This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json) Hash identifier: 6ZOaAgUtmpgrLWiQoo+3A5iJ5zUAYuJ/D9LlZU7q0rI= Subject key identifier: D4:20:F2:2C:28:27:B1:FC:A9:AE:9D:49:82:35:D5:BB:71:6A:81:AE Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c Certificate serial: 019AF19AFF1B9F422ACABD705AC7766D3BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft Manifest number: 081E Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=) 2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=) 3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: ZzvbXpb/SlEjMM2nfNHIbnEv5OHsR27sZoxdnGSor2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ff:1b:9f:42:2a:ca:bd:70:5a:c7:76:6d:3b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=d420f22c2827b1fca9ae9d498235d5bb716a81ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:1c:1a:3a:64:ed:e7:ee:61:96:24:4e:21: 22:0b:03:5e:a5:88:4f:81:c4:31:b1:28:31:43:02: 47:23:b4:9a:78:39:55:c0:61:f1:1b:9e:c7:12:fd: f2:a4:9a:fe:f3:d8:ae:a0:24:7f:ff:bd:00:d8:9a: e7:1a:9a:5a:a8:16:00:4b:e5:e6:80:cd:e3:14:7b: b0:e5:2c:da:be:62:1b:42:05:47:c5:d4:8b:95:62: 47:d4:bf:16:c2:5a:70:2f:bd:76:d9:3e:38:f7:84: dd:c4:e7:5d:cf:05:31:01:db:ed:13:cb:20:75:1e: 1b:1e:f2:b2:c2:b7:cc:54:70:8a:23:4c:60:52:a2: fd:51:75:13:f3:d0:30:5e:37:4b:fb:9a:8e:a3:08: b0:4b:c8:bf:0e:52:84:ec:52:1c:a5:02:eb:66:ac: df:72:6f:75:34:23:12:2a:1e:ae:f3:9e:a9:36:52: 4b:68:6e:21:8e:8f:f5:26:bd:f8:e3:8e:8c:53:52: a1:be:4d:aa:49:2d:4c:a5:28:fe:aa:e7:e1:15:58: 75:d3:3a:54:75:63:f8:86:75:d5:86:b1:f7:cc:67: bc:96:48:71:54:64:3d:55:3a:a4:e5:93:0e:ec:a7: ee:27:69:f4:67:d1:69:44:0a:78:b6:5e:8d:e4:42: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:20:F2:2C:28:27:B1:FC:A9:AE:9D:49:82:35:D5:BB:71:6A:81:AE X509v3 Authority Key Identifier: keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:db:c1:1e:b6:77:01:0f:a7:81:31:80:b5:f8:44:45:9e:75: 72:5b:8b:d8:7b:e3:48:35:78:b1:59:64:a1:37:90:4a:1a:cb: 95:90:5c:b4:ec:4e:da:29:68:c1:28:1a:29:ae:ac:ea:19:96: 03:47:0f:b7:e4:42:34:3e:89:fc:fc:a8:21:1a:c0:51:1f:1c: 98:05:6d:79:b2:dc:d3:f7:23:6c:f7:a9:26:e0:5e:1c:e9:db: ac:ff:e2:6b:59:d3:4e:08:4c:35:da:4a:02:e0:49:2c:f9:1f: 30:92:73:8d:1a:4c:ef:f1:93:36:03:77:d6:21:c7:d8:59:38: 24:53:7b:63:34:8a:35:4f:97:a9:d2:b9:52:4b:dc:34:7f:5f: 79:66:47:a3:7f:38:52:cc:15:85:1c:2d:18:a2:67:e5:b4:60: 3a:a9:fb:e4:1c:92:85:9f:cf:20:66:6e:f2:9c:f1:a0:d6:12: 1f:0b:4f:44:66:9d:9e:50:c8:c6:3c:16:2c:7c:9e:29:e4:87: bf:6a:e5:91:08:22:b1:a7:b4:d0:2b:1e:17:dd:ef:01:9b:25: ca:fa:ce:b1:da:3b:ff:ab:16:47:20:b0:15:7c:6a:54:73:11: dd:8a:b6:6b:61:45:6f:05:00:93:b3:ef:dd:05:b6:65:2b:fb: 6c:fc:2f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv8bn0Iqyr1wWsd2bTuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWQ0NjM2MWI2YWY3MjBmYjk4MzZhY2VjOTY1YjBmNTJm NGIwOWMwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EyhkNDIwZjIyYzI4MjdiMWZjYTlhZTlkNDk4MjM1ZDViYjcxNmE4MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXccGjpk7efuYZYkTiEiCwNepYhP gcQxsSgxQwJHI7SaeDlVwGHxG57HEv3ypJr+89iuoCR//70A2JrnGppaqBYAS+Xm gM3jFHuw5SzavmIbQgVHxdSLlWJH1L8WwlpwL7122T4494TdxOddzwUxAdvtE8sg dR4bHvKywrfMVHCKI0xgUqL9UXUT89AwXjdL+5qOowiwS8i/DlKE7FIcpQLrZqzf cm91NCMSKh6u856pNlJLaG4hjo/1Jr34446MU1Khvk2qSS1MpSj+qufhFVh10zpU dWP4hnXVhrH3zGe8lkhxVGQ9VTqk5ZMO7KfuJ2n0Z9FpRAp4tl6N5EJXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQg8iwoJ7H8qa6dSYI11btxaoGuMB8GA1UdIwQY MBaAFJadRjYbavcg+5g2rOyWWw9S9LCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEt NDM2MDAxNzFiOGJkLzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEtNDM2MDAxNzFiOGJk LzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx9vBHrZ3 AQ+ngTGAtfhERZ51cluL2HvjSDV4sVlkoTeQShrLlZBctOxO2ilowSgaKa6s6hmW A0cPt+RCND6J/PyoIRrAUR8cmAVtebLc0/cjbPepJuBeHOnbrP/ia1nTTghMNdpK AuBJLPkfMJJzjRpM7/GTNgN31iHH2Fk4JFN7YzSKNU+XqdK5UkvcNH9feWZHo384 UswVhRwtGKJn5bRgOqn75ByShZ/PIGZu8pzxoNYSHwtPRGadnlDIxjwWLHyeKeSH v2rlkQgisae00CseF93vAZslyvrOsdo7/6sWRyCwFXxqVHMR3Yq2a2FFbwUAk7Pv 3QW2ZSv7bPwvCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:24 2025 by rpki-client