This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json) Hash identifier: gD1EFWziu70hbl72GHxk92l2aI3b95eUv6wfP+9dBak= Subject key identifier: 40:6E:4D:A5:15:E8:C3:BE:B4:F5:A6:E4:F7:99:BB:FE:2E:0A:6D:5F Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Certificate serial: 019B3E6DE5DF4E43EDB026B13BF42A7F6EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:02:28 +0000 Manifest this update: Sun 21 Dec 2025 01:02:28 +0000 Manifest next update: Mon 22 Dec 2025 01:02:28 +0000 Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: IPS9oQ/rf67BcDafc0tHvTewfMR13ELAFx5VOhQLPrM=) 2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e5:df:4e:43:ed:b0:26:b1:3b:f4:2a:7f:6e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18 Validity Not Before: Dec 21 01:02:28 2025 GMT Not After : Dec 22 01:02:28 2025 GMT Subject: CN=406e4da515e8c3beb4f5a6e4f799bbfe2e0a6d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:f2:80:a1:b3:92:d1:44:c2:96:2e:3d:27: 79:ec:df:d0:5c:60:df:12:99:bf:7b:b7:d3:4f:24: be:ff:32:de:03:42:75:7a:c9:d3:6f:e9:06:b7:5d: 58:d8:41:75:48:06:14:10:46:7d:5d:c3:ef:ef:1f: 93:20:0f:a6:3c:cf:3f:84:b9:d4:03:eb:dd:b4:de: 68:6c:70:86:09:24:7a:c1:34:12:32:0b:97:98:3d: f1:2c:87:c3:2f:7c:7c:50:5b:0b:dc:cb:42:c5:41: 2a:2f:31:b5:f6:e3:68:52:f1:8e:00:c1:cb:2b:60: 58:42:c8:25:71:34:65:b7:bd:82:a5:b2:dd:83:0d: 95:48:ff:b1:dc:d4:43:c2:50:28:f2:79:22:e0:82: 25:91:a8:79:56:62:2d:4d:47:d9:61:14:3f:01:4e: b1:b4:c4:ff:fa:ee:53:4d:eb:16:de:84:1a:99:85: 1c:38:c4:7d:38:25:25:50:20:37:98:04:de:fb:41: cf:85:1b:29:78:57:45:1f:35:a0:fb:bd:83:8c:40: ba:e0:68:14:c7:e2:86:2f:3b:63:45:c5:7f:ae:53: fd:d2:6f:73:35:63:35:81:04:2d:14:84:02:5d:26: b6:f6:2c:e2:be:cb:24:4e:e4:ce:a0:50:75:26:57: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6E:4D:A5:15:E8:C3:BE:B4:F5:A6:E4:F7:99:BB:FE:2E:0A:6D:5F X509v3 Authority Key Identifier: keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:67:6b:af:b5:7d:74:01:21:c9:00:86:3d:14:3c:e2:6e:e2: 3f:97:5c:dc:fa:94:d1:5a:83:3d:66:c5:ba:f7:bd:9b:14:da: a5:d4:76:ee:7f:71:f7:e4:8c:35:a2:15:30:59:8f:aa:94:95: 9b:a0:8a:cf:c7:9e:84:90:20:59:72:1c:7a:da:41:04:41:16: 8a:4a:6b:61:02:90:de:a1:c0:a7:86:df:83:90:5f:b3:2d:2e: 13:85:d5:40:fb:35:48:34:05:f8:a5:88:a2:be:0b:fc:b9:0e: ba:ed:4a:57:aa:f6:c1:22:dc:69:19:2c:65:e4:23:d3:8e:d2: 19:f1:29:23:25:f0:0e:3e:de:8d:5a:0f:43:bc:b0:ab:ce:7d: 5f:3a:e4:43:e1:44:0b:23:20:13:ce:fc:32:13:36:23:c7:e1: 1b:db:20:5d:bf:58:b8:1a:cd:48:ed:9e:46:48:db:ae:a0:57: 29:82:7d:a0:9c:e4:40:d2:06:9f:05:44:f7:7e:0a:a4:44:12: 38:2d:a6:42:55:4b:c3:1c:41:d5:f7:bc:b8:35:d7:30:61:ae: 40:1e:31:26:73:be:5e:6a:d2:e8:62:bf:4c:41:4b:f6:9a:28: 1a:3e:ff:53:25:95:38:c7:a5:b7:f4:f1:9c:22:bf:b5:6e:21: 92:4d:fa:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beXfTkPtsCaxO/Qqf278MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1 YWFjMTgwHhcNMjUxMjIxMDEwMjI4WhcNMjUxMjIyMDEwMjI4WjAzMTEwLwYDVQQD Eyg0MDZlNGRhNTE1ZThjM2JlYjRmNWE2ZTRmNzk5YmJmZTJlMGE2ZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3HygKGzktFEwpYuPSd57N/QXGDf Epm/e7fTTyS+/zLeA0J1esnTb+kGt11Y2EF1SAYUEEZ9XcPv7x+TIA+mPM8/hLnU A+vdtN5obHCGCSR6wTQSMguXmD3xLIfDL3x8UFsL3MtCxUEqLzG19uNoUvGOAMHL K2BYQsglcTRlt72CpbLdgw2VSP+x3NRDwlAo8nki4IIlkah5VmItTUfZYRQ/AU6x tMT/+u5TTesW3oQamYUcOMR9OCUlUCA3mATe+0HPhRspeFdFHzWg+72DjEC64GgU x+KGLztjRcV/rlP90m9zNWM1gQQtFIQCXSa29izivsskTuTOoFB1JldaXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBuTaUV6MO+tPWm5PeZu/4uCm1fMB8GA1UdIwQY MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1 LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2drr7V9 dAEhyQCGPRQ84m7iP5dc3PqU0VqDPWbFuve9mxTapdR27n9x9+SMNaIVMFmPqpSV m6CKz8eehJAgWXIcetpBBEEWikprYQKQ3qHAp4bfg5Bfsy0uE4XVQPs1SDQF+KWI or4L/LkOuu1KV6r2wSLcaRksZeQj047SGfEpIyXwDj7ejVoPQ7ywq859XzrkQ+FE CyMgE878MhM2I8fhG9sgXb9YuBrNSO2eRkjbrqBXKYJ9oJzkQNIGnwVE934KpEQS OC2mQlVLwxxB1fe8uDXXMGGuQB4xJnO+XmrS6GK/TEFL9pooGj7/UyWVOMelt/Tx nCK/tW4hkk36Jw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:28:18 2025 by rpki-client