This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json) Hash identifier: 2eRpeq5v/R7zP+VL37rrIcnRsHqPjZLLxwn1Fe9G+64= Subject key identifier: DF:2A:36:EF:D1:87:3A:A0:86:32:7F:54:0F:04:16:AD:8A:8C:1A:AB Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2 Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2 Certificate serial: 019B34C545BCC2F18E73EA9AE5E50E999B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:01:42 +0000 Manifest this update: Fri 19 Dec 2025 04:01:42 +0000 Manifest next update: Sat 20 Dec 2025 04:01:42 +0000 Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: CsPofBP5km8XrYR5wORyqQ18RvvKFdqUIMy8dr5BzGw=) 2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:45:bc:c2:f1:8e:73:ea:9a:e5:e5:0e:99:9b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2 Validity Not Before: Dec 19 04:01:42 2025 GMT Not After : Dec 20 04:01:42 2025 GMT Subject: CN=df2a36efd1873aa086327f540f0416ad8a8c1aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:a1:f9:dd:56:36:a9:d1:fc:40:8d:bc:84: 24:13:85:af:22:04:22:94:d9:b3:dd:97:4c:59:3e: db:c7:b0:85:88:a4:99:14:bb:59:ed:58:c7:43:33: aa:59:d9:a7:1d:8b:78:f0:0b:20:68:e6:38:5c:76: 67:bc:c4:f4:d1:61:c6:e5:06:bc:79:5c:2f:c9:8a: e1:57:52:b3:03:23:a4:48:19:b1:8b:8e:a5:93:88: 10:4e:e2:15:9b:3a:67:ad:ae:a2:9c:10:1f:bc:4e: db:fe:10:a6:82:83:cd:19:06:55:f8:a1:1b:3a:37: 79:b9:d0:7f:63:d4:19:c2:ce:fc:69:46:20:85:ed: 5c:0b:4a:02:ff:8a:2f:23:68:22:b4:11:4d:93:b5: f5:88:a2:de:45:4e:05:f8:d3:83:ba:ca:7b:30:e3: f5:0c:3c:13:8e:8a:c3:f6:8a:fe:24:fa:56:02:49: f7:94:c7:73:9b:74:00:dd:30:58:1f:5d:f4:b0:bd: 26:9c:8e:ab:d0:a3:d7:70:53:1b:cf:04:5c:2d:e8: 98:51:3b:71:a5:c5:bf:c1:c5:ce:8f:b8:d5:73:51: ad:ba:57:95:5a:a8:e4:84:d1:41:73:dd:6e:45:a3: 09:16:71:a6:3d:ea:8a:aa:f2:40:e5:81:cb:38:08: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:36:EF:D1:87:3A:A0:86:32:7F:54:0F:04:16:AD:8A:8C:1A:AB X509v3 Authority Key Identifier: keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a9:76:45:ce:78:63:1d:6e:33:9d:a2:7c:fc:27:49:03:08: 03:5b:26:6c:50:a4:88:a8:d2:80:93:b0:06:88:db:20:17:cd: 45:f6:20:9a:34:5c:55:71:2d:c9:94:8e:2e:38:c1:f6:cf:42: 57:41:48:65:c6:4c:07:a9:18:c1:be:12:d6:53:de:51:2c:9d: 4e:06:5f:76:c7:f4:e1:6c:51:57:06:23:91:e7:3f:18:e8:03: b4:73:d0:e1:18:85:1a:d7:df:8c:12:6f:d2:21:03:74:2b:ee: 45:11:ff:0c:86:ce:97:05:0a:fa:df:15:e5:4a:71:4b:e5:e0: ac:72:5b:ff:bd:61:8b:11:42:60:45:a5:d9:72:e2:31:d6:a0: 81:70:b7:63:75:2d:a0:2a:db:6a:4c:4a:a8:68:33:66:83:8b: 0c:54:08:a9:b4:06:28:eb:d6:9d:e1:2b:8e:69:1c:30:41:09: 20:2a:ca:20:a0:f5:ff:cc:75:36:d8:23:ae:7d:c6:92:94:ed: b8:bd:6e:37:be:af:83:86:cb:bd:14:28:36:50:34:00:96:7a: 07:17:04:5f:78:d3:34:9b:53:24:fd:cf:13:d3:5f:4b:44:5b: f4:27:54:dd:46:81:45:da:4d:d1:dd:5e:82:62:4c:b4:8b:a2: 51:0e:16:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUW8wvGOc+qa5eUOmZshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYjYxNmYzYWQwMzYzZTcyNjljYzJlYjU4ZDFiYzA4NmNj OTc1ZjIwHhcNMjUxMjE5MDQwMTQyWhcNMjUxMjIwMDQwMTQyWjAzMTEwLwYDVQQD EyhkZjJhMzZlZmQxODczYWEwODYzMjdmNTQwZjA0MTZhZDhhOGMxYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppOh+d1WNqnR/ECNvIQkE4WvIgQi lNmz3ZdMWT7bx7CFiKSZFLtZ7VjHQzOqWdmnHYt48AsgaOY4XHZnvMT00WHG5Qa8 eVwvyYrhV1KzAyOkSBmxi46lk4gQTuIVmzpnra6inBAfvE7b/hCmgoPNGQZV+KEb Ojd5udB/Y9QZws78aUYghe1cC0oC/4ovI2gitBFNk7X1iKLeRU4F+NODusp7MOP1 DDwTjorD9or+JPpWAkn3lMdzm3QA3TBYH130sL0mnI6r0KPXcFMbzwRcLeiYUTtx pcW/wcXOj7jVc1GtuleVWqjkhNFBc91uRaMJFnGmPeqKqvJA5YHLOAgmFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8qNu/RhzqghjJ/VA8EFq2KjBqrMB8GA1UdIwQY MBaAFC22FvOtA2PnJpzC61jRvAhsyXXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEt YTRiNTVhNzFjMjI4LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEtYTRiNTVhNzFjMjI4 LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHal2Rc54 Yx1uM52ifPwnSQMIA1smbFCkiKjSgJOwBojbIBfNRfYgmjRcVXEtyZSOLjjB9s9C V0FIZcZMB6kYwb4S1lPeUSydTgZfdsf04WxRVwYjkec/GOgDtHPQ4RiFGtffjBJv 0iEDdCvuRRH/DIbOlwUK+t8V5UpxS+XgrHJb/71hixFCYEWl2XLiMdaggXC3Y3Ut oCrbakxKqGgzZoOLDFQIqbQGKOvWneErjmkcMEEJICrKIKD1/8x1Ntgjrn3GkpTt uL1uN76vg4bLvRQoNlA0AJZ6BxcEX3jTNJtTJP3PE9NfS0Rb9CdU3UaBRdpN0d1e gmJMtIuiUQ4WJA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:09 2025 by rpki-client