This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json) Hash identifier: CQwymaQMwmtaPv8ImqegFHC+JnLZwZbbpY+o/DYzDFE= Subject key identifier: 9D:B4:C5:A6:18:9D:B3:31:84:29:FD:3C:E6:03:87:25:11:B8:BD:18 Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8 Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8 Certificate serial: 019AF1D1B1E64A280B68DD2F29D296A7854B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft Manifest number: 1331 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: ZsCz1keD9QJ1me1iJgSHjt0KdaUkd260A37OTXUxRK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b1:e6:4a:28:0b:68:dd:2f:29:d2:96:a7:85:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=9db4c5a6189db3318429fd3ce603872511b8bd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:71:ad:65:7b:04:1f:15:26:81:c6:cb:40: 87:45:39:a1:cd:42:38:ee:af:d6:48:28:91:2d:04: e5:7b:4f:14:c0:a6:89:34:d1:73:b4:b1:c0:9b:73: 9c:3e:9f:60:42:86:99:83:d3:df:43:c3:11:eb:1c: 78:65:5b:1f:d7:8c:c5:69:db:05:4d:98:56:a2:59: 3d:7b:91:a2:f1:ba:4e:18:a6:e5:f6:12:16:21:12: 2e:da:2a:b4:85:80:be:bd:7c:32:a8:8d:17:80:20: f8:67:87:20:a5:2c:21:b2:4d:bb:25:fc:79:cf:fc: ce:83:37:2f:0e:b7:71:b1:b3:c9:74:38:84:58:fe: 2e:24:b9:a1:06:16:fd:c7:aa:26:3b:28:5f:14:1d: b3:3a:3a:44:2f:c4:cd:8b:60:d3:a4:b5:3d:7d:f7: eb:36:be:aa:fd:32:d6:e8:54:cb:7a:f6:ba:9b:fb: de:96:7b:28:80:79:e9:76:88:2a:b2:40:0f:0a:46: 9c:e2:2a:d2:81:10:6e:dd:ef:20:29:ab:0c:6b:fe: 32:92:59:48:bf:e6:8a:6a:06:cd:c3:c6:ad:39:d7: e6:87:c4:b2:35:a1:bc:38:7a:74:e4:15:a7:b5:8f: f7:54:fc:29:0a:3e:51:02:c4:96:df:af:b1:2b:bc: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B4:C5:A6:18:9D:B3:31:84:29:FD:3C:E6:03:87:25:11:B8:BD:18 X509v3 Authority Key Identifier: keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:8c:e1:72:16:23:92:4d:f8:7e:4d:e3:35:f0:a6:4f:f1: 7c:34:b0:d5:53:1f:c5:46:35:7f:eb:a9:82:ab:b3:ec:f5:b3: 97:98:f2:6c:b9:40:58:3e:16:b8:8d:91:be:e1:98:83:d7:bc: df:25:2c:8f:9b:bf:75:00:04:6a:aa:cf:36:34:f8:c2:64:5a: a1:c9:65:7c:94:4a:c8:bc:c2:1f:04:43:3b:a9:03:bc:9f:7a: 1c:cd:40:2b:ff:9d:61:60:f9:4b:6f:c8:bb:cd:b3:f3:d9:b5: 5e:0e:f1:4b:37:18:93:a9:47:60:f4:26:01:5d:05:50:46:fe: 25:d8:46:09:d7:a6:51:ad:d6:13:e9:f8:53:0f:73:15:65:aa: a1:6e:3a:7b:bf:26:a8:8f:c2:a1:a8:f5:01:be:57:bb:af:c2: 93:18:05:ec:90:4d:f8:87:e2:08:8f:c8:88:15:28:24:20:ae: 40:31:40:91:db:d6:48:90:61:79:35:77:bf:76:2c:fa:c7:75: 0e:d6:52:81:46:b9:6c:0e:cc:27:e5:d7:9a:4c:6c:4e:08:6a: 25:5b:30:f5:6b:9b:a4:cc:79:f5:3e:18:20:a5:3b:34:4d:14: 92:89:ce:08:df:60:b2:00:35:2b:36:94:c5:81:1f:c8:8b:78: a3:c0:c0:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bHmSigLaN0vKdKWp4VLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YzE5MjA2NzE2YzVjNzlkMzViZjE1OTI0ZGIzMzIzYTRl YzE4YzgwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD Eyg5ZGI0YzVhNjE4OWRiMzMxODQyOWZkM2NlNjAzODcyNTExYjhiZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpxrWV7BB8VJoHGy0CHRTmhzUI4 7q/WSCiRLQTle08UwKaJNNFztLHAm3OcPp9gQoaZg9PfQ8MR6xx4ZVsf14zFadsF TZhWolk9e5Gi8bpOGKbl9hIWIRIu2iq0hYC+vXwyqI0XgCD4Z4cgpSwhsk27Jfx5 z/zOgzcvDrdxsbPJdDiEWP4uJLmhBhb9x6omOyhfFB2zOjpEL8TNi2DTpLU9fffr Nr6q/TLW6FTLeva6m/velnsogHnpdogqskAPCkac4irSgRBu3e8gKasMa/4ykllI v+aKagbNw8atOdfmh8SyNaG8OHp05BWntY/3VPwpCj5RAsSW36+xK7z8vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ20xaYYnbMxhCn9POYDhyURuL0YMB8GA1UdIwQY MBaAFJXBkgZxbFx501vxWSTbMyOk7BjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5Yjkt YTRhOWNjNDcxNTk5LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5YjktYTRhOWNjNDcxNTk5 LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKCM4XIW I5JN+H5N4zXwpk/xfDSw1VMfxUY1f+upgquz7PWzl5jybLlAWD4WuI2RvuGYg9e8 3yUsj5u/dQAEaqrPNjT4wmRaocllfJRKyLzCHwRDO6kDvJ96HM1AK/+dYWD5S2/I u82z89m1Xg7xSzcYk6lHYPQmAV0FUEb+JdhGCdemUa3WE+n4Uw9zFWWqoW46e78m qI/Coaj1Ab5Xu6/CkxgF7JBN+IfiCI/IiBUoJCCuQDFAkdvWSJBheTV3v3Ys+sd1 DtZSgUa5bA7MJ+XXmkxsTghqJVsw9WubpMx59T4YIKU7NE0UkonOCN9gsgA1KzaU xYEfyIt4o8DA4A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:22 2025 by rpki-client