This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json) Hash identifier: c9mpu+Ec2zjWlc64+b5fGPp//K9BPKbLR8b866IhabY= Subject key identifier: AA:C8:0C:DB:F5:DC:7A:2C:B7:53:4A:F7:EE:69:5D:7F:18:77:97:4D Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Certificate serial: 019AF4659AA728DDDFC3C9A54A726B1FCCE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 16:01:30 +0000 Manifest this update: Sat 06 Dec 2025 16:01:30 +0000 Manifest next update: Sun 07 Dec 2025 16:01:30 +0000 Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=) 2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=) 3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: gWB6mvqM815zSirJYtAAFjSY7fIDjYDugl1VsWFDziw=) 4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9a:a7:28:dd:df:c3:c9:a5:4a:72:6b:1f:cc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Validity Not Before: Dec 6 16:01:30 2025 GMT Not After : Dec 7 16:01:30 2025 GMT Subject: CN=aac80cdbf5dc7a2cb7534af7ee695d7f1877974d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:94:e3:a0:55:28:48:aa:70:d6:d1:b9:97: 6b:fd:97:4d:1f:2b:1c:78:31:be:aa:ca:28:d4:e5: 70:9b:3a:bd:7a:f8:2d:ba:bf:e8:ef:39:7c:cc:a8: c3:55:1d:72:e2:af:c7:35:3e:75:03:98:72:bc:b9: 5c:7e:c3:0a:95:6f:84:30:a3:59:4e:61:ff:d6:2c: 18:f6:fb:57:92:86:38:96:d1:fe:12:c5:13:c8:18: d2:48:ae:03:bf:ad:82:57:b9:a1:a1:b9:83:29:f2: 32:3d:78:d7:2a:91:f4:8f:2e:cb:7f:41:a6:88:d4: ba:82:bb:47:f3:f7:4e:55:68:4b:57:74:85:95:19: bc:8c:a0:cf:9e:f1:cf:f7:24:3b:54:8f:7b:bc:ed: cc:bf:cf:61:c9:ab:cf:91:fe:56:3e:aa:e1:6f:6c: db:0b:75:8c:ed:e9:9b:3a:b9:19:a8:60:8f:27:3b: 87:d2:fc:4f:ad:cd:58:2b:9a:88:c8:85:d7:67:81: f2:06:bc:7b:73:3b:11:6e:2b:c5:cf:b5:25:1d:31: 72:3f:5c:90:87:7d:af:be:3b:fd:81:34:ba:a2:b2: 93:bf:d7:43:7c:06:f2:cb:0d:0b:22:c5:71:f9:88: f8:f5:78:a6:6d:7d:f0:06:a5:d0:17:b4:f0:82:a6: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C8:0C:DB:F5:DC:7A:2C:B7:53:4A:F7:EE:69:5D:7F:18:77:97:4D X509v3 Authority Key Identifier: keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:3b:97:18:e4:b1:e1:1f:2e:81:bc:dc:7e:f4:c5:cd:7b: 41:0c:eb:c3:46:eb:a7:0d:2d:84:be:06:84:62:d6:97:a3:92: cc:e5:b8:b9:2b:d5:9c:7d:35:03:fe:14:37:ff:21:83:15:d3: 87:b0:95:05:60:7d:12:07:5a:5e:e6:78:bf:30:76:21:d2:19: 00:b0:1d:39:79:81:59:3b:88:3b:6b:2f:e4:bc:9e:79:e3:b8: de:8b:68:fb:94:f8:cd:6e:e6:98:8c:67:4e:74:73:ae:36:4b: 91:c3:f6:d1:df:84:20:57:6b:f7:ba:9f:bb:70:28:fe:39:4c: 38:7f:36:f9:61:2e:56:47:53:73:69:d9:c5:6c:f2:11:27:d8: 7a:d2:0b:cc:05:04:5b:08:3d:ad:31:2a:02:ab:71:9f:dc:95: 75:32:36:73:fc:78:17:8f:fa:9e:6c:e3:ee:62:7b:d7:ff:2f: 61:8b:e1:53:18:3f:cd:c0:e9:17:bf:f8:0a:77:9e:71:bf:8a: aa:af:d1:44:42:2c:f1:93:85:3c:39:d7:17:c1:40:ee:c6:8b: d8:12:df:f7:3e:d4:2c:7f:07:24:43:97:4f:02:73:0d:8a:bf: ef:79:e1:be:ec:a4:b1:6f:5e:b2:43:5d:d6:c6:fb:06:ac:67: 43:5d:27:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZqnKN3fw8mlSnJrH8zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1 MzI1ZGYwHhcNMjUxMjA2MTYwMTMwWhcNMjUxMjA3MTYwMTMwWjAzMTEwLwYDVQQD EyhhYWM4MGNkYmY1ZGM3YTJjYjc1MzRhZjdlZTY5NWQ3ZjE4Nzc5NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodCU46BVKEiqcNbRuZdr/ZdNHysc eDG+qsoo1OVwmzq9evgtur/o7zl8zKjDVR1y4q/HNT51A5hyvLlcfsMKlW+EMKNZ TmH/1iwY9vtXkoY4ltH+EsUTyBjSSK4Dv62CV7mhobmDKfIyPXjXKpH0jy7Lf0Gm iNS6grtH8/dOVWhLV3SFlRm8jKDPnvHP9yQ7VI97vO3Mv89hyavPkf5WPqrhb2zb C3WM7embOrkZqGCPJzuH0vxPrc1YK5qIyIXXZ4HyBrx7czsRbivFz7UlHTFyP1yQ h32vvjv9gTS6orKTv9dDfAbyyw0LIsVx+Yj49XimbX3wBqXQF7TwgqaBFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrIDNv13Host1NK9+5pXX8Yd5dNMB8GA1UdIwQY MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt OGRkODFlNGIzZTMzLzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFU7lxjk seEfLoG83H70xc17QQzrw0brpw0thL4GhGLWl6OSzOW4uSvVnH01A/4UN/8hgxXT h7CVBWB9EgdaXuZ4vzB2IdIZALAdOXmBWTuIO2sv5LyeeeO43oto+5T4zW7mmIxn TnRzrjZLkcP20d+EIFdr97qfu3Ao/jlMOH82+WEuVkdTc2nZxWzyESfYetILzAUE Wwg9rTEqAqtxn9yVdTI2c/x4F4/6nmzj7mJ71/8vYYvhUxg/zcDpF7/4Cneecb+K qq/RREIs8ZOFPDnXF8FA7saL2BLf9z7ULH8HJEOXTwJzDYq/73nhvuyksW9eskNd 1sb7BqxnQ10nNg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:02 2025 by rpki-client