This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json) Hash identifier: Ypw3y1oe7pmF3D65rNDOfkGRV6rsd9O93KivbEXqmyY= Subject key identifier: 96:53:03:2A:53:89:45:56:ED:85:06:9C:66:E5:48:3D:D1:1F:C7:41 Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82 Certificate serial: 019B3268B71B898A8972BBFDAC83A3CCE8FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft Manifest number: 0312 Signing time: Thu 18 Dec 2025 17:01:21 +0000 Manifest this update: Thu 18 Dec 2025 17:01:21 +0000 Manifest next update: Fri 19 Dec 2025 17:01:21 +0000 Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=) 2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: JIRM8xP/yuUJN8StmhL8wMSlPPjG6HIljwlmQnSMQOU=) 3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:b7:1b:89:8a:89:72:bb:fd:ac:83:a3:cc:e8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82 Validity Not Before: Dec 18 17:01:21 2025 GMT Not After : Dec 19 17:01:21 2025 GMT Subject: CN=9653032a53894556ed85069c66e5483dd11fc741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:32:c7:5d:22:66:c0:db:76:80:3b:9f:f9: 8d:21:04:47:d6:b1:55:5f:5c:d5:18:cc:70:69:33: 3a:0d:c0:17:b7:15:76:d6:c0:5c:b7:7b:90:24:e9: 9d:42:e3:77:eb:4b:43:1b:0e:57:95:03:62:cc:cb: d3:27:69:18:23:6f:0b:0b:53:4c:be:2e:ee:4a:fc: e9:96:83:8b:9a:b6:1f:6b:bc:68:0d:6d:85:67:f8: 5f:d4:dc:6a:2d:5b:26:76:04:eb:e6:53:cf:dc:84: 66:3a:e3:8f:98:c4:e2:6c:b4:e9:91:b9:89:60:88: e1:59:2c:87:03:e5:e7:e8:81:2f:8f:e5:a6:95:f3: b3:b8:bc:31:e5:77:e6:3a:0f:20:ad:3c:9e:36:ee: 84:04:8a:b8:7d:87:20:50:41:5e:9d:b0:92:51:9b: e4:9e:4b:d6:24:48:3a:bb:ea:6d:d7:9c:53:47:3e: 47:41:94:e1:b3:2f:d9:0a:5f:fe:3c:c3:a4:37:2c: 79:db:a6:b4:64:11:9b:db:e4:60:bb:08:88:80:f1: f8:e7:ef:c7:ca:02:39:7c:ec:d3:9d:44:a0:4b:5f: fc:5b:e6:4e:23:10:99:7d:6d:dd:ac:30:61:47:58: 4f:6c:a7:5a:9f:5b:69:4f:e9:92:e0:de:4d:27:0a: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:03:2A:53:89:45:56:ED:85:06:9C:66:E5:48:3D:D1:1F:C7:41 X509v3 Authority Key Identifier: keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:29:9b:1f:bc:ad:c5:bc:ec:5e:c0:64:b5:8b:a0:d5:5c:91: 65:3f:bc:c2:67:c2:9e:f9:db:2f:4b:12:b4:26:50:e9:a3:9d: e9:f0:4c:a7:51:4a:bb:4d:16:aa:81:46:b1:36:3a:2e:31:3d: 47:50:f1:7c:8e:23:64:d3:ce:a3:44:b2:8e:d4:71:ba:dc:c6: fe:e8:1d:45:02:37:33:41:29:4e:90:55:88:40:75:01:fe:a5: fc:b1:af:d2:53:51:3c:58:61:10:f3:8a:36:d8:83:ec:d7:c0: e9:95:72:4b:94:d2:a2:50:bf:bf:af:0b:b3:d2:a1:e3:4b:ab: ea:85:81:21:f6:9d:b8:9c:b0:57:c9:b8:0a:bd:67:e8:43:b5: ed:99:52:49:0d:e7:59:bf:1b:68:e2:86:f7:49:e5:a0:42:cf: 5b:a0:3c:2f:19:6d:da:f7:60:5d:af:9f:a5:34:fd:77:ae:e9: 48:33:22:6b:cd:b0:f4:36:3a:49:e6:37:b9:fb:b9:66:d6:84: c7:9a:58:0c:c8:1a:95:90:a4:c6:e7:8e:4a:1c:4e:97:10:c9: da:16:3a:4e:ee:7a:b7:85:f6:3c:89:fe:88:52:96:0e:94:f8: 4a:e9:9d:52:96:48:68:30:1c:3a:90:15:15:65:eb:4c:4c:b9: 4c:66:14:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaLcbiYqJcrv9rIOjzOj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0 ZWZhODIwHhcNMjUxMjE4MTcwMTIxWhcNMjUxMjE5MTcwMTIxWjAzMTEwLwYDVQQD Eyg5NjUzMDMyYTUzODk0NTU2ZWQ4NTA2OWM2NmU1NDgzZGQxMWZjNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO0yx10iZsDbdoA7n/mNIQRH1rFV X1zVGMxwaTM6DcAXtxV21sBct3uQJOmdQuN360tDGw5XlQNizMvTJ2kYI28LC1NM vi7uSvzploOLmrYfa7xoDW2FZ/hf1NxqLVsmdgTr5lPP3IRmOuOPmMTibLTpkbmJ YIjhWSyHA+Xn6IEvj+WmlfOzuLwx5XfmOg8grTyeNu6EBIq4fYcgUEFenbCSUZvk nkvWJEg6u+pt15xTRz5HQZThsy/ZCl/+PMOkNyx526a0ZBGb2+RguwiIgPH45+/H ygI5fOzTnUSgS1/8W+ZOIxCZfW3drDBhR1hPbKdan1tpT+mS4N5NJwqHXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZTAypTiUVW7YUGnGblSD3RH8dBMB8GA1UdIwQY MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt MTE1NzVkYjY0ZmJlLzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSmbH7yt xbzsXsBktYug1VyRZT+8wmfCnvnbL0sStCZQ6aOd6fBMp1FKu00WqoFGsTY6LjE9 R1DxfI4jZNPOo0SyjtRxutzG/ugdRQI3M0EpTpBViEB1Af6l/LGv0lNRPFhhEPOK NtiD7NfA6ZVyS5TSolC/v68Ls9Kh40ur6oWBIfaduJywV8m4Cr1n6EO17ZlSSQ3n Wb8baOKG90nloELPW6A8Lxlt2vdgXa+fpTT9d67pSDMia82w9DY6SeY3ufu5ZtaE x5pYDMgalZCkxueOShxOlxDJ2hY6Tu56t4X2PIn+iFKWDpT4SumdUpZIaDAcOpAV FWXrTEy5TGYUyg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:31 2025 by rpki-client