This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json) Hash identifier: vcrb3RgFAYdYCgw6oNhmkgJAHYm1lOHcCywuikLoM0U= Subject key identifier: 80:4C:03:AB:01:5A:F8:2A:8E:96:50:A9:71:63:7B:06:A3:89:22:D5 Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58 Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358 Certificate serial: 019B2EFA50053643784206D9D00D53A33A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft Manifest number: 0E0D Signing time: Thu 18 Dec 2025 01:01:54 +0000 Manifest this update: Thu 18 Dec 2025 01:01:54 +0000 Manifest next update: Fri 19 Dec 2025 01:01:54 +0000 Files and hashes: 1: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (hash: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=) 2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: qhZzhOiC/mb719xI1Pc4khVwRRoTi4AOd9c7ktmVnlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:50:05:36:43:78:42:06:d9:d0:0d:53:a3:3a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358 Validity Not Before: Dec 18 01:01:54 2025 GMT Not After : Dec 19 01:01:54 2025 GMT Subject: CN=804c03ab015af82a8e9650a971637b06a38922d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:40:df:03:bd:5f:79:00:fd:38:8f:da:7a: f8:e6:64:38:82:a2:d2:dd:03:a1:4b:c1:63:e5:22: 6e:cd:ca:4e:74:3f:6b:a7:11:ad:45:c2:4b:15:40: 8a:c9:9e:90:52:6a:a8:64:8d:e5:17:52:55:a8:b0: ab:f1:ce:12:22:99:29:98:b6:b2:10:ab:82:46:0e: cb:2f:2f:72:2e:6d:e4:d7:1a:5b:49:15:61:08:7e: dd:7b:d2:cc:ab:79:62:e8:e5:0a:49:d8:ae:f2:67: dd:21:d2:4f:a0:3f:4b:f2:63:1d:37:21:87:a8:e2: 8d:33:42:bb:1d:1f:1f:d8:ca:e9:8d:db:eb:36:14: d6:8d:e2:82:02:c2:c5:b0:f3:c6:6e:d1:f9:d8:cf: da:02:ee:a0:7f:e6:e0:f3:f5:1e:94:86:41:2b:b6: 7f:6a:82:63:7f:21:85:b7:e6:a3:a7:3d:89:5e:c3: dd:e6:41:d6:e5:84:13:2a:6c:0e:08:9e:7b:40:90: 17:94:7e:fc:90:3c:80:dc:9e:6b:ae:35:28:7d:cb: 9d:95:3b:34:e9:29:31:22:d7:ef:85:07:a7:94:4f: 07:f0:aa:38:71:7b:77:58:dc:a7:eb:0e:f1:f1:01: 77:f8:2b:86:f5:5f:4f:73:d4:5b:d1:67:3b:be:71: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:03:AB:01:5A:F8:2A:8E:96:50:A9:71:63:7B:06:A3:89:22:D5 X509v3 Authority Key Identifier: keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:92:59:36:c8:a8:fb:e5:88:8d:4e:06:a5:e7:b7:d4:66:72: 48:ae:1f:97:cd:40:60:4e:1a:42:e0:02:d0:00:86:e9:40:5b: 4d:88:11:33:ee:d7:95:a0:b2:46:7b:8d:58:db:b4:2f:29:94: 84:54:98:dd:a5:18:1f:b5:90:e4:3e:a2:9d:5d:67:5d:df:3b: 51:d4:d4:b7:bb:93:c7:47:37:0c:a4:c1:8c:fb:5f:f5:29:b7: 26:51:59:27:16:ed:85:3d:8f:39:3e:b8:14:ac:ac:54:79:45: e7:9f:7b:d0:68:e1:3a:66:07:f5:eb:c0:16:e2:35:c4:25:38: 51:e5:ab:e4:91:b0:e7:8e:0a:55:75:35:4e:68:ab:5f:e7:a9: 61:d3:6a:c5:f0:1b:7b:64:15:68:09:fb:8c:c0:41:22:62:dd: 92:94:24:fb:61:7b:11:53:7f:f0:cf:5d:b9:41:7b:90:63:07: f5:06:df:b1:3b:3d:1f:04:aa:40:bb:e5:f0:13:ee:2c:d9:d4: 67:78:9b:5b:ae:f1:d5:78:8f:ba:dd:c0:de:aa:56:7d:8d:b5: 77:11:90:89:87:c0:4f:c5:3a:80:07:e1:32:a4:ec:c2:a7:f3: c3:59:1f:f0:fc:6f:35:35:68:80:bc:f5:28:5c:c0:06:d6:46: f4:72:9f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+lAFNkN4QgbZ0A1TozoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm MTMzNTgwHhcNMjUxMjE4MDEwMTU0WhcNMjUxMjE5MDEwMTU0WjAzMTEwLwYDVQQD Eyg4MDRjMDNhYjAxNWFmODJhOGU5NjUwYTk3MTYzN2IwNmEzODkyMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodFA3wO9X3kA/TiP2nr45mQ4gqLS 3QOhS8Fj5SJuzcpOdD9rpxGtRcJLFUCKyZ6QUmqoZI3lF1JVqLCr8c4SIpkpmLay EKuCRg7LLy9yLm3k1xpbSRVhCH7de9LMq3li6OUKSdiu8mfdIdJPoD9L8mMdNyGH qOKNM0K7HR8f2MrpjdvrNhTWjeKCAsLFsPPGbtH52M/aAu6gf+bg8/UelIZBK7Z/ aoJjfyGFt+ajpz2JXsPd5kHW5YQTKmwOCJ57QJAXlH78kDyA3J5rrjUofcudlTs0 6SkxItfvhQenlE8H8Ko4cXt3WNyn6w7x8QF3+CuG9V9Pc9Rb0Wc7vnGQHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBMA6sBWvgqjpZQqXFjewajiSLVMB8GA1UdIwQY MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt ZjE3ZjA5NWRkM2FmLzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZJZNsio ++WIjU4Gpee31GZySK4fl81AYE4aQuAC0ACG6UBbTYgRM+7XlaCyRnuNWNu0LymU hFSY3aUYH7WQ5D6inV1nXd87UdTUt7uTx0c3DKTBjPtf9Sm3JlFZJxbthT2POT64 FKysVHlF55970GjhOmYH9evAFuI1xCU4UeWr5JGw544KVXU1TmirX+epYdNqxfAb e2QVaAn7jMBBImLdkpQk+2F7EVN/8M9duUF7kGMH9QbfsTs9HwSqQLvl8BPuLNnU Z3ibW67x1XiPut3A3qpWfY21dxGQiYfAT8U6gAfhMqTswqfzw1kf8PxvNTVogLz1 KFzABtZG9HKfHw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:17:51 2025 by rpki-client