This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json) Hash identifier: /UVEga0pnf235+p+pv7sqbkjdnIoNPkv1lp96jVHHeI= Subject key identifier: D0:00:CC:1D:95:46:69:BE:19:98:9F:0B:6C:01:99:A2:18:5D:77:B3 Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a Certificate serial: 019B3C7F01A20FBED5770C424AD01DF14AB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft Manifest number: 1359 Signing time: Sat 20 Dec 2025 16:01:55 +0000 Manifest this update: Sat 20 Dec 2025 16:01:55 +0000 Manifest next update: Sun 21 Dec 2025 16:01:55 +0000 Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: GwbyFnG/3wiQzCK5vIrMscV4cP5sMbIy2o+Wf2mk478=) 2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:01:a2:0f:be:d5:77:0c:42:4a:d0:1d:f1:4a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a Validity Not Before: Dec 20 16:01:55 2025 GMT Not After : Dec 21 16:01:55 2025 GMT Subject: CN=d000cc1d954669be19989f0b6c0199a2185d77b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:90:cf:f5:f0:c3:81:3a:ab:9e:9a:5a:2b:28: ac:94:b0:61:86:3b:6d:4d:bc:de:1d:dd:67:5f:d6: 86:ec:11:d0:ab:aa:dd:d6:10:60:1c:20:87:93:c9: 90:ae:52:6e:9f:4d:c6:be:03:8d:99:6e:71:9f:66: 3c:32:b1:90:ed:08:a2:77:b3:16:59:0f:ef:eb:d0: 5e:5d:05:3d:3d:ac:57:12:61:e6:68:5a:8b:77:6b: ce:9d:49:76:b3:6f:e4:63:d7:a5:6e:ee:83:c0:09: 07:03:3e:45:27:63:3f:26:a4:73:63:5c:73:fe:5e: d0:37:55:e1:ad:de:fc:2d:b2:90:20:d0:f5:09:5d: 03:97:01:44:48:8c:e1:d5:10:8f:5a:d3:f6:8e:ee: aa:9e:29:9a:8d:31:8f:a0:e4:b6:a9:58:98:c9:84: ed:a0:a6:df:83:a9:bb:56:10:71:7e:e3:be:81:5c: f4:29:b1:4c:82:d6:4e:b6:28:bc:41:1d:87:5a:b0: 5d:39:4a:03:93:cd:82:30:6c:da:b0:84:fe:bd:46: 57:bf:21:44:3b:aa:92:85:ba:61:9b:d3:34:de:02: ef:af:38:65:b6:67:5b:9f:4d:fc:66:52:05:30:e3: df:3c:4b:27:ad:94:76:5a:2c:7e:28:f9:0f:6d:63: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:CC:1D:95:46:69:BE:19:98:9F:0B:6C:01:99:A2:18:5D:77:B3 X509v3 Authority Key Identifier: keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:15:51:f2:60:1e:a6:0b:53:bc:67:cb:7d:bb:23:4c:0d:2c: de:bd:9b:aa:1a:bd:f5:38:e6:12:af:9d:1e:d4:37:e6:58:22: 8a:b7:08:e9:2f:d3:1a:3b:72:97:fd:29:39:6a:e7:e5:07:83: 15:51:6d:d0:69:e5:20:83:eb:c8:0c:09:1a:5a:1e:ff:90:72: 14:e6:aa:00:c6:37:c0:c9:9e:6f:c1:64:74:e1:e0:a7:a6:7a: 00:e8:23:24:c9:3c:0d:ce:22:e2:bc:f7:9d:38:3b:41:09:68: 64:6a:4d:73:75:7f:91:cf:9a:e3:09:54:97:39:b4:17:ba:80: fb:a3:3d:a0:f4:a2:d2:25:8b:aa:aa:74:15:c5:29:d4:d4:de: 0e:68:cc:39:1f:11:b1:8c:3a:5a:b0:d0:f0:e3:7d:cd:f0:23: a6:4d:79:7d:65:40:10:e6:53:a3:58:26:eb:ca:23:aa:4b:7d: 6c:26:77:c9:4d:f7:cb:8b:7c:0c:bb:e3:3a:5c:49:a7:9e:91: 27:bc:60:86:5f:df:e1:4f:3e:51:db:24:07:94:ae:41:ca:c9: cf:0f:65:35:1b:ac:dd:76:6f:a7:40:bf:78:d3:74:53:7e:fd: 8b:9f:f9:4b:df:49:b9:70:8b:81:c4:a9:10:76:5d:0c:e8:9a: d6:36:54:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwGiD77VdwxCStAd8Uq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl MDk5MGEwHhcNMjUxMjIwMTYwMTU1WhcNMjUxMjIxMTYwMTU1WjAzMTEwLwYDVQQD EyhkMDAwY2MxZDk1NDY2OWJlMTk5ODlmMGI2YzAxOTlhMjE4NWQ3N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45DP9fDDgTqrnppaKyislLBhhjtt TbzeHd1nX9aG7BHQq6rd1hBgHCCHk8mQrlJun03GvgONmW5xn2Y8MrGQ7Qiid7MW WQ/v69BeXQU9PaxXEmHmaFqLd2vOnUl2s2/kY9elbu6DwAkHAz5FJ2M/JqRzY1xz /l7QN1Xhrd78LbKQIND1CV0DlwFESIzh1RCPWtP2ju6qnimajTGPoOS2qViYyYTt oKbfg6m7VhBxfuO+gVz0KbFMgtZOtii8QR2HWrBdOUoDk82CMGzasIT+vUZXvyFE O6qShbphm9M03gLvrzhltmdbn038ZlIFMOPfPEsnrZR2Wix+KPkPbWM4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAAzB2VRmm+GZifC2wBmaIYXXezMB8GA1UdIwQY MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghVR8mAe pgtTvGfLfbsjTA0s3r2bqhq99TjmEq+dHtQ35lgiircI6S/TGjtyl/0pOWrn5QeD FVFt0GnlIIPryAwJGloe/5ByFOaqAMY3wMmeb8FkdOHgp6Z6AOgjJMk8Dc4i4rz3 nTg7QQloZGpNc3V/kc+a4wlUlzm0F7qA+6M9oPSi0iWLqqp0FcUp1NTeDmjMOR8R sYw6WrDQ8ON9zfAjpk15fWVAEOZTo1gm68ojqkt9bCZ3yU33y4t8DLvjOlxJp56R J7xghl/f4U8+UdskB5SuQcrJzw9lNRus3XZvp0C/eNN0U379i5/5S99JuXCLgcSp EHZdDOia1jZUYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:12 2025 by rpki-client