This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json) Hash identifier: 7G9jtM6yPRnaeUje5aPwYOqpwSYCtG2wRDrMkbW9V78= Subject key identifier: 77:D6:4F:24:BA:4C:5B:15:98:30:8C:4B:DE:D3:41:48:37:A2:24:C8 Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a Certificate serial: 019B59760F7B1090A45FA232191423230F44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft Manifest number: 16ED Signing time: Fri 26 Dec 2025 07:01:08 +0000 Manifest this update: Fri 26 Dec 2025 07:01:08 +0000 Manifest next update: Sat 27 Dec 2025 07:01:08 +0000 Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: NJwXJItNIVaJJQ9XSctFR7K+OmPVCPS5zVtSF+E2cK4=) 2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:0f:7b:10:90:a4:5f:a2:32:19:14:23:23:0f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a Validity Not Before: Dec 26 07:01:08 2025 GMT Not After : Dec 27 07:01:08 2025 GMT Subject: CN=77d64f24ba4c5b1598308c4bded3414837a224c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:8e:6f:99:ff:1d:d6:6d:a5:f2:d5:38:93: 80:e1:a6:b4:e3:cd:b5:01:96:d7:f9:98:99:29:a3: c7:76:cd:08:19:17:6e:10:ab:ec:f1:34:2a:5c:28: 4c:61:40:25:11:5d:c2:c6:e3:99:80:2e:80:36:cc: 5d:b3:4a:77:a6:6a:e6:53:5a:92:09:95:4d:b5:d8: 10:30:2c:7e:dc:ff:52:2b:c7:0d:5f:8c:4f:2d:52: 8a:2b:70:56:da:da:fc:5e:bd:c9:fa:97:58:29:ed: 62:d9:42:f8:7a:c2:d2:6f:4e:c6:85:59:fc:d4:38: 6e:14:5c:93:2f:e4:32:08:db:55:f5:0d:05:f7:32: 71:9e:4b:43:6f:20:e4:06:c5:e7:d6:c5:91:84:27: 67:e6:4e:95:83:aa:e3:dc:a7:03:4b:27:56:30:9e: 8d:1c:f1:81:75:f0:14:a8:37:e6:e3:95:b5:32:ef: cc:b3:ab:17:7e:43:9a:59:87:97:24:8e:71:02:6e: 03:eb:c6:af:c2:13:a2:44:fe:1b:be:5b:87:e2:71: 31:96:3a:90:8b:33:42:60:b0:93:69:0b:5e:31:f7: 83:5a:86:5f:50:4c:b4:84:2e:89:f2:83:47:70:e4: 4f:b0:da:9b:57:af:62:1a:c8:0b:2f:b9:fa:2c:68: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D6:4F:24:BA:4C:5B:15:98:30:8C:4B:DE:D3:41:48:37:A2:24:C8 X509v3 Authority Key Identifier: keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:28:47:ca:8b:93:ce:00:b4:39:f0:3b:0c:ef:c4:17:18:1b: e1:6b:9f:bb:96:d8:53:96:95:b2:be:9d:5d:58:78:79:66:c4: f9:69:bc:74:97:6c:a2:51:24:30:76:88:74:5b:e8:b4:b1:7b: 77:b6:5d:fb:1b:9d:de:1c:29:a6:1e:d5:18:a0:e4:15:49:56: be:ef:b1:ae:8c:20:ee:10:10:61:8c:9e:fa:ca:ba:33:ea:2c: c7:b0:d6:9b:b6:37:5e:10:85:50:0d:bd:09:62:c8:c7:5b:33: a0:ee:0a:10:f4:94:43:cc:ab:2a:f1:e8:92:de:03:a5:7c:42: d3:70:7e:d2:84:c2:fc:71:d7:ce:27:cd:90:60:68:20:69:39: a0:1c:96:15:45:3a:42:ec:e4:80:10:03:4f:f6:b7:c9:29:34: c0:36:da:fe:9f:60:ae:18:15:cb:9c:43:0d:57:e7:d5:13:73: 1a:1e:3b:a1:0c:8b:bd:25:a7:b6:76:bc:0c:a8:47:8f:83:9a: 89:44:9e:49:70:86:29:ad:63:00:85:2a:e6:fd:e4:13:94:2c: 14:85:20:44:92:fa:5d:45:95:e5:af:c2:d1:95:01:83:4c:93: 96:28:fc:35:f8:9d:cb:d6:c5:c1:dd:92:bb:13:64:01:38:1e: 64:ea:d2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdg97EJCkX6IyGRQjIw9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNjI3NjEzNjI1NDgzMGJiNDkwN2U5OGMyNThlNDkzYjQy YWFhM2EwHhcNMjUxMjI2MDcwMTA4WhcNMjUxMjI3MDcwMTA4WjAzMTEwLwYDVQQD Eyg3N2Q2NGYyNGJhNGM1YjE1OTgzMDhjNGJkZWQzNDE0ODM3YTIyNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8SOb5n/HdZtpfLVOJOA4aa04821 AZbX+ZiZKaPHds0IGRduEKvs8TQqXChMYUAlEV3CxuOZgC6ANsxds0p3pmrmU1qS CZVNtdgQMCx+3P9SK8cNX4xPLVKKK3BW2tr8Xr3J+pdYKe1i2UL4esLSb07GhVn8 1DhuFFyTL+QyCNtV9Q0F9zJxnktDbyDkBsXn1sWRhCdn5k6Vg6rj3KcDSydWMJ6N HPGBdfAUqDfm45W1Mu/Ms6sXfkOaWYeXJI5xAm4D68avwhOiRP4bvluH4nExljqQ izNCYLCTaQteMfeDWoZfUEy0hC6J8oNHcORPsNqbV69iGsgLL7n6LGhYeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfWTyS6TFsVmDCMS97TQUg3oiTIMB8GA1UdIwQY MBaAFC5idhNiVIMLtJB+mMJY5JO0Kqo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMt OTNiOTE0NzAxNDcwLzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82YTliMjQtZDRkMy00MGMxLTgxNzMtOTNiOTE0NzAxNDcw LzEvTG1KMkUySlVnd3Uwa0g2WXdsamtrN1FxcWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARShHyouT zgC0OfA7DO/EFxgb4Wufu5bYU5aVsr6dXVh4eWbE+Wm8dJdsolEkMHaIdFvotLF7 d7Zd+xud3hwpph7VGKDkFUlWvu+xrowg7hAQYYye+sq6M+osx7DWm7Y3XhCFUA29 CWLIx1szoO4KEPSUQ8yrKvHokt4DpXxC03B+0oTC/HHXzifNkGBoIGk5oByWFUU6 QuzkgBADT/a3ySk0wDba/p9grhgVy5xDDVfn1RNzGh47oQyLvSWntna8DKhHj4Oa iUSeSXCGKa1jAIUq5v3kE5QsFIUgRJL6XUWV5a/C0ZUBg0yTlij8Nfidy9bFwd2S uxNkATgeZOrSJQ== -----END CERTIFICATE-----Generated at Fri Dec 26 11:18:03 2025 by rpki-client