This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json) Hash identifier: yp2fRJTtSBFhyF4mOiXP87UGtI4OSUoaL10vZC3d3Ak= Subject key identifier: 74:BC:9F:F8:9A:17:34:0B:94:B7:90:EB:DB:5A:87:51:28:25:9F:26 Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f Certificate serial: 019B28C039C513C8C79B2DE04F096928937A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft Manifest number: 0384 Signing time: Tue 16 Dec 2025 20:00:44 +0000 Manifest this update: Tue 16 Dec 2025 20:00:44 +0000 Manifest next update: Wed 17 Dec 2025 20:00:44 +0000 Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=) 2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: iXOZqG5n8/zmerz2plywKoGfqZa7bI0X2XsBtLOsHNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:39:c5:13:c8:c7:9b:2d:e0:4f:09:69:28:93:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f Validity Not Before: Dec 16 20:00:44 2025 GMT Not After : Dec 17 20:00:44 2025 GMT Subject: CN=74bc9ff89a17340b94b790ebdb5a875128259f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:46:06:f5:2e:dd:60:79:21:cc:76:7b:13: 58:e9:46:a9:28:c1:d3:f6:07:78:94:a7:49:32:b3: a9:42:06:12:e6:aa:cc:ae:5d:6c:fc:88:98:b9:bd: 09:82:6d:2b:a3:47:55:02:16:02:23:52:65:7f:5b: 0e:23:95:d8:2b:3e:1c:ee:1d:c1:9b:8c:31:ef:8f: ec:aa:53:89:58:4b:bd:97:e4:9c:10:1b:94:f4:ad: e2:7f:3f:99:84:83:9e:ca:5e:95:7c:1f:ec:ac:a1: c6:b3:4e:9f:27:5f:6c:1c:a8:65:9a:50:ab:66:1d: 30:ff:49:88:c2:c3:77:a5:8e:ff:75:1b:32:14:bc: 3f:26:d3:8b:23:99:40:c4:c0:f8:e9:9e:e2:80:04: fe:86:18:27:b9:20:6f:c2:6e:08:38:b8:e0:e2:04: 97:c8:16:a8:10:c2:ec:7c:ef:a8:20:a5:fe:e5:69: b2:e1:7d:55:d4:5d:0a:6c:54:e4:12:db:cd:6b:01: 71:53:96:f0:ae:6e:ae:23:6d:28:2e:32:44:13:39: 14:39:2e:70:4a:78:e7:45:c0:52:b7:29:6c:51:ef: 79:98:19:a1:44:b8:1d:02:7f:e8:12:95:68:9e:da: e4:ea:b0:9b:f1:4b:cd:e9:5c:60:c9:6c:71:2d:50: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:9F:F8:9A:17:34:0B:94:B7:90:EB:DB:5A:87:51:28:25:9F:26 X509v3 Authority Key Identifier: keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:7a:4f:84:6b:3e:7a:af:0f:9d:68:24:70:a7:1c:a6:4c:77: a5:23:38:66:8f:cd:cb:12:2f:fc:9e:4c:9a:d1:e6:1a:e4:db: 41:be:56:ce:94:d8:f9:4b:d4:a6:df:12:13:d3:0d:a5:32:81: 93:1a:70:68:37:18:3e:29:cd:d4:0f:cc:ac:2d:f8:7d:51:72: db:cd:51:46:10:2d:f8:e0:cd:69:3d:5d:ab:5b:a9:66:a4:5d: f8:d8:e7:3f:6a:53:54:11:70:a7:0f:e5:65:c0:fa:e5:47:0e: 18:ab:90:dd:9d:ed:80:1a:d5:df:39:a2:46:52:e5:1f:e6:b9: 82:72:37:f8:0f:67:fd:eb:06:b7:b5:56:07:04:72:c0:d1:15: 41:9e:9f:35:a6:fa:f9:39:7c:eb:01:00:83:75:58:5d:96:af: 33:2b:2f:0d:b5:ed:95:0c:a1:35:a9:c1:41:62:e2:12:05:87: de:70:24:37:a6:63:86:8b:17:ba:56:b6:ab:78:89:3d:8f:29: ef:40:f5:e1:1d:87:64:6d:dc:bb:58:65:f8:12:9f:05:38:97: ae:ca:15:c0:cc:43:e8:e8:d9:1b:ab:07:86:22:36:4b:05:c4: 68:78:81:94:fc:ef:63:f8:db:45:8f:6d:96:dc:c3:65:fe:1a: d8:c5:f6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowDnFE8jHmy3gTwlpKJN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjZmZTlhN2UyMWE3NzNmNjFkNjUxMjNmODNlMjgyOGZk MDQyOWYwHhcNMjUxMjE2MjAwMDQ0WhcNMjUxMjE3MjAwMDQ0WjAzMTEwLwYDVQQD Eyg3NGJjOWZmODlhMTczNDBiOTRiNzkwZWJkYjVhODc1MTI4MjU5ZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEhGBvUu3WB5Icx2exNY6UapKMHT 9gd4lKdJMrOpQgYS5qrMrl1s/IiYub0Jgm0ro0dVAhYCI1Jlf1sOI5XYKz4c7h3B m4wx74/sqlOJWEu9l+ScEBuU9K3ifz+ZhIOeyl6VfB/srKHGs06fJ19sHKhlmlCr Zh0w/0mIwsN3pY7/dRsyFLw/JtOLI5lAxMD46Z7igAT+hhgnuSBvwm4IOLjg4gSX yBaoEMLsfO+oIKX+5Wmy4X1V1F0KbFTkEtvNawFxU5bwrm6uI20oLjJEEzkUOS5w SnjnRcBStylsUe95mBmhRLgdAn/oEpVontrk6rCb8UvN6VxgyWxxLVBezQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS8n/iaFzQLlLeQ69tah1EoJZ8mMB8GA1UdIwQY MBaAFC0m/pp+Iadz9h1lEj+D4oKP0EKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUt ZWIzMDZhOGQ0YWI1LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUtZWIzMDZhOGQ0YWI1 LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8npPhGs+ eq8PnWgkcKccpkx3pSM4Zo/NyxIv/J5MmtHmGuTbQb5WzpTY+UvUpt8SE9MNpTKB kxpwaDcYPinN1A/MrC34fVFy281RRhAt+ODNaT1dq1upZqRd+NjnP2pTVBFwpw/l ZcD65UcOGKuQ3Z3tgBrV3zmiRlLlH+a5gnI3+A9n/esGt7VWBwRywNEVQZ6fNab6 +Tl86wEAg3VYXZavMysvDbXtlQyhNanBQWLiEgWH3nAkN6ZjhosXula2q3iJPY8p 70D14R2HZG3cu1hl+BKfBTiXrsoVwMxD6OjZG6sHhiI2SwXEaHiBlPzvY/jbRY9t ltzDZf4a2MX2RA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:14:04 2025 by rpki-client