This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json) Hash identifier: x3QP2NOCW67JB/kjwOTWs7vyllRdZ+xwAgkjy8bc6Uo= Subject key identifier: B2:F2:86:A0:10:EF:21:86:5E:4A:94:21:46:76:1C:6F:E0:D5:F5:B4 Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c Certificate serial: 019B52982A8DA0D07928C0B6F43E5F378B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft Manifest number: 0406 Signing time: Wed 24 Dec 2025 23:01:02 +0000 Manifest this update: Wed 24 Dec 2025 23:01:02 +0000 Manifest next update: Thu 25 Dec 2025 23:01:02 +0000 Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: i/2DT+cmC3G09JJv6TuZ9Xe1w5Ym2Th0xJtEKaYIgOs=) 2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:2a:8d:a0:d0:79:28:c0:b6:f4:3e:5f:37:8b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c Validity Not Before: Dec 24 23:01:02 2025 GMT Not After : Dec 25 23:01:02 2025 GMT Subject: CN=b2f286a010ef21865e4a942146761c6fe0d5f5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:26:89:9a:9d:89:50:99:72:cc:d3:da:4d: dd:35:d5:7b:df:9a:85:98:92:12:2b:3a:a2:6d:74: 86:fe:4e:b2:44:25:e4:14:88:f3:e1:ac:e1:15:44: ee:14:89:75:7f:9b:b0:e7:c8:12:e7:eb:00:8f:64: 16:2d:d7:0d:b5:5b:30:d2:46:de:ab:49:c2:13:f5: bb:12:b8:43:22:81:4c:7e:03:20:c8:e0:64:b6:20: be:cf:d3:06:04:81:41:14:d7:47:42:50:0c:ce:0c: cf:a7:e7:22:64:6a:42:46:80:4a:dc:cd:0c:cb:06: 51:75:43:77:f0:8f:15:b7:ab:e7:41:d7:7f:85:1c: 38:6c:58:f0:ef:cc:e2:f6:e1:c9:e3:3d:3e:9b:70: a3:6e:6f:1d:c9:9d:22:0f:be:fb:c8:b4:d9:8a:3b: 30:f3:c7:ff:aa:a8:f2:d4:0e:d0:6a:f5:73:8c:51: 19:42:ce:bc:12:5e:44:a1:f2:94:a4:4a:92:bb:e1: e7:b8:4b:03:42:3c:c6:39:a9:64:57:58:ee:d0:d2: d8:ac:c0:e3:9c:d8:78:3c:91:d5:46:50:88:cb:a2: c0:9a:7b:9f:b4:32:3b:20:2e:12:58:6c:9b:bd:85: 2a:bc:72:59:7d:4a:2c:d1:c5:06:52:54:44:c4:6c: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F2:86:A0:10:EF:21:86:5E:4A:94:21:46:76:1C:6F:E0:D5:F5:B4 X509v3 Authority Key Identifier: keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:42:93:c2:f3:c6:ab:1a:51:b3:fa:f0:6a:78:7f:c7:5e:30: ce:ac:43:29:28:03:17:d4:ff:a5:69:09:3e:28:1c:86:65:c5: 13:b5:28:96:03:6b:0d:13:13:08:1e:27:b2:17:d9:19:30:52: b3:44:28:34:4d:59:c4:4b:95:4c:ec:28:a6:02:16:80:c9:70: 87:bc:ff:7b:ba:94:53:37:c4:f4:51:88:0c:44:18:3b:a7:9e: ee:05:b3:40:92:40:dd:bf:e3:a8:f6:60:ee:80:4d:40:94:d8: da:7a:5b:67:1f:6a:28:0e:dc:10:c5:0a:6f:de:23:c2:31:2a: 45:b9:6b:08:24:d5:47:d5:c7:c1:7b:fa:a1:a5:f0:1d:ef:5d: eb:06:00:d1:36:bf:fd:46:7b:0c:6f:a3:58:31:9c:a9:e4:fe: 7b:3b:98:44:66:db:05:e0:9a:f3:d1:12:3a:41:b1:da:01:b2: 05:d2:1f:d4:9f:53:e4:aa:ed:d1:bb:73:39:da:5f:2b:3a:56: cb:15:db:66:6f:42:c6:78:ef:ac:94:dc:5d:f5:ed:fc:aa:26: e4:0f:41:ef:a2:42:4d:a3:1c:29:b9:a8:91:3b:a5:0a:79:bb: 7f:f7:70:97:58:ec:18:59:68:57:b4:4a:27:d4:30:c1:ad:af: 50:54:84:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmCqNoNB5KMC29D5fN4uUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZjU4YWE1MjZjODFlMzJjMWI5NTliZmNhZGYwOGMxOWFk YzQxMmMwHhcNMjUxMjI0MjMwMTAyWhcNMjUxMjI1MjMwMTAyWjAzMTEwLwYDVQQD EyhiMmYyODZhMDEwZWYyMTg2NWU0YTk0MjE0Njc2MWM2ZmUwZDVmNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uomiZqdiVCZcszT2k3dNdV735qF mJISKzqibXSG/k6yRCXkFIjz4azhFUTuFIl1f5uw58gS5+sAj2QWLdcNtVsw0kbe q0nCE/W7ErhDIoFMfgMgyOBktiC+z9MGBIFBFNdHQlAMzgzPp+ciZGpCRoBK3M0M ywZRdUN38I8Vt6vnQdd/hRw4bFjw78zi9uHJ4z0+m3Cjbm8dyZ0iD777yLTZijsw 88f/qqjy1A7QavVzjFEZQs68El5EofKUpEqSu+HnuEsDQjzGOalkV1ju0NLYrMDj nNh4PJHVRlCIy6LAmnuftDI7IC4SWGybvYUqvHJZfUos0cUGUlRExGz+eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLyhqAQ7yGGXkqUIUZ2HG/g1fW0MB8GA1UdIwQY MBaAFC31iqUmyB4ywblZv8rfCMGa3EEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODkt N2U4Yjk3NTI4YjFjLzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODktN2U4Yjk3NTI4YjFj LzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEKTwvPG qxpRs/rwanh/x14wzqxDKSgDF9T/pWkJPigchmXFE7UolgNrDRMTCB4nshfZGTBS s0QoNE1ZxEuVTOwopgIWgMlwh7z/e7qUUzfE9FGIDEQYO6ee7gWzQJJA3b/jqPZg 7oBNQJTY2npbZx9qKA7cEMUKb94jwjEqRblrCCTVR9XHwXv6oaXwHe9d6wYA0Ta/ /UZ7DG+jWDGcqeT+ezuYRGbbBeCa89ESOkGx2gGyBdIf1J9T5Krt0btzOdpfKzpW yxXbZm9CxnjvrJTcXfXt/Kom5A9B76JCTaMcKbmokTulCnm7f/dwl1jsGFloV7RK J9Qwwa2vUFSE+w== -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:21 2025 by rpki-client