This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft File: lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json) Hash identifier: 34EL8s9Bj6UIeADK7xVjtxOWITT1UGZ9NlpaLg0oYg8= Subject key identifier: EC:3D:C5:FC:B1:A9:CC:08:5C:88:F3:09:9E:DC:FC:C5:82:6B:9B:BA Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec Certificate serial: 019AF23FEF071879E1316B36BB654E424B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft Manifest number: 10A0 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=) 2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: go/74VcI+Jn0HfyaGfDdI6sAoDNpXSB9wWNeb1b+RZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ef:07:18:79:e1:31:6b:36:bb:65:4e:42:4b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=ec3dc5fcb1a9cc085c88f3099edcfcc5826b9bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:89:aa:81:c1:ab:85:e4:a9:72:99:fb:a9: de:0e:11:4d:d4:34:21:ca:97:d9:86:a2:bd:ed:52: 7a:e5:6b:1e:38:b3:0f:43:78:b2:98:31:cc:1c:1c: 5a:3c:af:b5:34:28:59:de:02:32:3b:d2:9e:52:a3: 2d:d2:1e:ba:f9:20:5c:9f:17:c1:44:2a:7b:af:fe: 2e:9e:b5:af:1d:ba:a7:f9:c5:66:b2:e1:b3:65:3b: 0b:3a:0a:38:f0:67:af:50:e1:ec:f6:7e:a2:e2:e0: 46:8c:bb:2f:b6:b5:98:ce:ef:f4:54:fb:cc:7f:90: bd:bf:0b:8b:e5:54:e2:99:48:fb:e6:bd:62:c7:95: 4c:09:f5:f8:08:a8:87:b8:73:8e:65:ee:58:e1:c6: 53:14:46:3a:a8:f0:2d:23:91:71:cc:87:cf:8e:1f: ac:81:27:cf:84:25:81:44:93:e9:d5:fa:27:95:92: ff:1e:54:32:b7:72:8e:08:7e:3f:37:1a:e0:8d:21: 90:f4:bb:2e:05:d1:01:6e:ff:d6:ef:6c:20:bb:e8: bc:02:b9:17:9c:c1:b0:fd:57:c7:ac:32:6c:ae:2c: 35:82:a4:58:44:7e:7f:80:ee:50:0c:4e:10:ad:d7: dc:92:08:28:7d:f6:ab:ef:3c:6d:8c:53:84:48:e6: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3D:C5:FC:B1:A9:CC:08:5C:88:F3:09:9E:DC:FC:C5:82:6B:9B:BA X509v3 Authority Key Identifier: keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8c:fb:69:14:9e:27:34:ed:b7:cf:9a:68:86:fb:ef:7e:db: 86:b5:67:b2:26:cb:c2:8f:60:5d:c7:01:47:fb:cf:7c:de:02: 93:1b:0d:8f:c9:24:c5:bd:80:dc:1f:f4:1d:0c:99:f4:87:a6: 3e:0f:33:ae:5c:74:6c:39:0e:ce:16:3f:97:05:3a:99:28:0c: 38:cd:0b:2f:f7:94:8d:61:2b:4c:b6:4b:5b:af:95:d9:77:7a: b5:ee:33:51:1c:9f:95:a0:29:42:56:66:3d:14:e9:be:86:c2: 7f:48:1b:1f:10:7e:e3:bf:b8:55:eb:f7:24:e2:7c:1e:68:6a: 90:73:81:44:8d:7d:6d:40:ec:7a:7e:c0:8d:95:5d:ac:85:86: a9:e2:9b:9f:f8:0f:67:39:0c:8b:84:9a:6c:80:5e:26:97:fa: 47:c6:10:90:64:92:cb:59:98:15:6d:2e:6c:ce:d3:80:66:ce: 1f:b5:66:44:78:cd:14:2d:29:c2:d2:0b:1f:52:64:6a:0b:4f: 85:b6:b7:f4:60:a9:6d:16:60:2b:e0:20:61:55:35:50:62:d1: ed:35:77:61:57:ce:af:3d:0a:23:4c:40:c6:73:e3:b6:b9:69: ca:fc:13:cc:0d:74:f2:fc:da:5e:21:db:b0:dd:ad:c0:05:40: fb:3b:28:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+8HGHnhMWs2u2VOQkuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NjZjMjM4ZjdmZmRhY2YxNWM4MDJlMzIwYjUyZTA5ODA4 NjljZWMwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD EyhlYzNkYzVmY2IxYTljYzA4NWM4OGYzMDk5ZWRjZmNjNTgyNmI5YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxSJqoHBq4XkqXKZ+6neDhFN1DQh ypfZhqK97VJ65WseOLMPQ3iymDHMHBxaPK+1NChZ3gIyO9KeUqMt0h66+SBcnxfB RCp7r/4unrWvHbqn+cVmsuGzZTsLOgo48GevUOHs9n6i4uBGjLsvtrWYzu/0VPvM f5C9vwuL5VTimUj75r1ix5VMCfX4CKiHuHOOZe5Y4cZTFEY6qPAtI5FxzIfPjh+s gSfPhCWBRJPp1fonlZL/HlQyt3KOCH4/NxrgjSGQ9LsuBdEBbv/W72wgu+i8ArkX nMGw/VfHrDJsriw1gqRYRH5/gO5QDE4Qrdfckggoffar7zxtjFOESOa6MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw9xfyxqcwIXIjzCZ7c/MWCa5u6MB8GA1UdIwQY MBaAFJZmwjj3/9rPFcgC4yC1LgmAhpzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzIt YTAwMGQ3NjllMDI2LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzItYTAwMGQ3NjllMDI2 LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4z7aRSe JzTtt8+aaIb7737bhrVnsibLwo9gXccBR/vPfN4CkxsNj8kkxb2A3B/0HQyZ9Iem Pg8zrlx0bDkOzhY/lwU6mSgMOM0LL/eUjWErTLZLW6+V2Xd6te4zURyflaApQlZm PRTpvobCf0gbHxB+47+4Vev3JOJ8HmhqkHOBRI19bUDsen7AjZVdrIWGqeKbn/gP ZzkMi4SabIBeJpf6R8YQkGSSy1mYFW0ubM7TgGbOH7VmRHjNFC0pwtILH1JkagtP hba39GCpbRZgK+AgYVU1UGLR7TV3YVfOrz0KI0xAxnPjtrlpyvwTzA108vzaXiHb sN2twAVA+zsogg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:35 2025 by rpki-client