This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json) Hash identifier: mOhdheBI5oFcjuMywfpl5GZUI0Pj3dkTl/693QAS+bU= Subject key identifier: 10:C8:FD:4A:91:BE:22:8C:CB:61:DC:C5:DE:DC:19:72:0A:B2:FB:F0 Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4 Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4 Certificate serial: 019AF208E3859C399999CDB150F26A9DDFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft Manifest number: 1503 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: c2oR6MCAb7op/OQ1LD2rU+Umd1MjPb5QOgtDdNEQb30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e3:85:9c:39:99:99:cd:b1:50:f2:6a:9d:df:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=10c8fd4a91be228ccb61dcc5dedc19720ab2fbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:f2:2a:6e:c1:51:2f:c5:7a:40:0b:fe:f2: 32:01:b6:00:a2:7b:fd:57:bd:4c:61:a6:81:06:4b: 22:97:5c:23:3a:a8:b3:ac:b8:15:65:da:5b:7d:f5: ad:16:0f:10:e0:21:a4:ab:2d:11:af:0f:13:fa:44: 2c:64:2d:8d:1a:bd:48:8b:52:ad:39:02:7e:0e:48: aa:24:87:60:a5:3f:d2:f7:89:32:69:27:66:c3:28: 7c:af:77:97:cb:5b:60:44:4a:42:af:3a:de:68:86: 5e:20:fc:a9:ce:46:ab:3d:d6:ac:db:97:7c:36:74: 6d:c7:53:5e:89:30:a5:8f:52:e3:6c:22:6c:e6:e7: 45:42:f6:79:12:0d:f2:78:69:6c:84:29:3c:84:04: 49:c6:07:d6:7a:73:7b:35:a0:3d:03:55:8b:a8:aa: 56:cf:6a:dd:a0:52:01:7f:22:55:82:fa:6f:fe:6d: 6c:bd:9a:4a:cf:de:e6:cd:a3:6f:c5:74:ad:25:ce: 3b:2a:29:fd:d6:a7:3e:21:7d:39:b7:4a:d9:8b:a3: 84:a9:8d:6c:94:0b:a4:d2:75:4d:ec:c6:a9:cf:6a: f5:e0:80:c3:8d:9f:16:f8:ed:cd:a0:f9:8a:b6:e6: c2:b0:75:ef:ea:d4:d9:ea:4f:a7:a4:bf:c3:68:c9: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C8:FD:4A:91:BE:22:8C:CB:61:DC:C5:DE:DC:19:72:0A:B2:FB:F0 X509v3 Authority Key Identifier: keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9d:6e:cb:c0:3b:52:e3:05:eb:8f:4f:66:e2:86:dd:48:d0: bf:8e:97:63:e3:df:fd:70:89:40:9d:85:fa:bf:f3:62:e8:c5: d8:f8:1a:b3:22:06:f3:ad:89:8a:64:08:30:6f:cd:0b:ba:18: 6a:29:7b:40:73:e7:63:38:77:7d:f6:6d:1f:d8:ca:ed:cf:1f: 8e:ac:62:08:78:7d:a7:9f:06:0e:8a:15:f0:b9:fb:03:7a:ef: 10:08:6a:b7:bf:8b:45:ac:a3:bc:42:20:80:0a:99:07:b9:8e: b6:99:4d:93:75:a6:7f:bd:32:f1:58:49:12:94:54:7a:2c:30: 60:bf:f4:b2:11:ab:71:d5:8a:3c:c2:96:54:ef:a4:90:43:2f: bb:44:a3:22:bb:47:a6:37:06:72:ec:a8:bd:9f:92:ef:d9:c5: 2e:61:6b:85:8a:7d:78:15:86:42:b9:85:42:fd:0a:4c:bc:21: 32:fc:de:9a:9f:67:3a:d7:c2:24:60:6d:1b:19:25:2e:42:f0: 35:3c:2b:e4:00:0d:ae:12:08:f7:9e:cb:fd:aa:e4:ea:6b:94: a3:bd:29:ad:b7:7d:dd:cd:7b:c9:c4:e0:97:6e:28:00:d2:a4: 77:f4:b8:dd:97:eb:cf:59:2f:eb:d1:80:f4:1d:0e:9b:39:71: f2:49:3c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOOFnDmZmc2xUPJqnd+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjMyOTlmMDVjMjBkNjM5NTljZTc3ODFiNWE4ZTA3MmY1 N2NjYjQwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EygxMGM4ZmQ0YTkxYmUyMjhjY2I2MWRjYzVkZWRjMTk3MjBhYjJmYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9zyKm7BUS/FekAL/vIyAbYAonv9 V71MYaaBBksil1wjOqizrLgVZdpbffWtFg8Q4CGkqy0Rrw8T+kQsZC2NGr1Ii1Kt OQJ+DkiqJIdgpT/S94kyaSdmwyh8r3eXy1tgREpCrzreaIZeIPypzkarPdas25d8 NnRtx1NeiTClj1LjbCJs5udFQvZ5Eg3yeGlshCk8hARJxgfWenN7NaA9A1WLqKpW z2rdoFIBfyJVgvpv/m1svZpKz97mzaNvxXStJc47Kin91qc+IX05t0rZi6OEqY1s lAuk0nVN7Mapz2r14IDDjZ8W+O3NoPmKtubCsHXv6tTZ6k+npL/DaMmcCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDI/UqRviKMy2Hcxd7cGXIKsvvwMB8GA1UdIwQY MBaAFPyzKZ8Fwg1jlZzneBtajgcvV8y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xNcG53WENEV09Wbk9kNEcxcU9CeTlYekxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mZDUyZjctMGZmYS00ZjFkLTlkMDIt MTQ3ZDQ4NmY0MDUwLzEvX0xNcG53WENEV09Wbk9kNEcxcU9CeTlYekxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mZDUyZjctMGZmYS00ZjFkLTlkMDItMTQ3ZDQ4NmY0MDUw LzEvX0xNcG53WENEV09Wbk9kNEcxcU9CeTlYekxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgp1uy8A7 UuMF649PZuKG3UjQv46XY+Pf/XCJQJ2F+r/zYujF2PgasyIG862JimQIMG/NC7oY ail7QHPnYzh3ffZtH9jK7c8fjqxiCHh9p58GDooV8Ln7A3rvEAhqt7+LRayjvEIg gAqZB7mOtplNk3Wmf70y8VhJEpRUeiwwYL/0shGrcdWKPMKWVO+kkEMvu0SjIrtH pjcGcuyovZ+S79nFLmFrhYp9eBWGQrmFQv0KTLwhMvzemp9nOtfCJGBtGxklLkLw NTwr5AANrhII957L/ark6muUo70prbd93c17ycTgl24oANKkd/S43Zfrz1kv69GA 9B0Omzlx8kk85w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:39 2025 by rpki-client