This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json) Hash identifier: BiLCmNZjDBk2Ci3t6phVmtdZ+oqUFfxrH1TtHU9mcww= Subject key identifier: F2:27:D8:29:37:28:1D:B7:AE:5C:F3:AC:8E:80:51:E0:16:7D:CE:97 Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf Certificate serial: 019B37C598F139D6229289FBC72EE3BBDC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 18:00:55 +0000 Manifest this update: Fri 19 Dec 2025 18:00:55 +0000 Manifest next update: Sat 20 Dec 2025 18:00:55 +0000 Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: PQVU9iprP905vAVra/scUqw2M5nzaRxgm7z0eb7M7PY=) 2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:98:f1:39:d6:22:92:89:fb:c7:2e:e3:bb:dc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf Validity Not Before: Dec 19 18:00:55 2025 GMT Not After : Dec 20 18:00:55 2025 GMT Subject: CN=f227d82937281db7ae5cf3ac8e8051e0167dce97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:90:a6:bc:db:8f:d4:f3:0a:57:e3:4e:95: 2d:c2:3b:8a:b9:db:3f:f6:fb:42:60:bc:b7:de:09: e5:31:67:f9:3c:e1:e5:e4:9c:4d:1b:f4:02:55:61: 94:1f:56:cf:bf:19:19:bf:63:84:7b:c9:7d:0e:9c: f7:15:4d:c1:64:bc:dd:84:9a:09:8a:88:4a:b3:2d: a4:e6:91:63:98:7e:7a:52:36:fa:33:e0:a5:60:6e: 58:0a:91:c5:be:08:54:9b:fd:dc:c5:f6:29:9d:66: c3:c8:68:f9:b6:47:ff:15:3b:20:75:e1:fa:ac:11: 5d:dc:cc:de:49:94:53:8b:0e:7e:a3:cf:03:03:ef: 5f:2d:65:c9:10:08:7c:52:fc:38:24:0a:b5:1f:0d: 0f:a7:6d:82:ac:eb:f2:6b:ec:fa:d6:42:af:0e:9b: f2:2c:65:9d:e7:9a:3b:c0:7c:23:4a:42:db:77:09: f9:4c:78:38:52:85:94:cc:a5:0a:67:55:4d:9c:aa: fd:55:ee:c9:e4:56:32:ee:5f:fd:3a:cc:96:a8:06: c4:fb:ff:3f:66:7c:67:1b:ff:17:f5:68:5a:64:a3: f8:b9:cf:d4:74:ed:cf:23:60:d4:df:4a:f6:03:4d: 90:ce:20:ae:d0:28:53:5d:2f:ea:3a:c2:8a:28:d6: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:27:D8:29:37:28:1D:B7:AE:5C:F3:AC:8E:80:51:E0:16:7D:CE:97 X509v3 Authority Key Identifier: keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:ed:a0:29:d6:f3:b8:cd:21:59:ea:d2:ea:68:82:c5:28: 70:ef:7a:2c:19:f5:84:37:ee:22:e7:06:b5:a5:22:31:e7:7b: a3:e5:5f:5f:08:e6:b4:35:69:8b:42:09:19:ce:98:31:ad:0b: 6a:1c:7b:ea:4d:81:f7:92:2d:37:4f:9f:53:ce:82:a5:58:de: b3:78:c0:0a:6c:f1:9f:3c:a2:2d:a3:d6:42:b7:ec:ca:e0:0c: 8a:f3:16:96:e4:66:89:c1:b2:4f:d4:69:4c:cc:86:82:37:03: 2e:52:df:49:01:e3:56:30:cc:5d:d0:0e:8c:91:37:fa:20:e4: 88:12:f2:bc:b0:7d:8f:ae:5c:59:73:0b:6c:b8:e9:02:47:95: bc:7a:04:2e:d1:1a:d6:1c:27:c2:04:6b:64:2d:57:e5:4b:b4: 6b:d2:0a:a5:89:78:53:9c:ae:20:b7:27:bc:f8:79:31:f3:83: d4:f5:c5:f7:0f:57:7c:90:de:f3:26:19:0f:1a:03:c9:10:e8: 3b:27:24:cc:10:01:ba:7a:0d:2f:f0:73:b6:c7:7f:75:ad:3d: 67:1b:40:98:b3:a3:a6:79:5d:90:e3:4a:e9:eb:05:18:ad:13: b2:22:62:65:e6:ec:d1:8e:be:fd:09:58:6b:7c:c7:41:84:89: b7:74:b5:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xZjxOdYikon7xy7ju9ySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZmI0NzZmY2YzMTNjZmYyOTVkZTBkMTcwOTE1NmFmMDI1 M2Q3Y2YwHhcNMjUxMjE5MTgwMDU1WhcNMjUxMjIwMTgwMDU1WjAzMTEwLwYDVQQD EyhmMjI3ZDgyOTM3MjgxZGI3YWU1Y2YzYWM4ZTgwNTFlMDE2N2RjZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKuQprzbj9TzClfjTpUtwjuKuds/ 9vtCYLy33gnlMWf5POHl5JxNG/QCVWGUH1bPvxkZv2OEe8l9Dpz3FU3BZLzdhJoJ iohKsy2k5pFjmH56Ujb6M+ClYG5YCpHFvghUm/3cxfYpnWbDyGj5tkf/FTsgdeH6 rBFd3MzeSZRTiw5+o88DA+9fLWXJEAh8Uvw4JAq1Hw0Pp22CrOvya+z61kKvDpvy LGWd55o7wHwjSkLbdwn5THg4UoWUzKUKZ1VNnKr9Ve7J5FYy7l/9OsyWqAbE+/8/ ZnxnG/8X9WhaZKP4uc/UdO3PI2DU30r2A02QziCu0ChTXS/qOsKKKNZ7DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIn2Ck3KB23rlzzrI6AUeAWfc6XMB8GA1UdIwQY MBaAFCz7R2/PMTz/KV3g0XCRVq8CU9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQt ZmE0ZGQyMWFlM2RjLzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQtZmE0ZGQyMWFlM2Rj LzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYftoCnW 87jNIVnq0upogsUocO96LBn1hDfuIucGtaUiMed7o+VfXwjmtDVpi0IJGc6YMa0L ahx76k2B95ItN0+fU86CpVjes3jACmzxnzyiLaPWQrfsyuAMivMWluRmicGyT9Rp TMyGgjcDLlLfSQHjVjDMXdAOjJE3+iDkiBLyvLB9j65cWXMLbLjpAkeVvHoELtEa 1hwnwgRrZC1X5Uu0a9IKpYl4U5yuILcnvPh5MfOD1PXF9w9XfJDe8yYZDxoDyRDo OyckzBABunoNL/Bztsd/da09ZxtAmLOjpnldkONK6esFGK0TsiJiZebs0Y6+/QlY a3zHQYSJt3S1yQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:17:27 2025 by rpki-client