This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json) Hash identifier: 3M/9QIZF1sjInt/713JJGy0bVbqjBqXSddmoAJu+wfo= Subject key identifier: 5E:EF:4D:A2:1C:03:46:C5:C0:E6:4A:A8:DF:B2:B9:AF:A6:52:04:FA Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90 Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90 Certificate serial: 019B40FFF0DFF947077BC9D6E7DDD4E342C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft Manifest number: 141E Signing time: Sun 21 Dec 2025 13:01:13 +0000 Manifest this update: Sun 21 Dec 2025 13:01:13 +0000 Manifest next update: Mon 22 Dec 2025 13:01:13 +0000 Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: tc1n6MI0Vg2ZTAGrJ1NLtjuIXt3m7mn1TAnuvpSA45o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f0:df:f9:47:07:7b:c9:d6:e7:dd:d4:e3:42:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90 Validity Not Before: Dec 21 13:01:13 2025 GMT Not After : Dec 22 13:01:13 2025 GMT Subject: CN=5eef4da21c0346c5c0e64aa8dfb2b9afa65204fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:b3:02:9c:b8:77:2e:83:62:a3:45:1e:fe: 37:d9:6e:b5:71:a7:a6:eb:d2:3e:5c:b6:95:25:c1: fd:08:f2:65:8d:ca:b2:18:c5:aa:82:ed:1b:82:f8: 71:73:94:be:8a:18:31:9f:b7:37:3a:21:18:6c:d1: dd:a7:74:f9:28:8c:e6:47:50:6c:f4:74:e5:04:34: 30:aa:23:6b:4d:10:5f:c5:1a:a0:ab:66:22:29:42: 0e:be:70:f1:5a:de:f7:17:1d:10:e4:9a:7e:2e:ab: 04:c0:95:2f:db:f2:a4:88:16:49:f4:c3:21:71:05: f2:97:3b:46:3f:aa:07:c5:bf:7f:f2:ad:ff:bd:ef: bb:f0:c6:25:0c:4b:4b:1e:ce:18:21:1d:d5:ed:f5: b1:d8:be:a8:cd:e4:be:85:8f:53:8e:ec:d0:80:96: fb:31:ed:91:a9:0d:21:68:94:50:c0:0b:12:a7:fb: c5:18:23:4a:43:cc:9e:0f:e6:76:75:3f:12:36:d9: 32:7c:63:9f:ee:26:e8:b8:41:7c:f2:43:03:b4:c4: d2:64:34:e9:b9:91:bd:eb:24:de:60:67:ca:17:1f: 5c:6e:fe:a5:5c:8d:dc:08:24:7e:0e:1d:d2:09:1e: 61:f0:a3:e7:2f:39:9d:bb:f2:28:a7:60:d3:6c:bb: 00:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:4D:A2:1C:03:46:C5:C0:E6:4A:A8:DF:B2:B9:AF:A6:52:04:FA X509v3 Authority Key Identifier: keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8b:fb:c4:14:9d:6d:fa:14:d2:ed:6e:aa:ef:20:c9:23:23: ef:6c:22:51:96:38:74:26:c7:eb:3d:81:7c:29:31:49:58:53: 86:24:bf:de:2e:fb:dd:62:7c:c7:b7:d4:c8:04:f7:25:b8:51: 43:b9:5a:a7:6b:40:62:93:98:f6:7c:cf:12:ed:25:09:f3:a5: b8:dc:ca:a7:a5:f0:83:d9:9a:3e:47:e3:29:81:de:76:62:f2: 36:f5:0b:29:91:d6:ff:d6:65:60:e2:b3:5a:d7:a0:2a:0c:9b: d4:65:e9:3c:ed:45:90:3e:6f:f9:71:04:c8:72:67:34:69:4a: d6:33:e9:09:09:b7:d1:dd:46:74:75:c9:82:d8:1a:30:e6:5e: b6:cd:93:fc:0d:39:c5:1b:ee:59:43:cb:11:fa:1b:45:be:e2: f9:24:95:97:de:a0:f9:01:cd:41:f3:bb:05:51:2d:72:91:45: cd:67:7b:e3:01:56:fb:3f:3e:dd:f4:24:58:31:94:78:6b:ee: 30:09:d9:fa:6a:6c:5a:c5:fd:d4:93:12:6c:54:ea:bc:e0:dd: 0d:bb:ae:86:e6:10:6b:9c:85:56:9a:41:39:a2:94:29:d0:6a: 32:dd:6e:e2:2d:5f:86:30:3d:1c:5e:48:28:fe:71:d2:73:bb: 6e:8c:bd:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//Df+UcHe8nW593U40LEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0 MDZiOTAwHhcNMjUxMjIxMTMwMTEzWhcNMjUxMjIyMTMwMTEzWjAzMTEwLwYDVQQD Eyg1ZWVmNGRhMjFjMDM0NmM1YzBlNjRhYThkZmIyYjlhZmE2NTIwNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma6zApy4dy6DYqNFHv432W61caem 69I+XLaVJcH9CPJljcqyGMWqgu0bgvhxc5S+ihgxn7c3OiEYbNHdp3T5KIzmR1Bs 9HTlBDQwqiNrTRBfxRqgq2YiKUIOvnDxWt73Fx0Q5Jp+LqsEwJUv2/KkiBZJ9MMh cQXylztGP6oHxb9/8q3/ve+78MYlDEtLHs4YIR3V7fWx2L6ozeS+hY9TjuzQgJb7 Me2RqQ0haJRQwAsSp/vFGCNKQ8yeD+Z2dT8SNtkyfGOf7ibouEF88kMDtMTSZDTp uZG96yTeYGfKFx9cbv6lXI3cCCR+Dh3SCR5h8KPnLzmdu/Iop2DTbLsAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7vTaIcA0bFwOZKqN+yua+mUgT6MB8GA1UdIwQY MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASov7xBSd bfoU0u1uqu8gySMj72wiUZY4dCbH6z2BfCkxSVhThiS/3i773WJ8x7fUyAT3JbhR Q7lap2tAYpOY9nzPEu0lCfOluNzKp6Xwg9maPkfjKYHedmLyNvULKZHW/9ZlYOKz WtegKgyb1GXpPO1FkD5v+XEEyHJnNGlK1jPpCQm30d1GdHXJgtgaMOZets2T/A05 xRvuWUPLEfobRb7i+SSVl96g+QHNQfO7BVEtcpFFzWd74wFW+z8+3fQkWDGUeGvu MAnZ+mpsWsX91JMSbFTqvODdDbuuhuYQa5yFVppBOaKUKdBqMt1u4i1fhjA9HF5I KP5x0nO7boy9ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:08:24 2025 by rpki-client