This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json) Hash identifier: LcvT4BCHrAT4h8s1ofwSzMuD+OdDTkRJkBXPaZHTNRY= Subject key identifier: 60:C0:64:86:3A:A6:C3:BD:9A:79:EA:45:A7:72:62:3E:49:93:7D:95 Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3 Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3 Certificate serial: 019B3FB6880A7352170CF6531E69A307CEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 07:01:25 +0000 Manifest this update: Sun 21 Dec 2025 07:01:25 +0000 Manifest next update: Mon 22 Dec 2025 07:01:25 +0000 Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: d5GEGiJ+Vh86SzG/So45IK/isM5IaWjbA0N+S6I72YY=) 2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=) 3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:88:0a:73:52:17:0c:f6:53:1e:69:a3:07:ce:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3 Validity Not Before: Dec 21 07:01:25 2025 GMT Not After : Dec 22 07:01:25 2025 GMT Subject: CN=60c064863aa6c3bd9a79ea45a772623e49937d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:6a:ca:6b:c0:dd:11:82:4e:a2:c5:c5:72: ba:c9:17:54:b0:4b:5a:96:c6:1c:3c:0a:17:ef:52: 67:a8:32:5e:4f:8f:5e:e4:dc:1b:de:8c:1a:b0:fd: f2:6e:c2:32:b2:13:14:a0:46:f9:d1:47:02:4f:f1: 89:d7:b5:70:4b:c4:59:af:7c:e4:d3:b1:40:71:80: 30:c5:69:e8:8b:53:47:6b:26:20:ee:6d:a0:c7:60: 96:aa:62:b2:b6:93:9f:7f:f2:02:1c:9f:c2:d7:7a: 0f:7f:f7:3f:8f:0f:9b:58:17:ab:6a:f4:84:de:78: 95:c0:59:00:95:ff:06:e5:5d:ea:0f:b2:80:86:21: 9d:0e:f5:ae:35:e3:37:7c:64:89:c0:65:23:0f:97: ab:42:50:65:61:1c:73:41:93:aa:e3:a7:6b:77:c4: f0:52:96:31:9f:d5:71:29:0d:a7:64:86:5d:66:5c: 48:e7:eb:fc:4c:ef:85:b3:f5:de:05:85:65:56:be: e9:85:09:1f:77:74:a9:6d:ef:33:a3:0f:13:f4:9e: c5:4f:5a:dc:9e:43:01:7e:93:ed:7c:f4:69:fe:e6: bd:b3:2c:92:df:1e:ef:3f:78:5b:52:38:97:d7:c9: 55:35:5b:4f:94:6d:43:7d:03:bd:1a:be:b6:69:78: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:64:86:3A:A6:C3:BD:9A:79:EA:45:A7:72:62:3E:49:93:7D:95 X509v3 Authority Key Identifier: keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d7:fd:d4:1e:be:2b:c4:37:6d:33:ac:c4:ac:23:13:26:ae: 88:4a:d2:9b:da:51:c8:ca:15:a5:47:46:9e:ed:fe:e9:e3:84: 50:11:2c:ec:d6:ac:37:41:d0:89:3c:34:f6:3a:be:d1:b8:cd: 78:99:3a:0c:10:cb:c7:57:dc:76:b7:0f:2e:62:72:f3:09:5f: a8:53:5e:4a:94:d2:28:a5:0e:76:95:e1:8a:19:df:bc:65:2f: ee:6c:6c:1e:ec:e6:47:f0:96:65:dd:fa:03:57:08:ab:37:61: 15:c4:dc:86:ee:dc:ee:6d:d3:02:50:b8:06:bf:2f:c8:d3:03: 99:ca:73:1e:e9:3b:8c:77:f3:59:8f:c6:b6:24:11:a8:4c:23: 4c:a0:d8:f5:a7:2c:63:01:f6:85:a1:ea:61:be:c5:38:91:c6: 32:ce:8c:b1:bd:74:d4:03:25:9a:20:1e:ec:93:af:ab:92:8b: f6:de:f3:4e:bb:15:76:22:80:af:9c:75:38:53:56:f0:23:ae: de:a9:80:52:10:70:3d:c3:f3:63:5e:0b:cc:cf:a9:13:a3:3d: 80:5c:78:7d:71:8b:46:26:9f:d3:bc:3a:f4:15:93:b8:22:6a: 54:f9:8c:30:89:2d:25:7c:e6:66:43:87:a7:80:a8:5e:b2:84: d8:4d:c2:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/togKc1IXDPZTHmmjB86oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjY2I5Yjg5YmMwYmMyMTc1MjQ3NGU2NTBkYzM0ZjA2OWRh NWMwYjMwHhcNMjUxMjIxMDcwMTI1WhcNMjUxMjIyMDcwMTI1WjAzMTEwLwYDVQQD Eyg2MGMwNjQ4NjNhYTZjM2JkOWE3OWVhNDVhNzcyNjIzZTQ5OTM3ZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq1qymvA3RGCTqLFxXK6yRdUsEta lsYcPAoX71JnqDJeT49e5Nwb3owasP3ybsIyshMUoEb50UcCT/GJ17VwS8RZr3zk 07FAcYAwxWnoi1NHayYg7m2gx2CWqmKytpOff/ICHJ/C13oPf/c/jw+bWBeravSE 3niVwFkAlf8G5V3qD7KAhiGdDvWuNeM3fGSJwGUjD5erQlBlYRxzQZOq46drd8Tw UpYxn9VxKQ2nZIZdZlxI5+v8TO+Fs/XeBYVlVr7phQkfd3Spbe8zow8T9J7FT1rc nkMBfpPtfPRp/ua9syyS3x7vP3hbUjiX18lVNVtPlG1DfQO9Gr62aXgXowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDAZIY6psO9mnnqRadyYj5Jk32VMB8GA1UdIwQY MBaAFCzLm4m8C8IXUkdOZQ3DTwadpcCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWIt MDYyYWVkNTEzODFjLzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWItMDYyYWVkNTEzODFj LzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9f91B6+ K8Q3bTOsxKwjEyauiErSm9pRyMoVpUdGnu3+6eOEUBEs7NasN0HQiTw09jq+0bjN eJk6DBDLx1fcdrcPLmJy8wlfqFNeSpTSKKUOdpXhihnfvGUv7mxsHuzmR/CWZd36 A1cIqzdhFcTchu7c7m3TAlC4Br8vyNMDmcpzHuk7jHfzWY/GtiQRqEwjTKDY9acs YwH2haHqYb7FOJHGMs6Msb101AMlmiAe7JOvq5KL9t7zTrsVdiKAr5x1OFNW8COu 3qmAUhBwPcPzY14LzM+pE6M9gFx4fXGLRiaf07w69BWTuCJqVPmMMIktJXzmZkOH p4CoXrKE2E3Cyw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:57 2025 by rpki-client