This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json) Hash identifier: ezehNm072J4KvuFYyEIhvzQyct83dXxlM80PTEGCKxI= Subject key identifier: E7:1F:2C:0A:20:B6:5A:E5:06:75:01:66:C8:F1:56:8C:96:3A:C2:75 Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Certificate serial: 019AF12E634E618CBBF1EB5DF31D40AA158C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft Manifest number: 02FB Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=) 2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=) 3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: Jgf6MERV7gO0EF6JC/o0AVPOXqABOGfKLkwXaRjJ96I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:63:4e:61:8c:bb:f1:eb:5d:f3:1d:40:aa:15:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=e71f2c0a20b65ae506750166c8f1568c963ac275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:28:05:ca:93:4b:31:6f:fd:25:36:d9:df: e7:a9:0d:e4:22:d6:f1:4c:82:a1:26:b2:bb:76:aa: 81:ba:88:d4:8c:49:56:1d:5c:be:a5:09:af:42:82: 1c:39:8b:ad:01:53:93:a3:a7:74:57:0c:9f:4b:b0: 5b:1b:92:21:a1:a2:8d:bf:b4:05:cf:8e:00:dd:e9: ee:0f:42:0e:bc:23:c1:60:a4:71:39:88:60:4a:5b: c7:b1:1a:dc:d9:55:3d:ac:92:40:e9:4f:6a:6c:fc: c4:4e:f2:63:f2:9e:85:bd:36:44:52:ca:40:0d:e9: 6b:d3:a9:2a:e6:d2:93:ea:f8:c7:b0:83:56:8e:cf: 89:34:d2:b9:e3:6e:79:12:3c:2b:10:b5:52:dc:19: c7:fe:0c:8a:b8:04:16:df:f9:4b:cd:73:24:2b:d6: e9:81:40:9b:d5:0f:1f:02:95:fa:92:6a:d4:c1:4f: 4d:17:99:3f:5c:df:3a:9c:c2:b9:f6:f3:9b:6c:d8: 01:8b:a9:32:db:a7:36:bf:f6:22:94:18:c9:f1:16: 66:af:46:b0:39:01:cc:39:5c:a8:84:00:76:22:9d: 36:08:34:96:ee:b8:eb:78:fe:66:55:5f:6b:9f:f6: 1f:e2:65:08:79:18:2d:6a:63:dd:ce:16:b9:f9:74: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1F:2C:0A:20:B6:5A:E5:06:75:01:66:C8:F1:56:8C:96:3A:C2:75 X509v3 Authority Key Identifier: keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1a:ec:8d:41:a1:9b:d1:f8:84:73:1f:26:7e:d1:84:5e:2b: 31:15:aa:cf:4e:bd:23:8d:e9:5c:00:bb:67:9d:09:5c:b7:8d: 89:a1:a9:6b:51:87:31:dd:58:a6:93:83:1f:c1:0c:53:37:38: e3:4c:ac:55:b3:00:05:9d:14:a4:06:59:14:7d:fb:c4:6a:fd: c2:d9:f9:97:22:66:6e:cb:86:8f:9b:91:68:df:e8:ce:6a:de: 58:fb:af:f9:fc:0e:47:53:01:77:cd:2a:ca:34:31:8a:0e:60: b9:4e:35:8d:42:85:79:77:9f:f5:18:d7:c0:3d:cd:41:86:56: ee:09:31:b7:a3:1e:29:f3:9e:f7:42:10:1c:cb:36:fc:9e:4e: 2a:d5:f4:d8:d4:b0:22:ff:1f:3d:f4:70:85:3f:e2:db:da:7d: 75:73:62:d1:e6:44:60:a3:88:11:db:f3:87:6a:61:1e:1e:93: 8b:32:a5:e9:30:40:64:f2:97:f7:01:00:56:54:20:91:83:e3: 16:3a:ad:3f:70:ec:ef:84:d9:b2:31:f5:22:63:f8:c7:fd:fd: 73:61:36:3e:4d:ec:76:9c:aa:a4:4d:1f:73:94:90:a5:79:2c: 93:8c:c6:b9:16:91:a7:3e:09:80:5c:28:74:64:b7:8b:8f:0d: 91:b7:93:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmNOYYy78etd8x1AqhWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj YjUxOTgwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD EyhlNzFmMmMwYTIwYjY1YWU1MDY3NTAxNjZjOGYxNTY4Yzk2M2FjMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/IoBcqTSzFv/SU22d/nqQ3kItbx TIKhJrK7dqqBuojUjElWHVy+pQmvQoIcOYutAVOTo6d0VwyfS7BbG5IhoaKNv7QF z44A3enuD0IOvCPBYKRxOYhgSlvHsRrc2VU9rJJA6U9qbPzETvJj8p6FvTZEUspA Delr06kq5tKT6vjHsINWjs+JNNK54255EjwrELVS3BnH/gyKuAQW3/lLzXMkK9bp gUCb1Q8fApX6kmrUwU9NF5k/XN86nMK59vObbNgBi6ky26c2v/YilBjJ8RZmr0aw OQHMOVyohAB2Ip02CDSW7rjreP5mVV9rn/Yf4mUIeRgtamPdzha5+XQswQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcfLAogtlrlBnUBZsjxVoyWOsJ1MB8GA1UdIwQY MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhrsjUGh m9H4hHMfJn7RhF4rMRWqz069I43pXAC7Z50JXLeNiaGpa1GHMd1YppODH8EMUzc4 40ysVbMABZ0UpAZZFH37xGr9wtn5lyJmbsuGj5uRaN/ozmreWPuv+fwOR1MBd80q yjQxig5guU41jUKFeXef9RjXwD3NQYZW7gkxt6MeKfOe90IQHMs2/J5OKtX02NSw Iv8fPfRwhT/i29p9dXNi0eZEYKOIEdvzh2phHh6TizKl6TBAZPKX9wEAVlQgkYPj FjqtP3Ds74TZsjH1ImP4x/39c2E2Pk3sdpyqpE0fc5SQpXksk4zGuRaRpz4JgFwo dGS3i48NkbeT0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:30 2025 by rpki-client