This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft File: lmsFxmHHalvMSNqDju22lz8VO4Y.mft (raw, json) Hash identifier: VfriE970NdfRcODKENLljdOQzfvQbVfB5IbXyMRbgEQ= Subject key identifier: 85:21:40:55:07:1E:0E:48:BF:A8:E2:0A:75:F2:85:39:B3:00:A7:E7 Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86 Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86 Certificate serial: 019AF163ED4E1EC000790C48006B07FC5C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: lmsFxmHHalvMSNqDju22lz8VO4Y.crl (hash: bwoUe0TWkynO+Llx1zMXswizvG8E5Ix/cyo7QQcyACk=) 2: vW8nbP0mTPSGV0n46D4WrlPJlkA.roa (hash: FBmE53kvVV07M6urD1OzTmvwStXQDG55TxBqouWfpJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:4e:1e:c0:00:79:0c:48:00:6b:07:fc:5c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=85214055071e0e48bfa8e20a75f28539b300a7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:b8:79:c5:7b:d0:be:11:aa:55:61:46:8e: 02:4a:4c:4d:54:96:6e:44:73:2b:e7:87:e1:87:0d: b6:d1:bc:18:9e:30:4b:93:4a:dc:ab:04:97:e5:4e: be:0b:a8:1b:47:7c:2b:e5:f4:4a:36:39:1c:28:e3: 5f:f2:34:49:98:55:ba:bb:19:f3:8c:c9:4d:9c:ca: 25:00:92:29:e3:52:3b:a9:c4:0f:26:2a:ff:98:ac: c7:5d:5f:2c:8f:1d:3d:eb:3d:f0:88:67:2b:64:cf: 1d:26:53:85:ab:37:51:4c:9d:cf:4c:ed:94:da:48: 0b:62:56:04:5d:6f:1a:e7:28:bb:92:ea:73:2f:cf: 67:55:dc:0e:0f:6a:40:c2:88:98:12:10:4b:ff:b0: 10:c9:f8:6f:93:0b:63:2f:6d:fb:9e:f4:2b:87:08: bb:35:c5:38:79:a0:db:8d:e5:b6:2f:99:b5:07:63: 3e:34:a9:32:da:5f:91:5b:50:4c:c5:4b:d5:4b:3e: b7:79:dc:57:8b:33:e8:34:0a:29:7a:5d:70:83:e7: e8:93:37:67:b4:9b:75:9c:82:a9:70:11:5a:c8:2f: c7:d8:e6:53:9b:39:d0:e2:e4:df:a7:f6:93:b8:c1: 62:13:62:ea:f0:9f:a7:3e:9c:94:fa:30:74:55:15: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:40:55:07:1E:0E:48:BF:A8:E2:0A:75:F2:85:39:B3:00:A7:E7 X509v3 Authority Key Identifier: keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:08:c1:7f:e4:2e:71:21:ef:a8:10:92:32:ac:bc:c6:9a:0f: f4:7b:8d:21:20:c5:e4:9b:8a:52:07:63:99:3d:2b:03:ff:df: 6c:ad:13:26:b2:05:e2:f7:90:54:79:99:a1:df:48:06:3e:ca: f2:00:fe:39:9b:e5:9d:4e:a6:d6:c8:e9:c9:32:1d:1d:77:30: 97:1f:22:3e:a6:a1:96:13:0d:41:85:a5:f7:60:80:fd:2d:60: fe:5c:60:f2:ca:aa:ed:30:6b:89:46:70:cd:d3:3a:47:93:e1: c3:f8:f0:7d:b1:50:c5:2e:a7:bd:38:2c:52:dd:d0:e1:c5:c3: 37:c7:e4:bd:86:47:65:62:8e:d5:e0:17:16:0c:64:e7:03:6f: e6:e5:5d:8e:3a:14:94:80:a6:35:21:a0:e7:0e:ed:4e:63:d9: 36:2b:79:3d:db:b2:09:de:45:49:7c:59:3a:1b:de:e9:ca:88: 7c:0c:11:3b:07:ce:b1:23:55:aa:b1:be:3c:6b:4d:49:b7:b5: d7:bc:e9:27:ed:81:e8:eb:6a:26:b8:bd:1e:4d:b0:2c:1b:e8: 82:3a:f1:9a:8d:5f:59:57:5f:e8:81:28:bc:30:6b:6f:4a:f2: c4:00:cf:8d:a7:8b:64:a0:ad:84:be:77:a1:d9:ba:a4:94:ae: b0:e1:ff:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+1OHsAAeQxIAGsH/FwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmIwNWM2NjFjNzZhNWJjYzQ4ZGE4MzhlZWRiNjk3M2Yx NTNiODYwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD Eyg4NTIxNDA1NTA3MWUwZTQ4YmZhOGUyMGE3NWYyODUzOWIzMDBhN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti+4ecV70L4RqlVhRo4CSkxNVJZu RHMr54fhhw220bwYnjBLk0rcqwSX5U6+C6gbR3wr5fRKNjkcKONf8jRJmFW6uxnz jMlNnMolAJIp41I7qcQPJir/mKzHXV8sjx096z3wiGcrZM8dJlOFqzdRTJ3PTO2U 2kgLYlYEXW8a5yi7kupzL89nVdwOD2pAwoiYEhBL/7AQyfhvkwtjL237nvQrhwi7 NcU4eaDbjeW2L5m1B2M+NKky2l+RW1BMxUvVSz63edxXizPoNAopel1wg+fokzdn tJt1nIKpcBFayC/H2OZTmznQ4uTfp/aTuMFiE2Lq8J+nPpyU+jB0VRXtrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUhQFUHHg5Iv6jiCnXyhTmzAKfnMB8GA1UdIwQY MBaAFJZrBcZhx2pbzEjag47ttpc/FTuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1zRnhtSEhhbHZNU05xRGp1MjJsejhWTzRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ODkxZGYtOTcxZS00ZTYwLThjYmMt ZTNjMmYzMmNmM2I3LzEvbG1zRnhtSEhhbHZNU05xRGp1MjJsejhWTzRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ODkxZGYtOTcxZS00ZTYwLThjYmMtZTNjMmYzMmNmM2I3 LzEvbG1zRnhtSEhhbHZNU05xRGp1MjJsejhWTzRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAjBf+Qu cSHvqBCSMqy8xpoP9HuNISDF5JuKUgdjmT0rA//fbK0TJrIF4veQVHmZod9IBj7K 8gD+OZvlnU6m1sjpyTIdHXcwlx8iPqahlhMNQYWl92CA/S1g/lxg8sqq7TBriUZw zdM6R5Phw/jwfbFQxS6nvTgsUt3Q4cXDN8fkvYZHZWKO1eAXFgxk5wNv5uVdjjoU lICmNSGg5w7tTmPZNit5PduyCd5FSXxZOhve6cqIfAwROwfOsSNVqrG+PGtNSbe1 17zpJ+2B6OtqJri9Hk2wLBvogjrxmo1fWVdf6IEovDBrb0ryxADPjaeLZKCthL53 odm6pJSusOH/CA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:57 2025 by rpki-client