This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json) Hash identifier: gTChkJch7HidWl0LfkxaRBFlBIPlrbXBmCg50gC5uPs= Subject key identifier: 82:3B:1D:44:69:E6:76:7B:DC:AE:89:EC:A5:67:5D:B2:07:B9:0B:8C Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Certificate serial: 019AF27692C500F9C373B13E2C665DB8E28C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft Manifest number: 1778 Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: FXFqiNCQgnl4zceZCPpQZuhS9mk.roa (hash: qAfQEueMeCHzv9em2IARM0wMF8ekNaNhDyPjALv1VGg=) 2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: 2oYW/ufUj0zDyGcUGYKnX6TWCVFUKcSITUTwjuPni/g=) 3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=) 4: _UPJ8qHXYmScIPdo47sXULCowxc.roa (hash: x+bwdKrD+TEkJ3sWZza6bM8RVF+G5YSW9hY6F/RhNRI=) 5: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (hash: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=) 6: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:92:c5:00:f9:c3:73:b1:3e:2c:66:5d:b8:e2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=823b1d4469e6767bdcae89eca5675db207b90b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:f1:fc:80:10:ad:ce:59:95:42:65:17:ac: 99:a9:12:78:77:e2:16:6f:aa:6b:17:fa:1d:13:d5: b6:e0:78:84:98:a6:89:8d:65:8f:8a:fc:2d:df:11: ec:80:9d:3f:d0:42:ce:3f:38:35:6f:f9:f7:98:3f: de:d6:80:64:47:b8:1c:7f:c3:dd:16:e2:c6:72:32: 26:fa:ec:48:10:20:2e:08:db:ad:26:ac:65:4c:93: f7:83:4f:cc:a5:71:53:98:43:fc:8b:43:bc:bc:93: b1:aa:dd:d3:33:f2:20:eb:4b:97:f4:0b:35:9c:74: 58:f5:ed:1a:cd:df:68:92:ee:f1:55:a6:84:a4:3f: eb:7d:49:5a:bd:a4:d5:59:4b:b9:15:5b:b0:3a:7b: 4d:3f:9b:dd:a5:00:0f:56:54:b6:ee:bc:76:15:66: 68:2c:83:4f:ee:47:81:2a:49:0c:41:02:c2:25:3c: 5a:3d:e8:35:37:e4:c0:ba:88:04:a0:dd:7c:84:cd: 4d:dc:25:d9:3f:e1:85:74:cc:20:d3:95:c8:68:cd: c4:8c:64:2d:a2:0c:74:10:53:16:ae:bf:9c:82:ee: 37:b6:7c:3d:d9:34:9d:6e:f3:c3:a3:84:df:85:94: 5f:cd:47:f6:45:97:b4:ca:89:63:3e:5c:f1:b3:1b: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3B:1D:44:69:E6:76:7B:DC:AE:89:EC:A5:67:5D:B2:07:B9:0B:8C X509v3 Authority Key Identifier: keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5b:13:6a:99:4f:ba:40:fb:49:bc:56:37:68:01:31:e8:ac: 9e:f8:8e:de:4d:15:c9:e5:c9:41:f1:39:61:78:39:cc:39:28: c4:01:9c:d0:d7:b3:5f:c4:3b:e7:85:08:a5:cb:6a:13:7e:a5: 1a:3f:98:41:02:c0:10:1a:e1:a2:7d:33:da:fc:4f:10:f8:ff: 79:6c:50:b0:60:59:28:4f:a9:41:0d:0b:52:f7:f2:1c:73:fd: cd:e9:90:a4:e8:ef:ec:35:d1:74:4d:7a:03:e9:88:6d:3c:04: a7:ad:48:2a:6b:d2:50:71:72:46:26:bd:8d:c0:98:a4:03:34: 17:17:3e:eb:51:82:8c:83:43:88:76:d1:aa:e8:a9:a1:d3:d3: d2:63:c4:fa:57:bd:d3:b1:7e:52:e5:57:a2:5d:9a:f2:19:7d: ee:ab:8a:56:20:56:06:8c:c0:0f:a5:08:33:a4:b1:2d:28:42: 59:88:2b:da:63:59:25:6b:25:34:35:b0:46:94:fa:26:b4:52: ef:9e:cf:6c:0c:82:c0:af:f1:fd:5f:4a:93:9e:72:8d:ea:db: 6f:56:5c:c8:0d:28:f8:de:f5:08:b5:e4:85:90:f6:63:b5:e8: 41:f3:b8:55:17:7f:17:4b:f3:5d:42:de:b4:4f:cb:44:db:aa: 70:17:9b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpLFAPnDc7E+LGZduOKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy OWE1MmMwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD Eyg4MjNiMWQ0NDY5ZTY3NjdiZGNhZTg5ZWNhNTY3NWRiMjA3YjkwYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQnx/IAQrc5ZlUJlF6yZqRJ4d+IW b6prF/odE9W24HiEmKaJjWWPivwt3xHsgJ0/0ELOPzg1b/n3mD/e1oBkR7gcf8Pd FuLGcjIm+uxIECAuCNutJqxlTJP3g0/MpXFTmEP8i0O8vJOxqt3TM/Ig60uX9As1 nHRY9e0azd9oku7xVaaEpD/rfUlavaTVWUu5FVuwOntNP5vdpQAPVlS27rx2FWZo LINP7keBKkkMQQLCJTxaPeg1N+TAuogEoN18hM1N3CXZP+GFdMwg05XIaM3EjGQt ogx0EFMWrr+cgu43tnw92TSdbvPDo4TfhZRfzUf2RZe0yoljPlzxsxtbNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFII7HURp5nZ73K6J7KVnXbIHuQuMMB8GA1UdIwQY MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt MmZjYzBiNzQ5YjMyLzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVsTaplP ukD7SbxWN2gBMeisnviO3k0VyeXJQfE5YXg5zDkoxAGc0NezX8Q754UIpctqE36l Gj+YQQLAEBrhon0z2vxPEPj/eWxQsGBZKE+pQQ0LUvfyHHP9zemQpOjv7DXRdE16 A+mIbTwEp61IKmvSUHFyRia9jcCYpAM0Fxc+61GCjINDiHbRquipodPT0mPE+le9 07F+UuVXol2a8hl97quKViBWBozAD6UIM6SxLShCWYgr2mNZJWslNDWwRpT6JrRS 757PbAyCwK/x/V9Kk55yjerbb1ZcyA0o+N71CLXkhZD2Y7XoQfO4VRd/F0vzXULe tE/LRNuqcBebtA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:05 2025 by rpki-client