This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json) Hash identifier: OD9wfH1aUxS22aWpH71PaQbIefE4y7Ys4JEMDy6XxmA= Subject key identifier: 4A:69:5C:8C:FE:D4:85:08:C7:F0:7C:AC:70:EF:AD:F0:1E:AE:09:1E Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915 Certificate serial: 019AF50B685BE41DFEFBF8E8A517D58605FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 19:02:36 +0000 Manifest this update: Sat 06 Dec 2025 19:02:36 +0000 Manifest next update: Sun 07 Dec 2025 19:02:36 +0000 Files and hashes: 1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=) 2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=) 3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: gWrOk2sJO8y0Ow3hYo7NmZERDgEWPg4ps6zKQcWIPHw=) 4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:68:5b:e4:1d:fe:fb:f8:e8:a5:17:d5:86:05:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915 Validity Not Before: Dec 6 19:02:36 2025 GMT Not After : Dec 7 19:02:36 2025 GMT Subject: CN=4a695c8cfed48508c7f07cac70efadf01eae091e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:0f:eb:0a:ee:e3:8e:bd:10:d5:d6:e4:7f: c6:3e:d9:9c:bf:4d:82:20:5e:f8:27:9d:c6:2e:5f: fa:79:50:86:6f:b2:ca:ff:c6:1d:b4:70:f0:f3:97: d5:1c:14:69:5e:ce:c7:3b:81:bd:00:85:7d:2e:17: e8:32:c3:71:55:44:af:bb:9b:8c:64:28:61:ee:b7: 34:f2:96:ce:18:6e:9b:3a:38:87:35:62:19:58:6e: 47:44:53:7a:8f:cc:c0:24:f1:24:ad:2b:07:a4:3b: dc:0d:e0:88:77:03:d5:e2:18:6f:53:90:9d:c3:26: 74:02:27:75:ac:de:13:61:3a:a0:9b:bb:e3:7c:47: 33:c2:79:f9:2d:09:f2:84:2c:44:ea:38:46:bc:af: 3a:d5:1d:d0:f5:52:f4:00:57:6c:10:dc:d8:4f:96: 08:e1:c8:da:b7:b2:3d:8d:ad:39:de:04:74:3d:1a: 93:5d:a8:3d:af:55:8e:8a:ab:aa:ea:05:f0:cc:1d: df:83:ce:47:54:83:ec:c5:39:37:7d:9c:64:04:01: 0a:06:09:a4:34:86:0f:9c:53:f1:28:b3:bb:07:21: 0a:db:5b:d4:7c:86:fc:f8:3e:19:e1:6a:4a:01:5f: 18:28:ef:16:db:42:15:22:05:2e:9d:d0:9f:8a:43: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:69:5C:8C:FE:D4:85:08:C7:F0:7C:AC:70:EF:AD:F0:1E:AE:09:1E X509v3 Authority Key Identifier: keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f9:56:bc:a9:96:ea:51:3b:dd:a8:6c:27:fb:92:f2:73:d4: fd:73:e3:55:12:e3:c4:67:35:fc:f6:d2:6d:fc:fd:1b:95:9d: e7:4c:b4:a8:81:26:5b:fd:47:2e:e0:94:37:fd:f0:f1:bc:34: b2:94:6e:7c:d2:7f:5b:a1:a1:00:25:ec:b1:b6:3a:fa:4f:8b: 28:13:f7:96:84:7d:f0:6c:fe:ff:86:5d:f0:b9:76:4d:ed:49: d6:a1:44:f1:91:22:9a:ea:86:0a:64:47:1c:6e:c4:a2:85:18: 30:75:94:4a:e9:98:1a:9e:9e:e5:b4:3b:86:f4:d6:5c:2f:21: 2e:df:4d:1a:a5:62:13:46:e5:93:86:15:39:f7:cf:2c:7a:8e: 7a:cc:f9:65:b6:83:48:1c:f9:3d:d5:b0:8f:98:1a:6b:ce:fc: bb:dc:27:8f:2d:f6:c8:15:46:fa:9a:6d:db:ab:86:46:d5:48: f0:b7:af:aa:28:26:70:70:69:13:d8:e0:2c:28:7a:f8:31:d1: 43:ea:59:fb:49:cc:28:ed:1e:34:df:4b:cd:46:eb:22:1f:aa: bd:a0:03:44:ba:7a:e9:22:cf:2b:8a:e1:2e:11:2a:8d:e3:ca: 26:b9:55:68:83:9a:6f:8c:04:f5:f0:fe:91:07:bd:39:21:04: ae:e8:c9:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2hb5B3++/jopRfVhgX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx YTM5MTUwHhcNMjUxMjA2MTkwMjM2WhcNMjUxMjA3MTkwMjM2WjAzMTEwLwYDVQQD Eyg0YTY5NWM4Y2ZlZDQ4NTA4YzdmMDdjYWM3MGVmYWRmMDFlYWUwOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8YP6wru4469ENXW5H/GPtmcv02C IF74J53GLl/6eVCGb7LK/8YdtHDw85fVHBRpXs7HO4G9AIV9LhfoMsNxVUSvu5uM ZChh7rc08pbOGG6bOjiHNWIZWG5HRFN6j8zAJPEkrSsHpDvcDeCIdwPV4hhvU5Cd wyZ0Aid1rN4TYTqgm7vjfEczwnn5LQnyhCxE6jhGvK861R3Q9VL0AFdsENzYT5YI 4cjat7I9ja053gR0PRqTXag9r1WOiquq6gXwzB3fg85HVIPsxTk3fZxkBAEKBgmk NIYPnFPxKLO7ByEK21vUfIb8+D4Z4WpKAV8YKO8W20IVIgUundCfikMEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEppXIz+1IUIx/B8rHDvrfAergkeMB8GA1UdIwQY MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1 LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARflWvKmW 6lE73ahsJ/uS8nPU/XPjVRLjxGc1/PbSbfz9G5Wd50y0qIEmW/1HLuCUN/3w8bw0 spRufNJ/W6GhACXssbY6+k+LKBP3loR98Gz+/4Zd8Ll2Te1J1qFE8ZEimuqGCmRH HG7EooUYMHWUSumYGp6e5bQ7hvTWXC8hLt9NGqViE0blk4YVOffPLHqOesz5ZbaD SBz5PdWwj5gaa878u9wnjy32yBVG+ppt26uGRtVI8LevqigmcHBpE9jgLCh6+DHR Q+pZ+0nMKO0eNN9LzUbrIh+qvaADRLp66SLPK4rhLhEqjePKJrlVaIOab4wE9fD+ kQe9OSEErujJgQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:43:35 2025 by rpki-client