This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft File: LC6uaapwrwN7XSx-gSO-pAwpXn4.mft (raw, json) Hash identifier: s6WZjtOIQLUCo1G32ItWHfgpjqIFtneGl0mynuXylkg= Subject key identifier: 8D:64:3F:A5:24:B2:4A:B9:4F:2D:06:75:16:3D:0B:F1:0A:8C:59:A3 Authority key identifier: 2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E Certificate issuer: /CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e Certificate serial: 019B2B1CE6CD71CF52D5EF37D7BFF18AD216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft Manifest number: 0BCC Signing time: Wed 17 Dec 2025 07:01:12 +0000 Manifest this update: Wed 17 Dec 2025 07:01:12 +0000 Manifest next update: Thu 18 Dec 2025 07:01:12 +0000 Files and hashes: 1: LC6uaapwrwN7XSx-gSO-pAwpXn4.crl (hash: gC2b3Hx9pj+fGp9ZhrK6OQlTxSmeZv1KELcgI4lmEiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:e6:cd:71:cf:52:d5:ef:37:d7:bf:f1:8a:d2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e Validity Not Before: Dec 17 07:01:12 2025 GMT Not After : Dec 18 07:01:12 2025 GMT Subject: CN=8d643fa524b24ab94f2d0675163d0bf10a8c59a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:9d:22:6e:63:de:0d:ff:f3:98:41:ab:7c: 40:74:50:c6:a5:76:39:e7:79:28:b1:ef:bb:1d:d5: 39:32:01:86:a6:54:5d:5b:77:00:f5:32:40:42:0e: b9:29:55:4b:86:6d:bd:74:39:f4:51:b8:9b:91:00: 55:5b:74:4d:60:a9:29:a6:ba:3c:48:9b:14:bb:51: 90:4e:06:ed:ef:47:f5:fd:fa:d8:3a:ea:04:95:0f: db:5a:83:c6:25:3a:b5:04:a7:8f:6f:f7:56:75:2e: ec:3e:9e:5f:b9:14:34:f6:33:40:83:bb:6a:77:7a: fa:a2:19:2e:03:70:b2:e4:2b:99:d5:10:f5:4b:85: c6:bc:5c:2c:23:d1:1b:a5:c7:93:9f:d9:3b:0b:a6: 23:b2:f4:26:df:34:28:88:c8:9e:5b:92:b7:41:79: 65:4f:e5:88:1f:7d:18:6f:41:b8:d7:40:da:c4:27: 3a:25:bf:0b:6e:d0:43:1a:8c:b8:4d:37:8c:a2:76: ae:fc:29:d4:1a:9a:94:98:e9:ab:dd:67:08:ea:23: a9:30:01:8c:0b:67:ff:4f:e4:84:e6:45:3c:46:a6: 60:2e:e0:2c:63:e3:b1:ab:fd:dc:7a:f9:6e:d7:16: f3:4e:9c:33:f3:41:f2:35:dd:78:65:b6:58:34:25: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:64:3F:A5:24:B2:4A:B9:4F:2D:06:75:16:3D:0B:F1:0A:8C:59:A3 X509v3 Authority Key Identifier: keyid:2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:17:61:fc:a4:4e:47:5c:db:46:6d:a2:6c:28:89:1d:4f: f2:9a:b3:12:48:99:a7:1a:3b:ca:2e:e4:ef:fe:84:2e:b7:b5: 4f:f5:b4:8d:ed:dc:c3:ad:70:1e:a1:25:b1:8a:4e:fd:dc:1b: ac:fd:f9:90:95:4a:51:39:9f:a0:9a:b5:c8:17:b3:17:0d:85: 33:4f:16:fb:04:10:84:ab:b6:ca:df:13:fe:84:13:6f:41:7b: 40:dd:43:fe:99:89:c6:52:c9:08:45:0b:6e:7e:34:96:8b:1a: 62:9f:13:65:7c:63:ed:ee:e2:43:12:60:95:34:9c:72:14:b5: 1c:d1:2a:4f:7e:28:b9:28:1b:f4:a9:cb:28:93:9e:e4:13:f0: b9:6f:ae:76:3d:3e:43:3e:c4:93:23:73:4e:46:2d:9e:56:39: 80:05:ea:6d:80:b0:ef:75:bc:70:19:8c:4f:f0:ba:69:5e:91: de:c1:5c:4c:f2:51:84:a5:db:8b:00:19:8a:7f:1d:9b:51:4d: 0c:48:a1:86:84:d2:31:8c:26:ee:d5:f0:29:af:ea:00:13:89: 05:8d:27:3d:b1:ac:09:f7:78:74:db:17:13:b5:d3:77:eb:17: 4f:9b:33:6d:4c:34:71:f4:ac:34:15:98:2d:b2:73:6b:7a:3c: 12:ce:9e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHObNcc9S1e8317/xitIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMmVhZTY5YWE3MGFmMDM3YjVkMmM3ZTgxMjNiZWE0MGMy OTVlN2UwHhcNMjUxMjE3MDcwMTEyWhcNMjUxMjE4MDcwMTEyWjAzMTEwLwYDVQQD Eyg4ZDY0M2ZhNTI0YjI0YWI5NGYyZDA2NzUxNjNkMGJmMTBhOGM1OWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AqdIm5j3g3/85hBq3xAdFDGpXY5 53kose+7HdU5MgGGplRdW3cA9TJAQg65KVVLhm29dDn0UbibkQBVW3RNYKkppro8 SJsUu1GQTgbt70f1/frYOuoElQ/bWoPGJTq1BKePb/dWdS7sPp5fuRQ09jNAg7tq d3r6ohkuA3Cy5CuZ1RD1S4XGvFwsI9EbpceTn9k7C6YjsvQm3zQoiMieW5K3QXll T+WIH30Yb0G410DaxCc6Jb8LbtBDGoy4TTeMonau/CnUGpqUmOmr3WcI6iOpMAGM C2f/T+SE5kU8RqZgLuAsY+Oxq/3cevlu1xbzTpwz80HyNd14ZbZYNCXXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1kP6Ukskq5Ty0GdRY9C/EKjFmjMB8GA1UdIwQY MBaAFCwurmmqcK8De10sfoEjvqQMKV5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2Mt NzIzNTU3N2I2ZDU2LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2MtNzIzNTU3N2I2ZDU2 LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArcXYfyk Tkdc20ZtomwoiR1P8pqzEkiZpxo7yi7k7/6ELre1T/W0je3cw61wHqElsYpO/dwb rP35kJVKUTmfoJq1yBezFw2FM08W+wQQhKu2yt8T/oQTb0F7QN1D/pmJxlLJCEUL bn40losaYp8TZXxj7e7iQxJglTScchS1HNEqT34ouSgb9KnLKJOe5BPwuW+udj0+ Qz7EkyNzTkYtnlY5gAXqbYCw73W8cBmMT/C6aV6R3sFcTPJRhKXbiwAZin8dm1FN DEihhoTSMYwm7tXwKa/qABOJBY0nPbGsCfd4dNsXE7XTd+sXT5szbUw0cfSsNBWY LbJza3o8Es6eGg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:25:50 2025 by rpki-client