This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json) Hash identifier: qs6tClzDiG6sEBAem8CLZE3ABcBWJ73tp8YgXK88vGg= Subject key identifier: 7D:20:6E:6F:FD:A0:85:B0:3A:51:67:CC:F7:2C:5E:A3:33:46:2E:2B Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Certificate serial: 019AF16461EFA96BE819F7973F5CDFE7BBED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft Manifest number: 0E0D Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=) 2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: gvSiPCFYBl6lmlSMeP9ceHpmsSMvGs6HjuklMpuz5hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:61:ef:a9:6b:e8:19:f7:97:3f:5c:df:e7:bb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=7d206e6ffda085b03a5167ccf72c5ea333462e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:bd:86:54:15:46:69:ad:63:93:5f:1f:e5: 1f:83:e5:9f:98:7e:33:60:eb:a6:94:2a:8d:b5:da: 5b:f8:14:09:61:dc:ff:18:bc:fa:23:5a:a7:b1:76: ad:49:77:aa:95:15:0d:06:8c:d1:2b:1b:da:c9:d2: 6e:bf:5c:69:09:73:4f:da:3e:a6:2a:2a:cf:43:70: 4c:a5:4c:70:5f:3d:c8:5a:83:a9:fa:52:45:38:aa: bb:ac:83:31:56:28:63:d3:f1:df:96:52:9d:e5:30: fb:15:d7:75:2d:4c:7b:a9:cb:0c:9f:a8:ea:6b:bf: fe:77:4c:52:af:de:e8:11:c2:52:a0:0c:89:8e:78: 78:c9:34:0d:22:28:7e:6c:30:f2:fd:57:dd:be:fa: 64:ab:e4:b4:da:11:21:0e:a1:d9:8f:d6:0b:fa:e6: a3:74:83:77:5f:e4:48:8c:97:d5:69:66:6c:6f:76: a9:c5:eb:b7:39:b9:3f:e1:f7:05:ed:14:97:05:a9: 70:2c:15:9f:60:a5:c2:4a:59:dd:b2:73:70:eb:7a: 3a:3e:8f:12:0c:ba:16:8f:a1:fd:4d:5d:43:db:4c: 41:30:5f:aa:d7:59:67:72:ca:27:91:7d:91:02:2c: 48:a3:b6:e1:1c:02:6a:09:79:34:6b:9e:27:3e:f5: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:6E:6F:FD:A0:85:B0:3A:51:67:CC:F7:2C:5E:A3:33:46:2E:2B X509v3 Authority Key Identifier: keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a1:f9:d9:fc:7e:df:f1:bc:c0:f8:b3:96:14:a8:1f:76:c3: 71:98:03:aa:73:75:bf:c8:7a:8a:bb:cc:7b:39:5f:2d:8a:28: 91:d0:ab:89:bf:87:af:eb:2e:e6:05:3d:f0:c6:14:e6:b4:24: 79:39:56:b3:c6:07:62:83:98:10:19:3b:1d:81:76:45:71:0d: 3f:0f:ca:30:64:40:d9:80:34:5a:8d:1b:e7:8d:40:f8:48:b1: d9:5c:e0:54:06:fe:03:50:fb:c3:a9:73:a4:eb:c3:81:28:a3: f1:eb:20:93:b5:76:20:0c:06:6a:35:8e:e7:89:d7:63:2b:30: a0:fb:58:66:bb:b1:17:2c:e2:e7:7e:81:1d:d5:63:3e:3b:43: 18:07:de:33:ff:90:88:2a:41:40:1c:86:2c:c9:47:0b:1c:41: 74:e9:45:f8:ec:d6:54:30:1b:57:9e:d7:96:e7:ea:1c:44:4d: 09:8d:d1:6d:32:ca:a4:fc:ad:94:86:f3:cb:09:17:b7:44:48: 12:cc:7e:9a:43:9e:fa:ba:00:54:8e:c0:1b:3c:9a:57:5c:08: 2b:12:37:83:73:30:2e:db:ae:70:89:fb:1e:62:30:eb:f6:6f: b0:ea:b9:d5:2b:17:84:36:62:97:b0:28:e7:3a:1d:e9:8b:2e: ac:d5:b8:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGHvqWvoGfeXP1zf57vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0 Y2UxNDcwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD Eyg3ZDIwNmU2ZmZkYTA4NWIwM2E1MTY3Y2NmNzJjNWVhMzMzNDYyZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSa9hlQVRmmtY5NfH+Ufg+WfmH4z YOumlCqNtdpb+BQJYdz/GLz6I1qnsXatSXeqlRUNBozRKxvaydJuv1xpCXNP2j6m KirPQ3BMpUxwXz3IWoOp+lJFOKq7rIMxVihj0/HfllKd5TD7Fdd1LUx7qcsMn6jq a7/+d0xSr97oEcJSoAyJjnh4yTQNIih+bDDy/Vfdvvpkq+S02hEhDqHZj9YL+uaj dIN3X+RIjJfVaWZsb3apxeu3Obk/4fcF7RSXBalwLBWfYKXCSlndsnNw63o6Po8S DLoWj6H9TV1D20xBMF+q11lncsonkX2RAixIo7bhHAJqCXk0a54nPvVdBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0gbm/9oIWwOlFnzPcsXqMzRi4rMB8GA1UdIwQY MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt NDc3NTVjNjNjYzAzLzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKH52fx+ 3/G8wPizlhSoH3bDcZgDqnN1v8h6irvMezlfLYookdCrib+Hr+su5gU98MYU5rQk eTlWs8YHYoOYEBk7HYF2RXENPw/KMGRA2YA0Wo0b541A+Eix2VzgVAb+A1D7w6lz pOvDgSij8esgk7V2IAwGajWO54nXYyswoPtYZruxFyzi536BHdVjPjtDGAfeM/+Q iCpBQByGLMlHCxxBdOlF+OzWVDAbV57XlufqHERNCY3RbTLKpPytlIbzywkXt0RI Esx+mkOe+roAVI7AGzyaV1wIKxI3g3MwLtuucIn7HmIw6/ZvsOq51SsXhDZil7Ao 5zod6YsurNW4uw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:16 2025 by rpki-client