This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json) Hash identifier: D0PBi3mGK5iVxSqxm/q1Ta7Lv5BdJB9xR50iVUex4wY= Subject key identifier: C2:3D:47:3E:8C:71:64:79:04:7F:F0:3D:DB:EC:7A:4B:0C:F6:48:27 Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Certificate serial: 019B258890C897A7320322AF16796BC5D259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft Manifest number: 0E28 Signing time: Tue 16 Dec 2025 05:01:05 +0000 Manifest this update: Tue 16 Dec 2025 05:01:05 +0000 Manifest next update: Wed 17 Dec 2025 05:01:05 +0000 Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=) 2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: A3rYmELIjjyXzZKpxXf0O4QKpkbMAn6013daPLmyrug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:90:c8:97:a7:32:03:22:af:16:79:6b:c5:d2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Validity Not Before: Dec 16 05:01:05 2025 GMT Not After : Dec 17 05:01:05 2025 GMT Subject: CN=c23d473e8c716479047ff03ddbec7a4b0cf64827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:dc:7f:98:07:aa:44:d2:b6:24:1b:53:fe: aa:bb:57:e1:f6:16:60:4b:65:d7:7a:50:ba:e6:e7: 0c:2b:dd:8a:72:a2:d4:1d:51:d6:9c:6b:c0:4c:bf: 16:51:f4:cb:3e:fb:ca:1e:d0:54:cb:99:c1:5a:b1: 07:12:5c:0b:94:12:cf:d5:2c:2b:61:16:7d:e2:2c: c3:84:40:45:72:b3:9f:42:30:45:09:7f:fa:3b:d4: 7a:51:2b:f7:85:21:c4:55:d5:35:b1:b3:f8:2e:e2: 06:39:2f:4f:92:5b:e4:70:3b:52:5f:3b:b9:52:f5: 95:e2:09:74:27:70:44:e4:3a:a6:82:f8:fe:66:18: f5:07:0f:17:9f:08:d9:ba:00:3b:7c:d4:34:25:0a: 83:96:b9:e7:a2:a8:6f:6e:45:7c:07:18:ee:dd:2f: e0:d2:77:21:d0:bf:49:b4:2d:cc:05:db:ae:6b:5c: 10:80:35:03:fd:b3:2a:00:e1:24:cd:6f:1c:8f:87: 01:86:5d:66:58:74:d9:03:21:b3:8a:6b:24:36:47: fe:7e:5c:33:46:c6:72:49:1d:58:55:65:9e:3e:fc: c0:2d:58:5b:7e:19:d7:95:45:d6:20:c1:03:25:31: 8d:8e:26:d9:a7:99:7f:e5:dd:29:d0:40:c7:d9:00: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:47:3E:8C:71:64:79:04:7F:F0:3D:DB:EC:7A:4B:0C:F6:48:27 X509v3 Authority Key Identifier: keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e3:6b:67:df:13:4f:d9:03:8e:af:d0:a6:7c:4d:80:a9:54: 00:95:76:a1:e2:73:8c:14:f2:47:c7:8d:91:49:5e:62:94:a2: 1c:32:01:0a:3f:8b:1d:90:a5:a8:b6:1f:ab:1d:f0:77:38:b2: 85:f9:4e:0b:64:44:ec:30:8f:c4:16:29:7b:98:28:b7:f7:c4: 25:de:3a:df:2e:2b:e4:04:8e:5d:9d:e5:1a:f3:43:b3:e9:10: a9:59:23:17:2d:b9:53:02:a2:ee:f5:89:ef:9a:39:25:05:5a: 3c:4f:86:75:06:0e:50:57:b2:22:6a:68:05:0e:66:12:ca:a8: 77:0e:90:1f:7a:a4:75:09:3b:93:e7:15:95:73:4b:64:7c:b9: 0d:ef:62:73:c3:dd:1a:b0:c5:ec:73:32:5d:32:66:ca:de:e7: 2f:c2:be:e5:f2:e8:b4:12:26:8d:ef:0a:21:9d:11:01:bd:98: 3d:b3:ce:4d:21:de:a9:0e:5d:88:25:a9:f7:1e:99:85:1e:e7: eb:04:b9:5e:ea:a0:ab:ff:85:6b:26:00:f9:f0:21:b9:71:bc: 67:38:46:f7:10:c7:f7:5f:54:ac:94:9c:5e:92:60:8a:22:87: c1:c7:4b:24:9b:94:2c:2a:95:56:8c:4c:0c:9d:8c:b2:7a:fc: 8d:8b:b8:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliJDIl6cyAyKvFnlrxdJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0 Y2UxNDcwHhcNMjUxMjE2MDUwMTA1WhcNMjUxMjE3MDUwMTA1WjAzMTEwLwYDVQQD EyhjMjNkNDczZThjNzE2NDc5MDQ3ZmYwM2RkYmVjN2E0YjBjZjY0ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhPcf5gHqkTStiQbU/6qu1fh9hZg S2XXelC65ucMK92KcqLUHVHWnGvATL8WUfTLPvvKHtBUy5nBWrEHElwLlBLP1Swr YRZ94izDhEBFcrOfQjBFCX/6O9R6USv3hSHEVdU1sbP4LuIGOS9PklvkcDtSXzu5 UvWV4gl0J3BE5Dqmgvj+Zhj1Bw8XnwjZugA7fNQ0JQqDlrnnoqhvbkV8Bxju3S/g 0nch0L9JtC3MBduua1wQgDUD/bMqAOEkzW8cj4cBhl1mWHTZAyGzimskNkf+flwz RsZySR1YVWWePvzALVhbfhnXlUXWIMEDJTGNjibZp5l/5d0p0EDH2QDS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI9Rz6McWR5BH/wPdvseksM9kgnMB8GA1UdIwQY MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt NDc3NTVjNjNjYzAzLzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+NrZ98T T9kDjq/QpnxNgKlUAJV2oeJzjBTyR8eNkUleYpSiHDIBCj+LHZClqLYfqx3wdziy hflOC2RE7DCPxBYpe5got/fEJd463y4r5ASOXZ3lGvNDs+kQqVkjFy25UwKi7vWJ 75o5JQVaPE+GdQYOUFeyImpoBQ5mEsqodw6QH3qkdQk7k+cVlXNLZHy5De9ic8Pd GrDF7HMyXTJmyt7nL8K+5fLotBImje8KIZ0RAb2YPbPOTSHeqQ5diCWp9x6ZhR7n 6wS5Xuqgq/+FayYA+fAhuXG8ZzhG9xDH919UrJScXpJgiiKHwcdLJJuULCqVVoxM DJ2Msnr8jYu4CA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:04:00 2025 by rpki-client