This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json) Hash identifier: j8lQLIM435OIyk73tIFl333DtQueGPXk5HGQyAGXaQY= Subject key identifier: 6D:5A:D2:B2:C8:B4:52:0D:C4:FA:F6:13:70:34:38:03:FF:CF:E6:9A Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b Certificate serial: 019B2F67866EED3394DC147392ECD1B185F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:01:12 +0000 Manifest this update: Thu 18 Dec 2025 03:01:12 +0000 Manifest next update: Fri 19 Dec 2025 03:01:12 +0000 Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=) 2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: Y8H0vfzFZ3Fi33mZo0E0BF4v9/PIeOTJNhCqvkFUfgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:86:6e:ed:33:94:dc:14:73:92:ec:d1:b1:85:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b Validity Not Before: Dec 18 03:01:12 2025 GMT Not After : Dec 19 03:01:12 2025 GMT Subject: CN=6d5ad2b2c8b4520dc4faf61370343803ffcfe69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:24:29:bc:f4:8f:d5:a7:20:3d:eb:7d:b0: f2:46:5e:99:47:68:84:1a:63:f7:c1:b5:fc:56:33: 00:c4:c9:86:08:f9:60:1b:51:87:5a:b8:dc:04:6a: 51:c5:63:60:de:8a:54:f7:c3:0b:ed:30:8b:34:61: 6d:60:61:54:47:97:f2:8b:6f:a6:af:62:67:d5:bb: 7e:c4:a8:14:9d:61:b6:7d:e7:c9:64:1f:1a:fc:9c: 67:2c:14:18:74:3c:11:bf:84:ea:93:a9:10:b2:4b: 24:6c:fd:9e:0b:51:30:98:b3:81:44:74:e5:b8:b0: 70:8c:21:06:89:a0:af:ea:d6:d0:e1:1b:b4:14:90: 14:b9:f8:fd:59:af:93:26:c0:60:73:e9:07:ee:3f: 1b:95:39:f8:ab:2e:cc:14:d0:cd:77:56:0a:1a:6a: 2a:e1:4e:5d:e8:84:94:96:5e:0f:10:97:73:a9:ab: 72:ab:41:38:be:71:ec:0f:6b:2c:68:4e:26:7e:9c: f0:74:5c:55:e5:59:10:8b:ef:d3:c3:ec:9d:a3:3c: ae:84:1d:5e:f3:92:c8:ec:fa:b3:ed:75:ca:cf:0f: f5:b5:c8:5b:15:9d:bf:f6:af:8a:b6:92:e0:11:84: 57:17:97:88:42:19:16:30:9b:3b:45:07:b6:22:79: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:D2:B2:C8:B4:52:0D:C4:FA:F6:13:70:34:38:03:FF:CF:E6:9A X509v3 Authority Key Identifier: keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:92:87:18:85:cf:87:93:ca:be:ea:6f:02:31:bc:dc:56:cc: 9e:6d:1b:cb:cb:66:8d:9b:45:d6:70:4e:7e:a2:a6:5b:77:90: c7:2f:f8:23:dd:4b:01:8c:e3:2a:2b:bb:3a:7b:63:b8:fe:43: a7:49:5a:0f:32:b1:f1:79:32:e3:bb:ed:83:81:64:61:a5:92: b9:38:58:6c:c1:49:32:c6:0b:70:5b:0d:6e:77:2a:16:d8:00: a1:59:fd:82:69:af:48:42:e4:a6:00:de:93:75:cf:6f:fa:e1: 4a:db:4f:9b:51:dd:16:fa:e3:ee:98:2f:33:d1:e2:e4:0c:2b: 79:72:c1:27:57:a2:9b:01:a6:55:8d:ed:df:f5:58:44:81:37: 91:3c:8a:10:19:50:dc:a7:f3:b5:c0:07:7b:92:12:99:2e:48: 2e:32:5c:a2:1f:fa:cd:36:d2:cb:58:e1:24:47:37:cb:03:70: 3f:eb:09:af:3a:04:c1:c9:0e:63:f6:8a:b3:6a:a4:ca:ce:67: ba:2e:ff:7c:a7:14:bc:56:22:95:7d:2f:45:34:68:13:b6:2d: 83:0a:b3:45:8d:88:1f:cc:77:82:18:b3:dc:4b:b1:1c:78:ef: 2c:99:72:57:83:e8:ae:93:20:24:21:ba:93:25:1d:42:cf:7a: a3:20:05:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ4Zu7TOU3BRzkuzRsYX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi YjQyN2IwHhcNMjUxMjE4MDMwMTEyWhcNMjUxMjE5MDMwMTEyWjAzMTEwLwYDVQQD Eyg2ZDVhZDJiMmM4YjQ1MjBkYzRmYWY2MTM3MDM0MzgwM2ZmY2ZlNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wQkKbz0j9WnID3rfbDyRl6ZR2iE GmP3wbX8VjMAxMmGCPlgG1GHWrjcBGpRxWNg3opU98ML7TCLNGFtYGFUR5fyi2+m r2Jn1bt+xKgUnWG2fefJZB8a/JxnLBQYdDwRv4Tqk6kQskskbP2eC1EwmLOBRHTl uLBwjCEGiaCv6tbQ4Ru0FJAUufj9Wa+TJsBgc+kH7j8blTn4qy7MFNDNd1YKGmoq 4U5d6ISUll4PEJdzqatyq0E4vnHsD2ssaE4mfpzwdFxV5VkQi+/Tw+ydozyuhB1e 85LI7Pqz7XXKzw/1tchbFZ2/9q+KtpLgEYRXF5eIQhkWMJs7RQe2InlN2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1a0rLItFINxPr2E3A0OAP/z+aaMB8GA1UdIwQY MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2JKHGIXP h5PKvupvAjG83FbMnm0by8tmjZtF1nBOfqKmW3eQxy/4I91LAYzjKiu7OntjuP5D p0laDzKx8Xky47vtg4FkYaWSuThYbMFJMsYLcFsNbncqFtgAoVn9gmmvSELkpgDe k3XPb/rhSttPm1HdFvrj7pgvM9Hi5AwreXLBJ1eimwGmVY3t3/VYRIE3kTyKEBlQ 3KfztcAHe5ISmS5ILjJcoh/6zTbSy1jhJEc3ywNwP+sJrzoEwckOY/aKs2qkys5n ui7/fKcUvFYilX0vRTRoE7YtgwqzRY2IH8x3ghiz3EuxHHjvLJlyV4PorpMgJCG6 kyUdQs96oyAFXA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:00:27 2025 by rpki-client