This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json) Hash identifier: YBZZS6ihJ5EU+4K3kOixRt7mstyjhvF+CwOWMwlcMKw= Subject key identifier: 91:56:0D:33:81:50:DF:37:5F:60:54:06:68:5F:CE:B6:6A:39:31:3A Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Certificate serial: 019B680D7734116F4378821C64875A163344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft Manifest number: 06ED Signing time: Mon 29 Dec 2025 03:01:11 +0000 Manifest this update: Mon 29 Dec 2025 03:01:11 +0000 Manifest next update: Tue 30 Dec 2025 03:01:11 +0000 Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: 3+Um+E4XJdGXe76NMrvpEbenqaiaPM8tszkIdSQtYA8=) 2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:77:34:11:6f:43:78:82:1c:64:87:5a:16:33:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Validity Not Before: Dec 29 03:01:11 2025 GMT Not After : Dec 30 03:01:11 2025 GMT Subject: CN=91560d338150df375f605406685fceb66a39313a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:1f:63:e8:0f:45:c2:b9:92:be:9e:b8:72: 28:fb:1a:ed:ea:c8:f0:82:fd:d7:fe:a5:2d:36:d2: 0d:c5:93:e5:c8:c0:a6:51:69:9d:aa:91:55:01:43: 78:90:1a:41:a2:7c:dc:bb:81:55:2a:5a:49:1b:b7: 0c:04:30:cc:a2:20:75:fe:a6:40:39:99:0d:05:bc: 39:08:20:52:e2:24:16:58:01:ec:37:03:b6:8a:c7: b2:d4:29:f0:1c:1b:70:b6:29:92:20:db:19:73:57: bd:83:d0:96:7a:2d:10:df:96:91:60:12:e8:1f:1a: db:50:03:42:73:47:1d:10:d2:09:d4:23:af:d8:5f: 5b:61:dc:bc:92:d8:65:54:7b:ab:82:a4:4b:09:ff: 7b:d0:23:ef:75:ed:4e:a5:34:0c:c2:cf:0c:cd:76: 76:d7:0b:04:84:5c:e9:79:ca:65:2e:02:2f:fa:f0: 49:bb:ca:68:fb:e8:e1:2f:61:57:2f:fc:3c:bf:6a: c8:8e:46:04:d8:4d:ba:ea:22:a3:94:75:45:32:09: 03:ce:b5:10:f5:fa:84:08:92:3f:a3:04:55:df:4e: f6:59:94:d0:2d:86:fe:91:c7:4b:1e:4a:50:df:05: 33:5d:43:d5:b9:35:b4:88:5d:f2:86:1c:97:fe:52: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:56:0D:33:81:50:DF:37:5F:60:54:06:68:5F:CE:B6:6A:39:31:3A X509v3 Authority Key Identifier: keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:76:19:b8:3e:11:3e:f4:f6:29:45:e2:04:17:c8:d3:c1:7a: 6f:46:7c:be:8b:c0:0b:01:b2:eb:1d:cb:18:af:a5:71:85:db: 70:42:f3:cf:bf:b7:0a:ed:b2:41:66:20:79:ce:8f:2a:42:d6: 8f:16:64:58:84:25:a9:e8:1e:a5:e0:1a:b4:3d:fe:65:a1:76: a5:d3:c8:57:32:6e:49:03:1b:e6:07:5f:e2:4f:ef:f7:6c:df: d2:75:20:3e:80:9b:0a:25:1b:bc:83:2c:19:8a:ce:1d:19:80: 8d:83:9c:30:df:d3:a9:e5:b0:16:77:3b:01:ea:09:4a:d0:04: 3a:43:56:e2:e3:39:5c:89:c7:13:e8:6d:38:2f:c2:3d:f1:2d: 8c:40:62:fa:02:45:08:c5:58:dd:b6:e3:89:08:5c:53:2a:85: 51:ef:00:a8:19:ee:3c:2b:90:5e:b9:4b:56:88:90:8a:6e:a4: 16:57:82:30:3a:8e:b4:c8:ef:a5:24:98:db:61:21:2c:11:bf: c4:26:e9:e5:88:99:4f:1a:0a:06:9a:54:50:5d:33:4d:83:67: 83:23:4a:8d:df:df:6d:50:ec:b7:58:3b:80:fd:30:3d:8f:e9: 64:3f:ae:87:4e:3e:ce:45:27:2f:66:e9:b9:71:74:0c:bd:75: 0e:c5:13:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDXc0EW9DeIIcZIdaFjNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx M2QwOTYwHhcNMjUxMjI5MDMwMTExWhcNMjUxMjMwMDMwMTExWjAzMTEwLwYDVQQD Eyg5MTU2MGQzMzgxNTBkZjM3NWY2MDU0MDY2ODVmY2ViNjZhMzkzMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6EfY+gPRcK5kr6euHIo+xrt6sjw gv3X/qUtNtINxZPlyMCmUWmdqpFVAUN4kBpBonzcu4FVKlpJG7cMBDDMoiB1/qZA OZkNBbw5CCBS4iQWWAHsNwO2isey1CnwHBtwtimSINsZc1e9g9CWei0Q35aRYBLo HxrbUANCc0cdENIJ1COv2F9bYdy8kthlVHurgqRLCf970CPvde1OpTQMws8MzXZ2 1wsEhFzpecplLgIv+vBJu8po++jhL2FXL/w8v2rIjkYE2E266iKjlHVFMgkDzrUQ 9fqECJI/owRV3072WZTQLYb+kcdLHkpQ3wUzXUPVuTW0iF3yhhyX/lJyIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFWDTOBUN83X2BUBmhfzrZqOTE6MB8GA1UdIwQY MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXYZuD4R PvT2KUXiBBfI08F6b0Z8vovACwGy6x3LGK+lcYXbcELzz7+3Cu2yQWYgec6PKkLW jxZkWIQlqegepeAatD3+ZaF2pdPIVzJuSQMb5gdf4k/v92zf0nUgPoCbCiUbvIMs GYrOHRmAjYOcMN/TqeWwFnc7AeoJStAEOkNW4uM5XInHE+htOC/CPfEtjEBi+gJF CMVY3bbjiQhcUyqFUe8AqBnuPCuQXrlLVoiQim6kFleCMDqOtMjvpSSY22EhLBG/ xCbp5YiZTxoKBppUUF0zTYNngyNKjd/fbVDst1g7gP0wPY/pZD+uh04+zkUnL2bp uXF0DL11DsUT1g== -----END CERTIFICATE-----Generated at Mon Dec 29 10:01:21 2025 by rpki-client