This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json) Hash identifier: VfLeTXXVfFHdzHVNQgMCjXrnC2NHJ/TUY7TrcXb0CaA= Subject key identifier: 0D:70:BB:9A:51:22:23:F3:A2:A5:29:00:6E:28:1D:0F:74:1F:89:28 Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6 Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6 Certificate serial: 019B3CB4D4DF24ACFA7E9C93EAC5B5E13EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft Manifest number: 102D Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=) 2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: BR0IO4Dln21dtAqoZ0xVBWjBnAq/jGn0JVKWC8zkDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d4:df:24:ac:fa:7e:9c:93:ea:c5:b5:e1:3e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6 Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=0d70bb9a512223f3a2a529006e281d0f741f8928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:ba:40:0c:0b:5b:49:bb:cf:77:e3:2a:35: 14:9c:f0:3a:9c:b6:d0:2c:04:72:2b:5d:52:32:c3: 1b:b6:35:8b:fe:14:b7:81:75:30:b6:1a:d0:5e:84: 1e:10:4b:3f:6a:49:97:b3:da:49:e1:1d:bb:b0:88: 17:d7:91:be:91:b2:e9:06:26:70:c8:07:dc:bf:03: b5:6c:8d:af:ff:e2:69:07:19:7a:f7:f3:3e:b6:8c: 64:8a:0a:37:ba:8c:93:dd:81:5c:bb:ea:fc:ce:c9: ec:f7:4b:9a:46:c4:54:ef:71:d6:96:7c:f1:71:93: bf:48:cd:64:0c:dc:48:b7:7a:51:c7:08:19:2c:40: 4e:dd:e1:61:b3:b4:3a:50:10:15:9a:27:83:6b:99: 13:98:b3:91:ae:30:32:7f:26:05:9a:ff:5f:15:81: 6c:fa:5a:aa:da:b3:22:25:a6:b7:d8:5d:dc:c6:5c: 80:10:6c:a9:92:4b:ad:4a:ed:41:34:d1:b6:0f:d1: 73:b8:5b:eb:e5:3e:32:23:3e:6e:89:c6:e3:ec:9f: 1e:01:09:51:c4:4a:85:f8:3d:5f:c1:00:53:84:a7: af:00:bc:65:12:00:97:aa:ed:5e:63:55:38:58:2b: b7:c4:35:99:e9:8b:7d:d1:0d:17:8f:ce:cb:67:1c: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:BB:9A:51:22:23:F3:A2:A5:29:00:6E:28:1D:0F:74:1F:89:28 X509v3 Authority Key Identifier: keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0c:c4:77:3f:c3:cd:3d:71:b6:b9:0c:df:53:57:e3:35:50: 34:a1:19:57:69:5c:dc:28:cb:62:ab:1d:b9:93:4a:66:1f:e3: 74:92:6c:06:46:3b:68:4d:5e:6b:4b:3d:c2:ef:33:a7:a4:2d: b9:1c:5b:e7:8d:7b:ee:6f:cf:c6:59:27:ac:6e:d2:ed:16:4e: 2a:7e:30:11:f3:53:96:fa:a8:fd:d5:2a:cc:f6:0e:cd:04:f4: ca:66:d9:ee:97:2f:26:6b:61:87:0f:10:22:a1:d6:39:22:39: dd:0c:e7:9b:6a:7b:b0:de:8a:5e:a2:6f:4c:2d:5a:5c:d0:69: 0b:7f:09:67:48:1d:95:92:d8:32:af:b4:a8:97:f2:26:4b:b0: fe:55:c8:cb:ec:92:08:69:56:30:8e:07:b1:22:af:c6:e2:9a: 06:77:98:6e:82:aa:b4:fd:8a:d0:76:8e:73:91:91:ce:cf:98: 53:9b:42:31:06:5d:84:35:cc:21:03:09:63:82:fa:e1:5d:f6: 13:e0:8f:f2:54:24:91:46:73:61:19:3c:4a:a2:f0:f5:57:02: 83:79:5e:49:77:64:cb:22:65:70:c4:0d:c8:12:33:a3:e6:1e: 1c:9b:03:dc:10:25:dd:8a:30:dc:b2:21:f1:95:43:9e:1b:45: 87:54:6f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNTfJKz6fpyT6sW14T61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NjVjODExMGQwZGQ4NmE3ZWJiMDkzOGFhMzJlMDlkMWRi MTIyZjYwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD EygwZDcwYmI5YTUxMjIyM2YzYTJhNTI5MDA2ZTI4MWQwZjc0MWY4OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd+6QAwLW0m7z3fjKjUUnPA6nLbQ LARyK11SMsMbtjWL/hS3gXUwthrQXoQeEEs/akmXs9pJ4R27sIgX15G+kbLpBiZw yAfcvwO1bI2v/+JpBxl69/M+toxkigo3uoyT3YFcu+r8zsns90uaRsRU73HWlnzx cZO/SM1kDNxIt3pRxwgZLEBO3eFhs7Q6UBAVmieDa5kTmLORrjAyfyYFmv9fFYFs +lqq2rMiJaa32F3cxlyAEGypkkutSu1BNNG2D9FzuFvr5T4yIz5uicbj7J8eAQlR xEqF+D1fwQBThKevALxlEgCXqu1eY1U4WCu3xDWZ6Yt90Q0Xj87LZxzczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1wu5pRIiPzoqUpAG4oHQ90H4koMB8GA1UdIwQY MBaAFJZlyBENDdhqfrsJOKoy4J0dsSL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUt NDg5NzI2MWJhNDZiLzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUtNDg5NzI2MWJhNDZi LzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwzEdz/D zT1xtrkM31NX4zVQNKEZV2lc3CjLYqsduZNKZh/jdJJsBkY7aE1ea0s9wu8zp6Qt uRxb54177m/PxlknrG7S7RZOKn4wEfNTlvqo/dUqzPYOzQT0ymbZ7pcvJmthhw8Q IqHWOSI53Qznm2p7sN6KXqJvTC1aXNBpC38JZ0gdlZLYMq+0qJfyJkuw/lXIy+yS CGlWMI4HsSKvxuKaBneYboKqtP2K0HaOc5GRzs+YU5tCMQZdhDXMIQMJY4L64V32 E+CP8lQkkUZzYRk8SqLw9VcCg3leSXdkyyJlcMQNyBIzo+YeHJsD3BAl3Yow3LIh 8ZVDnhtFh1Rv4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:21 2025 by rpki-client