This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft File: LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json) Hash identifier: GqCJ26M5g7On3PScgfxHtfXsSZruP8za5HqMeG4VBb0= Subject key identifier: 08:D2:5D:FB:98:6C:74:E2:FC:1C:43:C3:9F:71:3D:BF:A6:C0:39:72 Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8 Certificate issuer: /CN=2ce34e26bb65630b86936f4969353ed7c86995c8 Certificate serial: 019B439339475A11D90183C66F8D122B0715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft Manifest number: 16C6 Signing time: Mon 22 Dec 2025 01:01:20 +0000 Manifest this update: Mon 22 Dec 2025 01:01:20 +0000 Manifest next update: Tue 23 Dec 2025 01:01:20 +0000 Files and hashes: 1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: MZ+YTLeib1qwoVF22cGeMQXCzAIFrdx/5HCnRER0OEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:39:47:5a:11:d9:01:83:c6:6f:8d:12:2b:07:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8 Validity Not Before: Dec 22 01:01:20 2025 GMT Not After : Dec 23 01:01:20 2025 GMT Subject: CN=08d25dfb986c74e2fc1c43c39f713dbfa6c03972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:05:b4:fb:53:6c:99:24:05:33:13:d6:b5: fe:dc:ae:02:6a:a4:4f:2e:68:19:74:28:09:14:80: b9:cd:34:da:3e:20:55:78:c5:a6:c2:6d:7c:2e:9e: 6c:36:92:c0:52:2f:5e:3b:f2:b9:82:c4:21:6a:e7: 78:37:ec:2a:47:49:26:b4:9c:1d:20:65:55:03:7f: 96:56:99:c2:da:41:bc:69:9f:75:53:63:20:3d:d0: d2:4a:31:5b:af:72:30:5d:b0:88:2d:a2:06:1e:ee: b9:1e:09:6b:21:16:6a:c9:59:ab:53:39:45:ff:1e: 49:d1:95:d9:aa:4c:a1:09:9f:e9:46:50:dd:bc:3c: e2:e9:05:fb:51:d2:58:1f:f0:2c:71:d5:cc:86:40: 1f:9c:9e:f1:93:52:06:30:43:78:a1:2b:cd:96:3b: b5:06:68:6d:bd:ef:2b:68:73:4b:0d:cb:81:e5:19: 37:39:43:7f:5c:20:a8:bc:fe:18:ce:0b:8a:6c:56: 9b:8c:1c:75:2c:b0:f2:77:58:0b:d5:c1:c1:ed:47: 34:0b:56:79:05:0f:1b:11:56:71:a2:91:d1:17:44: f3:99:31:53:03:7b:6b:9d:8d:3a:23:bf:96:0a:5d: 07:88:3b:14:d5:1f:8e:8a:ea:25:9a:77:13:87:61: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D2:5D:FB:98:6C:74:E2:FC:1C:43:C3:9F:71:3D:BF:A6:C0:39:72 X509v3 Authority Key Identifier: keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ab:ba:7c:7c:2a:79:84:35:cd:82:3d:7e:4e:ae:d3:88:b4: 5a:8c:f9:bf:17:02:d7:a9:3e:2f:22:03:a7:93:52:a2:e0:2d: e2:47:87:75:d8:8d:7a:5c:75:f5:97:f7:9b:66:50:63:ef:28: 34:b5:b4:99:7e:31:29:ad:70:8a:ee:11:16:07:cb:8d:5c:d8: 7f:00:d4:3a:51:39:ee:3d:71:3c:0a:e0:6f:e7:5e:23:a3:6a: df:37:e3:24:05:ae:c2:27:ae:91:09:00:29:0a:43:24:5e:bb: fc:74:0f:41:a8:96:37:21:6c:13:e4:2c:d2:17:80:b7:09:a0: 79:10:da:b2:e3:7d:b3:85:51:e6:0a:40:16:7b:05:46:36:27: 64:fa:42:56:8a:ef:8e:21:5f:40:b4:07:d7:d9:e0:14:86:c7: a2:57:32:de:b8:6a:73:8f:ba:c2:28:de:74:62:f3:c6:55:99: f8:ae:ce:5f:3b:a8:cc:ed:7c:0a:d7:3f:27:da:22:48:37:68: 03:b4:6c:6c:ec:0a:49:8f:8c:f1:4c:6e:fe:ca:11:69:1f:55: a9:b9:3a:95:8f:ea:b8:3b:ac:fa:fc:af:52:a1:09:e9:97:2d: 8e:ce:45:d0:17:70:b4:a7:f2:a9:bc:61:48:75:61:be:92:6b: f9:82:21:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzlHWhHZAYPGb40SKwcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTM0ZTI2YmI2NTYzMGI4NjkzNmY0OTY5MzUzZWQ3Yzg2 OTk1YzgwHhcNMjUxMjIyMDEwMTIwWhcNMjUxMjIzMDEwMTIwWjAzMTEwLwYDVQQD EygwOGQyNWRmYjk4NmM3NGUyZmMxYzQzYzM5ZjcxM2RiZmE2YzAzOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1MFtPtTbJkkBTMT1rX+3K4CaqRP LmgZdCgJFIC5zTTaPiBVeMWmwm18Lp5sNpLAUi9eO/K5gsQhaud4N+wqR0kmtJwd IGVVA3+WVpnC2kG8aZ91U2MgPdDSSjFbr3IwXbCILaIGHu65HglrIRZqyVmrUzlF /x5J0ZXZqkyhCZ/pRlDdvDzi6QX7UdJYH/AscdXMhkAfnJ7xk1IGMEN4oSvNlju1 Bmhtve8raHNLDcuB5Rk3OUN/XCCovP4YzguKbFabjBx1LLDyd1gL1cHB7Uc0C1Z5 BQ8bEVZxopHRF0TzmTFTA3trnY06I7+WCl0HiDsU1R+OiuolmncTh2HIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjSXfuYbHTi/BxDw59xPb+mwDlyMB8GA1UdIwQY MBaAFCzjTia7ZWMLhpNvSWk1PtfIaZXIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9OT0pydGxZd3VHazI5SmFUVS0xOGhwbGNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZTAxODAtZGIzYS00NmE1LWIzMWIt YjU5OTcyM2ZjMDUzLzEvTE9OT0pydGxZd3VHazI5SmFUVS0xOGhwbGNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZTAxODAtZGIzYS00NmE1LWIzMWItYjU5OTcyM2ZjMDUz LzEvTE9OT0pydGxZd3VHazI5SmFUVS0xOGhwbGNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlau6fHwq eYQ1zYI9fk6u04i0Woz5vxcC16k+LyIDp5NSouAt4keHddiNelx19Zf3m2ZQY+8o NLW0mX4xKa1wiu4RFgfLjVzYfwDUOlE57j1xPArgb+deI6Nq3zfjJAWuwieukQkA KQpDJF67/HQPQaiWNyFsE+Qs0heAtwmgeRDasuN9s4VR5gpAFnsFRjYnZPpCVorv jiFfQLQH19ngFIbHolcy3rhqc4+6wijedGLzxlWZ+K7OXzuozO18Ctc/J9oiSDdo A7RsbOwKSY+M8Uxu/soRaR9Vqbk6lY/quDus+vyvUqEJ6Zctjs5F0BdwtKfyqbxh SHVhvpJr+YIhaA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:26 2025 by rpki-client