This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json) Hash identifier: nclX/rs1F5INr3mieYcv4K/PgWGYn8VcXVONtr/4LgY= Subject key identifier: 65:06:49:E1:CE:3D:04:D0:8C:AC:25:2A:97:C2:00:0A:D6:A6:0C:D6 Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915 Certificate serial: 019B32D745163F87691FEE026C90B9325EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft Manifest number: 178D Signing time: Thu 18 Dec 2025 19:02:07 +0000 Manifest this update: Thu 18 Dec 2025 19:02:07 +0000 Manifest next update: Fri 19 Dec 2025 19:02:07 +0000 Files and hashes: 1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=) 2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=) 3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: VXfjajK4mUfDQjp6r0VpKHTBDYh3iwuDaSxUdAn99MA=) 4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:45:16:3f:87:69:1f:ee:02:6c:90:b9:32:5e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915 Validity Not Before: Dec 18 19:02:07 2025 GMT Not After : Dec 19 19:02:07 2025 GMT Subject: CN=650649e1ce3d04d08cac252a97c2000ad6a60cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:ce:69:e6:16:61:14:2e:49:2c:3b:9f:68: f9:a4:9f:a4:34:f8:91:53:92:12:54:da:e0:49:3a: 12:5c:5b:aa:52:71:42:b9:b5:73:28:cc:1a:ce:ec: d1:1e:07:7e:23:73:70:71:86:f6:eb:ec:c8:54:86: 32:0f:ee:5d:89:ad:c5:7f:00:80:05:99:bb:3c:cf: b4:39:a4:87:d1:01:9b:9d:6b:51:c1:ce:d2:9f:1d: e5:31:fc:c9:c0:9d:c3:a0:99:09:7b:2a:30:ca:93: 7b:da:f7:aa:ee:41:c2:f6:c1:f3:16:d1:4d:40:cc: 01:30:d5:cf:7f:a7:fa:61:bb:db:92:57:3d:d8:56: 50:97:4b:b1:a8:1d:a8:f7:d6:89:f1:08:14:bb:f8: 95:3f:68:46:ea:29:71:c2:84:1d:be:84:e5:5a:ab: 38:9e:c5:0c:f6:6a:ab:a7:db:47:f8:cb:f8:f8:cb: 20:5a:24:3c:dd:90:d8:10:90:9d:17:fc:c2:c5:b5: e3:f9:de:ff:b7:d2:aa:5e:91:44:04:a0:5f:09:0b: 92:1a:89:c3:2c:d4:7c:48:60:15:30:87:8b:b9:00: a3:f4:27:05:10:c3:b0:c8:61:bb:7e:c8:f4:47:2d: 4e:5d:13:fa:fc:95:5f:f6:2b:3e:8d:3a:a0:64:ea: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:49:E1:CE:3D:04:D0:8C:AC:25:2A:97:C2:00:0A:D6:A6:0C:D6 X509v3 Authority Key Identifier: keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b6:ee:12:d5:3b:c8:8a:03:81:82:6f:f5:44:36:28:d3:11: 67:f8:ae:7f:cc:8f:2b:ba:3c:38:1a:f6:76:22:fb:45:80:b0: 19:30:08:2c:35:50:a4:6f:06:17:5b:23:08:70:38:0e:b5:d5: 0a:e7:82:5f:9c:85:70:f9:7e:49:cf:3d:7e:76:08:95:6d:e3: d9:4e:68:18:dc:fc:4a:7e:98:cc:72:de:34:6a:48:61:03:fc: ef:03:21:3c:09:98:8a:a2:b0:d7:7b:7a:4a:13:e4:50:07:27: 30:92:a8:a8:7b:6e:94:e2:de:6e:d2:aa:4b:ff:92:63:ff:ab: 7f:66:ed:83:6e:2e:4d:8b:89:3b:c1:ce:18:c6:d2:d8:59:71: 32:6c:b8:0b:0e:48:0a:3e:2f:b9:57:fb:3b:05:00:fb:ad:66: 41:8e:6c:d4:d0:a7:15:78:83:52:2f:bb:df:58:76:06:cf:4a: f8:9e:e2:8d:43:8f:2a:24:98:f0:02:fe:cd:18:a8:3b:1b:7e: 29:ef:cf:b4:73:f8:67:cf:35:70:c4:b2:8a:90:8c:33:e4:27: e8:c6:52:ad:f1:4b:80:b9:a9:01:9b:65:2d:b7:0c:66:42:76: 48:85:bb:74:b8:a9:26:8b:0e:98:b0:e6:d5:5f:49:e3:6c:8d: df:b3:4e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy10UWP4dpH+4CbJC5Ml6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx YTM5MTUwHhcNMjUxMjE4MTkwMjA3WhcNMjUxMjE5MTkwMjA3WjAzMTEwLwYDVQQD Eyg2NTA2NDllMWNlM2QwNGQwOGNhYzI1MmE5N2MyMDAwYWQ2YTYwY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7/OaeYWYRQuSSw7n2j5pJ+kNPiR U5ISVNrgSToSXFuqUnFCubVzKMwazuzRHgd+I3NwcYb26+zIVIYyD+5dia3FfwCA BZm7PM+0OaSH0QGbnWtRwc7Snx3lMfzJwJ3DoJkJeyowypN72veq7kHC9sHzFtFN QMwBMNXPf6f6Ybvbklc92FZQl0uxqB2o99aJ8QgUu/iVP2hG6ilxwoQdvoTlWqs4 nsUM9mqrp9tH+Mv4+MsgWiQ83ZDYEJCdF/zCxbXj+d7/t9KqXpFEBKBfCQuSGonD LNR8SGAVMIeLuQCj9CcFEMOwyGG7fsj0Ry1OXRP6/JVf9is+jTqgZOraUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUGSeHOPQTQjKwlKpfCAArWpgzWMB8GA1UdIwQY MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1 LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLbuEtU7 yIoDgYJv9UQ2KNMRZ/iuf8yPK7o8OBr2diL7RYCwGTAILDVQpG8GF1sjCHA4DrXV CueCX5yFcPl+Sc89fnYIlW3j2U5oGNz8Sn6YzHLeNGpIYQP87wMhPAmYiqKw13t6 ShPkUAcnMJKoqHtulOLebtKqS/+SY/+rf2btg24uTYuJO8HOGMbS2FlxMmy4Cw5I Cj4vuVf7OwUA+61mQY5s1NCnFXiDUi+731h2Bs9K+J7ijUOPKiSY8AL+zRioOxt+ Ke/PtHP4Z881cMSyipCMM+Qn6MZSrfFLgLmpAZtlLbcMZkJ2SIW7dLipJosOmLDm 1V9J42yN37NOQg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:42 2025 by rpki-client