This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json) Hash identifier: dv2SI9urawwFEqgLBw1ZDF/R0Q1mGn65do3jLy29dAA= Subject key identifier: C7:89:AE:CF:FD:0A:52:71:55:1B:60:4F:1B:A8:06:04:38:DA:95:91 Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed Certificate serial: 019AF23FD4A10F31A63F58D1FC52F2DA91AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: IldnESVb5YAXRybajnGx4ZHkjvs.roa (hash: Z7vt2Bz5Xlx6ZNjSBTF37CVzL/JzsawDeZyWyaF9i1k=) 2: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: 5GSVsJMtuka7rYoUPH9oSIH73UXHNSpr2fV2pvrtO2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:a1:0f:31:a6:3f:58:d1:fc:52:f2:da:91:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=c789aecffd0a5271551b604f1ba8060438da9591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:0b:70:b9:b7:d7:2b:76:2e:de:9f:5b:61: 4f:ba:98:9f:de:fe:b3:dc:60:9c:c1:ef:02:d0:e5: f0:2d:08:19:06:d0:99:a9:9c:2a:6c:44:e6:7a:b7: 21:fd:94:a2:90:6b:bd:e1:c4:b1:b1:54:5e:54:49: 00:c8:1f:cd:f3:94:da:c2:c3:ed:10:cf:af:8e:54: fd:67:e9:30:0f:d2:06:34:a8:5d:c3:c0:4d:af:51: 33:c7:4d:19:5d:b2:e9:0d:a2:a4:30:7d:8a:4a:7d: 19:2a:69:69:a4:3a:84:69:3c:44:2a:fe:82:e8:ec: 57:28:bc:c0:63:5c:9e:8c:da:d3:61:4e:30:a8:b8: 9e:c7:cb:00:2c:8e:c4:98:14:2e:51:43:9a:15:96: f5:0d:35:3d:42:e3:21:aa:01:fd:df:be:14:fa:8f: 88:43:a4:49:d5:e6:ee:ac:0b:0e:4d:70:d8:6f:a2: 9b:c6:52:33:32:88:ca:65:a2:51:9e:6a:01:86:92: 7b:89:73:1f:00:6f:38:3e:d2:96:7c:7e:17:5e:c6: d2:fb:24:ac:fd:1c:f1:3a:a1:4c:05:69:d0:7f:16: 3f:35:7b:23:d0:16:7f:6c:df:8f:fa:3d:7a:57:21: 9a:93:8a:54:b5:b0:84:7b:95:d8:35:8d:a9:9c:69: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:AE:CF:FD:0A:52:71:55:1B:60:4F:1B:A8:06:04:38:DA:95:91 X509v3 Authority Key Identifier: keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:45:f2:38:79:80:08:fa:1a:af:c2:ba:ae:f2:ab:84:83:8b: 88:e6:7f:c3:04:9b:e8:77:33:c2:a6:3b:27:d1:19:02:4c:31: 35:33:c1:a2:24:76:02:74:8d:c1:9a:68:37:89:8f:c4:52:dc: 6b:a6:cd:ad:84:4e:21:48:95:7a:bb:e1:42:c0:f1:34:e2:c8: 50:d9:2b:66:30:d0:8b:eb:65:cd:98:48:ca:b5:ed:04:a0:47: 39:1f:8f:a0:d8:da:f6:72:4e:6b:04:3d:7d:6b:63:0b:b8:a8: bf:98:b3:10:1e:e9:08:bb:40:83:09:af:6b:f2:f8:08:fc:77: cb:c7:bc:41:50:c6:17:57:32:e5:2e:4b:1d:88:2a:0a:3e:9c: 29:ed:f1:36:b7:6d:c0:11:77:0d:87:85:33:dc:6c:59:63:f4: 18:4a:af:36:dd:15:19:89:9c:c4:2a:28:42:c2:ad:81:cd:df: 97:c9:a9:dc:85:b5:33:55:08:00:78:d5:60:1b:d9:65:99:84: c6:33:d3:fb:54:83:64:b7:30:3c:e9:42:02:bd:53:96:85:fd: 6d:40:7d:c8:cf:6d:61:4a:40:eb:49:d7:72:3c:83:3b:55:f5: 2a:33:63:2e:ce:ba:d6:4a:e9:48:a2:6a:80:c5:f4:cb:38:eb: 1e:7f:94:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9ShDzGmP1jR/FLy2pGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNTcxZDY4OGFhNTAzYTJlNTY2YmJjODc2ZGYwYmE0NTVj NTc3ZWQwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhjNzg5YWVjZmZkMGE1MjcxNTUxYjYwNGYxYmE4MDYwNDM4ZGE5NTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ULcLm31yt2Lt6fW2FPupif3v6z 3GCcwe8C0OXwLQgZBtCZqZwqbETmerch/ZSikGu94cSxsVReVEkAyB/N85TawsPt EM+vjlT9Z+kwD9IGNKhdw8BNr1Ezx00ZXbLpDaKkMH2KSn0ZKmlppDqEaTxEKv6C 6OxXKLzAY1yejNrTYU4wqLiex8sALI7EmBQuUUOaFZb1DTU9QuMhqgH9374U+o+I Q6RJ1eburAsOTXDYb6KbxlIzMojKZaJRnmoBhpJ7iXMfAG84PtKWfH4XXsbS+ySs /RzxOqFMBWnQfxY/NXsj0BZ/bN+P+j16VyGak4pUtbCEe5XYNY2pnGnVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeJrs/9ClJxVRtgTxuoBgQ42pWRMB8GA1UdIwQY MBaAFCxXHWiKpQOi5Wa7yHbfC6RVxXftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82M2ViNDItYTBlMS00ZjFjLWJjYzkt ODc1MjQwMTRkYmZiLzEvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82M2ViNDItYTBlMS00ZjFjLWJjYzktODc1MjQwMTRkYmZi LzEvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkXyOHmA CPoar8K6rvKrhIOLiOZ/wwSb6HczwqY7J9EZAkwxNTPBoiR2AnSNwZpoN4mPxFLc a6bNrYROIUiVervhQsDxNOLIUNkrZjDQi+tlzZhIyrXtBKBHOR+PoNja9nJOawQ9 fWtjC7iov5izEB7pCLtAgwmva/L4CPx3y8e8QVDGF1cy5S5LHYgqCj6cKe3xNrdt wBF3DYeFM9xsWWP0GEqvNt0VGYmcxCooQsKtgc3fl8mp3IW1M1UIAHjVYBvZZZmE xjPT+1SDZLcwPOlCAr1TloX9bUB9yM9tYUpA60nXcjyDO1X1KjNjLs661krpSKJq gMX0yzjrHn+U0w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:30 2025 by rpki-client