This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json) Hash identifier: af4T8yRG4I7JRadXe2lUGiJLa/HWeAbl0GM3678c18I= Subject key identifier: 6F:1D:84:1F:1B:D4:F8:97:D6:81:92:56:F8:70:AB:50:BF:8A:C5:15 Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Certificate serial: 019B4625BC158688B96938680A4B5D3508B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft Manifest number: 022B Signing time: Mon 22 Dec 2025 13:00:36 +0000 Manifest this update: Mon 22 Dec 2025 13:00:36 +0000 Manifest next update: Tue 23 Dec 2025 13:00:36 +0000 Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: kI8fOrDAKJbELRY/8w6c5tRQQuP+LzurVXmGRPzJC2Y=) 2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=) 3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:bc:15:86:88:b9:69:38:68:0a:4b:5d:35:08:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Validity Not Before: Dec 22 13:00:36 2025 GMT Not After : Dec 23 13:00:36 2025 GMT Subject: CN=6f1d841f1bd4f897d6819256f870ab50bf8ac515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:d8:bc:46:b9:ed:41:b8:84:ff:9f:60:84: 43:0f:f3:65:a7:e5:8a:2f:1e:eb:a3:ab:bd:8c:70: 2b:3c:62:7d:2f:d6:f7:3f:5c:04:22:f6:26:07:1a: 3c:9b:b8:94:ca:d6:ca:7f:49:e1:0f:8c:62:27:67: de:f7:8d:3a:5e:3e:b4:4f:87:f8:2d:b2:d1:fd:db: 9c:6b:6b:ff:9a:99:bc:0c:ad:b1:c6:24:17:0d:20: 46:50:ca:b4:4f:a7:4b:e9:0e:06:4c:52:fb:5d:8e: 03:9c:2c:4b:7d:38:c5:de:62:62:8b:60:44:a3:99: a0:00:48:f3:ca:2a:10:b9:f6:8c:7f:c5:b6:02:b8: 45:7f:98:f7:bf:f3:80:0d:a6:e1:e3:2e:57:9e:2e: f7:39:ad:30:24:8a:ec:fe:25:75:36:dc:c5:27:8d: 3c:5f:e8:83:b2:9a:e3:80:74:82:f2:9b:93:81:b9: 6c:3b:9e:ca:47:b0:4a:04:ab:a4:fe:df:04:02:b2: 43:6c:68:70:bd:32:82:dd:28:7e:d7:d4:e4:43:b2: cc:74:fb:63:19:db:bf:84:67:ba:f3:d0:f0:8a:f0: 4c:f9:40:47:86:ac:82:4e:e0:3d:3a:67:6c:0d:9f: e0:51:34:3b:88:3f:80:fc:8b:9c:1b:0a:2c:14:9a: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1D:84:1F:1B:D4:F8:97:D6:81:92:56:F8:70:AB:50:BF:8A:C5:15 X509v3 Authority Key Identifier: keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:71:2a:c2:57:0e:d0:d3:90:84:f8:b1:4a:ce:98:07:6e:53: 87:f9:32:0e:fb:d9:ae:85:20:73:e6:61:9c:94:85:db:f9:3c: b2:60:a1:58:d2:71:72:9c:de:08:02:d9:61:ee:cb:d3:27:fe: b6:b4:ee:a0:27:63:85:a0:7f:d0:00:66:fd:15:04:29:18:36: 9e:18:9a:43:ea:56:d4:99:87:b8:ed:bf:de:f8:5c:92:94:fc: eb:31:02:c0:6a:81:e9:50:2c:41:3a:36:67:f8:ab:9b:dc:8e: 16:d0:0a:07:0e:91:37:d5:bb:52:6d:8c:00:73:48:10:92:1a: 87:d9:ea:69:af:82:13:be:0f:6a:a7:84:b4:43:c1:df:46:88: 0a:80:fe:0a:99:56:f5:35:fd:3d:dd:ae:74:f4:0a:63:8c:0a: 2b:c7:b6:32:c3:9f:7a:c5:ba:41:8b:6e:20:be:33:08:bf:7e: e5:b4:ed:da:b0:4f:53:f1:a7:8c:ff:89:49:44:f2:8e:e5:f2: 61:5f:06:7d:11:37:12:8e:aa:5f:ed:f3:6d:e6:c5:59:f0:45: be:18:ec:a0:60:5b:ee:b7:af:97:db:c7:b1:10:d1:c7:5b:fc: 44:b5:9c:b0:75:5e:75:df:c4:4b:6f:dd:65:a6:34:b2:2c:13: af:9a:02:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJbwVhoi5aThoCktdNQi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4 MTA3ZjYwHhcNMjUxMjIyMTMwMDM2WhcNMjUxMjIzMTMwMDM2WjAzMTEwLwYDVQQD Eyg2ZjFkODQxZjFiZDRmODk3ZDY4MTkyNTZmODcwYWI1MGJmOGFjNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0rYvEa57UG4hP+fYIRDD/Nlp+WK Lx7ro6u9jHArPGJ9L9b3P1wEIvYmBxo8m7iUytbKf0nhD4xiJ2fe9406Xj60T4f4 LbLR/duca2v/mpm8DK2xxiQXDSBGUMq0T6dL6Q4GTFL7XY4DnCxLfTjF3mJii2BE o5mgAEjzyioQufaMf8W2ArhFf5j3v/OADabh4y5Xni73Oa0wJIrs/iV1NtzFJ408 X+iDsprjgHSC8puTgblsO57KR7BKBKuk/t8EArJDbGhwvTKC3Sh+19TkQ7LMdPtj Gdu/hGe689DwivBM+UBHhqyCTuA9OmdsDZ/gUTQ7iD+A/IucGwosFJpb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8dhB8b1PiX1oGSVvhwq1C/isUVMB8GA1UdIwQY MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt MjZjNjdjZDAxMjhjLzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnEqwlcO 0NOQhPixSs6YB25Th/kyDvvZroUgc+ZhnJSF2/k8smChWNJxcpzeCALZYe7L0yf+ trTuoCdjhaB/0ABm/RUEKRg2nhiaQ+pW1JmHuO2/3vhckpT86zECwGqB6VAsQTo2 Z/irm9yOFtAKBw6RN9W7Um2MAHNIEJIah9nqaa+CE74PaqeEtEPB30aICoD+CplW 9TX9Pd2udPQKY4wKK8e2MsOfesW6QYtuIL4zCL9+5bTt2rBPU/GnjP+JSUTyjuXy YV8GfRE3Eo6qX+3zbebFWfBFvhjsoGBb7revl9vHsRDRx1v8RLWcsHVedd/ES2/d ZaY0siwTr5oC3g== -----END CERTIFICATE-----Generated at Mon Dec 22 15:44:29 2025 by rpki-client