This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: RGAIorSZrgf3Z4eLug9IDSQHD1DhueAsemFL8qUMizA=
Subject key identifier: 10:71:84:78:A8:E3:1C:15:40:BB:BD:14:32:96:52:2F:95:37:F0:26
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 019B4091C3098FCBD3248D76382EC3D4DF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 178A
Signing time: Sun 21 Dec 2025 11:00:53 +0000
Manifest this update: Sun 21 Dec 2025 11:00:53 +0000
Manifest next update: Mon 22 Dec 2025 11:00:53 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: xR8RNsC1i6sN1MYfJm3Fgrs/yAhXZXLdNLw7K0bwWMo=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:91:c3:09:8f:cb:d3:24:8d:76:38:2e:c3:d4:df:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Dec 21 11:00:53 2025 GMT
Not After : Dec 22 11:00:53 2025 GMT
Subject: CN=10718478a8e31c1540bbbd143296522f9537f026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:ce:88:0f:e0:62:ba:fe:ce:3a:69:d9:f5:
0a:9e:b0:75:e0:f0:30:c1:27:9d:7e:0b:f1:45:29:
42:8c:50:88:0a:6f:f0:ad:ea:3b:7e:0a:a2:40:15:
45:92:87:f3:4b:22:74:f6:18:a1:9b:b2:91:f0:ad:
f6:8d:78:28:fb:e0:1e:a9:43:d0:43:0f:b9:ab:c5:
fa:7c:e9:07:77:55:83:98:c3:38:e5:a5:46:7d:8a:
90:ce:32:2b:9e:70:1b:71:46:28:91:eb:d0:63:3f:
ba:01:27:b1:a8:74:1b:65:ac:7f:ae:fb:27:54:58:
7c:81:67:14:2c:16:f1:32:d7:ef:79:4e:f5:e4:a9:
ad:13:ec:09:95:f1:4c:c6:db:e9:bc:7d:a6:81:45:
7d:a8:d4:bc:1f:8d:68:a6:ac:92:a4:f9:d2:e0:6b:
25:90:1f:6d:d5:55:80:39:fd:17:65:67:71:c2:21:
1c:32:c8:29:76:c1:89:7d:f3:03:41:a0:d3:9a:9e:
cf:b0:44:8d:95:d6:98:4b:28:09:ee:90:a6:22:a7:
29:35:16:86:93:84:dd:91:f2:06:46:cb:9a:56:3f:
a0:ac:23:07:96:cc:cb:e3:c3:e0:3c:2c:d5:b7:c2:
21:ed:ca:4c:46:83:09:94:68:98:64:5a:63:1c:40:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:84:78:A8:E3:1C:15:40:BB:BD:14:32:96:52:2F:95:37:F0:26
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3e:7b:cc:b1:53:e9:03:2c:67:21:90:6b:a5:43:69:6e:e9:
b2:34:32:56:7a:ce:13:79:7f:dc:fa:2c:5c:04:eb:24:1f:54:
1f:92:ed:4c:fa:91:0f:f5:bf:78:3c:2c:9a:ed:77:9d:6f:ea:
2c:c9:37:fc:0c:98:03:9f:8a:8b:66:1c:ba:b6:3b:0c:4a:9f:
90:7e:3b:b6:4b:7b:e3:7c:45:c7:00:27:de:2d:85:9c:46:0a:
1a:27:6e:e8:16:26:f1:db:7a:18:73:12:86:38:b5:03:c1:2f:
29:d6:10:54:25:c3:93:f3:50:54:12:2d:ce:4c:ce:ce:3c:5c:
6f:68:da:b0:4e:2b:1c:0a:50:ee:03:7c:24:cc:59:24:fd:01:
9c:2c:c3:0d:ca:1b:3b:51:37:06:fc:09:2e:e9:e4:0c:86:ec:
db:1a:3b:d3:98:d5:a9:77:23:70:c9:18:9e:95:1c:62:f4:34:
d3:f8:8c:80:fe:6d:72:dc:af:57:53:e2:df:1c:71:6d:02:d2:
e2:4b:87:26:be:53:12:87:d7:ad:6b:73:6e:67:f2:f6:e8:3c:
e7:a8:2b:d9:78:b4:db:d2:8b:98:a5:49:09:d5:93:e6:49:19:
fd:54:36:ae:25:49:c0:60:ee:f9:6b:64:68:65:77:b4:dd:88:
de:cf:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:16:10 2025 by rpki-client