This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json) Hash identifier: 8GnIVFhdQe6+aBqzFOe0iN1UMJSssjokRSEECi77Fu8= Subject key identifier: 8C:6E:28:75:87:93:80:5A:19:C6:16:8D:7A:7F:B4:01:8F:5A:56:CF Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be Certificate serial: 019AF12DAE05E68C43F56695B802094614C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:33 +0000 Manifest this update: Sat 06 Dec 2025 01:01:33 +0000 Manifest next update: Sun 07 Dec 2025 01:01:33 +0000 Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=) 2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=) 3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: kwMtqepdvr+Udc4lPkAOg/IvsOYXQbQgDUy9yyLA76Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ae:05:e6:8c:43:f5:66:95:b8:02:09:46:14:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be Validity Not Before: Dec 6 01:01:33 2025 GMT Not After : Dec 7 01:01:33 2025 GMT Subject: CN=8c6e28758793805a19c6168d7a7fb4018f5a56cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:a0:24:03:d0:72:e5:40:b9:cc:05:1b:a3: f0:11:26:1a:7d:44:ef:40:0a:89:f5:04:31:d4:aa: f0:fa:0d:0f:99:06:94:a6:72:6b:5f:36:fb:30:6a: 5e:b1:bb:2c:22:27:99:fb:7b:bc:65:f6:e2:c3:da: 4a:dc:ed:61:9e:93:cf:0d:d7:49:7f:0b:61:d1:29: 29:5d:e2:68:69:21:36:5a:0e:58:a8:68:8c:1c:cb: d3:41:92:9e:b1:88:6c:53:bc:f4:c5:6b:d0:1b:1f: f0:15:02:b4:43:2d:2a:c5:20:bc:24:ba:80:f9:e4: ec:fa:90:20:d5:60:9e:ba:06:56:40:b6:95:1e:5d: ce:52:19:56:84:15:82:40:97:25:f9:43:e8:4e:2c: 01:e7:a7:04:85:e0:c8:d6:5e:30:8c:d6:9b:79:9c: bf:92:8c:60:1b:5a:b5:28:4d:cf:0e:d4:88:55:6a: 3f:39:ed:22:be:0e:a4:10:62:4e:e6:7d:ea:be:df: 20:6b:b8:da:99:64:11:11:25:45:ee:89:80:cc:ea: 8f:19:fe:2b:0d:f7:e8:f8:67:af:f6:6d:90:4b:7d: 61:7f:9f:05:c0:36:c1:ff:91:a2:a0:25:93:28:49: 5e:a9:2f:ec:c0:79:37:a4:22:58:06:15:13:6f:8d: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6E:28:75:87:93:80:5A:19:C6:16:8D:7A:7F:B4:01:8F:5A:56:CF X509v3 Authority Key Identifier: keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:40:3f:c6:41:34:6a:46:04:f3:24:4c:0a:de:04:29:97:f0: 00:2b:4a:27:76:c4:5c:a4:a5:8e:d8:d8:e8:49:91:01:b2:2c: e1:6b:f0:ba:e5:d6:72:88:67:3e:8f:c7:db:0e:50:5a:22:59: 22:e3:76:60:8e:8e:ea:a0:90:33:4c:60:e9:79:72:41:13:62: af:c1:5b:62:f1:49:c3:46:87:4f:bd:b4:02:a3:8b:ef:ee:3d: fc:35:1b:06:e0:99:3a:e2:8b:a4:e2:85:3b:18:64:c5:93:45: 4a:df:7c:15:6d:3d:ba:79:1f:21:f8:ae:c3:1c:9a:cc:48:f2: 4e:d4:fb:15:b4:1a:fd:32:07:7b:fa:ff:7a:4b:7d:10:48:96: db:20:bb:b9:e0:cd:3f:5d:56:89:8c:6a:d3:1e:57:45:fe:95: c7:f7:55:aa:02:47:1b:04:1d:93:17:3d:82:99:15:5d:dd:34: b1:ea:3f:e0:68:4e:05:91:12:cf:7a:6f:58:1e:6d:d3:03:2c: 34:23:c9:0a:99:5f:c2:c8:da:83:8a:90:4f:6e:76:56:73:88: 7f:1f:ad:0f:fd:d3:dc:7a:fb:13:a5:c8:57:dc:62:c8:99:64: 63:a5:dc:c8:33:b1:17:9f:29:79:0b:42:12:b1:f6:8d:69:76: 53:98:d0:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLa4F5oxD9WaVuAIJRhTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2FlMmMzN2M4NjYzMGU2MWFmZGY4OTAzZmUxNzRkZThi OTQ1YmUwHhcNMjUxMjA2MDEwMTMzWhcNMjUxMjA3MDEwMTMzWjAzMTEwLwYDVQQD Eyg4YzZlMjg3NTg3OTM4MDVhMTljNjE2OGQ3YTdmYjQwMThmNWE1NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw2gJAPQcuVAucwFG6PwESYafUTv QAqJ9QQx1Krw+g0PmQaUpnJrXzb7MGpesbssIieZ+3u8Zfbiw9pK3O1hnpPPDddJ fwth0SkpXeJoaSE2Wg5YqGiMHMvTQZKesYhsU7z0xWvQGx/wFQK0Qy0qxSC8JLqA +eTs+pAg1WCeugZWQLaVHl3OUhlWhBWCQJcl+UPoTiwB56cEheDI1l4wjNabeZy/ koxgG1q1KE3PDtSIVWo/Oe0ivg6kEGJO5n3qvt8ga7jamWQRESVF7omAzOqPGf4r Dffo+Gev9m2QS31hf58FwDbB/5GioCWTKEleqS/swHk3pCJYBhUTb41KFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxuKHWHk4BaGcYWjXp/tAGPWlbPMB8GA1UdIwQY MBaAFJXK4sN8hmMOYa/fiQP+F03ouUW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUt MzUxNDg0MWYzNmFlLzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUtMzUxNDg0MWYzNmFl LzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakA/xkE0 akYE8yRMCt4EKZfwACtKJ3bEXKSljtjY6EmRAbIs4WvwuuXWcohnPo/H2w5QWiJZ IuN2YI6O6qCQM0xg6XlyQRNir8FbYvFJw0aHT720AqOL7+49/DUbBuCZOuKLpOKF OxhkxZNFSt98FW09unkfIfiuwxyazEjyTtT7FbQa/TIHe/r/ekt9EEiW2yC7ueDN P11WiYxq0x5XRf6Vx/dVqgJHGwQdkxc9gpkVXd00seo/4GhOBZESz3pvWB5t0wMs NCPJCplfwsjag4qQT252VnOIfx+tD/3T3Hr7E6XIV9xiyJlkY6XcyDOxF58peQtC ErH2jWl2U5jQxg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:08 2025 by rpki-client