This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json) Hash identifier: Lo1TxBkEq2EFi5b3BjaXr7p4zBuTZfUEhNQA0R/Vhpg= Subject key identifier: 29:E2:FC:B2:29:A9:2F:FD:86:DA:60:C1:6A:B1:97:B0:C9:FB:06:72 Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Certificate serial: 019B30B0A9B23019E86524C426F192921880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft Manifest number: 0EFE Signing time: Thu 18 Dec 2025 09:00:42 +0000 Manifest this update: Thu 18 Dec 2025 09:00:42 +0000 Manifest next update: Fri 19 Dec 2025 09:00:42 +0000 Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: 87qXFvqbsaiK1sFaWky01THbyf0DINHk+HJIvejngCY=) 2: R0X5CGrlz-qNmdyzKn23WLaBWOU.roa (hash: MjFGDxvVFvoovmBL50Thb1o1GoniTb6rSndKoBikSDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:a9:b2:30:19:e8:65:24:c4:26:f1:92:92:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8 Validity Not Before: Dec 18 09:00:42 2025 GMT Not After : Dec 19 09:00:42 2025 GMT Subject: CN=29e2fcb229a92ffd86da60c16ab197b0c9fb0672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:23:e9:ef:0d:e9:e1:fc:eb:db:64:26:c2: b7:65:58:00:4f:70:25:18:d7:a8:f2:3c:37:77:a3: 9a:88:79:42:6b:3d:bd:42:2d:17:70:13:3f:e9:c1: 09:f5:e9:a4:1e:7f:94:ae:6b:8f:f1:28:c5:ea:c5: 7d:59:75:8a:5a:14:ef:38:2d:cd:cd:1e:52:91:df: 55:67:c2:57:29:1d:75:bf:5d:ac:ef:94:46:6b:e6: 3e:a3:87:55:b5:57:8e:7a:5b:a7:95:93:a0:71:12: eb:e0:b4:0d:29:4b:f9:f7:cb:a0:cf:1f:fd:12:75: 15:73:1f:da:0d:f6:bb:f6:7a:7a:de:45:49:06:d6: ae:14:5d:12:92:f6:3a:c5:b9:6d:03:2b:39:e1:01: ff:fc:c4:ac:8c:d2:5d:ec:9a:e0:26:ce:0b:b0:b7: 8f:08:cb:ff:21:ce:8b:29:89:1d:2f:15:da:f3:8a: a5:2a:66:80:c4:53:5a:f0:6d:6a:1a:3d:9c:0b:ee: f3:2a:16:e7:42:63:4e:70:2f:50:41:a6:2f:03:de: 90:34:8f:60:5e:55:a5:a3:74:8a:2f:94:95:e7:95: cd:f2:7e:07:8f:36:f2:4e:71:56:29:eb:42:69:dd: 80:39:57:ec:52:fb:a4:9a:28:60:9d:ec:b9:a8:4e: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E2:FC:B2:29:A9:2F:FD:86:DA:60:C1:6A:B1:97:B0:C9:FB:06:72 X509v3 Authority Key Identifier: keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:22:82:69:99:94:23:18:60:81:56:33:be:29:83:d3:3c: a6:ab:bd:2b:e6:f4:9b:6f:32:96:95:59:29:9a:4e:3a:ad:45: 88:25:0a:5b:ca:8d:f1:e9:f6:1a:37:70:4d:e7:a5:ee:c9:57: 65:48:10:b7:70:d1:69:8c:6d:f0:06:0f:73:1f:fb:c5:eb:e0: d7:21:a5:ff:32:89:fb:6f:0e:6f:2b:10:4d:7b:36:d7:87:7e: fe:17:a7:8e:b9:1e:88:9c:2b:f8:54:8a:53:14:9d:87:03:f9: ff:79:3b:ee:c1:83:1d:53:e1:bd:69:cc:04:61:b0:e4:07:f6: 91:4a:c6:70:89:47:68:64:12:6a:e4:ba:a5:3c:eb:cf:d1:f4: 0c:4e:fb:ec:d8:fd:34:21:7e:1c:79:ba:13:65:8d:5f:ed:7f: d6:c6:ab:67:12:bb:9f:5c:10:c2:f7:60:c4:68:3d:3c:11:ed: 9c:77:76:69:c8:0b:d1:81:75:0a:aa:50:00:cc:b5:fa:75:dd: 91:04:25:7f:61:04:58:b0:b6:af:31:92:36:ab:ef:12:7d:27: fe:10:a1:e8:36:53:9c:03:7e:10:0c:68:00:b1:4e:90:7b:62: cc:33:7c:e2:cf:0c:a7:4d:3c:a2:61:d8:4f:0f:36:c6:54:8d: 62:bb:0e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKmyMBnoZSTEJvGSkhiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTk1NTNhOWIyYzdiY2ExMmI2ODFiYzBhNjMwNWUzM2Zi NjQwYzgwHhcNMjUxMjE4MDkwMDQyWhcNMjUxMjE5MDkwMDQyWjAzMTEwLwYDVQQD EygyOWUyZmNiMjI5YTkyZmZkODZkYTYwYzE2YWIxOTdiMGM5ZmIwNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurwj6e8N6eH869tkJsK3ZVgAT3Al GNeo8jw3d6OaiHlCaz29Qi0XcBM/6cEJ9emkHn+UrmuP8SjF6sV9WXWKWhTvOC3N zR5Skd9VZ8JXKR11v12s75RGa+Y+o4dVtVeOelunlZOgcRLr4LQNKUv598ugzx/9 EnUVcx/aDfa79np63kVJBtauFF0SkvY6xbltAys54QH//MSsjNJd7JrgJs4LsLeP CMv/Ic6LKYkdLxXa84qlKmaAxFNa8G1qGj2cC+7zKhbnQmNOcC9QQaYvA96QNI9g XlWlo3SKL5SV55XN8n4HjzbyTnFWKetCad2AOVfsUvukmihgney5qE5REwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCni/LIpqS/9htpgwWqxl7DJ+wZyMB8GA1UdIwQY MBaAFCzpVTqbLHvKEraBvApjBeM/tkDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUt OGJhYmFjOGE0NjVhLzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUtOGJhYmFjOGE0NjVh LzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbMigmmZ lCMYYIFWM74pg9M8pqu9K+b0m28ylpVZKZpOOq1FiCUKW8qN8en2GjdwTeel7slX ZUgQt3DRaYxt8AYPcx/7xevg1yGl/zKJ+28ObysQTXs214d+/henjrkeiJwr+FSK UxSdhwP5/3k77sGDHVPhvWnMBGGw5Af2kUrGcIlHaGQSauS6pTzrz9H0DE777Nj9 NCF+HHm6E2WNX+1/1sarZxK7n1wQwvdgxGg9PBHtnHd2acgL0YF1CqpQAMy1+nXd kQQlf2EEWLC2rzGSNqvvEn0n/hCh6DZTnAN+EAxoALFOkHtizDN84s8Mp008omHY Tw82xlSNYrsObg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:05:30 2025 by rpki-client