This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json) Hash identifier: NjzCBAMBDeErwiVSDxpr5zF0ApCILqtH4ZTzIl+bjH4= Subject key identifier: 14:22:CB:78:2C:B3:97:BD:71:E9:DB:9C:20:9F:6A:FD:86:22:63:E5 Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e Certificate serial: 019B2D0B3114E2346F6D7D9122979044CFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft Manifest number: 170C Signing time: Wed 17 Dec 2025 16:01:06 +0000 Manifest this update: Wed 17 Dec 2025 16:01:06 +0000 Manifest next update: Thu 18 Dec 2025 16:01:06 +0000 Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: N2TW7p/DqOsCV6a+cIN3FFBt1ch7PFDM7APdZZ3FuJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:31:14:e2:34:6f:6d:7d:91:22:97:90:44:cf:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e Validity Not Before: Dec 17 16:01:06 2025 GMT Not After : Dec 18 16:01:06 2025 GMT Subject: CN=1422cb782cb397bd71e9db9c209f6afd862263e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:c7:41:08:ca:99:e6:22:bb:1a:33:58:be: 2f:c2:1e:fa:15:61:ce:69:78:fb:87:45:bf:f8:41: 54:79:37:4d:b9:2e:77:b5:01:d1:63:65:9a:7d:42: ae:7c:52:69:1a:05:2e:cf:a4:8c:d8:be:de:7b:3d: 2a:d3:73:4c:87:06:cf:97:7f:e2:e7:f5:d2:1e:fe: 5a:de:d7:5a:59:63:28:be:f1:64:00:8d:c8:64:ac: 51:1d:3a:bd:a4:3b:a8:3e:35:0f:45:f2:c1:6a:52: bc:8b:4d:bd:8a:cb:0d:08:37:9e:ea:1b:a9:73:8e: 7d:55:10:de:18:b9:95:d1:1c:e3:55:de:fa:71:58: 56:ba:da:78:17:cd:3d:35:29:1b:ff:a7:03:b7:94: ca:90:66:58:69:85:2c:33:99:e4:29:6f:3a:f4:5e: 57:e7:b0:7f:bb:49:ae:f0:d2:6d:33:3a:6c:a7:e9: c3:f0:11:1a:24:48:d8:38:60:7c:92:b2:0b:8f:8a: 20:19:5a:55:ea:9c:d8:81:93:d4:d9:50:e9:be:94: 91:a9:82:24:a6:59:ba:14:3c:fd:7d:0f:66:77:a4: 64:19:f9:35:a3:f7:06:86:e8:1e:3d:02:1b:68:39: 84:4c:cf:54:63:24:96:8d:6d:53:47:75:f5:ff:f9: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:CB:78:2C:B3:97:BD:71:E9:DB:9C:20:9F:6A:FD:86:22:63:E5 X509v3 Authority Key Identifier: keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:88:e4:59:b6:db:09:2b:cb:3e:27:b7:d0:43:2f:96:1a:7e: 2f:e7:d0:13:a3:a9:1c:80:23:49:3d:99:7d:1d:2c:ef:f0:64: df:a1:65:da:a7:2e:27:b9:07:8b:d0:c7:c8:76:22:14:29:7b: c0:5b:cc:84:e2:4c:d4:75:c1:e1:0c:5f:5c:18:fd:55:0d:c2: ff:7a:39:77:32:df:45:92:f5:a1:e7:ea:a6:07:c5:f5:53:a6: dc:be:24:9e:56:7e:58:1d:0e:9f:ae:59:6c:f4:7e:fa:0d:a0: 1d:4c:f5:7d:2b:d5:74:39:d4:d6:50:ca:02:6e:57:b6:a1:ba: b5:75:64:c3:54:19:64:23:ed:0a:d7:3c:79:e6:c2:0e:07:4b: ef:13:6e:6c:61:eb:c6:fb:9f:f5:b1:34:f0:ab:6f:95:20:3f: e9:48:22:11:97:26:ce:40:0f:94:a6:4a:30:03:cd:5f:28:f6: 18:bf:ea:e6:5f:f0:e2:a4:9e:0d:15:c0:62:f5:e3:ad:ff:a8: 9c:43:dc:e3:66:49:87:5e:37:40:7f:1e:79:1c:03:16:4a:8e: ce:ee:7c:8c:90:72:f7:70:ad:bd:20:da:be:89:b3:18:14:59: f3:ec:4f:d4:f7:cd:4a:56:55:d0:b7:3b:99:ad:88:61:9a:33: 17:b9:ad:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCzEU4jRvbX2RIpeQRM/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OTZlNTIyNGZlZjUxN2Y0ZGNjNjZjMTQxMDM1MmNjOGFi ZmIyMmUwHhcNMjUxMjE3MTYwMTA2WhcNMjUxMjE4MTYwMTA2WjAzMTEwLwYDVQQD EygxNDIyY2I3ODJjYjM5N2JkNzFlOWRiOWMyMDlmNmFmZDg2MjI2M2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8zHQQjKmeYiuxozWL4vwh76FWHO aXj7h0W/+EFUeTdNuS53tQHRY2WafUKufFJpGgUuz6SM2L7eez0q03NMhwbPl3/i 5/XSHv5a3tdaWWMovvFkAI3IZKxRHTq9pDuoPjUPRfLBalK8i029issNCDee6hup c459VRDeGLmV0RzjVd76cVhWutp4F809NSkb/6cDt5TKkGZYaYUsM5nkKW869F5X 57B/u0mu8NJtMzpsp+nD8BEaJEjYOGB8krILj4ogGVpV6pzYgZPU2VDpvpSRqYIk plm6FDz9fQ9md6RkGfk1o/cGhugePQIbaDmETM9UYySWjW1TR3X1//njhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQiy3gss5e9cenbnCCfav2GImPlMB8GA1UdIwQY MBaAFJaW5SJP71F/TcxmwUEDUsyKv7IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUt ZjQ5NzlkNTBlZTIyLzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUtZjQ5NzlkNTBlZTIy LzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYjkWbbb CSvLPie30EMvlhp+L+fQE6OpHIAjST2ZfR0s7/Bk36Fl2qcuJ7kHi9DHyHYiFCl7 wFvMhOJM1HXB4QxfXBj9VQ3C/3o5dzLfRZL1oefqpgfF9VOm3L4knlZ+WB0On65Z bPR++g2gHUz1fSvVdDnU1lDKAm5XtqG6tXVkw1QZZCPtCtc8eebCDgdL7xNubGHr xvuf9bE08KtvlSA/6UgiEZcmzkAPlKZKMAPNXyj2GL/q5l/w4qSeDRXAYvXjrf+o nEPc42ZJh143QH8eeRwDFkqOzu58jJBy93CtvSDavomzGBRZ8+xP1PfNSlZV0Lc7 ma2IYZozF7mtnw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:18 2025 by rpki-client