This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json) Hash identifier: bWl1EufkduULsW2EOkBiHKzYHCHYjbBIGKbf9FDupts= Subject key identifier: 44:06:C8:C3:13:6A:6C:05:7B:BF:1E:98:A8:F5:E9:CF:30:41:22:46 Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27 Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227 Certificate serial: 019B25512401731051FF8A98C371B7C07716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft Manifest number: 0A91 Signing time: Tue 16 Dec 2025 04:00:33 +0000 Manifest this update: Tue 16 Dec 2025 04:00:33 +0000 Manifest next update: Wed 17 Dec 2025 04:00:33 +0000 Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: I1i0qH6Egh+H6hbx02TW92YWrRodO5odEyI+qjkmFE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:24:01:73:10:51:ff:8a:98:c3:71:b7:c0:77:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227 Validity Not Before: Dec 16 04:00:33 2025 GMT Not After : Dec 17 04:00:33 2025 GMT Subject: CN=4406c8c3136a6c057bbf1e98a8f5e9cf30412246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c1:09:17:22:ca:64:c5:55:94:5d:eb:66:a6: dd:8a:07:d3:ef:e9:98:9b:65:9b:5f:76:36:b3:9e: 11:fc:d7:ad:15:6e:54:25:d3:00:10:b7:68:68:40: bc:ff:0d:63:cc:1c:41:50:7f:ea:e3:ef:8f:cd:b9: c7:5a:63:c2:56:a3:e3:24:3f:e5:67:cd:37:c9:0f: 6e:42:b6:b1:e9:ef:6c:55:3a:8a:a4:c0:9b:ac:c8: 78:58:78:79:f3:1c:7a:29:01:d5:5c:85:32:cf:57: c8:74:a1:5f:6e:19:6e:e6:e8:26:3b:29:76:7a:38: 64:25:6d:e2:ee:dc:6e:fb:36:1a:4e:04:69:41:f8: 3b:ce:54:30:50:dc:ae:86:60:93:75:b3:5d:ad:6c: fe:25:e0:aa:b0:75:8f:48:03:b1:92:2a:dd:cb:d3: 1f:5f:84:aa:0f:79:df:68:16:49:98:dd:5d:26:ee: 87:77:24:7f:16:f0:c8:62:02:d1:86:ce:aa:b6:48: 59:0d:72:92:ee:da:cb:f8:cd:19:52:a3:2d:0e:f8: 45:30:da:19:f1:57:4b:b9:c3:b4:7b:5a:f7:92:aa: 00:fc:1a:f4:2f:ac:d8:a1:b6:cc:14:41:94:5c:a3: 3c:7f:8e:76:d7:e4:4d:ae:84:7b:ca:c2:f2:b7:36: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:06:C8:C3:13:6A:6C:05:7B:BF:1E:98:A8:F5:E9:CF:30:41:22:46 X509v3 Authority Key Identifier: keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:27:8d:af:bc:e8:d8:b7:ca:00:24:5f:33:67:2d:4b:94:5c: 29:25:29:2f:8a:14:0f:23:81:0c:aa:2e:44:99:01:12:bf:d1: 80:59:9e:31:aa:f0:36:be:77:62:43:d3:d9:d0:62:bb:e5:19: 4a:27:8d:a4:9b:a1:9f:23:c6:06:53:96:c9:81:5b:81:00:6f: 54:53:56:b2:8d:92:bc:e9:1a:e2:cc:86:64:3d:83:72:7a:0a: 03:1f:3e:14:1b:2f:35:e0:6b:79:a8:e4:64:66:0c:2c:bf:2e: b4:0b:5d:b3:46:51:e3:cc:16:cf:50:d4:85:5e:fb:e1:9b:ea: 69:ec:8a:49:7b:f7:34:ee:ed:1f:67:5f:b8:17:ca:e9:0d:e5: 6d:89:97:c8:b4:32:7f:af:a5:57:b3:77:40:23:b7:39:58:9e: b4:dd:f7:7e:10:ba:cd:e8:5e:29:bd:2a:51:d0:76:6f:c6:6b: 02:eb:6d:53:3e:1b:58:83:bd:a4:61:62:53:6f:d8:24:55:4f: d5:31:10:ac:30:f4:6e:0a:f3:e3:ec:ac:ec:5d:f2:72:1e:00: 47:51:a5:b2:00:a0:c8:c1:ec:b8:83:5c:2b:dd:68:56:67:3a: 41:9a:79:5a:22:b9:3b:68:4f:98:e4:77:62:6e:67:2b:be:60: 6f:0b:04:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUSQBcxBR/4qYw3G3wHcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0 YzAyMjcwHhcNMjUxMjE2MDQwMDMzWhcNMjUxMjE3MDQwMDMzWjAzMTEwLwYDVQQD Eyg0NDA2YzhjMzEzNmE2YzA1N2JiZjFlOThhOGY1ZTljZjMwNDEyMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sEJFyLKZMVVlF3rZqbdigfT7+mY m2WbX3Y2s54R/NetFW5UJdMAELdoaEC8/w1jzBxBUH/q4++PzbnHWmPCVqPjJD/l Z803yQ9uQrax6e9sVTqKpMCbrMh4WHh58xx6KQHVXIUyz1fIdKFfbhlu5ugmOyl2 ejhkJW3i7txu+zYaTgRpQfg7zlQwUNyuhmCTdbNdrWz+JeCqsHWPSAOxkirdy9Mf X4SqD3nfaBZJmN1dJu6HdyR/FvDIYgLRhs6qtkhZDXKS7trL+M0ZUqMtDvhFMNoZ 8VdLucO0e1r3kqoA/Br0L6zYobbMFEGUXKM8f4521+RNroR7ysLytzY1TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQGyMMTamwFe78emKj16c8wQSJGMB8GA1UdIwQY MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCeNr7zo 2LfKACRfM2ctS5RcKSUpL4oUDyOBDKouRJkBEr/RgFmeMarwNr53YkPT2dBiu+UZ SieNpJuhnyPGBlOWyYFbgQBvVFNWso2SvOka4syGZD2DcnoKAx8+FBsvNeBreajk ZGYMLL8utAtds0ZR48wWz1DUhV774ZvqaeyKSXv3NO7tH2dfuBfK6Q3lbYmXyLQy f6+lV7N3QCO3OVietN33fhC6zeheKb0qUdB2b8ZrAuttUz4bWIO9pGFiU2/YJFVP 1TEQrDD0bgrz4+ys7F3ych4AR1GlsgCgyMHsuINcK91oVmc6QZp5WiK5O2hPmOR3 Ym5nK75gbwsEpw== -----END CERTIFICATE-----Generated at Tue Dec 16 14:18:57 2025 by rpki-client