This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft File: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft (raw, json) Hash identifier: v7YfQvHj4H2e0YGO0X/zQplff+rxEsWUJDTzSjmHekI= Subject key identifier: 86:BD:CD:BE:F3:4D:4E:AF:44:6C:46:47:C2:56:16:15:94:E0:78:64 Authority key identifier: 2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D Certificate issuer: /CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d Certificate serial: 019B3DFEDF80F9F1206444223220565D9E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft Manifest number: 25 Signing time: Sat 20 Dec 2025 23:01:11 +0000 Manifest this update: Sat 20 Dec 2025 23:01:11 +0000 Manifest next update: Sun 21 Dec 2025 23:01:11 +0000 Files and hashes: 1: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl (hash: ATdqjvzXSa6A2jqKzdo4S4mwzHpnx5Tvd4Xmclb3FL8=) 2: grzGxCAEf0Hspcax1ImuxfLkRN8.roa (hash: xJx7DqzZdlLw1Ymcz36R8CSmRus5PXC/Zrp7Q1ZFLbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:df:80:f9:f1:20:64:44:22:32:20:56:5d:9e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d Validity Not Before: Dec 20 23:01:11 2025 GMT Not After : Dec 21 23:01:11 2025 GMT Subject: CN=86bdcdbef34d4eaf446c4647c256161594e07864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:2b:63:01:86:4b:f5:01:a3:91:66:7b:c6: 1c:8d:c0:f0:06:e1:8f:23:2f:ec:f2:d9:83:32:e8: 4e:1c:55:33:47:53:17:a9:91:a9:d8:86:aa:2a:a3: 0c:45:61:57:b1:e1:70:23:91:68:eb:74:08:8b:fa: d8:c7:cd:8c:0f:28:fe:2f:4c:aa:88:ff:b4:d8:16: 9f:c7:1a:d0:b3:3e:e5:e2:91:e7:32:33:72:3f:0e: 38:dd:3c:56:fe:03:e9:e1:3d:83:ff:1b:27:f6:24: e7:94:c4:bd:74:3f:02:75:bd:0e:08:dd:61:ec:34: 3f:63:03:dd:00:6a:a6:7a:c1:f0:d7:a9:a3:41:5e: 96:a0:ad:57:05:fc:a7:87:42:b7:9a:3a:6f:0c:2b: 6c:55:dc:77:e1:4c:61:9c:ad:34:37:5d:ac:55:93: c7:11:91:7a:5f:57:d0:b6:1e:f5:a5:a8:4b:8e:ed: f3:c4:06:63:1c:0e:c9:0d:45:ba:ae:8e:55:32:b4: eb:a4:68:13:97:b8:7b:fe:62:e1:b2:b3:c9:8e:8b: bd:6b:65:e4:38:f1:15:09:b8:96:0a:29:79:c3:35: d7:67:2f:a7:7b:26:52:ae:ba:cd:b8:47:3c:74:6b: b9:ad:2f:18:3c:e6:3c:f3:f9:dc:ae:61:f5:8a:6d: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BD:CD:BE:F3:4D:4E:AF:44:6C:46:47:C2:56:16:15:94:E0:78:64 X509v3 Authority Key Identifier: keyid:2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:f8:c9:9e:f6:50:30:b9:af:07:3e:58:4a:d6:f0:95:3a: 5e:37:12:52:0e:fe:8c:25:cd:03:3e:90:9d:a0:58:da:71:52: 9b:19:00:92:24:6f:70:2e:b8:10:6e:c8:a5:6b:3b:c0:20:1e: 4a:d8:82:96:42:17:bb:b2:bb:13:32:e6:ff:4a:27:1a:31:51: c4:eb:74:cb:d1:10:5e:f4:70:cf:e3:2a:97:3a:1b:e3:72:3d: 54:74:a1:91:42:18:5f:2e:e0:84:3c:c5:d6:aa:94:c1:9d:13: 6b:1f:0c:42:f8:fc:52:84:f1:1f:62:b4:95:04:33:8a:cd:dc: bf:d0:82:4c:49:18:fd:d4:43:a7:c6:08:9b:72:fc:50:a6:26: 36:78:14:bf:06:70:5e:64:3f:4f:60:17:b3:95:6e:1f:da:3b: dd:fc:e3:60:ee:6e:ea:7d:ed:6a:65:f1:1b:51:8b:0d:b2:c5: 8e:fd:7e:80:5b:a5:fe:2c:51:d5:2b:e0:03:ca:2a:27:db:3b: 0e:12:37:8d:04:f8:25:70:6b:7f:ce:f0:0a:7e:7b:5f:40:3b: 7f:2d:b9:76:2d:95:ac:8c:58:66:96:77:85:6c:6d:f2:91:19: 16:68:bd:e0:5b:c6:70:28:d6:dc:f3:5e:90:51:77:d8:f3:e5: fa:9d:72:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/t+A+fEgZEQiMiBWXZ6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzYyZDNmZDJmYmZjZTEwYzU4ZjllYjc2YmU5MGZjY2Jh ZmIxN2QwHhcNMjUxMjIwMjMwMTExWhcNMjUxMjIxMjMwMTExWjAzMTEwLwYDVQQD Eyg4NmJkY2RiZWYzNGQ0ZWFmNDQ2YzQ2NDdjMjU2MTYxNTk0ZTA3ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIsrYwGGS/UBo5Fme8YcjcDwBuGP Iy/s8tmDMuhOHFUzR1MXqZGp2IaqKqMMRWFXseFwI5Fo63QIi/rYx82MDyj+L0yq iP+02BafxxrQsz7l4pHnMjNyPw443TxW/gPp4T2D/xsn9iTnlMS9dD8Cdb0OCN1h 7DQ/YwPdAGqmesHw16mjQV6WoK1XBfynh0K3mjpvDCtsVdx34UxhnK00N12sVZPH EZF6X1fQth71pahLju3zxAZjHA7JDUW6ro5VMrTrpGgTl7h7/mLhsrPJjou9a2Xk OPEVCbiWCil5wzXXZy+neyZSrrrNuEc8dGu5rS8YPOY88/ncrmH1im1NlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa9zb7zTU6vRGxGR8JWFhWU4HhkMB8GA1UdIwQY MBaAFC52LT/S+/zhDFj563a+kPzLr7F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUt OGU4MTM4ZWZjNDFiLzEvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUtOGU4MTM4ZWZjNDFi LzEvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8D4yZ72 UDC5rwc+WErW8JU6XjcSUg7+jCXNAz6QnaBY2nFSmxkAkiRvcC64EG7IpWs7wCAe StiClkIXu7K7EzLm/0onGjFRxOt0y9EQXvRwz+Mqlzob43I9VHShkUIYXy7ghDzF 1qqUwZ0Tax8MQvj8UoTxH2K0lQQzis3cv9CCTEkY/dRDp8YIm3L8UKYmNngUvwZw XmQ/T2AXs5VuH9o73fzjYO5u6n3tamXxG1GLDbLFjv1+gFul/ixR1SvgA8oqJ9s7 DhI3jQT4JXBrf87wCn57X0A7fy25di2VrIxYZpZ3hWxt8pEZFmi94FvGcCjW3PNe kFF32PPl+p1yzA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:13:10 2025 by rpki-client