This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json) Hash identifier: f7Yn7726LgVSLxQ2pKivd/MWRgV6pi0JES9fXQQ82Eg= Subject key identifier: 31:25:4A:03:99:D8:EE:E0:26:B2:CB:42:8F:BB:7E:82:68:39:77:67 Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91 Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91 Certificate serial: 019B37218DAAAFA6766D7E1B6140D487332B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft Manifest number: 1527 Signing time: Fri 19 Dec 2025 15:01:44 +0000 Manifest this update: Fri 19 Dec 2025 15:01:44 +0000 Manifest next update: Sat 20 Dec 2025 15:01:44 +0000 Files and hashes: 1: 1-Syn6dG6X19MIzpncMu6PvfG0Kk.roa (hash: nPKGhiHhJLWCossuCKklZQ7+p2jyQEhoMzf19cBdYl4=) 2: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: 0yDe5ZhOs51/gxSvfFT+ccfVEjSD+oE7bCeZr8fRyyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:8d:aa:af:a6:76:6d:7e:1b:61:40:d4:87:33:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91 Validity Not Before: Dec 19 15:01:44 2025 GMT Not After : Dec 20 15:01:44 2025 GMT Subject: CN=31254a0399d8eee026b2cb428fbb7e8268397767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:7d:77:06:fd:38:6c:53:50:af:7c:2e:45: e0:23:a2:61:70:3c:b9:59:48:ad:72:f6:44:e4:14: e5:86:2b:22:59:ff:3d:f9:3b:ee:ac:a4:50:d7:9b: 0c:8d:bb:8c:35:89:69:75:d0:42:83:48:72:10:70: 6b:a7:ac:85:32:f2:8b:5d:96:2c:56:de:a2:71:32: ae:26:87:9c:11:d8:5f:30:10:d0:28:1f:8b:be:9f: 8e:0f:d5:b4:08:40:98:84:fd:11:ed:9f:18:fa:b7: 6f:63:f3:4a:22:49:ff:4d:ad:cf:35:d7:81:67:ca: 59:f6:3e:7c:18:c7:c2:50:cc:db:5e:1e:9f:40:8a: 8a:15:ed:e5:6a:46:d0:1b:bc:50:19:79:6a:53:a3: 84:27:6b:9a:6f:5e:8a:93:b9:51:d6:e2:e0:30:f7: 2e:61:58:f6:6d:ca:57:51:8a:c6:40:ec:a5:78:47: 97:d3:7d:1a:12:13:b6:b4:60:75:b9:39:d3:d0:06: 05:e9:ea:81:ba:18:f4:63:28:cc:fc:44:43:f1:be: 57:50:cd:30:51:79:5d:e6:c8:3a:c6:28:c4:77:0a: 4c:ba:c0:72:f7:2f:d6:30:ad:03:24:f8:80:86:28: 7f:05:d6:e7:8e:d6:24:56:d4:e5:ba:af:f3:3f:55: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:4A:03:99:D8:EE:E0:26:B2:CB:42:8F:BB:7E:82:68:39:77:67 X509v3 Authority Key Identifier: keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:96:bd:bb:0c:af:3b:41:92:c8:b5:f1:d4:fe:e9:25:10: 4b:8f:c0:06:b6:45:74:dd:33:3a:aa:9b:5a:9e:31:4f:8e:05: a5:d4:81:41:0d:19:67:c8:5d:b4:7e:76:ee:17:01:df:3b:8b: 11:2f:ad:ea:74:ca:e0:90:33:68:b4:16:80:90:bb:cb:3d:2b: 7e:19:a3:67:b7:2f:9f:54:db:26:2f:2d:7a:6f:8b:37:28:57: 87:be:0a:1e:7c:c6:0f:73:ff:71:c3:aa:42:16:9d:43:f5:c9: e2:19:69:db:3a:4c:b3:af:e5:f0:ca:b9:00:1d:fb:d8:f0:e4: 9f:77:4a:3c:0e:1d:d8:42:52:49:11:75:68:7e:ed:cc:f5:0b: 05:06:46:73:e5:17:4e:f6:96:35:21:b6:bc:e0:e1:ed:06:49: 89:6c:d2:9a:cf:34:9b:e5:95:f1:62:bc:ca:a2:ff:71:f8:72: 03:dc:f5:b4:89:7c:e4:28:de:27:65:e3:b5:1d:d5:cf:a3:c0: 48:5d:a8:ab:aa:2d:a0:91:10:9d:ce:51:de:c8:b2:5b:12:ac: ef:94:e2:7a:63:19:84:2c:0f:04:78:78:92:4f:14:63:6f:9c: 5a:07:0e:16:5b:2a:28:5a:1b:75:ce:41:7e:7e:12:2c:b5:1d: 52:30:56:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IY2qr6Z2bX4bYUDUhzMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTZmYTZhOTBlZDk0ZTIyMWRiNjlkMjFmY2RkYTdjNjZk MTNjOTEwHhcNMjUxMjE5MTUwMTQ0WhcNMjUxMjIwMTUwMTQ0WjAzMTEwLwYDVQQD EygzMTI1NGEwMzk5ZDhlZWUwMjZiMmNiNDI4ZmJiN2U4MjY4Mzk3NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+99dwb9OGxTUK98LkXgI6JhcDy5 WUitcvZE5BTlhisiWf89+TvurKRQ15sMjbuMNYlpddBCg0hyEHBrp6yFMvKLXZYs Vt6icTKuJoecEdhfMBDQKB+Lvp+OD9W0CECYhP0R7Z8Y+rdvY/NKIkn/Ta3PNdeB Z8pZ9j58GMfCUMzbXh6fQIqKFe3lakbQG7xQGXlqU6OEJ2uab16Kk7lR1uLgMPcu YVj2bcpXUYrGQOyleEeX030aEhO2tGB1uTnT0AYF6eqBuhj0YyjM/ERD8b5XUM0w UXld5sg6xijEdwpMusBy9y/WMK0DJPiAhih/BdbnjtYkVtTluq/zP1UB3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDElSgOZ2O7gJrLLQo+7foJoOXdnMB8GA1UdIwQY MBaAFJQW+mqQ7ZTiIdtp0h/N2nxm0TyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYt N2RlOTEwZTAwYmVkLzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYtN2RlOTEwZTAwYmVk LzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiKWvbsM rztBksi18dT+6SUQS4/ABrZFdN0zOqqbWp4xT44FpdSBQQ0ZZ8hdtH527hcB3zuL ES+t6nTK4JAzaLQWgJC7yz0rfhmjZ7cvn1TbJi8tem+LNyhXh74KHnzGD3P/ccOq QhadQ/XJ4hlp2zpMs6/l8Mq5AB372PDkn3dKPA4d2EJSSRF1aH7tzPULBQZGc+UX TvaWNSG2vODh7QZJiWzSms80m+WV8WK8yqL/cfhyA9z1tIl85CjeJ2XjtR3Vz6PA SF2oq6otoJEQnc5R3siyWxKs75TiemMZhCwPBHh4kk8UY2+cWgcOFlsqKFobdc5B fn4SLLUdUjBWFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:54 2025 by rpki-client