This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft File: lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json) Hash identifier: M6W1ur3hpvN78nMPAcPMDQcBBK6FMumwFxH4IqSpvtk= Subject key identifier: 1D:BE:3D:A6:7A:F6:58:F4:64:C6:F6:45:06:73:FA:3A:49:0D:F2:4D Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01 Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01 Certificate serial: 019AF23FE19AA596EA4FD6F3327FA619E113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft Manifest number: 140B Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: _zRJudFm9-SwIj8WqpSjxqhsHho.roa (hash: yl1VlGdcj3D0SfYe9bEEDXwIlAfQxRhpjuP7t/iSfW0=) 2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: 8ylx1OVorANzrNgdyOuwKvLvkGBhgOlMUMAJKwt4Nzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e1:9a:a5:96:ea:4f:d6:f3:32:7f:a6:19:e1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969326562af70e79f3d512488e290e92432d5a01 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=1dbe3da67af658f464c6f6450673fa3a490df24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:32:91:2c:a4:f1:45:84:a7:5e:e0:4f:bf: 23:41:52:5b:6b:e2:6b:e5:92:0a:96:af:80:ee:db: ce:e4:b3:14:92:ab:76:43:9c:21:11:5b:86:51:07: f6:07:91:ff:91:8e:74:4d:9d:c4:b1:05:0d:b9:dd: 4f:3b:81:7c:53:83:ff:bf:21:d1:d8:37:81:c5:f6: a5:8b:6b:6c:43:09:4c:2e:d4:c8:62:20:63:f0:b1: 28:f3:1a:9a:ee:e5:36:7d:8b:be:65:76:47:23:91: dd:66:89:3d:22:9a:5f:ea:ed:f9:c4:a0:1c:32:7b: 6d:68:93:64:36:4a:e8:b3:12:d6:d7:bb:51:8d:94: f7:22:47:6e:38:a9:13:a7:3c:20:f7:d1:e0:31:b8: 57:a4:c4:f3:62:c5:54:93:5b:2a:df:a6:ee:7a:fa: e2:a9:29:3b:37:20:39:bc:56:ff:69:26:29:00:48: a3:64:68:e7:92:9c:72:3f:e9:76:83:70:b8:3a:57: 8d:3d:88:b5:5d:7b:d1:3d:85:1b:9f:0f:56:96:d4: 7d:35:4e:78:fe:34:d1:40:78:67:1f:c4:06:50:6d: 6c:cb:aa:c0:c0:e5:df:23:25:d8:17:60:c3:be:7b: a5:f3:44:a9:c7:54:23:ab:b2:69:9c:a9:76:86:3f: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BE:3D:A6:7A:F6:58:F4:64:C6:F6:45:06:73:FA:3A:49:0D:F2:4D X509v3 Authority Key Identifier: keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:89:fc:51:8e:04:ca:51:49:35:a9:81:d1:49:d4:d0:39:86: 66:20:ec:e7:67:1b:fa:12:09:89:9a:3f:f9:2d:90:85:f0:ff: 1c:cb:59:f4:50:bf:14:11:36:b9:12:2c:a1:0b:24:3c:8d:c7: 31:ab:35:ba:6a:f9:e8:3f:76:2b:14:1f:14:14:76:55:c2:68: 59:47:49:64:3c:ab:d5:4d:87:13:93:b6:4b:25:fe:af:70:25: 2b:36:c7:61:bd:54:81:0e:34:72:88:f8:a0:33:ac:62:93:5a: 0e:ac:ec:d5:a3:bf:52:75:69:54:ba:e1:b1:29:33:31:e5:47: 1d:88:bc:f7:9c:ec:db:f5:12:e7:66:bd:b2:39:33:d6:81:65: 6b:ea:81:c4:90:a2:57:df:77:e4:38:09:02:82:a5:ab:8c:8b: 2e:5c:66:f3:49:0a:cb:f5:a1:5c:76:af:9b:5f:d9:c2:72:ca: 31:10:84:b1:0a:bd:20:9b:fa:bb:b1:b3:eb:72:e9:47:79:dd: 49:c2:45:13:f7:38:4b:ad:31:15:68:d3:bd:dd:b2:43:55:e8: bb:76:52:b3:41:89:3c:8f:f6:58:d4:47:18:6a:9b:c0:33:2f: 53:e1:fb:d3:fc:5c:92:d4:43:a7:ee:11:e7:6f:fc:df:db:91: e5:39:b4:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+GapZbqT9bzMn+mGeETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OTMyNjU2MmFmNzBlNzlmM2Q1MTI0ODhlMjkwZTkyNDMy ZDVhMDEwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EygxZGJlM2RhNjdhZjY1OGY0NjRjNmY2NDUwNjczZmEzYTQ5MGRmMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkcykSyk8UWEp17gT78jQVJba+Jr 5ZIKlq+A7tvO5LMUkqt2Q5whEVuGUQf2B5H/kY50TZ3EsQUNud1PO4F8U4P/vyHR 2DeBxfali2tsQwlMLtTIYiBj8LEo8xqa7uU2fYu+ZXZHI5HdZok9Ippf6u35xKAc MnttaJNkNkrosxLW17tRjZT3IkduOKkTpzwg99HgMbhXpMTzYsVUk1sq36buevri qSk7NyA5vFb/aSYpAEijZGjnkpxyP+l2g3C4OleNPYi1XXvRPYUbnw9WltR9NU54 /jTRQHhnH8QGUG1sy6rAwOXfIyXYF2DDvnul80Spx1Qjq7JpnKl2hj9RMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2+PaZ69lj0ZMb2RQZz+jpJDfJNMB8GA1UdIwQY MBaAFJaTJlYq9w5589USSI4pDpJDLVoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMt OTQ5YjkxZTlmNDhkLzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMtOTQ5YjkxZTlmNDhk LzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIn8UY4E ylFJNamB0UnU0DmGZiDs52cb+hIJiZo/+S2QhfD/HMtZ9FC/FBE2uRIsoQskPI3H Mas1umr56D92KxQfFBR2VcJoWUdJZDyr1U2HE5O2SyX+r3AlKzbHYb1UgQ40coj4 oDOsYpNaDqzs1aO/UnVpVLrhsSkzMeVHHYi895zs2/US52a9sjkz1oFla+qBxJCi V9935DgJAoKlq4yLLlxm80kKy/WhXHavm1/ZwnLKMRCEsQq9IJv6u7Gz63LpR3nd ScJFE/c4S60xFWjTvd2yQ1Xou3ZSs0GJPI/2WNRHGGqbwDMvU+H70/xcktRDp+4R 52/839uR5Tm09Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:46 2025 by rpki-client