This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft File: u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json) Hash identifier: tz+IqaqpjjjQnXBWnf855GPXNZayhCE929c/ZFShdxQ= Subject key identifier: E8:9A:22:5C:C0:93:B0:E7:46:B8:97:95:64:5C:61:03:6D:87:91:80 Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Certificate serial: 019AF2AD911F79EA51C6306BAAE112A3F9AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft Manifest number: 0203 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=) 2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=) 3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=) 4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=) 5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: wpnb18Q+Hl0CvWzfXayUmbBzgDGGpE1kgjkAhG7xH/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:91:1f:79:ea:51:c6:30:6b:aa:e1:12:a3:f9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=e89a225cc093b0e746b89795645c61036d879180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:5c:02:bc:a1:5d:e8:dd:50:89:04:0a:d5: 63:4a:f9:34:00:f7:38:c3:1b:8e:2d:2c:be:99:99: b3:d3:e4:a0:64:75:9a:bc:5c:b6:e4:5b:e7:a8:11: 1f:5d:87:b4:73:39:87:1b:22:6b:55:9d:c1:cb:ac: a6:e4:1f:e8:b6:ec:28:8a:1e:2d:be:08:10:1d:64: 19:3f:f5:b0:25:08:ff:31:a7:d5:00:f1:d3:d8:ea: 24:00:c4:e4:60:22:b1:2c:8f:ad:fd:95:c1:b3:77: a9:29:bb:ec:af:f4:d0:86:8f:44:f6:59:a2:33:6e: 18:17:3d:4f:a8:be:e0:43:99:2a:83:16:62:31:1c: 2b:8d:1a:6a:ec:04:87:57:4e:2c:61:e6:1c:65:44: e7:e9:d9:5b:16:95:2c:4f:96:ed:09:f1:78:f1:0a: 0b:1b:61:37:06:27:ac:e2:ff:28:58:ae:15:6c:14: 87:39:30:41:17:53:8a:51:6e:00:69:9c:48:51:db: cc:9b:7b:62:7d:f7:4d:b4:25:08:fb:95:c5:f8:1a: de:47:aa:5f:36:d0:d9:23:41:80:92:a5:f1:e1:14: b6:03:f5:2a:cf:b2:64:a1:fd:3d:54:fe:ae:96:6a: 8f:10:8e:3f:69:14:15:65:95:71:bb:4c:72:fc:d4: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:22:5C:C0:93:B0:E7:46:B8:97:95:64:5C:61:03:6D:87:91:80 X509v3 Authority Key Identifier: keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:97:0c:19:82:d5:35:a2:ce:ed:85:b4:99:fe:d4:de:7a:61: 0d:b0:a0:40:f8:19:33:34:a6:ee:54:6d:58:8c:28:f1:95:c8: 4f:e7:8d:cd:37:08:3b:9a:0c:df:bf:a2:62:96:8f:bf:ce:ca: 90:38:95:72:d1:ad:c8:c3:72:e6:4d:8c:50:dc:e2:80:c6:38: 01:5d:c1:6f:6d:d7:ad:85:62:5c:e3:7f:37:9f:c4:49:d8:31: 8b:d9:d6:66:3a:e7:ce:ac:5b:0a:fa:bc:f2:8b:a3:17:35:f4: dc:ec:5d:26:ae:aa:4f:05:e6:3d:c3:82:36:ce:fb:b2:f3:aa: 35:05:82:aa:f9:94:23:c9:03:5e:08:13:4b:bf:d6:0d:cd:ea: a0:82:c3:40:66:24:71:9b:91:a2:03:fd:b3:d9:dd:3d:c1:1f: f5:10:fd:32:3c:f8:4e:ea:8b:cd:dd:29:7f:46:e8:d8:98:2e: 2d:3f:d5:ec:4a:7f:6b:c3:9c:db:42:90:e7:e4:7e:6a:ac:c1: 7e:6b:d7:b9:d6:35:9c:2f:78:9b:9a:ca:90:31:5e:d8:a2:2f: e9:9e:49:f0:4f:60:a9:af:11:4d:20:21:76:e1:93:31:dc:22: 21:ad:9d:22:ee:e5:3e:49:2a:df:f5:09:ba:ac:bd:23:bf:87: 6a:0b:7c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZEfeepRxjBrquESo/mtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli ZmIwNmQwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EyhlODlhMjI1Y2MwOTNiMGU3NDZiODk3OTU2NDVjNjEwMzZkODc5MTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5cAryhXejdUIkECtVjSvk0APc4 wxuOLSy+mZmz0+SgZHWavFy25FvnqBEfXYe0czmHGyJrVZ3By6ym5B/otuwoih4t vggQHWQZP/WwJQj/MafVAPHT2OokAMTkYCKxLI+t/ZXBs3epKbvsr/TQho9E9lmi M24YFz1PqL7gQ5kqgxZiMRwrjRpq7ASHV04sYeYcZUTn6dlbFpUsT5btCfF48QoL G2E3Bies4v8oWK4VbBSHOTBBF1OKUW4AaZxIUdvMm3tiffdNtCUI+5XF+BreR6pf NtDZI0GAkqXx4RS2A/Uqz7Jkof09VP6ulmqPEI4/aRQVZZVxu0xy/NQX3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiaIlzAk7DnRriXlWRcYQNth5GAMB8GA1UdIwQY MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt YjExOWMyNThjZmFkLzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZcMGYLV NaLO7YW0mf7U3nphDbCgQPgZMzSm7lRtWIwo8ZXIT+eNzTcIO5oM37+iYpaPv87K kDiVctGtyMNy5k2MUNzigMY4AV3Bb23XrYViXON/N5/ESdgxi9nWZjrnzqxbCvq8 8oujFzX03OxdJq6qTwXmPcOCNs77svOqNQWCqvmUI8kDXggTS7/WDc3qoILDQGYk cZuRogP9s9ndPcEf9RD9Mjz4TuqLzd0pf0bo2JguLT/V7Ep/a8Oc20KQ5+R+aqzB fmvXudY1nC94m5rKkDFe2KIv6Z5J8E9gqa8RTSAhduGTMdwiIa2dIu7lPkkq3/UJ uqy9I7+Hagt85w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:06 2025 by rpki-client