This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json) Hash identifier: UZkcKI229vdaIUMQzxwyBigQQ1EapABg6qxGnPjNbm4= Subject key identifier: 13:02:D9:97:4A:DD:F5:ED:09:FC:96:CB:EB:D2:44:54:58:55:B2:AB Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb Certificate serial: 019B30E8182D36B85D8C1475FEC8B332C5CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft Manifest number: 04A9 Signing time: Thu 18 Dec 2025 10:01:15 +0000 Manifest this update: Thu 18 Dec 2025 10:01:15 +0000 Manifest next update: Fri 19 Dec 2025 10:01:15 +0000 Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: fwTcrENA2e0cdgZLKhUGz64qirq1taSXPtE3/T+Q6Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:18:2d:36:b8:5d:8c:14:75:fe:c8:b3:32:c5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb Validity Not Before: Dec 18 10:01:15 2025 GMT Not After : Dec 19 10:01:15 2025 GMT Subject: CN=1302d9974addf5ed09fc96cbebd244545855b2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:cb:08:a9:2c:0f:86:61:58:1f:ce:ec:f0: 03:0f:fe:c3:59:67:07:28:a1:cb:47:50:e5:28:a6: 80:dd:e8:eb:3d:11:f1:17:0b:83:4d:df:17:6d:3c: 8c:45:4b:f4:b1:dd:4a:17:43:3c:c0:06:42:cd:79: 82:83:d2:f3:e4:f2:51:38:d7:b1:5b:da:ca:fd:b5: 84:8f:af:44:68:94:02:4a:6e:fe:9c:e4:11:c7:35: 02:07:da:fb:60:58:fc:2c:55:2a:28:cc:63:a1:aa: 05:5d:18:12:bf:00:eb:12:b0:3d:25:e0:2a:02:f7: ff:51:1f:a5:5a:40:0a:37:91:ff:e2:41:7c:d8:21: cd:32:17:ff:fa:7b:b1:df:d4:37:14:4c:14:98:fc: bc:cd:58:cf:1f:a7:58:23:ea:f0:64:60:51:ac:4b: b7:59:54:1d:25:12:fa:f8:09:7f:fe:be:dd:19:5d: a5:ad:eb:66:50:57:e2:0e:52:0f:39:0b:28:f2:c3: 0e:57:65:97:aa:d6:18:5b:b2:96:01:cc:e4:be:7a: 92:1a:4a:35:c7:f9:1d:a4:fe:54:6f:da:9e:bf:f0: fd:a3:27:73:35:ac:01:2e:ae:14:9c:32:cd:76:f3: 68:3c:5e:99:09:f5:31:3e:04:9f:24:4a:01:09:92: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:D9:97:4A:DD:F5:ED:09:FC:96:CB:EB:D2:44:54:58:55:B2:AB X509v3 Authority Key Identifier: keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:a4:b0:65:a5:0a:9b:7c:09:e3:6b:d5:a7:2e:00:86:7e: fe:ba:cb:29:56:b2:6c:a4:89:b4:a3:ff:a0:77:cf:87:28:0e: 95:63:1b:55:da:43:a3:a4:27:d3:27:8f:c8:00:9e:cb:0d:da: 33:74:40:5a:12:26:d3:e6:e9:cf:b8:cd:fc:54:6c:97:5b:93: 6a:99:cf:ac:4b:e7:75:6d:ae:55:1a:d3:34:5d:1d:b6:b3:fc: 2c:51:b0:76:2a:a3:29:db:53:70:a5:8e:12:55:cb:02:d5:b7: 91:1b:6d:69:90:0b:38:73:0d:77:7b:4d:49:b2:af:90:3a:66: 43:7e:ac:2c:aa:c1:b7:9c:59:c4:8a:d6:e9:1a:f8:26:71:49: 41:4d:d1:f2:44:4d:6c:27:66:70:4b:c5:38:99:80:26:07:29: ab:89:5c:70:7f:d8:d0:61:2c:b8:79:cf:52:a4:6c:33:c2:dd: 14:1f:77:1b:cc:60:bb:97:7f:c2:b6:f6:ea:c2:d1:58:69:b0: 7d:4f:da:ae:a3:1d:84:4f:7a:bd:62:06:eb:ca:37:b1:3b:82: c6:1d:43:75:87:8d:28:87:40:a8:02:9a:2f:f3:09:b7:1a:0b: 85:d1:82:3f:97:aa:c9:3d:a7:bb:9d:9b:18:c1:3d:68:99:f9: e4:41:2f:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6BgtNrhdjBR1/sizMsXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWQzYzAwZGU4MmZiZWViM2IzOGFlYzMyZmQ3ZDJjN2M5 YTk4ZWIwHhcNMjUxMjE4MTAwMTE1WhcNMjUxMjE5MTAwMTE1WjAzMTEwLwYDVQQD EygxMzAyZDk5NzRhZGRmNWVkMDlmYzk2Y2JlYmQyNDQ1NDU4NTViMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthfLCKksD4ZhWB/O7PADD/7DWWcH KKHLR1DlKKaA3ejrPRHxFwuDTd8XbTyMRUv0sd1KF0M8wAZCzXmCg9Lz5PJRONex W9rK/bWEj69EaJQCSm7+nOQRxzUCB9r7YFj8LFUqKMxjoaoFXRgSvwDrErA9JeAq Avf/UR+lWkAKN5H/4kF82CHNMhf/+nux39Q3FEwUmPy8zVjPH6dYI+rwZGBRrEu3 WVQdJRL6+Al//r7dGV2lretmUFfiDlIPOQso8sMOV2WXqtYYW7KWAczkvnqSGko1 x/kdpP5Ub9qev/D9oydzNawBLq4UnDLNdvNoPF6ZCfUxPgSfJEoBCZLQRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMC2ZdK3fXtCfyWy+vSRFRYVbKrMB8GA1UdIwQY MBaAFC0dPADegvvus7OK7DL9fSx8mpjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFIwOEFONkMtLTZ6czRyc012MTlMSHlhbU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82NmFiOGItYmIzOC00MWJlLTlhOGIt ZTM1OWM5ZDdiOTA3LzEvTFIwOEFONkMtLTZ6czRyc012MTlMSHlhbU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS82NmFiOGItYmIzOC00MWJlLTlhOGItZTM1OWM5ZDdiOTA3 LzEvTFIwOEFONkMtLTZ6czRyc012MTlMSHlhbU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE+ksGWl Cpt8CeNr1acuAIZ+/rrLKVaybKSJtKP/oHfPhygOlWMbVdpDo6Qn0yePyACeyw3a M3RAWhIm0+bpz7jN/FRsl1uTapnPrEvndW2uVRrTNF0dtrP8LFGwdiqjKdtTcKWO ElXLAtW3kRttaZALOHMNd3tNSbKvkDpmQ36sLKrBt5xZxIrW6Rr4JnFJQU3R8kRN bCdmcEvFOJmAJgcpq4lccH/Y0GEsuHnPUqRsM8LdFB93G8xgu5d/wrb26sLRWGmw fU/arqMdhE96vWIG68o3sTuCxh1DdYeNKIdAqAKaL/MJtxoLhdGCP5eqyT2nu52b GME9aJn55EEvgQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:53 2025 by rpki-client