This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json) Hash identifier: WuIlMiaFXSHQxdrD+ij8PbkVtVrN6clg8XvKJm0c/A8= Subject key identifier: 21:9B:1F:2F:4D:FF:50:A1:8A:B2:EB:AE:AA:C5:5D:CE:61:7F:1D:AC Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab Certificate serial: 019B3CEC2248EF75DEBCCCC9CA61F16F4084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft Manifest number: 0103 Signing time: Sat 20 Dec 2025 18:01:06 +0000 Manifest this update: Sat 20 Dec 2025 18:01:06 +0000 Manifest next update: Sun 21 Dec 2025 18:01:06 +0000 Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: Sz8pipsZcgDRf+VteRFijJIELgsz8+WGLov7nyHochk=) 2: qZAKutQPBhqbC3w0uTfHNEl4Oes.roa (hash: WSklXQH6CKCwMHKCLxLhSKAUiLi3+4CRfzgpAwPPYgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:22:48:ef:75:de:bc:cc:c9:ca:61:f1:6f:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab Validity Not Before: Dec 20 18:01:06 2025 GMT Not After : Dec 21 18:01:06 2025 GMT Subject: CN=219b1f2f4dff50a18ab2ebaeaac55dce617f1dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:54:6e:59:18:6b:42:fe:f8:b0:29:5f:89: f9:26:88:ff:57:18:67:50:0c:c6:ea:f6:4a:f2:d4: 45:a0:0d:98:4c:7b:26:d5:45:8b:40:a5:68:d1:a8: a3:5b:2a:4c:c8:ab:57:b4:0d:19:d8:d8:75:2c:9c: 77:a1:cc:93:91:95:82:9f:87:bf:fb:b7:38:b1:28: a6:5e:8c:e8:c7:e5:b6:21:88:fb:a9:d9:c1:29:e8: e2:a1:16:aa:43:a3:4f:12:02:f9:2c:14:e4:bb:53: 82:de:01:25:c4:4e:b4:12:55:53:9b:f5:0d:bc:61: 24:fc:75:d1:d4:24:01:c3:c6:f3:94:9a:15:e2:4e: dc:60:de:69:56:62:81:f4:bc:c6:3a:37:28:40:dd: 7c:01:72:9c:46:54:82:77:4f:97:ce:6b:c4:18:64: 5f:53:d8:05:04:bf:aa:6a:8a:d5:e6:b8:13:c2:92: bb:19:d0:94:1f:f3:c3:1e:a4:f7:91:b3:15:f1:18: 4f:e4:27:cf:47:17:c5:ed:b1:6e:51:5f:50:4c:e7: c1:47:61:b7:8a:9c:5f:7f:fd:aa:8d:6c:3c:72:54: a4:d3:66:4e:2c:c7:8e:36:35:6f:3a:87:aa:9d:e1: a0:e9:d4:c1:9f:f9:4c:57:b8:0d:c5:42:02:e8:e7: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:1F:2F:4D:FF:50:A1:8A:B2:EB:AE:AA:C5:5D:CE:61:7F:1D:AC X509v3 Authority Key Identifier: keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d2:2d:16:55:2e:54:4d:58:09:47:a2:90:f2:62:65:be:4b: 66:1e:b3:35:e0:20:87:59:9c:33:de:aa:5e:39:90:96:1f:2e: b8:2b:07:53:c7:34:0a:32:eb:9f:45:40:dc:06:88:79:74:70: 03:ba:20:87:92:18:75:01:d7:68:ad:79:77:6d:18:48:11:3e: ed:76:2d:a6:fe:47:aa:96:fa:df:7f:96:66:3f:38:d8:46:62: cb:80:63:d6:ff:8f:3a:8d:1f:e0:80:b6:c4:a8:87:67:6c:b7: ea:a7:1a:bb:70:bb:54:af:ea:10:b0:60:8e:7a:7e:88:8b:e9: 9c:ab:e8:87:5b:e7:4c:e4:bd:b5:95:12:35:42:a0:93:76:3b: 59:1b:a8:bd:6f:62:60:80:01:c8:d4:04:73:30:73:73:43:60: 22:9d:8a:93:4c:76:56:cc:59:9e:94:ae:0f:05:54:9f:a6:08: 31:66:c7:77:ae:61:09:43:b5:dc:e2:6b:ec:fe:67:f9:01:33: c0:e8:55:90:62:55:17:39:4a:f9:c6:6b:ba:1f:cb:f9:3f:9e: 74:1c:8a:9e:7a:b3:bb:08:42:de:cc:0f:1c:a9:a5:a3:ae:97: 9d:bf:98:c8:bc:21:ca:13:e8:c0:c4:41:db:f5:95:17:e5:e8: 22:a0:c3:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87CJI73XevMzJymHxb0CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzNjYjM4NzVkOTEyMTkyNjFiM2FlOTAxMDgxMzExYTVh MDcxYWIwHhcNMjUxMjIwMTgwMTA2WhcNMjUxMjIxMTgwMTA2WjAzMTEwLwYDVQQD EygyMTliMWYyZjRkZmY1MGExOGFiMmViYWVhYWM1NWRjZTYxN2YxZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon1UblkYa0L++LApX4n5Joj/Vxhn UAzG6vZK8tRFoA2YTHsm1UWLQKVo0aijWypMyKtXtA0Z2Nh1LJx3ocyTkZWCn4e/ +7c4sSimXozox+W2IYj7qdnBKejioRaqQ6NPEgL5LBTku1OC3gElxE60ElVTm/UN vGEk/HXR1CQBw8bzlJoV4k7cYN5pVmKB9LzGOjcoQN18AXKcRlSCd0+XzmvEGGRf U9gFBL+qaorV5rgTwpK7GdCUH/PDHqT3kbMV8RhP5CfPRxfF7bFuUV9QTOfBR2G3 ipxff/2qjWw8clSk02ZOLMeONjVvOoeqneGg6dTBn/lMV7gNxUIC6OeDHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGbHy9N/1ChirLrrqrFXc5hfx2sMB8GA1UdIwQY MBaAFC5zyzh12RIZJhs66QEIExGloHGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUt ZjRhZmZjODAyOGYzLzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUtZjRhZmZjODAyOGYz LzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9ItFlUu VE1YCUeikPJiZb5LZh6zNeAgh1mcM96qXjmQlh8uuCsHU8c0CjLrn0VA3AaIeXRw A7ogh5IYdQHXaK15d20YSBE+7XYtpv5Hqpb633+WZj842EZiy4Bj1v+POo0f4IC2 xKiHZ2y36qcau3C7VK/qELBgjnp+iIvpnKvoh1vnTOS9tZUSNUKgk3Y7WRuovW9i YIAByNQEczBzc0NgIp2Kk0x2VsxZnpSuDwVUn6YIMWbHd65hCUO13OJr7P5n+QEz wOhVkGJVFzlK+cZruh/L+T+edByKnnqzuwhC3swPHKmlo66Xnb+YyLwhyhPowMRB 2/WVF+XoIqDDmg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:23:18 2025 by rpki-client