This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json) Hash identifier: bVQEOhVlL1JeUDfyB/jtZlf/QSOZ2JS3iDS6wOsAVrg= Subject key identifier: 71:1F:D9:B6:87:13:5D:16:3A:6C:C1:B5:62:4B:B0:00:5C:C1:CB:87 Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50 Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50 Certificate serial: 019B41A427E8DE974056F3BC5AD5C3279154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft Manifest number: 11C9 Signing time: Sun 21 Dec 2025 16:00:35 +0000 Manifest this update: Sun 21 Dec 2025 16:00:35 +0000 Manifest next update: Mon 22 Dec 2025 16:00:35 +0000 Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: r+2F71yIJrdPi56x9/THUvpPLDzRteSDTecb6dHuR34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:27:e8:de:97:40:56:f3:bc:5a:d5:c3:27:91:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50 Validity Not Before: Dec 21 16:00:35 2025 GMT Not After : Dec 22 16:00:35 2025 GMT Subject: CN=711fd9b687135d163a6cc1b5624bb0005cc1cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bd:9a:ef:86:5f:76:0a:a5:07:55:b4:7c:48: 4b:94:46:29:a1:87:28:e6:33:fe:e3:1a:e4:2d:be: 16:17:6f:b5:cc:25:c0:5a:0d:1f:12:ab:f7:c8:58: 14:b0:df:98:98:9e:7f:45:e8:b2:26:dc:3a:a0:85: 4d:85:8c:3f:96:6c:b7:ec:4f:bd:9b:b7:76:68:6b: b3:b8:fe:d9:43:12:95:92:37:19:20:5d:f6:04:5a: 13:b9:68:5f:25:7b:31:11:7b:5a:de:55:7c:2e:34: 07:d2:f1:6e:a5:d2:fa:aa:a1:f1:77:fb:9f:31:82: a3:2b:e3:ce:28:0c:22:76:ed:92:2f:6d:09:fa:a8: fe:1d:7d:73:a4:56:54:ed:ef:33:8c:76:39:ea:ed: 59:fd:0b:54:a5:7f:d1:c6:56:c4:43:12:77:6b:5e: dd:e9:74:29:f0:c2:34:44:91:6f:30:b8:0c:cd:30: e7:4f:34:85:79:ce:17:14:79:a7:de:80:d9:76:34: 3e:a9:f6:4d:f9:76:8f:67:e9:fa:9c:4b:ba:6f:b4: db:23:d1:cf:98:ce:bf:20:19:ce:74:0e:31:b0:99: e9:c4:5e:46:e8:58:df:bc:6b:34:19:f8:1b:01:96: e9:c7:61:b1:53:25:04:30:d4:ba:b9:45:02:e8:56: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1F:D9:B6:87:13:5D:16:3A:6C:C1:B5:62:4B:B0:00:5C:C1:CB:87 X509v3 Authority Key Identifier: keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d8:2b:f9:6a:f7:d9:78:c3:dc:c6:f7:2c:8d:db:df:40:1b: 92:17:3a:f9:c1:cf:e6:be:3e:1f:d1:1c:6e:1e:6e:d1:d9:41: ea:a8:98:1d:aa:03:c7:11:28:3f:f6:8e:4f:98:ec:47:5b:a4: 94:72:86:9d:b0:cd:c4:45:95:74:82:90:23:75:f5:d4:95:ba: a5:37:ef:c8:dd:2b:32:50:36:0d:27:e9:0a:40:dd:0f:12:e2: 71:1d:57:70:0f:77:c8:8d:2e:6b:5a:2e:c5:75:ef:be:ae:e4: cf:5e:78:4c:77:af:ea:00:40:e2:85:dd:52:3b:cc:3b:3e:05: 08:53:d1:2b:11:ea:0b:76:29:72:68:4c:67:88:56:80:c8:8d: 6f:d3:67:75:d7:1a:25:a2:04:81:1a:50:31:ce:a5:5e:5e:b9: ec:8b:be:4f:0e:51:df:33:db:36:5f:4c:f8:e4:a6:b5:c9:c7: 00:2b:70:b4:2b:92:98:a4:11:22:e6:4d:15:9c:fb:3c:28:70: 6b:95:e2:b8:6d:29:60:e4:f1:77:a4:5a:f6:10:23:84:c4:82: 93:11:d7:16:97:10:89:e9:ab:c9:2b:68:55:30:ff:31:87:cf: 95:c3:5d:0e:28:30:60:5a:37:3a:94:9a:33:7c:a7:c2:34:8e: 1e:2f:fd:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpCfo3pdAVvO8WtXDJ5FUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZjJjMjBkYTRkNjMwMTgyZWVlMzM0NWFkOWQxYzRhZDkx NzBkNTAwHhcNMjUxMjIxMTYwMDM1WhcNMjUxMjIyMTYwMDM1WjAzMTEwLwYDVQQD Eyg3MTFmZDliNjg3MTM1ZDE2M2E2Y2MxYjU2MjRiYjAwMDVjYzFjYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L2a74ZfdgqlB1W0fEhLlEYpoYco 5jP+4xrkLb4WF2+1zCXAWg0fEqv3yFgUsN+YmJ5/ReiyJtw6oIVNhYw/lmy37E+9 m7d2aGuzuP7ZQxKVkjcZIF32BFoTuWhfJXsxEXta3lV8LjQH0vFupdL6qqHxd/uf MYKjK+POKAwidu2SL20J+qj+HX1zpFZU7e8zjHY56u1Z/QtUpX/RxlbEQxJ3a17d 6XQp8MI0RJFvMLgMzTDnTzSFec4XFHmn3oDZdjQ+qfZN+XaPZ+n6nEu6b7TbI9HP mM6/IBnOdA4xsJnpxF5G6FjfvGs0GfgbAZbpx2GxUyUEMNS6uUUC6FZ2CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEf2baHE10WOmzBtWJLsABcwcuHMB8GA1UdIwQY MBaAFDvywg2k1jAYLu4zRa2dHErZFw1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMt YTBiZGE4YWY3NTZhLzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMtYTBiZGE4YWY3NTZh LzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9gr+Wr3 2XjD3Mb3LI3b30Abkhc6+cHP5r4+H9Ecbh5u0dlB6qiYHaoDxxEoP/aOT5jsR1uk lHKGnbDNxEWVdIKQI3X11JW6pTfvyN0rMlA2DSfpCkDdDxLicR1XcA93yI0ua1ou xXXvvq7kz154THev6gBA4oXdUjvMOz4FCFPRKxHqC3YpcmhMZ4hWgMiNb9Nnddca JaIEgRpQMc6lXl657Iu+Tw5R3zPbNl9M+OSmtcnHACtwtCuSmKQRIuZNFZz7PChw a5XiuG0pYOTxd6Ra9hAjhMSCkxHXFpcQiemryStoVTD/MYfPlcNdDigwYFo3OpSa M3ynwjSOHi/9vw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:57 2025 by rpki-client