This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json) Hash identifier: Dit9Nm9+jGCnI6ABiNgiAqHHILK0Zx79l38F/1XZ1sI= Subject key identifier: 87:F8:C6:7B:A5:8A:91:A1:C7:82:26:60:B7:A0:B2:AA:08:43:81:14 Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Certificate serial: 019B3A8F9E0D709E80DEE767B6343BD52B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:00:49 +0000 Manifest this update: Sat 20 Dec 2025 07:00:49 +0000 Manifest next update: Sun 21 Dec 2025 07:00:49 +0000 Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=) 2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: NFnHLRiOOy+qDoG7XZmky9JHfHTDwlPRzxJnt9gByJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:9e:0d:70:9e:80:de:e7:67:b6:34:3b:d5:2b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Validity Not Before: Dec 20 07:00:49 2025 GMT Not After : Dec 21 07:00:49 2025 GMT Subject: CN=87f8c67ba58a91a1c7822660b7a0b2aa08438114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:db:33:ec:45:c8:05:7b:2c:dd:8b:fc:38: 3b:36:fc:26:f7:9e:1c:cb:12:e3:c8:ed:ea:4e:06: c1:7d:5a:c5:53:29:07:f6:3c:77:e3:c7:63:80:c0: 17:11:2e:53:a8:67:e1:f7:2c:49:59:fa:62:13:69: 67:b8:c2:1c:48:dc:97:30:f2:66:a6:96:83:d0:39: 27:bc:9c:c1:17:bb:02:a3:64:f0:a5:a1:f8:5c:ac: ea:56:2c:bd:65:e7:fa:6c:db:1b:37:43:dd:55:f6: ed:2b:99:e2:64:8b:d3:bc:05:95:9e:25:39:b3:8c: 3a:b5:4e:f3:1f:f7:3f:76:47:c5:cd:44:79:e3:4d: 2e:ba:52:80:03:f5:1e:46:a8:13:ac:4d:c5:39:08: b2:80:78:b8:39:2c:ba:88:e1:61:c4:2c:af:0f:fd: bd:af:8d:f1:53:30:db:a5:66:e8:56:e9:23:4f:82: 01:8f:08:70:26:d9:68:cb:e2:49:90:08:8a:98:59: b9:65:a1:21:54:7e:5b:36:f3:8d:0a:4f:4e:0f:f7: b1:f1:de:92:6c:f0:6f:50:05:4c:57:18:63:ac:69: 73:a6:0e:33:80:10:d6:ea:31:00:2a:cb:b9:2f:8f: 1a:1f:25:60:1c:3a:bd:50:5d:03:7a:b9:f6:0c:32: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:C6:7B:A5:8A:91:A1:C7:82:26:60:B7:A0:B2:AA:08:43:81:14 X509v3 Authority Key Identifier: keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:74:44:a2:ac:5f:35:06:04:79:42:99:c3:2b:c7:dd:43:ef: b8:53:0d:19:cd:9c:84:76:0e:23:b9:ed:c8:9c:90:e5:81:49: 44:03:55:15:ab:57:cb:83:55:f3:83:c3:e8:93:31:8d:97:81: 02:93:13:00:10:78:54:48:99:6d:86:60:67:61:c5:32:f7:a3: cd:9c:d7:6e:69:40:e6:07:5f:0d:da:45:b7:68:ba:50:0c:35: ae:2d:42:e7:28:fb:32:53:ce:2f:96:70:c2:f7:36:d8:76:68: a0:e7:66:b0:cd:90:b7:af:61:34:8a:17:9a:07:32:a1:d2:b5: 2f:75:02:6b:e2:03:b3:14:f2:57:9b:7b:42:78:47:e1:e4:46: 96:eb:d9:99:ed:0c:6a:ca:f5:12:b0:7c:2e:63:62:c9:bb:c7: 13:ac:8e:b7:b3:bc:3a:c5:d2:e1:fa:e1:72:cd:79:fc:dc:f4: 7d:8a:a7:a9:0a:d8:0f:14:0e:e2:3e:3a:f2:9a:19:6b:2e:09: fc:bd:83:3e:6e:6c:a9:90:17:f5:80:aa:6d:53:b7:54:8f:29: 8e:6a:8c:e1:1e:c0:57:84:71:61:98:1e:60:df:08:50:c2:7e: 45:d3:c9:e1:55:66:73:9c:b4:84:80:4c:e7:af:ff:4e:bb:4a: 50:26:f3:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j54NcJ6A3udntjQ71SuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw MTQ4MjcwHhcNMjUxMjIwMDcwMDQ5WhcNMjUxMjIxMDcwMDQ5WjAzMTEwLwYDVQQD Eyg4N2Y4YzY3YmE1OGE5MWExYzc4MjI2NjBiN2EwYjJhYTA4NDM4MTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKTbM+xFyAV7LN2L/Dg7Nvwm954c yxLjyO3qTgbBfVrFUykH9jx348djgMAXES5TqGfh9yxJWfpiE2lnuMIcSNyXMPJm ppaD0DknvJzBF7sCo2TwpaH4XKzqViy9Zef6bNsbN0PdVfbtK5niZIvTvAWVniU5 s4w6tU7zH/c/dkfFzUR5400uulKAA/UeRqgTrE3FOQiygHi4OSy6iOFhxCyvD/29 r43xUzDbpWboVukjT4IBjwhwJtloy+JJkAiKmFm5ZaEhVH5bNvONCk9OD/ex8d6S bPBvUAVMVxhjrGlzpg4zgBDW6jEAKsu5L48aHyVgHDq9UF0Dern2DDKKywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf4xnulipGhx4ImYLegsqoIQ4EUMB8GA1UdIwQY MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnREoqxf NQYEeUKZwyvH3UPvuFMNGc2chHYOI7ntyJyQ5YFJRANVFatXy4NV84PD6JMxjZeB ApMTABB4VEiZbYZgZ2HFMvejzZzXbmlA5gdfDdpFt2i6UAw1ri1C5yj7MlPOL5Zw wvc22HZooOdmsM2Qt69hNIoXmgcyodK1L3UCa+IDsxTyV5t7QnhH4eRGluvZme0M asr1ErB8LmNiybvHE6yOt7O8OsXS4frhcs15/Nz0fYqnqQrYDxQO4j468poZay4J /L2DPm5sqZAX9YCqbVO3VI8pjmqM4R7AV4RxYZgeYN8IUMJ+RdPJ4VVmc5y0hIBM 56//TrtKUCbzdg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:05:21 2025 by rpki-client