This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json) Hash identifier: W7CDOj9W8hCoO3WKi0HYwTPCNEH/OCBIGFkhkeEuSxc= Subject key identifier: FA:7C:52:14:63:4F:28:CD:C1:04:6B:2B:CA:72:40:66:10:AF:05:1C Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c Certificate serial: 019B650CBB76A139C438D3B1FF015BF8842B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft Manifest number: 1771 Signing time: Sun 28 Dec 2025 13:01:31 +0000 Manifest this update: Sun 28 Dec 2025 13:01:31 +0000 Manifest next update: Mon 29 Dec 2025 13:01:31 +0000 Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: lTiatRT7adi+Iud3SfRSNH5BbdGRiaoRVPxGDzzEos4=) 2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=) 3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:bb:76:a1:39:c4:38:d3:b1:ff:01:5b:f8:84:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c Validity Not Before: Dec 28 13:01:31 2025 GMT Not After : Dec 29 13:01:31 2025 GMT Subject: CN=fa7c5214634f28cdc1046b2bca72406610af051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:f9:11:4c:13:3c:2b:0d:83:eb:4f:53:e4: b8:1f:01:14:42:af:6b:37:50:6d:2f:14:39:53:87: fb:52:93:d8:df:3d:07:4f:e1:87:cf:bd:94:8d:8c: de:f9:2e:fd:d1:fd:44:a2:7e:ef:a6:4b:cb:e7:64: ac:30:80:8f:30:8f:e7:6b:cb:07:ff:60:7f:a8:33: 0d:8d:80:bc:a3:ce:ca:c8:89:f2:48:a8:b2:d3:6b: 84:f4:27:69:66:a3:4f:9a:64:6b:3a:8b:5d:67:19: c0:5e:50:bc:6c:41:2d:7f:92:37:74:f0:e9:7b:a9: 39:e0:8d:8f:d1:8e:ac:31:ea:92:3f:b2:5f:ad:2a: d7:ba:d3:df:e1:40:dd:06:26:02:bd:27:08:2d:2e: 55:47:90:b4:01:73:ed:87:bf:be:33:01:b2:bf:b0: 6b:42:31:34:ac:5e:20:40:65:ff:dd:53:d9:36:36: bb:c0:4d:a1:5d:f3:5e:b2:f9:8f:9e:bd:b0:ce:54: 44:a4:10:7b:fd:5f:f2:df:96:de:a9:7d:19:e7:d3: 09:16:94:f1:3f:d7:14:e4:db:03:77:12:b4:eb:bf: 0a:18:7b:f2:2f:b0:40:5d:b0:f0:0a:60:12:f4:5c: 5f:cd:87:8f:a8:b7:59:30:90:c1:e1:76:eb:7f:d0: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:52:14:63:4F:28:CD:C1:04:6B:2B:CA:72:40:66:10:AF:05:1C X509v3 Authority Key Identifier: keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:98:95:57:20:0e:2f:c4:90:9c:f3:2e:be:60:f5:01:25:7f: 4b:d9:69:90:61:f1:bd:8f:39:2e:33:ee:75:8d:19:7c:ab:1f: 26:60:91:09:87:08:03:f6:06:b1:42:65:cc:71:51:5c:b5:7a: a4:36:97:d0:d5:db:a8:0b:7b:37:83:82:70:e3:b6:d7:d0:ed: ea:70:7e:5d:ce:3e:a9:ef:04:a0:00:9b:11:41:22:72:15:42: 1b:82:78:48:4f:7e:86:bf:cb:4e:1e:27:1d:41:fb:8c:40:db: 52:9e:6a:bb:99:49:bb:7c:75:85:7f:cc:e6:e3:0e:a5:82:23: 3a:c7:c1:84:75:74:f6:2c:b2:6f:17:b8:63:c2:4b:b5:48:e7: c3:49:b5:18:53:d1:08:bc:fb:58:87:c7:25:47:f3:21:ae:a8: aa:12:e3:31:23:cc:46:e7:1a:9c:40:43:80:59:d7:0d:27:f8: 4f:49:e4:69:32:dc:77:f8:6f:b5:1f:62:64:51:65:62:96:b5: 2d:ed:e4:25:2c:48:92:1a:f8:3f:67:96:31:f9:fe:3a:2d:be: ae:63:92:7e:6c:2c:4c:8f:38:81:a2:10:59:f8:ca:e5:ca:fe: 86:96:c8:3d:be:39:ff:e2:73:cf:d2:0c:e0:a2:04:fb:da:87: 28:29:c4:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDLt2oTnEONOx/wFb+IQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl NjY4MWMwHhcNMjUxMjI4MTMwMTMxWhcNMjUxMjI5MTMwMTMxWjAzMTEwLwYDVQQD EyhmYTdjNTIxNDYzNGYyOGNkYzEwNDZiMmJjYTcyNDA2NjEwYWYwNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIv5EUwTPCsNg+tPU+S4HwEUQq9r N1BtLxQ5U4f7UpPY3z0HT+GHz72UjYze+S790f1Eon7vpkvL52SsMICPMI/na8sH /2B/qDMNjYC8o87KyInySKiy02uE9CdpZqNPmmRrOotdZxnAXlC8bEEtf5I3dPDp e6k54I2P0Y6sMeqSP7JfrSrXutPf4UDdBiYCvScILS5VR5C0AXPth7++MwGyv7Br QjE0rF4gQGX/3VPZNja7wE2hXfNesvmPnr2wzlREpBB7/V/y35beqX0Z59MJFpTx P9cU5NsDdxK0678KGHvyL7BAXbDwCmAS9FxfzYePqLdZMJDB4Xbrf9DGewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp8UhRjTyjNwQRrK8pyQGYQrwUcMB8GA1UdIwQY MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5iVVyAO L8SQnPMuvmD1ASV/S9lpkGHxvY85LjPudY0ZfKsfJmCRCYcIA/YGsUJlzHFRXLV6 pDaX0NXbqAt7N4OCcOO219Dt6nB+Xc4+qe8EoACbEUEichVCG4J4SE9+hr/LTh4n HUH7jEDbUp5qu5lJu3x1hX/M5uMOpYIjOsfBhHV09iyybxe4Y8JLtUjnw0m1GFPR CLz7WIfHJUfzIa6oqhLjMSPMRucanEBDgFnXDSf4T0nkaTLcd/hvtR9iZFFlYpa1 Le3kJSxIkhr4P2eWMfn+Oi2+rmOSfmwsTI84gaIQWfjK5cr+hpbIPb45/+Jzz9IM 4KIE+9qHKCnEbw== -----END CERTIFICATE-----Generated at Sun Dec 28 20:28:39 2025 by rpki-client