This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft File: LC6uaapwrwN7XSx-gSO-pAwpXn4.mft (raw, json) Hash identifier: TvHnddL6yVj79OPHNCQYHT4lKaWfh3t32AZd/8dn0Tw= Subject key identifier: D9:E1:FC:9B:CB:B9:FD:DE:72:08:F8:FC:C9:93:67:8B:2E:27:9E:34 Authority key identifier: 2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E Certificate issuer: /CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e Certificate serial: 019AF31BEC95A4A75C9BAA822180BFE05F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft Manifest number: 0BAF Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: LC6uaapwrwN7XSx-gSO-pAwpXn4.crl (hash: AelXWQro68mZXhiAqpFQVOVG+5BL+lrEQ7rzI7nIo1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ec:95:a4:a7:5c:9b:aa:82:21:80:bf:e0:5f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=d9e1fc9bcbb9fdde7208f8fcc993678b2e279e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:4a:4c:1e:f1:ff:02:dc:55:8a:44:95:46: 64:30:ad:2a:88:40:24:92:e8:62:c2:63:eb:15:31: 72:e2:3c:28:c5:3c:11:ac:22:63:a3:7e:fd:48:80: 5b:d2:43:5b:84:08:43:55:c2:8c:1a:dd:4f:de:f4: 2a:9b:c1:b3:4a:e6:4d:9c:63:1b:5e:0c:38:df:60: e8:eb:7f:68:12:58:04:cd:aa:68:af:72:92:74:a7: 08:77:4f:9e:af:ff:d8:d0:3b:0b:20:e4:76:d1:fe: c6:48:c7:5e:f8:72:a5:19:c4:ee:ae:ed:13:41:a6: 09:fa:aa:d9:6b:d9:d5:85:77:ac:16:2b:d3:23:3e: 97:5e:41:35:6d:91:7f:d6:26:b3:5a:ad:06:ea:d1: e0:7c:74:13:94:4c:0a:af:f5:25:ea:5f:4a:a6:9f: 06:24:8f:95:be:54:a2:a6:74:34:22:41:48:4e:ee: 4a:85:19:8b:2f:92:c0:86:84:1e:42:5d:55:f3:ad: e0:63:05:91:63:5c:f1:d3:26:dd:57:2c:4c:fc:91: 85:99:69:60:c3:de:f9:78:15:2f:4e:48:a7:9d:0b: 95:fe:f0:d9:5b:e0:2c:f8:0b:dd:c0:22:3e:c3:91: 15:44:e1:ee:63:db:cc:67:fa:b2:48:f2:21:ae:22: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:FC:9B:CB:B9:FD:DE:72:08:F8:FC:C9:93:67:8B:2E:27:9E:34 X509v3 Authority Key Identifier: keyid:2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:47:d2:06:3b:99:48:25:5c:17:d9:51:14:ff:06:b4:bd:bd: 6e:b4:c8:6f:21:fa:fc:cb:9c:21:7c:ff:d8:02:1a:3b:37:9f: 97:b4:1e:2e:6a:e4:e5:fd:f2:a4:5b:d2:6c:22:9f:40:72:25: b5:ab:e1:7a:ea:c2:e3:c4:af:34:67:03:6b:aa:0e:23:2d:51: 4b:f2:b6:e1:f7:23:c2:0c:1b:35:c5:c2:6d:c9:e8:4e:0d:10: 49:01:f5:8f:d0:a9:d8:cd:d4:14:65:ef:de:97:52:94:2b:7c: 89:b6:e3:49:33:16:b1:29:aa:79:83:81:33:b8:cb:62:47:55: 31:0a:ce:8e:04:94:4e:34:7f:22:a4:6d:4d:a3:e2:3a:8b:45: ba:25:d6:c0:4d:63:b6:24:93:64:38:e1:b0:18:3b:35:a4:57: 66:77:b9:f4:f2:49:cc:4e:bd:c1:d4:af:fe:a9:97:c1:65:8c: c0:d7:9d:f6:92:9f:d6:c0:78:f1:b9:4f:3a:2a:af:bf:32:22: ab:ab:92:de:a6:5c:41:4e:05:4b:f3:0a:4c:9d:ed:23:c7:2f: 35:68:0c:4b:f0:52:42:61:2a:e3:21:31:7f:e1:e1:6d:4f:86: b0:69:37:8c:31:c8:6a:f4:b6:1e:c2:49:e2:b5:d1:78:66:82: 5d:e9:b4:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+yVpKdcm6qCIYC/4F8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMmVhZTY5YWE3MGFmMDM3YjVkMmM3ZTgxMjNiZWE0MGMy OTVlN2UwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD EyhkOWUxZmM5YmNiYjlmZGRlNzIwOGY4ZmNjOTkzNjc4YjJlMjc5ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKZKTB7x/wLcVYpElUZkMK0qiEAk kuhiwmPrFTFy4jwoxTwRrCJjo379SIBb0kNbhAhDVcKMGt1P3vQqm8GzSuZNnGMb Xgw432Do639oElgEzapor3KSdKcId0+er//Y0DsLIOR20f7GSMde+HKlGcTuru0T QaYJ+qrZa9nVhXesFivTIz6XXkE1bZF/1iazWq0G6tHgfHQTlEwKr/Ul6l9Kpp8G JI+VvlSipnQ0IkFITu5KhRmLL5LAhoQeQl1V863gYwWRY1zx0ybdVyxM/JGFmWlg w975eBUvTkinnQuV/vDZW+As+AvdwCI+w5EVROHuY9vMZ/qySPIhriIJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnh/JvLuf3ecgj4/MmTZ4suJ540MB8GA1UdIwQY MBaAFCwurmmqcK8De10sfoEjvqQMKV5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2Mt NzIzNTU3N2I2ZDU2LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2MtNzIzNTU3N2I2ZDU2 LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0fSBjuZ SCVcF9lRFP8GtL29brTIbyH6/MucIXz/2AIaOzefl7QeLmrk5f3ypFvSbCKfQHIl tavheurC48SvNGcDa6oOIy1RS/K24fcjwgwbNcXCbcnoTg0QSQH1j9Cp2M3UFGXv 3pdSlCt8ibbjSTMWsSmqeYOBM7jLYkdVMQrOjgSUTjR/IqRtTaPiOotFuiXWwE1j tiSTZDjhsBg7NaRXZne59PJJzE69wdSv/qmXwWWMwNed9pKf1sB48blPOiqvvzIi q6uS3qZcQU4FS/MKTJ3tI8cvNWgMS/BSQmEq4yExf+HhbU+GsGk3jDHIavS2HsJJ 4rXReGaCXem0Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:01 2025 by rpki-client