This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json) Hash identifier: KzgpsYsiUOppeFfKBkqASqvUur/rEnN6SYudOU7PFR4= Subject key identifier: FB:A2:AF:2B:58:04:C6:F1:D8:57:99:D2:CC:89:0C:A6:DB:40:95:67 Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27 Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227 Certificate serial: 019B2B1DD1D7842BD3EA194003209EBE5292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft Manifest number: 0A94 Signing time: Wed 17 Dec 2025 07:02:13 +0000 Manifest this update: Wed 17 Dec 2025 07:02:13 +0000 Manifest next update: Thu 18 Dec 2025 07:02:13 +0000 Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: aVEccYQL+a0kLTJtq/UGvrhx1BFWozuHxo/zjcVUuOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:d1:d7:84:2b:d3:ea:19:40:03:20:9e:be:52:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227 Validity Not Before: Dec 17 07:02:13 2025 GMT Not After : Dec 18 07:02:13 2025 GMT Subject: CN=fba2af2b5804c6f1d85799d2cc890ca6db409567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:8e:bc:d2:a7:e0:20:d7:60:ed:9e:ed:35: 8b:fe:11:29:29:ea:23:42:d5:b4:3b:48:1d:fc:59: ef:43:9a:03:e6:9c:02:9d:99:88:b6:85:b5:7c:a1: 37:64:3e:7b:41:40:2d:d4:47:4f:cb:ec:0c:62:8e: 0b:23:06:d6:c3:80:7c:84:0f:11:81:70:b3:60:ba: ad:9f:39:71:80:7e:53:78:11:cf:97:c5:34:e2:d7: de:bb:95:d6:78:29:13:ea:34:83:27:ab:4e:e4:75: 28:35:31:ed:b6:a0:b3:b7:c0:b6:9c:1f:0a:d1:6f: f1:4a:94:2a:c7:45:22:93:f5:f4:50:9e:a4:75:e9: a8:ec:e4:d2:fa:ec:eb:d2:e5:c4:7c:65:95:3a:26: da:87:8a:5f:77:6b:81:0e:18:95:f6:cd:5d:74:d5: 4b:a8:97:1f:df:4b:d3:3e:a1:ed:70:a9:5d:dd:56: f4:f4:86:fd:7b:16:fe:46:fb:c1:e4:a5:5f:0f:28: 9e:16:4b:31:75:b0:5e:7d:d6:38:91:a9:85:43:55: 09:1c:5a:af:e8:3b:04:0a:29:0e:13:62:2e:de:52: 55:a6:3c:72:e3:27:4c:10:ed:21:69:33:47:33:a1: 68:f0:17:58:9a:4d:09:ff:c1:31:37:7a:3b:57:89: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A2:AF:2B:58:04:C6:F1:D8:57:99:D2:CC:89:0C:A6:DB:40:95:67 X509v3 Authority Key Identifier: keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a6:10:a6:cc:d1:cd:29:2b:85:83:38:9e:ab:d7:28:56:15: 78:d6:a7:bb:d5:d9:c6:ab:bf:53:32:56:a1:83:ff:ea:63:9f: 71:98:ad:15:cc:de:f8:22:5b:86:06:5a:fb:60:bf:85:d5:33: 18:82:29:c3:34:35:c9:a3:af:cf:17:4e:3e:08:af:ad:b3:d5: 98:10:0d:88:71:6e:58:7d:e9:c8:eb:25:06:48:ee:b8:bd:5c: 4f:6f:15:2c:3c:f1:95:c4:64:a3:b1:bf:fe:ca:f3:04:22:56: c1:6b:b3:50:10:3e:2f:7c:10:ec:80:b0:98:d0:6a:24:09:3d: b2:08:74:03:2f:ed:f9:41:33:e4:46:ce:6a:2c:57:1a:cf:00: df:a9:88:59:c5:4c:cf:7b:64:3e:e8:d6:79:b0:65:3b:12:62: 1c:7b:95:74:15:a7:65:dc:c4:ee:f7:1b:2d:5f:b2:6e:09:30: a6:bc:bb:c0:20:ba:44:65:0b:72:1f:c5:1a:aa:8d:82:99:69: 14:65:98:5c:96:cc:0d:e0:55:ac:24:51:03:3f:de:de:ab:3d: 4d:07:ef:b3:ad:90:d1:4b:2b:58:44:63:92:ca:17:6b:d6:81: 7e:41:14:dd:f4:69:96:63:0e:ac:f7:8c:74:de:fb:41:2e:36: 75:f7:4f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHdHXhCvT6hlAAyCevlKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0 YzAyMjcwHhcNMjUxMjE3MDcwMjEzWhcNMjUxMjE4MDcwMjEzWjAzMTEwLwYDVQQD EyhmYmEyYWYyYjU4MDRjNmYxZDg1Nzk5ZDJjYzg5MGNhNmRiNDA5NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWiOvNKn4CDXYO2e7TWL/hEpKeoj QtW0O0gd/FnvQ5oD5pwCnZmItoW1fKE3ZD57QUAt1EdPy+wMYo4LIwbWw4B8hA8R gXCzYLqtnzlxgH5TeBHPl8U04tfeu5XWeCkT6jSDJ6tO5HUoNTHttqCzt8C2nB8K 0W/xSpQqx0Uik/X0UJ6kdemo7OTS+uzr0uXEfGWVOibah4pfd2uBDhiV9s1ddNVL qJcf30vTPqHtcKld3Vb09Ib9exb+RvvB5KVfDyieFksxdbBefdY4kamFQ1UJHFqv 6DsECikOE2Iu3lJVpjxy4ydMEO0haTNHM6Fo8BdYmk0J/8ExN3o7V4mPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuirytYBMbx2FeZ0syJDKbbQJVnMB8GA1UdIwQY MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKYQpszR zSkrhYM4nqvXKFYVeNanu9XZxqu/UzJWoYP/6mOfcZitFcze+CJbhgZa+2C/hdUz GIIpwzQ1yaOvzxdOPgivrbPVmBANiHFuWH3pyOslBkjuuL1cT28VLDzxlcRko7G/ /srzBCJWwWuzUBA+L3wQ7ICwmNBqJAk9sgh0Ay/t+UEz5EbOaixXGs8A36mIWcVM z3tkPujWebBlOxJiHHuVdBWnZdzE7vcbLV+ybgkwpry7wCC6RGULch/FGqqNgplp FGWYXJbMDeBVrCRRAz/e3qs9TQfvs62Q0UsrWERjksoXa9aBfkEU3fRplmMOrPeM dN77QS42dfdPHA== -----END CERTIFICATE-----Generated at Wed Dec 17 15:14:32 2025 by rpki-client