This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json) Hash identifier: Lqi8b5zs988xFY67IeAZukjp6vlmocXy11TIaQWrDYo= Subject key identifier: 08:1A:9E:4E:96:8E:3D:0C:EF:2A:60:D4:94:46:23:78:A8:65:66:A1 Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2 Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2 Certificate serial: 019AF12E1150E954F490D0AAF1E840274BC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: 2Eiw24xUG2iZBhkwxicxxOR8L3k2jIUevX+wB80Lsnc=) 2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:11:50:e9:54:f4:90:d0:aa:f1:e8:40:27:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=081a9e4e968e3d0cef2a60d494462378a86566a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:84:c6:fc:9a:7f:18:30:b9:71:79:bf:f6: e1:e9:44:b1:8f:be:e6:f4:be:e4:47:0e:09:c7:c5: 34:34:49:79:8e:ed:fb:19:8e:43:da:be:12:2f:5e: e1:6c:e3:01:27:08:2d:c7:dd:84:35:52:58:14:8c: e7:08:20:45:45:96:5d:a4:37:4c:a9:48:ae:10:e5: bd:7f:8e:78:8a:27:c7:66:ac:72:70:26:9c:18:90: 3d:84:6d:51:bb:2b:bb:d3:b6:46:08:b6:00:a6:01: de:20:31:23:af:0e:5b:43:e8:ed:6c:3d:18:f7:26: 3c:22:ec:b4:71:0d:26:66:20:cb:8f:cc:f3:36:cf: 36:fd:36:55:0b:ec:dc:2d:a7:11:1e:15:46:30:d8: ae:a4:f5:29:29:31:51:ce:3b:20:19:4c:cf:bd:29: c2:23:f6:e6:83:5b:fd:e1:e3:ef:dc:f7:67:bd:8f: 41:2c:b5:d7:63:4b:e9:c9:4c:57:ed:d7:71:9e:11: 83:5a:3d:cc:75:c0:8f:a0:e3:fe:d8:05:a6:d4:0c: 68:cc:e9:49:02:2f:02:88:89:a3:14:9d:f1:1d:a4: d5:37:52:3e:34:ff:89:dc:36:24:f3:a3:23:57:5b: 5e:71:ba:1b:d3:ad:79:5a:02:ec:65:74:5f:13:e1: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:9E:4E:96:8E:3D:0C:EF:2A:60:D4:94:46:23:78:A8:65:66:A1 X509v3 Authority Key Identifier: keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8b:8b:bf:38:cf:1a:21:e6:74:f3:b9:16:cc:6e:eb:b0:ef: ca:7f:9d:85:98:13:89:f8:ac:da:0d:57:f6:21:16:ef:dc:d1: 14:b2:63:28:bc:30:b6:f3:40:5f:0d:9a:b3:85:1c:78:4b:2a: 2c:a1:dd:a2:f0:03:d1:33:da:48:a3:ac:21:f7:55:a9:31:e9: 93:24:8f:d2:ab:37:48:44:35:84:66:ca:2b:46:0f:11:59:fa: d0:ef:7a:03:d9:f6:34:fd:d2:67:5e:23:73:0b:cd:a1:25:4e: 21:04:ab:1c:49:7b:fc:3c:c4:0d:6b:db:da:1e:99:86:ce:6f: a9:a0:b4:25:84:e0:e2:f0:99:02:7b:95:aa:a2:b6:4d:26:cd: fe:b8:7b:b3:98:95:1c:c6:b9:bb:a5:3f:66:f3:b7:4a:6c:8f: ed:ff:37:55:89:f9:40:8a:99:75:c8:b8:b3:3f:8e:76:83:e6: 72:0d:ea:8f:a1:6b:08:93:61:63:9d:46:a5:3d:10:f5:a0:04: 71:00:e3:98:ed:cd:2f:22:04:88:05:9a:86:0f:ec:a9:a2:14: 4f:d3:7e:8b:e0:44:a3:59:92:ee:ec:8b:c8:d3:cb:83:82:db: 87:89:19:4a:f1:b8:b5:64:36:bc:35:6a:92:3b:62:23:4a:93: ef:dc:30:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhFQ6VT0kNCq8ehAJ0vAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYjYxNmYzYWQwMzYzZTcyNjljYzJlYjU4ZDFiYzA4NmNj OTc1ZjIwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EygwODFhOWU0ZTk2OGUzZDBjZWYyYTYwZDQ5NDQ2MjM3OGE4NjU2NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1aExvyafxgwuXF5v/bh6USxj77m 9L7kRw4Jx8U0NEl5ju37GY5D2r4SL17hbOMBJwgtx92ENVJYFIznCCBFRZZdpDdM qUiuEOW9f454iifHZqxycCacGJA9hG1Ruyu707ZGCLYApgHeIDEjrw5bQ+jtbD0Y 9yY8Iuy0cQ0mZiDLj8zzNs82/TZVC+zcLacRHhVGMNiupPUpKTFRzjsgGUzPvSnC I/bmg1v94ePv3PdnvY9BLLXXY0vpyUxX7ddxnhGDWj3MdcCPoOP+2AWm1AxozOlJ Ai8CiImjFJ3xHaTVN1I+NP+J3DYk86MjV1tecbob0615WgLsZXRfE+GaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgank6Wjj0M7ypg1JRGI3ioZWahMB8GA1UdIwQY MBaAFC22FvOtA2PnJpzC61jRvAhsyXXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEt YTRiNTVhNzFjMjI4LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEtYTRiNTVhNzFjMjI4 LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtouLvzjP GiHmdPO5Fsxu67Dvyn+dhZgTifis2g1X9iEW79zRFLJjKLwwtvNAXw2as4UceEsq LKHdovAD0TPaSKOsIfdVqTHpkySP0qs3SEQ1hGbKK0YPEVn60O96A9n2NP3SZ14j cwvNoSVOIQSrHEl7/DzEDWvb2h6Zhs5vqaC0JYTg4vCZAnuVqqK2TSbN/rh7s5iV HMa5u6U/ZvO3SmyP7f83VYn5QIqZdci4sz+OdoPmcg3qj6FrCJNhY51GpT0Q9aAE cQDjmO3NLyIEiAWahg/sqaIUT9N+i+BEo1mS7uyLyNPLg4Lbh4kZSvG4tWQ2vDVq kjtiI0qT79wwvg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:40 2025 by rpki-client