This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json) Hash identifier: OSfph2Dd2Ww+dS4wy7N61h64FmyqH8qHssoBFcyPAcs= Subject key identifier: BC:6D:7B:FB:DF:32:02:E0:A5:D8:67:02:F7:E1:56:CC:7F:BC:C7:9D Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Certificate serial: 019B53AA68B0BA7D6A42E694F125562DFAFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 04:00:35 +0000 Manifest this update: Thu 25 Dec 2025 04:00:35 +0000 Manifest next update: Fri 26 Dec 2025 04:00:35 +0000 Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=) 2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: 6HatT4Tj1akLO5LYxOZVOLgZYNO0r6BAroxD3OPvvxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:68:b0:ba:7d:6a:42:e6:94:f1:25:56:2d:fa:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Validity Not Before: Dec 25 04:00:35 2025 GMT Not After : Dec 26 04:00:35 2025 GMT Subject: CN=bc6d7bfbdf3202e0a5d86702f7e156cc7fbcc79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:5f:5f:3a:07:d9:39:4f:cf:68:94:bd:41: 81:58:61:ca:fe:48:60:92:16:53:39:e7:ea:f0:37: 97:76:c9:d6:3a:79:4c:58:a5:23:cd:96:d6:26:45: fd:02:f7:b8:c4:26:22:0b:fc:29:b5:bd:a4:0b:90: 10:73:84:7d:b0:4a:df:88:d6:17:3b:62:1b:29:b8: bb:ed:ea:14:5b:d5:80:6f:2f:7f:17:90:7e:6d:75: 65:23:7e:16:ec:10:d4:73:3a:68:33:41:10:af:9d: 62:6a:09:63:8f:3b:d9:2c:9c:a2:33:1d:7c:bc:1b: b0:20:e8:f3:8e:ff:86:c5:7e:e0:c0:ed:75:2f:74: 1b:d2:4d:af:cd:0c:bb:fb:58:fe:6f:0b:61:6d:4d: 21:1a:3f:4a:2e:49:33:d5:ab:55:47:9b:1a:89:ac: f2:15:34:9f:88:a3:18:2c:e3:0d:50:cd:37:f0:c1: 22:e1:84:f8:fd:93:0a:4f:29:65:18:93:72:b8:b2: 51:f9:d6:19:36:5a:a7:8b:3f:e4:b7:87:a9:4a:c5: 25:06:ba:4e:93:8e:7b:ae:5b:82:27:4b:a3:03:0c: fe:9c:75:df:dc:ef:89:2a:82:ca:16:6a:20:78:d6: bd:9a:a1:d1:b2:db:bf:1e:e5:d4:10:3f:67:36:a0: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:7B:FB:DF:32:02:E0:A5:D8:67:02:F7:E1:56:CC:7F:BC:C7:9D X509v3 Authority Key Identifier: keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:19:fd:ed:db:eb:29:6f:74:45:77:a7:27:11:42:e2:75:1d: e2:37:d2:d0:51:7b:e8:b5:92:7f:bb:bd:92:ac:c7:26:df:6a: d6:dc:7b:04:32:04:b8:c5:a7:32:a1:1b:3a:8b:42:68:ef:9a: d5:68:27:64:b0:6d:fe:c6:0d:d2:4f:17:96:ee:fa:ce:3d:41: 2b:2f:39:ca:b5:6a:55:59:2a:52:4e:db:37:53:fd:65:55:de: be:c7:db:b1:4d:de:cf:3c:20:28:da:c6:a1:5a:92:ce:ac:b1: df:13:e8:69:4f:0f:58:db:be:88:a0:6a:1c:b8:6c:75:fa:55: 32:8c:19:8e:aa:51:2e:e6:7e:4c:ba:a2:9b:65:98:b9:c0:e4: 0e:fa:2f:94:89:75:93:ba:c2:f3:7a:44:53:15:98:8e:b5:5a: d9:44:ef:e6:da:d8:20:bd:d1:95:86:a6:84:fc:40:0b:4d:ad: c2:f9:44:9b:ea:30:1c:ff:51:ff:46:c3:c2:36:39:2f:ce:1e: fc:0d:cd:d4:5e:b3:20:e5:6a:4a:5c:12:43:a0:f3:4b:b0:60: f3:78:36:6c:24:8e:66:a9:12:ea:60:6f:7f:15:9f:fa:a7:6b: 00:8b:e7:69:93:35:75:1b:13:09:bb:c4:a5:d0:59:72:f4:5e: 65:69:6e:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqmiwun1qQuaU8SVWLfr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw MTQ4MjcwHhcNMjUxMjI1MDQwMDM1WhcNMjUxMjI2MDQwMDM1WjAzMTEwLwYDVQQD EyhiYzZkN2JmYmRmMzIwMmUwYTVkODY3MDJmN2UxNTZjYzdmYmNjNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTBfXzoH2TlPz2iUvUGBWGHK/khg khZTOefq8DeXdsnWOnlMWKUjzZbWJkX9Ave4xCYiC/wptb2kC5AQc4R9sErfiNYX O2IbKbi77eoUW9WAby9/F5B+bXVlI34W7BDUczpoM0EQr51iagljjzvZLJyiMx18 vBuwIOjzjv+GxX7gwO11L3Qb0k2vzQy7+1j+bwthbU0hGj9KLkkz1atVR5saiazy FTSfiKMYLOMNUM038MEi4YT4/ZMKTyllGJNyuLJR+dYZNlqniz/kt4epSsUlBrpO k457rluCJ0ujAwz+nHXf3O+JKoLKFmogeNa9mqHRstu/HuXUED9nNqCfbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxte/vfMgLgpdhnAvfhVsx/vMedMB8GA1UdIwQY MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURn97dvr KW90RXenJxFC4nUd4jfS0FF76LWSf7u9kqzHJt9q1tx7BDIEuMWnMqEbOotCaO+a 1WgnZLBt/sYN0k8Xlu76zj1BKy85yrVqVVkqUk7bN1P9ZVXevsfbsU3ezzwgKNrG oVqSzqyx3xPoaU8PWNu+iKBqHLhsdfpVMowZjqpRLuZ+TLqim2WYucDkDvovlIl1 k7rC83pEUxWYjrVa2UTv5trYIL3RlYamhPxAC02twvlEm+owHP9R/0bDwjY5L84e /A3N1F6zIOVqSlwSQ6DzS7Bg83g2bCSOZqkS6mBvfxWf+qdrAIvnaZM1dRsTCbvE pdBZcvReZWluSg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:19 2025 by rpki-client