This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json) Hash identifier: V7kM23F7yItmdUR0fjYcPJVrqhSAuOlA2yCWnRdqySs= Subject key identifier: 75:AC:58:0E:8E:13:D6:27:7B:77:3C:36:6C:79:10:16:62:AB:0C:BC Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81 Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581 Certificate serial: 019AF31B2BB6A3423590176ADD3B74984D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft Manifest number: 1400 Signing time: Sat 06 Dec 2025 10:00:35 +0000 Manifest this update: Sat 06 Dec 2025 10:00:35 +0000 Manifest next update: Sun 07 Dec 2025 10:00:35 +0000 Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: 1iPhb860gZ4WQ1ByyHq+ZmQqkcFjPhYHcsA6w3jpCM8=) 2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2b:b6:a3:42:35:90:17:6a:dd:3b:74:98:4d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581 Validity Not Before: Dec 6 10:00:35 2025 GMT Not After : Dec 7 10:00:35 2025 GMT Subject: CN=75ac580e8e13d6277b773c366c79101662ab0cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:37:26:1c:37:4d:0b:53:f2:d7:0e:1d:07: d4:32:b2:dd:e2:15:24:62:7f:6e:c2:ee:f9:42:e3: 85:3c:4f:96:42:13:26:56:6f:04:ef:7a:ff:c1:a7: 66:18:0f:3d:1b:0c:eb:c0:74:13:e8:e7:e9:b0:2c: a0:23:0c:bd:ed:26:f3:31:92:01:01:c4:31:e2:f9: a3:77:6b:1c:4a:0f:bf:86:c1:41:a0:3e:1c:88:8d: c6:f2:54:9d:fa:99:c8:e0:e3:c1:99:4b:ec:70:20: ed:f5:fa:2f:20:5b:86:c5:a1:d3:b1:55:6a:3c:4d: c8:e4:84:63:dc:f8:1d:a0:ee:51:02:f7:cc:06:19: 88:e3:b5:38:fe:16:1b:b3:f0:11:48:9f:6e:0a:de: f6:93:f5:2a:f0:5e:8a:a8:8d:38:c0:62:87:3b:2f: e9:b8:68:77:b6:41:6a:9a:d8:32:03:39:00:3f:60: df:c9:fa:4a:fa:6f:cf:53:34:ed:ca:b3:8f:f7:84: b3:0a:7b:47:90:52:89:0e:7c:62:41:6e:2e:2a:45: 76:98:85:c6:a8:eb:8c:cc:78:a8:98:8e:30:50:80: 7c:03:ab:9b:35:b0:22:dd:b0:1c:29:67:a7:9a:6f: d0:1b:50:d7:3c:30:d4:10:0d:7d:26:cc:bd:e6:47: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AC:58:0E:8E:13:D6:27:7B:77:3C:36:6C:79:10:16:62:AB:0C:BC X509v3 Authority Key Identifier: keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:bb:bc:e8:d0:6b:a9:60:38:55:a2:02:cd:9a:dd:cc:d0: 32:2e:30:95:58:90:cb:51:b4:3c:20:71:6f:cb:b3:24:9f:f0: 39:ff:cc:5b:ab:71:04:38:11:be:94:59:f2:e3:d5:2f:9d:22: f5:90:c5:7d:53:5e:fd:47:ae:07:d6:8d:db:40:b6:40:8e:c3: 0d:86:2a:d4:cf:75:c2:63:24:00:1b:43:c9:1d:ef:92:95:26: 91:0f:d2:3c:65:ed:91:b8:1c:c6:b0:fd:05:c9:df:c9:79:af: cd:23:28:e1:a4:1d:d3:1e:8f:cb:4e:95:3c:99:fe:21:fc:da: 0d:4d:04:f9:26:29:bd:26:bd:6e:10:c2:d8:f3:60:bc:62:b9: 41:7d:a6:14:fb:29:83:d4:ae:48:f2:ba:bc:24:53:e5:d2:34: ea:e7:be:81:14:e9:98:29:67:e8:94:1c:21:5a:95:7f:7d:b9: c7:96:a3:b5:b6:f9:40:22:b9:87:0a:8c:71:0b:cf:fc:5d:02: 72:1e:b0:90:be:0d:0d:11:38:2e:92:58:aa:02:c2:60:95:1b: 77:a4:a8:00:e9:ae:98:5a:c2:4a:2a:d1:60:23:2e:1a:59:81: 5d:62:c0:ec:a6:f5:d5:d8:c0:b0:c9:5d:bc:64:ed:35:59:f0: b4:ec:50:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyu2o0I1kBdq3Tt0mE0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh MDI1ODEwHhcNMjUxMjA2MTAwMDM1WhcNMjUxMjA3MTAwMDM1WjAzMTEwLwYDVQQD Eyg3NWFjNTgwZThlMTNkNjI3N2I3NzNjMzY2Yzc5MTAxNjYyYWIwY2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiY3Jhw3TQtT8tcOHQfUMrLd4hUk Yn9uwu75QuOFPE+WQhMmVm8E73r/wadmGA89GwzrwHQT6OfpsCygIwy97SbzMZIB AcQx4vmjd2scSg+/hsFBoD4ciI3G8lSd+pnI4OPBmUvscCDt9fovIFuGxaHTsVVq PE3I5IRj3PgdoO5RAvfMBhmI47U4/hYbs/ARSJ9uCt72k/Uq8F6KqI04wGKHOy/p uGh3tkFqmtgyAzkAP2DfyfpK+m/PUzTtyrOP94SzCntHkFKJDnxiQW4uKkV2mIXG qOuMzHiomI4wUIB8A6ubNbAi3bAcKWenmm/QG1DXPDDUEA19Jsy95kdAVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWsWA6OE9Yne3c8Nmx5EBZiqwy8MB8GA1UdIwQY MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8W7vOjQ a6lgOFWiAs2a3czQMi4wlViQy1G0PCBxb8uzJJ/wOf/MW6txBDgRvpRZ8uPVL50i 9ZDFfVNe/UeuB9aN20C2QI7DDYYq1M91wmMkABtDyR3vkpUmkQ/SPGXtkbgcxrD9 BcnfyXmvzSMo4aQd0x6Py06VPJn+IfzaDU0E+SYpvSa9bhDC2PNgvGK5QX2mFPsp g9SuSPK6vCRT5dI06ue+gRTpmCln6JQcIVqVf325x5ajtbb5QCK5hwqMcQvP/F0C ch6wkL4NDRE4LpJYqgLCYJUbd6SoAOmumFrCSirRYCMuGlmBXWLA7Kb11djAsMld vGTtNVnwtOxQBA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:11 2025 by rpki-client