This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json) Hash identifier: pQyzbeqDIJK3HjmyuKCnadUgQo3Jm8m6zn3zYC+aYIg= Subject key identifier: 59:52:16:C3:1C:69:EA:15:32:EB:4E:32:3C:89:58:02:59:B1:70:80 Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Certificate serial: 019AF20951487968B4494E04E647C9C97232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=) 2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: c7AVPd0N8GwpJliRIKu/pkM/csyNb5KLPEqfXQ6TtjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:51:48:79:68:b4:49:4e:04:e6:47:c9:c9:72:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=595216c31c69ea1532eb4e323c89580259b17080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:6e:3b:1f:ae:51:2f:8d:b7:9e:38:d2:c1: 27:82:ca:b2:e8:bd:11:44:a1:da:84:77:8f:cf:2a: 6e:6f:27:c6:17:53:82:ce:4c:58:76:98:92:65:fc: c0:32:dd:a0:ad:2b:18:f5:73:c2:0b:45:a9:36:30: 07:5e:d6:6d:c8:a0:27:7d:74:18:fb:ee:4c:9b:24: be:b0:43:b0:62:d4:54:b5:a3:b8:41:46:50:43:50: 04:7b:36:96:cd:11:74:49:62:d7:11:14:b4:22:a1: 4e:db:a6:61:99:e5:f0:7c:64:f0:93:f7:0f:8d:bb: 6c:83:4e:5f:b4:79:54:8e:6a:6f:c7:4e:99:7b:ca: 40:98:a3:3c:08:1a:92:39:44:46:18:8c:45:8c:7a: 3a:54:c0:18:01:88:92:eb:6a:8d:fc:2c:cc:f6:e0: da:02:4a:77:b9:85:74:e1:97:5a:a3:62:95:25:a4: ba:90:d3:a2:e9:5f:0d:35:5a:86:55:f2:eb:16:ce: ea:48:e8:91:66:ab:64:3d:f7:f0:23:a0:db:33:54: 33:ab:06:20:f3:59:c3:db:e3:82:85:ae:f8:8b:18: ec:ff:ad:cb:fc:6f:b6:ff:38:5b:37:fd:d8:c1:76: 8f:46:88:93:5c:57:82:d1:76:74:39:6b:2b:4f:b6: 2d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:16:C3:1C:69:EA:15:32:EB:4E:32:3C:89:58:02:59:B1:70:80 X509v3 Authority Key Identifier: keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:68:e9:ff:39:e8:25:83:ea:d8:e4:92:71:b0:16:11:f4:78: 60:a9:56:5d:f0:77:9d:5e:a3:e5:a2:a0:14:75:a6:a2:1b:cd: 33:de:e6:7e:e2:ff:82:f9:18:16:4c:ce:55:6f:ac:6d:01:69: 4e:d8:39:d1:6d:ca:62:de:96:03:cb:bd:36:fa:29:d1:51:a7: 54:f3:d8:90:4a:b5:1c:93:52:27:8c:5f:2a:6d:ff:6d:31:dc: f2:eb:d7:88:1e:83:b8:f2:93:03:d8:7f:2e:16:da:b4:ef:6a: d7:d2:be:65:e9:34:15:76:04:c2:05:04:5c:55:4a:20:a9:43: 78:98:40:10:3a:41:4f:8e:ca:df:1c:fa:df:57:88:1e:96:73: 7d:7d:dc:0c:5f:22:2d:12:4f:13:29:9c:24:35:1d:38:ed:e9: 79:b4:f7:83:15:20:19:98:da:be:04:25:e0:12:f2:a2:b5:25: d6:60:24:2f:ae:12:83:e2:1a:b9:8a:4c:9b:6a:af:45:d6:c2: b9:7a:49:72:c8:51:43:7c:af:a3:7d:25:3e:40:bf:1a:93:68: 2b:ca:41:8d:c2:0d:98:0e:3f:f8:b8:0d:d9:42:d9:ae:80:ea: a1:52:08:99:5c:81:87:c7:68:06:d8:68:60:4d:9d:84:34:e9: 19:17:bf:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVFIeWi0SU4E5kfJyXIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk Mjc5YWIwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD Eyg1OTUyMTZjMzFjNjllYTE1MzJlYjRlMzIzYzg5NTgwMjU5YjE3MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yJuOx+uUS+Nt5440sEngsqy6L0R RKHahHePzypubyfGF1OCzkxYdpiSZfzAMt2grSsY9XPCC0WpNjAHXtZtyKAnfXQY ++5MmyS+sEOwYtRUtaO4QUZQQ1AEezaWzRF0SWLXERS0IqFO26ZhmeXwfGTwk/cP jbtsg05ftHlUjmpvx06Ze8pAmKM8CBqSOURGGIxFjHo6VMAYAYiS62qN/CzM9uDa Akp3uYV04Zdao2KVJaS6kNOi6V8NNVqGVfLrFs7qSOiRZqtkPffwI6DbM1QzqwYg 81nD2+OCha74ixjs/63L/G+2/zhbN/3YwXaPRoiTXFeC0XZ0OWsrT7YtOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlSFsMcaeoVMutOMjyJWAJZsXCAMB8GA1UdIwQY MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt YWU4YjhkNzg4NzAwLzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWjp/zno JYPq2OSScbAWEfR4YKlWXfB3nV6j5aKgFHWmohvNM97mfuL/gvkYFkzOVW+sbQFp Ttg50W3KYt6WA8u9Nvop0VGnVPPYkEq1HJNSJ4xfKm3/bTHc8uvXiB6DuPKTA9h/ LhbatO9q19K+Zek0FXYEwgUEXFVKIKlDeJhAEDpBT47K3xz631eIHpZzfX3cDF8i LRJPEymcJDUdOO3pebT3gxUgGZjavgQl4BLyorUl1mAkL64Sg+IauYpMm2qvRdbC uXpJcshRQ3yvo30lPkC/GpNoK8pBjcINmA4/+LgN2ULZroDqoVIImVyBh8doBtho YE2dhDTpGRe/gg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:26 2025 by rpki-client