeaa6b3ef8e2aae15e9668fc3241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:1f:72:82:ec:fd:83:97:39:86:04:ab:12: c9:07:de:cc:38:38:f2:6b:36:bc:d0:5e:5a:8f:16: 01:82:b2:d3:23:03:61:48:c4:89:f2:3a:e7:6d:69: ae:e9:a7:c5:47:c7:99:71:94:c7:bb:01:b0:c8:e5: 64:d2:23:f4:0e:4a:3c:19:8d:01:4c:1f:e7:e7:76: 86:02:8d:b3:15:7b:34:ba:ba:4d:32:16:3e:7d:54: 42:b4:39:f5:42:13:a6:e0:7a:fe:05:44:b0:c7:36: 90:cf:63:86:fe:1e:f3:37:73:0b:18:ce:ea:0e:21: 58:7a:40:32:00:b5:2c:95:62:d2:e0:e5:4d:30:01: a4:3a:5b:11:b2:eb:89:51:1e:cf:0b:9d:93:3a:81: 00:f1:2a:3d:c1:91:3e:98:f3:4e:de:6e:28:cf:05: 05:a3:c7:ff:6b:62:70:29:20:b7:aa:f7:b6:43:ba: 3c:87:63:fa:a5:7c:6c:53:12:7f:05:6f:94:a2:e6: b9:c3:b5:2a:c2:44:49:88:e2:3a:5d:92:a4:49:50: 52:f0:6b:44:29:b5:2b:ce:9c:52:69:ed:23:dc:d7: 60:46:df:c0:e0:8c:1e:50:5d:ce:1d:58:49:61:40: 67:eb:13:2e:7b:ec:fc:e8:c4:f9:0d:3f:0f:ba:89: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:3B:23:7B:17:AE:AA:6B:3E:F8:E2:AA:E1:5E:96:68:FC:32:41 X509v3 Authority Key Identifier: keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7c:7a:ea:2f:43:9b:c0:5a:7e:e3:26:69:31:43:e7:0a:f6: 2f:6f:d3:63:c1:fa:27:a7:8d:b4:f7:99:05:74:3a:09:50:42: f3:5b:a8:f4:f0:b2:20:34:1e:62:78:df:39:ae:6e:a5:07:f8: 4c:7d:c4:05:8b:87:d4:3c:01:f6:cc:9d:4d:a4:a8:ac:cb:af: b2:47:f9:f0:39:91:98:b5:48:31:c6:be:41:6c:83:7a:18:3b: 2b:68:a9:8a:ec:e0:1d:97:17:6a:17:1a:0a:18:30:19:3a:f3: b2:18:2c:fd:99:15:27:a8:90:70:7b:1f:58:fa:30:69:2e:45: c1:81:ee:3c:60:ad:12:04:56:b7:72:6f:d5:cf:1c:75:42:8e: 45:dd:67:5f:26:a9:2f:ca:3a:38:af:2e:37:a6:99:95:86:64: 10:2e:f1:7e:c1:9b:b4:70:73:4c:42:ab:e2:26:39:28:10:1f: 47:47:18:70:3a:af:6a:cc:56:5f:05:d8:f6:78:45:16:2b:78: fb:40:46:67:b7:a1:ce:8a:55:f2:22:f0:98:49:e2:4a:b5:bb: 9b:0b:3c:2e:64:1d:83:ba:00:c5:f2:bb:55:f0:36:9e:92:65: e1:de:bb:e0:6f:14:ef:ea:7f:01:ee:07:b3:8d:4a:c6:2e:cc: 16:21:a5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56s+1rYXnTseQ4lxEu36cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWFkZWU1OGY4NjRmNDcyZWI0MjJiMGI5NTQ5N2I4NTA3 NWExMmIwHhcNMjUxMjIwMDQwMDQ4WhcNMjUxMjIxMDQwMDQ4WjAzMTEwLwYDVQQD Eyg4ZTJiM2IyMzdiMTdhZWFhNmIzZWY4ZTJhYWUxNWU5NjY4ZmMzMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiEfcoLs/YOXOYYEqxLJB97MODjy aza80F5ajxYBgrLTIwNhSMSJ8jrnbWmu6afFR8eZcZTHuwGwyOVk0iP0Dko8GY0B TB/n53aGAo2zFXs0urpNMhY+fVRCtDn1QhOm4Hr+BUSwxzaQz2OG/h7zN3MLGM7q DiFYekAyALUslWLS4OVNMAGkOlsRsuuJUR7PC52TOoEA8So9wZE+mPNO3m4ozwUF o8f/a2JwKSC3qve2Q7o8h2P6pXxsUxJ/BW+Uoua5w7UqwkRJiOI6XZKkSVBS8GtE KbUrzpxSae0j3NdgRt/A4IweUF3OHVhJYUBn6xMue+z86MT5DT8Puokm5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4rOyN7F66qaz744qrhXpZo/DJBMB8GA1UdIwQY MBaAFCzq3uWPhk9HLrQisLlUl7hQdaErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2It YmM3YTI0YzJlMjE5LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2ItYmM3YTI0YzJlMjE5 LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHx66i9D m8BafuMmaTFD5wr2L2/TY8H6J6eNtPeZBXQ6CVBC81uo9PCyIDQeYnjfOa5upQf4 TH3EBYuH1DwB9sydTaSorMuvskf58DmRmLVIMca+QWyDehg7K2ipiuzgHZcXahca ChgwGTrzshgs/ZkVJ6iQcHsfWPowaS5FwYHuPGCtEgRWt3Jv1c8cdUKORd1nXyap L8o6OK8uN6aZlYZkEC7xfsGbtHBzTEKr4iY5KBAfR0cYcDqvasxWXwXY9nhFFit4 +0BGZ7ehzopV8iLwmEniSrW7mws8LmQdg7oAxfK7VfA2npJl4d674G8U7+p/Ae4H s41Kxi7MFiGl2A== -----END CERTIFICATE-----Generated at Sat Dec 20 13:56:09 2025 by rpki-client