This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json) Hash identifier: sGM5qap2lZ0FPuYqyUIaNWGgjiUHo78LnsGm+zXjLD0= Subject key identifier: 83:72:B1:0D:0A:8F:88:1E:85:DD:A8:DD:6F:27:25:38:5E:A6:BB:AD Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73 Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273 Certificate serial: 019AF12E62441841C07DA67CE23ED64BB651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: zLoeNIESZnaNu9rEwitnT0Ct7VefNT3yPS/MDljvgSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:62:44:18:41:c0:7d:a6:7c:e2:3e:d6:4b:b6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=8372b10d0a8f881e85dda8dd6f2725385ea6bbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6c:ec:e4:b4:5c:1f:6a:6b:af:db:51:7c:a6: ed:80:82:c8:df:e4:0e:16:ab:48:88:3b:a1:ad:17: 82:e1:ce:97:a5:cd:3e:25:da:c2:c6:9c:87:20:9f: dc:4f:8d:f0:89:97:b2:3f:74:00:08:a7:89:22:9e: bf:10:c1:08:80:bc:55:4a:5b:6b:62:30:06:e5:f0: d1:39:54:5b:03:d0:35:54:2b:de:48:b0:06:fc:b1: 04:a3:48:86:28:40:04:dd:38:e5:a4:bc:7d:8c:c1: 4f:4f:a7:2e:73:88:02:12:65:e5:fc:dd:b8:4c:26: 13:c2:ef:bd:17:0f:0e:cc:94:88:89:a7:ec:5f:7e: a6:5e:a3:16:2b:df:5d:51:35:19:6f:54:97:e4:3b: d8:50:a1:33:1e:7f:a8:da:37:42:be:a9:7c:80:b6: a2:c1:d0:de:b9:12:ff:fb:16:6a:72:03:5b:e1:3f: dd:4d:48:b1:7c:5c:1e:cf:38:04:6a:96:76:ef:0e: ee:63:46:e1:7b:73:91:5a:46:ec:41:b2:11:c1:d9: 2f:54:08:ce:8f:c4:3e:0d:20:7d:1f:ef:aa:6c:bd: b2:fd:e8:05:7f:64:01:52:e9:75:95:e0:70:ed:cf: 81:27:89:82:16:b3:e0:e8:9a:78:f0:45:68:86:6e: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:72:B1:0D:0A:8F:88:1E:85:DD:A8:DD:6F:27:25:38:5E:A6:BB:AD X509v3 Authority Key Identifier: keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:14:b5:34:a4:c5:c3:62:07:36:3d:63:00:7d:4e:56:88: 9c:ca:ff:2b:dc:50:69:4f:51:6c:e5:12:ad:ef:fe:28:f8:84: 58:a6:dc:d7:27:af:4a:ea:39:91:fc:eb:ba:f3:ea:4d:55:eb: d1:db:1b:bd:34:56:6b:27:08:4c:fd:55:e6:7d:0e:4d:cc:25: ed:a4:4e:ee:e7:7b:f9:6e:6c:7a:ad:11:4e:3c:39:0b:19:8d: 8f:79:2b:d2:2a:4d:a8:cf:f9:dd:c7:d8:86:ca:d5:f3:03:cb: 9d:74:59:f9:24:81:58:98:7b:71:5f:61:18:49:d1:99:93:37: d7:5a:80:3f:6e:8d:36:f3:af:55:4c:1a:c0:6d:22:5a:ed:78: c1:22:49:2f:2f:54:34:6d:dd:e2:96:37:80:e1:c4:60:ff:52: b8:77:22:0e:67:25:38:c8:d8:1e:69:67:7b:57:c0:83:7b:9f: ed:4c:77:2d:39:05:8b:ad:a0:f5:12:e4:fc:82:5f:c1:7c:e1: b0:02:7a:f9:12:51:8a:d6:1a:64:1c:88:d7:46:bc:fb:ea:05: ad:99:c5:54:42:e4:cb:ec:d9:5e:4b:82:8e:19:db:09:58:dc: a0:26:4b:3f:47:b2:14:2a:22:47:2f:a1:de:e4:8e:75:77:d6: cc:f3:0b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmJEGEHAfaZ84j7WS7ZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzM1YzIwOTA5OTk0MjFkMzNjNjM1OWM5YjZlNjgxODJh MGYyNzMwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD Eyg4MzcyYjEwZDBhOGY4ODFlODVkZGE4ZGQ2ZjI3MjUzODVlYTZiYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGzs5LRcH2prr9tRfKbtgILI3+QO FqtIiDuhrReC4c6Xpc0+JdrCxpyHIJ/cT43wiZeyP3QACKeJIp6/EMEIgLxVSltr YjAG5fDROVRbA9A1VCveSLAG/LEEo0iGKEAE3TjlpLx9jMFPT6cuc4gCEmXl/N24 TCYTwu+9Fw8OzJSIiafsX36mXqMWK99dUTUZb1SX5DvYUKEzHn+o2jdCvql8gLai wdDeuRL/+xZqcgNb4T/dTUixfFwezzgEapZ27w7uY0bhe3ORWkbsQbIRwdkvVAjO j8Q+DSB9H++qbL2y/egFf2QBUul1leBw7c+BJ4mCFrPg6Jp48EVohm4nAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINysQ0Kj4gehd2o3W8nJTheprutMB8GA1UdIwQY MBaAFCzDXCCQmZQh0zxjWcm25oGCoPJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jNjM3ZGUtYmVmNy00ZGEzLTgwM2Yt ODRlNWYxYWY2ZTkyLzEvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jNjM3ZGUtYmVmNy00ZGEzLTgwM2YtODRlNWYxYWY2ZTky LzEvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZwUtTSk xcNiBzY9YwB9TlaInMr/K9xQaU9RbOUSre/+KPiEWKbc1yevSuo5kfzruvPqTVXr 0dsbvTRWaycITP1V5n0OTcwl7aRO7ud7+W5seq0RTjw5CxmNj3kr0ipNqM/53cfY hsrV8wPLnXRZ+SSBWJh7cV9hGEnRmZM311qAP26NNvOvVUwawG0iWu14wSJJLy9U NG3d4pY3gOHEYP9SuHciDmclOMjYHmlne1fAg3uf7Ux3LTkFi62g9RLk/IJfwXzh sAJ6+RJRitYaZByI10a8++oFrZnFVELky+zZXkuCjhnbCVjcoCZLP0eyFCoiRy+h 3uSOdXfWzPMLVA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:07 2025 by rpki-client