This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json) Hash identifier: uoo8uXJOFpcSf/LsPa3AN/YrJP9GGNxSwV0m7OXPRGk= Subject key identifier: 10:9E:DA:7F:60:EF:0D:B1:9A:0C:A0:45:7C:C5:F4:08:26:5F:45:CD Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb Certificate serial: 019B3F487F352803627E8AB8E35C1EFE6D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 05:01:14 +0000 Manifest this update: Sun 21 Dec 2025 05:01:14 +0000 Manifest next update: Mon 22 Dec 2025 05:01:14 +0000 Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=) 2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: iosYy1ZMZfn284f7kEJRuijadsp0K/kvC2SNdFc1Odg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:7f:35:28:03:62:7e:8a:b8:e3:5c:1e:fe:6d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb Validity Not Before: Dec 21 05:01:14 2025 GMT Not After : Dec 22 05:01:14 2025 GMT Subject: CN=109eda7f60ef0db19a0ca0457cc5f408265f45cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:a5:19:9e:b7:bb:82:50:8f:2c:84:7e:75: 1a:8a:b7:e6:82:62:f6:d0:97:d7:ce:e8:4c:f0:cd: 92:15:a8:24:66:10:70:e0:43:30:31:26:04:ac:6d: fa:51:d9:b4:c3:48:cf:3a:fe:e0:22:83:ca:e6:af: 52:b9:d8:a2:dc:a5:1b:e2:10:d5:13:34:48:45:a4: 52:4e:39:40:16:40:7b:13:e2:91:c8:69:17:c5:eb: c2:45:a2:2b:15:e8:8c:70:d0:77:65:c0:c6:ed:9c: 30:fe:c9:d6:ff:c1:25:3b:0a:c0:d4:07:f4:ce:77: b6:aa:2e:85:cb:90:05:81:d1:19:a2:76:fb:ac:7b: 83:54:a4:55:bb:2c:3e:4b:b0:20:14:ee:48:06:4a: 80:c0:4f:b5:05:74:8c:95:50:c9:3d:6a:48:23:f6: 31:97:10:14:fa:d0:ae:72:c2:f7:19:0c:ff:35:8e: 19:79:46:c9:39:28:d3:eb:5a:d7:02:41:7a:64:a1: b7:26:17:1a:db:9f:d2:ed:05:37:7f:74:c0:77:c1: dc:00:c7:cc:67:1f:d4:c0:6e:c6:1f:61:83:d9:f3: 07:a7:64:bc:7e:4e:b8:f1:02:68:7a:db:ab:b3:80: 20:43:07:89:ca:23:9e:c6:37:bb:61:f9:6e:27:c1: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9E:DA:7F:60:EF:0D:B1:9A:0C:A0:45:7C:C5:F4:08:26:5F:45:CD X509v3 Authority Key Identifier: keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:18:64:18:06:e4:da:1b:5b:58:66:95:4a:e4:7e:7c:27:a1: 7d:de:0b:48:6b:da:00:9f:c5:fb:12:66:f3:ef:8f:d5:f9:e5: 82:c6:76:ca:3a:aa:e5:26:9a:bd:2e:1a:e7:2b:6d:a3:fc:f7: c0:d7:0e:7f:b7:28:4b:0c:d1:3e:bc:23:1d:fd:d7:f1:13:92: 8e:9f:c3:84:c8:6a:62:c1:d3:8f:22:8f:a0:f6:46:d9:62:c7: bc:52:0a:7f:a2:50:2e:c9:79:94:02:2c:b7:0c:21:1b:b9:2f: a2:d3:79:cb:65:2a:26:f9:47:8f:a8:96:e2:e5:48:6b:db:5a: fa:a9:f4:96:c8:bd:3d:73:64:90:94:e8:ce:49:f6:fb:20:c0: d6:fd:19:be:77:aa:63:98:57:d8:9d:ce:cb:57:ce:8e:00:cd: 1e:24:4e:4c:cd:4b:9a:c3:a0:42:19:a4:c5:31:9c:09:1d:53: 0d:9f:9b:21:60:4a:00:4b:70:4e:9e:09:19:49:80:5a:54:84: 7f:c7:93:d2:0a:38:75:e4:1b:f1:1f:87:4d:b9:af:9b:8a:2e: 87:1d:04:d8:9e:82:58:ff:97:30:20:84:7b:a2:5f:eb:60:0b: 93:fa:c5:70:96:38:90:46:c2:1b:ab:cd:c8:38:f0:e0:1a:c6: 00:7f:04:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SH81KANifoq441we/m1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmFmYzE0ZDRhMTlhN2MyYzE2OGViMmM4MWQ1NjIyYjMw MTQ5ZWIwHhcNMjUxMjIxMDUwMTE0WhcNMjUxMjIyMDUwMTE0WjAzMTEwLwYDVQQD EygxMDllZGE3ZjYwZWYwZGIxOWEwY2EwNDU3Y2M1ZjQwODI2NWY0NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDulGZ63u4JQjyyEfnUairfmgmL2 0JfXzuhM8M2SFagkZhBw4EMwMSYErG36Udm0w0jPOv7gIoPK5q9Sudii3KUb4hDV EzRIRaRSTjlAFkB7E+KRyGkXxevCRaIrFeiMcNB3ZcDG7Zww/snW/8ElOwrA1Af0 zne2qi6Fy5AFgdEZonb7rHuDVKRVuyw+S7AgFO5IBkqAwE+1BXSMlVDJPWpII/Yx lxAU+tCucsL3GQz/NY4ZeUbJOSjT61rXAkF6ZKG3Jhca25/S7QU3f3TAd8HcAMfM Zx/UwG7GH2GD2fMHp2S8fk648QJoeturs4AgQweJyiOexje7YfluJ8EEVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCe2n9g7w2xmgygRXzF9AgmX0XNMB8GA1UdIwQY MBaAFJZq/BTUoZp8LBaOssgdViKzAUnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEt MTE2MWVkYjliZjBlLzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEtMTE2MWVkYjliZjBl LzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBhkGAbk 2htbWGaVSuR+fCehfd4LSGvaAJ/F+xJm8++P1fnlgsZ2yjqq5SaavS4a5ytto/z3 wNcOf7coSwzRPrwjHf3X8ROSjp/DhMhqYsHTjyKPoPZG2WLHvFIKf6JQLsl5lAIs twwhG7kvotN5y2UqJvlHj6iW4uVIa9ta+qn0lsi9PXNkkJTozkn2+yDA1v0Zvneq Y5hX2J3Oy1fOjgDNHiROTM1LmsOgQhmkxTGcCR1TDZ+bIWBKAEtwTp4JGUmAWlSE f8eT0go4deQb8R+HTbmvm4ouhx0E2J6CWP+XMCCEe6Jf62ALk/rFcJY4kEbCG6vN yDjw4BrGAH8EXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:21 2025 by rpki-client