This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json) Hash identifier: 66Wl54AKEX3rGBx9RPYipcsDav+h9Fx/g+9uY3gYGcY= Subject key identifier: F9:85:4C:22:CF:5B:39:B5:89:63:7D:6D:E6:12:27:24:36:1D:11:25 Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f Certificate serial: 019B4091F07653BE5FFC111F8A3F0CC0AEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 11:01:04 +0000 Manifest this update: Sun 21 Dec 2025 11:01:04 +0000 Manifest next update: Mon 22 Dec 2025 11:01:04 +0000 Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=) 2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=) 3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: ++5Ux9o5FoCUjihrIrjpP+D+Ot+Ts9gIj/F1m5cVxz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:f0:76:53:be:5f:fc:11:1f:8a:3f:0c:c0:ae:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f Validity Not Before: Dec 21 11:01:04 2025 GMT Not After : Dec 22 11:01:04 2025 GMT Subject: CN=f9854c22cf5b39b589637d6de6122724361d1125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:0c:ba:22:d0:7a:1e:f0:73:06:04:35:c3: 3e:3d:97:a0:2d:64:db:c7:63:07:2f:c3:69:1d:ee: 27:e2:d8:6e:b4:e0:ea:07:c4:35:ed:b0:ce:33:b5: 96:82:3a:ad:ea:20:c3:7d:3c:ef:81:72:fb:2d:57: 79:5d:f8:4b:e8:ff:c1:79:54:f2:fe:68:fc:5e:36: 37:65:8a:2a:eb:e4:92:4b:2c:35:d3:98:41:fe:e1: 8d:a4:6d:ae:7d:b1:7e:c5:39:45:49:1f:f2:20:d1: bb:b3:37:60:45:4a:c5:32:b4:05:59:d7:04:ed:d7: ca:60:bc:90:4d:fe:45:ea:87:d9:0f:b7:6b:df:75: fc:9f:82:b9:5f:96:38:74:75:04:ba:c1:cd:b9:66: a9:a6:aa:5e:2c:4f:7a:9f:76:31:b5:70:9b:57:3e: 7b:52:4f:10:56:94:0f:3f:b4:e8:87:26:a7:51:ac: 71:8d:b0:69:a3:ee:61:d0:4c:d8:77:76:0a:87:21: b4:ae:10:e1:1e:23:78:2f:3f:bc:6a:7d:9a:87:91: d6:0d:01:13:6e:66:cc:f2:06:32:37:d9:b5:f3:2b: 33:cf:39:6c:8c:75:98:95:ac:d2:c1:fb:9e:79:95: 48:9e:5f:54:fc:a3:f0:e8:d6:17:52:10:1b:eb:cb: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:4C:22:CF:5B:39:B5:89:63:7D:6D:E6:12:27:24:36:1D:11:25 X509v3 Authority Key Identifier: keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9a:4f:9f:07:23:a2:d9:fc:55:b1:ab:59:45:11:47:bf:7b: b2:e1:a1:d5:e4:b5:2a:99:7a:b9:b0:bc:2d:d2:a1:4a:ee:ba: 49:e3:a1:8a:25:f1:ca:a2:f1:38:26:99:43:f0:99:30:fc:31: 1f:66:d7:1e:e7:d4:75:65:4f:2b:bd:b2:48:99:64:c5:e2:34: 29:79:9f:4b:b7:c5:81:68:3c:9e:a2:12:d6:fd:9a:15:9e:44: 88:e3:cf:36:af:9d:08:d9:62:01:85:d2:5e:7e:14:de:db:c2: 4f:42:4d:ed:15:11:46:3e:ed:c4:90:26:dd:6e:13:8c:bc:85: 7e:45:34:47:f0:0e:31:73:70:4d:05:c4:c5:b9:a4:af:64:b4: 5e:82:10:b6:50:c9:f5:e1:ee:ff:9a:80:c0:44:cf:9a:17:2e: 0a:e3:0b:9e:7b:37:66:ce:2b:72:a7:f5:58:f2:9f:25:1c:ce: b4:20:6f:7d:a1:a7:77:1b:d7:3b:35:b8:d6:9c:b6:9f:b3:41: 20:e4:11:ff:68:82:3f:06:38:b4:72:39:7c:0c:2c:a5:cd:cc: 24:1e:97:8a:61:35:17:15:23:46:e4:29:69:7a:de:0b:87:26: 72:c8:14:ed:11:f0:c7:fa:72:be:e9:39:09:da:b8:1d:99:31: 2f:de:9a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfB2U75f/BEfij8MwK6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzczZTljYzk3NDMwMWE3OGI3ZWU2ZDk5NDUyOGYxZjg4 MmU0NmYwHhcNMjUxMjIxMTEwMTA0WhcNMjUxMjIyMTEwMTA0WjAzMTEwLwYDVQQD EyhmOTg1NGMyMmNmNWIzOWI1ODk2MzdkNmRlNjEyMjcyNDM2MWQxMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wsMuiLQeh7wcwYENcM+PZegLWTb x2MHL8NpHe4n4thutODqB8Q17bDOM7WWgjqt6iDDfTzvgXL7LVd5XfhL6P/BeVTy /mj8XjY3ZYoq6+SSSyw105hB/uGNpG2ufbF+xTlFSR/yING7szdgRUrFMrQFWdcE 7dfKYLyQTf5F6ofZD7dr33X8n4K5X5Y4dHUEusHNuWappqpeLE96n3YxtXCbVz57 Uk8QVpQPP7TohyanUaxxjbBpo+5h0EzYd3YKhyG0rhDhHiN4Lz+8an2ah5HWDQET bmbM8gYyN9m18yszzzlsjHWYlazSwfueeZVInl9U/KPw6NYXUhAb68uUpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmFTCLPWzm1iWN9beYSJyQ2HRElMB8GA1UdIwQY MBaAFJZ3PpzJdDAaeLfubZlFKPH4guRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTct NzU3ODM4NjcwOTQ4LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTctNzU3ODM4NjcwOTQ4 LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5pPnwcj otn8VbGrWUURR797suGh1eS1Kpl6ubC8LdKhSu66SeOhiiXxyqLxOCaZQ/CZMPwx H2bXHufUdWVPK72ySJlkxeI0KXmfS7fFgWg8nqIS1v2aFZ5EiOPPNq+dCNliAYXS Xn4U3tvCT0JN7RURRj7txJAm3W4TjLyFfkU0R/AOMXNwTQXExbmkr2S0XoIQtlDJ 9eHu/5qAwETPmhcuCuMLnns3Zs4rcqf1WPKfJRzOtCBvfaGndxvXOzW41py2n7NB IOQR/2iCPwY4tHI5fAwspc3MJB6XimE1FxUjRuQpaXreC4cmcsgU7RHwx/pyvuk5 Cdq4HZkxL96aTg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:17:17 2025 by rpki-client