This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json) Hash identifier: 4KftqEaSHorcWBuN1puhWdC0Y9RfL7bL6jXem9ifxVE= Subject key identifier: 4B:D2:BF:51:50:A3:B4:CB:0A:D9:3D:FA:00:8E:C7:4C:DF:6B:C7:5F Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Certificate serial: 019B3155C32B7A916D4F606370C0B34BAD1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft Manifest number: 048B Signing time: Thu 18 Dec 2025 12:01:02 +0000 Manifest this update: Thu 18 Dec 2025 12:01:02 +0000 Manifest next update: Fri 19 Dec 2025 12:01:02 +0000 Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=) 2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: F5eJqGjF9s9gsgeGU1nBmwyBs+nwMOMr6bh1KOo2ErI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:c3:2b:7a:91:6d:4f:60:63:70:c0:b3:4b:ad:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Validity Not Before: Dec 18 12:01:02 2025 GMT Not After : Dec 19 12:01:02 2025 GMT Subject: CN=4bd2bf5150a3b4cb0ad93dfa008ec74cdf6bc75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:84:e7:65:b4:1c:86:59:d4:ed:ec:10:38: 0a:ec:66:5a:06:b8:2b:e5:f6:62:9c:86:0e:7a:a4: 70:f6:a2:e2:38:20:1f:3c:61:7d:96:37:23:da:e0: 5e:8c:2a:7e:28:04:23:e2:f3:e8:a5:e3:a6:e0:30: bc:5f:23:65:13:61:e7:ba:bb:8c:de:3d:2c:67:12: 3e:6c:57:81:19:4f:9f:a0:77:e5:18:3c:21:a5:29: d9:4c:29:78:38:ee:91:af:1f:61:54:cb:ee:62:12: c1:73:c9:fb:8e:71:2b:65:67:c5:35:a1:6e:be:99: 8a:99:70:b9:a6:45:2d:8b:0c:cc:2d:fa:5c:23:d1: c0:33:a9:59:fe:c0:d0:b9:51:dc:f7:e8:21:54:2c: c9:bf:f9:e6:39:b5:7e:19:28:69:86:03:40:af:b9: 3b:c7:ed:f3:a8:8d:be:ed:8e:29:ba:77:1b:be:64: ba:65:a4:54:25:30:74:bd:f9:ec:9b:ac:61:3d:8f: 90:ed:d3:77:20:82:5a:aa:7a:db:b7:ca:8b:9a:b6: 79:f2:6e:12:39:b6:5f:b5:bd:5e:fe:b3:c9:7d:72: 70:a9:ef:43:8c:71:25:04:f7:f3:73:cb:6f:9d:c3: 8c:01:40:d3:49:5f:71:88:45:7a:32:70:a0:81:42: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D2:BF:51:50:A3:B4:CB:0A:D9:3D:FA:00:8E:C7:4C:DF:6B:C7:5F X509v3 Authority Key Identifier: keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:01:85:c8:0b:36:ae:e3:d3:28:ed:fe:bb:cf:1d:ff:b6:99: 33:ff:b8:6e:8f:fe:62:ce:1b:8b:d8:2a:07:db:63:a2:f1:dc: 9f:41:ff:8f:f5:f7:6f:67:d0:fa:b9:f1:99:8e:9b:4f:5e:80: b5:27:f4:1e:17:08:24:1b:ad:b7:c2:fd:39:06:f8:35:ba:d8: d2:52:cd:71:11:4e:94:e0:4c:a7:c1:8e:83:21:98:99:f6:27: d0:55:02:fb:ed:d7:39:8f:e1:08:6a:99:06:3d:8e:96:9a:22: 71:50:f4:ef:b5:42:2c:4d:af:91:58:d1:89:fd:02:0d:5f:2e: 45:e3:52:f1:b6:64:1b:2e:b3:60:02:14:e2:f3:6f:e9:dd:57: 8a:2a:2a:3e:ee:8b:2a:34:5a:1b:53:a8:81:05:cd:1a:52:8b: 82:c0:96:37:26:77:81:9a:aa:29:80:00:30:18:33:68:e4:00: c7:ff:13:d4:9f:0d:25:26:22:d5:4a:a9:be:75:c3:65:dd:2a: fc:b0:8c:da:d4:f3:d8:a5:f7:c9:da:0d:55:c7:d9:ee:a6:03: 8f:24:31:25:97:a3:1e:99:9e:f8:eb:d5:82:50:f5:55:0c:20: 56:2d:9d:7e:7c:4c:0d:f3:9b:67:7f:fc:6e:55:73:25:dd:af: 06:bb:92:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVcMrepFtT2BjcMCzS60cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzk1NWY0YzJjNzE1N2FiYmRiZmU4MDljZjE5NTYwNTk0 OWE2OTgwHhcNMjUxMjE4MTIwMTAyWhcNMjUxMjE5MTIwMTAyWjAzMTEwLwYDVQQD Eyg0YmQyYmY1MTUwYTNiNGNiMGFkOTNkZmEwMDhlYzc0Y2RmNmJjNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvWE52W0HIZZ1O3sEDgK7GZaBrgr 5fZinIYOeqRw9qLiOCAfPGF9ljcj2uBejCp+KAQj4vPopeOm4DC8XyNlE2HnuruM 3j0sZxI+bFeBGU+foHflGDwhpSnZTCl4OO6Rrx9hVMvuYhLBc8n7jnErZWfFNaFu vpmKmXC5pkUtiwzMLfpcI9HAM6lZ/sDQuVHc9+ghVCzJv/nmObV+GShphgNAr7k7 x+3zqI2+7Y4puncbvmS6ZaRUJTB0vfnsm6xhPY+Q7dN3IIJaqnrbt8qLmrZ58m4S ObZftb1e/rPJfXJwqe9DjHElBPfzc8tvncOMAUDTSV9xiEV6MnCggUJK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvSv1FQo7TLCtk9+gCOx0zfa8dfMB8GA1UdIwQY MBaAFC3JVfTCxxV6u9v+gJzxlWBZSaaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEt MTE5ODIwYjUyMmFkLzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEtMTE5ODIwYjUyMmFk LzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQGFyAs2 ruPTKO3+u88d/7aZM/+4bo/+Ys4bi9gqB9tjovHcn0H/j/X3b2fQ+rnxmY6bT16A tSf0HhcIJButt8L9OQb4NbrY0lLNcRFOlOBMp8GOgyGYmfYn0FUC++3XOY/hCGqZ Bj2OlpoicVD077VCLE2vkVjRif0CDV8uReNS8bZkGy6zYAIU4vNv6d1XiioqPu6L KjRaG1OogQXNGlKLgsCWNyZ3gZqqKYAAMBgzaOQAx/8T1J8NJSYi1UqpvnXDZd0q /LCM2tTz2KX3ydoNVcfZ7qYDjyQxJZejHpme+OvVglD1VQwgVi2dfnxMDfObZ3/8 blVzJd2vBruShg== -----END CERTIFICATE-----Generated at Thu Dec 18 16:13:25 2025 by rpki-client