This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json) Hash identifier: qrGJ9zDp3DlCnq5Ak6oq8tR1DmMLWk2P0l1axLCeSHg= Subject key identifier: 62:F7:A4:64:F1:2A:B7:EE:38:3C:5E:5E:CD:3C:4F:91:6B:43:CA:21 Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd Certificate serial: 019B3B6BE232C1B0FD0EFFEC37697E06B792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft Manifest number: 0867 Signing time: Sat 20 Dec 2025 11:01:24 +0000 Manifest this update: Sat 20 Dec 2025 11:01:24 +0000 Manifest next update: Sun 21 Dec 2025 11:01:24 +0000 Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=) 2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: FpuxB7ae6q4iQsvaMkTzFvKJfXV9FhIUmS7rfiLa1dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e2:32:c1:b0:fd:0e:ff:ec:37:69:7e:06:b7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd Validity Not Before: Dec 20 11:01:24 2025 GMT Not After : Dec 21 11:01:24 2025 GMT Subject: CN=62f7a464f12ab7ee383c5e5ecd3c4f916b43ca21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:6b:dc:32:e1:79:dd:a4:af:dd:c9:ca:5c: eb:0d:95:d3:77:44:90:5b:cf:68:82:16:a5:5a:ab: 91:a3:5a:5d:64:2e:e7:77:cc:0c:93:c2:3e:ec:38: c3:e2:de:b6:43:72:4b:e9:ac:0a:ee:7a:e2:97:f2: 0a:ce:8f:99:9b:2b:d2:ef:e2:d9:f4:d5:f7:68:32: a1:f5:eb:8f:db:72:c4:eb:29:2d:80:f6:7b:95:bd: 85:d3:0a:5b:9c:18:a5:e5:57:4f:74:dd:85:cd:8e: 56:93:6d:be:82:98:7c:1e:c5:89:bd:f4:77:f3:49: 23:f3:5e:32:f8:f3:53:91:71:48:d4:e7:81:97:71: 32:fb:3f:17:31:f4:4c:15:c3:49:f9:52:18:86:90: 42:30:9f:8a:5c:bc:d6:ff:c0:16:fe:c8:2b:1d:ed: 92:b6:42:49:af:e0:7f:5b:3b:8d:b5:c0:3e:87:a1: ff:4c:67:b5:b9:a3:5e:ef:4a:67:47:8d:b5:b7:99: 7f:36:e3:7e:35:c7:11:b2:b5:84:90:c9:2a:5c:be: 3d:4b:21:a3:ef:bc:92:b6:82:22:2f:03:98:9f:64: ba:98:a2:41:af:66:4e:3d:df:51:b0:9e:7d:9a:13: e1:a9:72:05:3c:e7:f6:12:73:fe:4e:b0:d0:8a:e0: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F7:A4:64:F1:2A:B7:EE:38:3C:5E:5E:CD:3C:4F:91:6B:43:CA:21 X509v3 Authority Key Identifier: keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:45:7e:b2:ff:b7:db:4f:25:df:e1:cb:9d:31:b2:51:29:a4: 2c:ac:ec:2d:1e:e4:d7:23:ee:bb:c5:08:d2:9e:61:7f:98:1a: bb:d1:63:98:5c:3a:eb:0e:09:33:12:d4:f6:59:c8:78:6f:97: c7:bb:5c:bd:7f:c4:9f:1d:05:f4:58:88:54:a0:3e:68:45:83: b4:70:a2:35:2e:41:13:b1:48:b4:02:f8:24:5f:38:14:2c:d2: c5:3b:67:76:d8:fd:1d:ca:7f:8e:9c:8f:2b:00:49:f1:b2:d3: c4:44:c4:c5:69:6f:27:84:b3:00:dc:76:ea:28:7d:03:4a:5e: a5:19:93:ae:b0:2d:98:1b:cf:53:53:82:d5:67:ac:87:71:0d: 03:1b:8f:c1:18:3e:e7:12:61:ed:6c:e1:98:2c:5c:e8:3b:ed: bc:b9:b7:31:2c:22:d2:68:02:93:55:e0:04:08:98:e1:10:da: 0b:f2:f5:bc:b7:a5:69:49:58:54:54:8a:47:9a:55:20:5c:d6: 06:82:05:54:17:74:03:8a:9c:22:79:d1:29:c5:11:c3:1a:78: 99:5c:a6:16:64:46:15:2d:b4:99:2e:99:73:bd:1a:95:6f:43: 58:47:78:ba:68:bb:83:ed:f7:79:e1:b0:50:1c:55:db:ff:eb: 84:02:3a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+IywbD9Dv/sN2l+BreSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmZmNmNmYjgzMjZiNDQ3Mjk1YTExYjEwNzg2ODIxMmU2 NjVmZGQwHhcNMjUxMjIwMTEwMTI0WhcNMjUxMjIxMTEwMTI0WjAzMTEwLwYDVQQD Eyg2MmY3YTQ2NGYxMmFiN2VlMzgzYzVlNWVjZDNjNGY5MTZiNDNjYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVxr3DLhed2kr93JylzrDZXTd0SQ W89oghalWquRo1pdZC7nd8wMk8I+7DjD4t62Q3JL6awK7nril/IKzo+ZmyvS7+LZ 9NX3aDKh9euP23LE6yktgPZ7lb2F0wpbnBil5VdPdN2FzY5Wk22+gph8HsWJvfR3 80kj814y+PNTkXFI1OeBl3Ey+z8XMfRMFcNJ+VIYhpBCMJ+KXLzW/8AW/sgrHe2S tkJJr+B/WzuNtcA+h6H/TGe1uaNe70pnR421t5l/NuN+NccRsrWEkMkqXL49SyGj 77yStoIiLwOYn2S6mKJBr2ZOPd9RsJ59mhPhqXIFPOf2EnP+TrDQiuDSmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL3pGTxKrfuODxeXs08T5FrQ8ohMB8GA1UdIwQY MBaAFC6/9s+4MmtEcpWhGxB4aCEuZl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYt YTc4NmNlYmUyMGQzLzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYtYTc4NmNlYmUyMGQz LzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0V+sv+3 208l3+HLnTGyUSmkLKzsLR7k1yPuu8UI0p5hf5gau9FjmFw66w4JMxLU9lnIeG+X x7tcvX/Enx0F9FiIVKA+aEWDtHCiNS5BE7FItAL4JF84FCzSxTtndtj9Hcp/jpyP KwBJ8bLTxETExWlvJ4SzANx26ih9A0pepRmTrrAtmBvPU1OC1Wesh3ENAxuPwRg+ 5xJh7WzhmCxc6DvtvLm3MSwi0mgCk1XgBAiY4RDaC/L1vLelaUlYVFSKR5pVIFzW BoIFVBd0A4qcInnRKcURwxp4mVymFmRGFS20mS6Zc70alW9DWEd4umi7g+33eeGw UBxV2//rhAI6dQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:55 2025 by rpki-client