This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json) Hash identifier: h1SyXMqu574ul5CPxxk6YCMRe9eWXamjNxEr+L5/XF4= Subject key identifier: 25:3B:7D:C8:92:51:10:CE:C8:61:0F:03:F8:32:C9:53:35:7D:34:8E Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf Certificate serial: 019B3D90FF130C8BB4F20370FC72ED947DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:01:11 +0000 Manifest this update: Sat 20 Dec 2025 21:01:11 +0000 Manifest next update: Sun 21 Dec 2025 21:01:11 +0000 Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: R3GeU9Z0U72k3k2KO/wmgx44zudyReqFNpO4QIJvBSY=) 2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ff:13:0c:8b:b4:f2:03:70:fc:72:ed:94:7d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf Validity Not Before: Dec 20 21:01:11 2025 GMT Not After : Dec 21 21:01:11 2025 GMT Subject: CN=253b7dc8925110cec8610f03f832c953357d348e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:d3:a2:2c:b8:8b:84:3a:0e:db:14:66:a7: 2d:9a:9f:03:33:e2:f8:02:80:26:06:1c:82:2a:f6: 6e:a7:07:49:41:4a:b8:0a:7b:30:90:3a:0d:ed:24: 12:35:4c:79:1c:91:fa:46:88:c3:a8:37:6a:a1:f5: 5e:ff:55:a6:c3:7d:89:23:86:62:53:74:dc:00:31: b6:ae:62:51:07:1d:90:bc:5b:37:44:cc:1f:ae:7e: 2b:cb:7d:16:c8:4c:e3:7c:04:b0:b1:e6:94:3e:bd: d8:46:a7:b3:f4:86:88:6f:ae:43:49:f7:c0:45:39: 2f:75:26:92:31:80:a1:9e:85:81:2b:f2:4e:c9:5d: 44:68:93:84:6f:e1:39:8e:75:80:87:81:a1:ca:27: 66:a0:c9:4d:50:6a:a3:2b:55:b1:20:5e:09:a2:b0: f9:b6:0b:a4:ca:ad:43:ea:ee:ce:e2:2a:7d:ae:10: 9a:10:0a:f5:18:ba:c2:4f:3a:1b:21:fb:b8:bb:9a: ab:09:f0:c7:5d:a4:62:04:e8:0b:bb:fa:20:da:63: 4e:d9:af:d4:d8:82:61:9f:f9:b8:b6:86:7c:01:88: 04:ae:c9:39:c8:f4:ca:09:fa:59:29:fa:9a:32:52: 45:3f:d2:32:18:e8:d8:fb:bd:f6:2f:b7:09:39:72: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3B:7D:C8:92:51:10:CE:C8:61:0F:03:F8:32:C9:53:35:7D:34:8E X509v3 Authority Key Identifier: keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:12:90:c6:5f:04:b5:39:d4:f0:ed:f4:69:19:7d:0a:d0:7c: c5:1a:58:61:64:4a:90:d7:e2:b5:4a:85:97:a9:df:f5:28:99: fc:5d:5e:f8:8e:03:cc:f9:e2:96:03:a2:e9:16:28:3f:68:c4: 17:0a:ad:56:e4:82:77:40:06:bb:69:02:6f:30:17:3c:d1:9b: 4f:92:9b:8e:ba:01:a0:70:d0:76:83:76:52:d5:5b:62:d0:ea: c1:bc:6c:81:f8:5e:3f:ae:1d:ac:05:93:8e:98:5e:6b:2b:b8: d3:d1:db:04:3b:d9:48:c8:89:86:19:13:16:16:d8:02:43:4a: f9:d8:f6:e7:36:ae:fe:5c:97:08:d6:f4:84:17:a6:24:5d:dc: 05:c4:30:84:bf:a1:fa:31:46:78:5d:ba:23:70:5e:d4:7b:75: 2c:aa:49:fa:52:91:0e:3e:b6:59:69:e1:eb:65:3b:ab:e7:38: ee:8d:ff:f0:d4:94:09:ab:cd:ba:79:03:44:57:f6:81:54:2c: 8c:f7:78:d2:07:13:5c:7f:f1:90:4c:74:ca:fe:08:f3:8b:9a: 8f:08:68:11:88:25:e7:aa:9e:bd:79:2b:0e:4e:c4:8c:23:ab: 13:5e:af:b7:4d:82:f1:d7:63:92:9e:2e:8d:fa:f1:25:57:a0: c8:5a:27:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kP8TDIu08gNw/HLtlH23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZmI0NzZmY2YzMTNjZmYyOTVkZTBkMTcwOTE1NmFmMDI1 M2Q3Y2YwHhcNMjUxMjIwMjEwMTExWhcNMjUxMjIxMjEwMTExWjAzMTEwLwYDVQQD EygyNTNiN2RjODkyNTExMGNlYzg2MTBmMDNmODMyYzk1MzM1N2QzNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusDToiy4i4Q6DtsUZqctmp8DM+L4 AoAmBhyCKvZupwdJQUq4CnswkDoN7SQSNUx5HJH6RojDqDdqofVe/1Wmw32JI4Zi U3TcADG2rmJRBx2QvFs3RMwfrn4ry30WyEzjfASwseaUPr3YRqez9IaIb65DSffA RTkvdSaSMYChnoWBK/JOyV1EaJOEb+E5jnWAh4GhyidmoMlNUGqjK1WxIF4JorD5 tgukyq1D6u7O4ip9rhCaEAr1GLrCTzobIfu4u5qrCfDHXaRiBOgLu/og2mNO2a/U 2IJhn/m4toZ8AYgErsk5yPTKCfpZKfqaMlJFP9IyGOjY+732L7cJOXK1kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU7fciSURDOyGEPA/gyyVM1fTSOMB8GA1UdIwQY MBaAFCz7R2/PMTz/KV3g0XCRVq8CU9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQt ZmE0ZGQyMWFlM2RjLzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQtZmE0ZGQyMWFlM2Rj LzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxKQxl8E tTnU8O30aRl9CtB8xRpYYWRKkNfitUqFl6nf9SiZ/F1e+I4DzPnilgOi6RYoP2jE FwqtVuSCd0AGu2kCbzAXPNGbT5KbjroBoHDQdoN2UtVbYtDqwbxsgfheP64drAWT jpheayu409HbBDvZSMiJhhkTFhbYAkNK+dj25zau/lyXCNb0hBemJF3cBcQwhL+h +jFGeF26I3Be1Ht1LKpJ+lKRDj62WWnh62U7q+c47o3/8NSUCavNunkDRFf2gVQs jPd40gcTXH/xkEx0yv4I84uajwhoEYgl56qevXkrDk7EjCOrE16vt02C8ddjkp4u jfrxJVegyFonlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:02 2025 by rpki-client