This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json) Hash identifier: PX1shA8hKbRWOKRQ7G7COk+OM2crUo4wnpeoCMwmy8w= Subject key identifier: BA:72:7C:B3:2C:8D:8E:F5:12:CC:74:FB:E6:92:1D:3E:DA:C5:56:FA Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82 Certificate serial: 019B2AAEF384BC372DA42CAEDEC6B2731BCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft Manifest number: 030E Signing time: Wed 17 Dec 2025 05:01:07 +0000 Manifest this update: Wed 17 Dec 2025 05:01:07 +0000 Manifest next update: Thu 18 Dec 2025 05:01:07 +0000 Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=) 2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: noqhFFiZ+xu71moYKYBLooVQy8n+xRBRBK9yJefjv5k=) 3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:f3:84:bc:37:2d:a4:2c:ae:de:c6:b2:73:1b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82 Validity Not Before: Dec 17 05:01:07 2025 GMT Not After : Dec 18 05:01:07 2025 GMT Subject: CN=ba727cb32c8d8ef512cc74fbe6921d3edac556fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:c4:1e:d9:df:d8:1a:57:5f:d7:14:51:db: 09:2f:08:98:0c:39:a0:58:24:19:15:8e:eb:c2:23: 72:7c:ad:df:9f:16:83:dc:fc:5a:80:e7:af:29:f5: d3:a8:f2:93:1b:e0:9a:c9:05:a4:c0:66:25:d0:40: bd:f0:05:9b:e1:cc:17:7f:1b:24:bc:bd:26:7d:d4: 51:36:2d:4b:cd:46:2c:0f:93:c1:4a:0f:39:43:71: a5:0a:16:3b:ea:bb:79:dd:c8:45:56:94:ed:61:a0: d4:b6:e4:cb:13:1e:6d:cd:86:62:ca:69:94:5d:71: a8:2d:09:4f:b1:3b:e5:c4:db:57:c0:ee:d1:40:8e: 58:88:68:99:40:0f:26:52:f8:d1:f7:54:4e:36:5e: 84:9e:63:96:c1:b5:7b:76:81:b2:2f:58:1a:d8:78: 1f:10:9e:1a:60:30:f9:c1:1a:b6:85:54:fa:e2:6d: 57:91:fc:23:29:91:77:5b:f9:46:c2:4a:9e:4e:ad: d2:6d:d7:9e:59:b1:c8:2f:ed:ab:07:2f:0d:bb:c7: 1e:f0:5b:b7:68:dc:e5:09:65:dd:b8:05:e8:41:bc: d6:90:e8:bd:c9:fe:ff:46:35:43:7c:63:bc:4e:f5: 58:6e:5f:66:0f:af:af:8c:1c:57:f5:fc:e6:ea:f5: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:7C:B3:2C:8D:8E:F5:12:CC:74:FB:E6:92:1D:3E:DA:C5:56:FA X509v3 Authority Key Identifier: keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:53:a4:bc:5d:19:a4:a2:ac:ce:7d:12:ab:cd:3f:df:9b:89: 6d:d8:8f:df:2b:5b:df:b6:c3:d8:7d:05:dd:7c:98:67:c6:08: 67:1a:91:52:69:2d:4b:7e:82:42:40:ad:e0:39:34:6b:db:5c: 33:9a:4b:15:f8:fa:06:dc:5f:67:f0:3d:63:38:4b:60:f2:cd: f6:70:87:42:76:05:4b:6f:b6:49:4a:c1:17:6a:cd:79:d3:eb: a5:f1:c3:63:3f:93:ab:4f:f4:5b:63:42:5f:59:ea:b2:94:1f: 61:29:f2:ca:70:f2:3f:15:42:38:d4:b8:b3:cc:38:8f:fa:e0: 8b:a1:f4:4b:d4:ec:47:9c:87:5c:5c:29:2d:80:19:e8:16:7e: 90:6a:2c:c9:63:c6:b0:ef:1c:2e:f1:fa:e1:fe:2f:98:aa:2a: 92:8e:92:6b:8f:46:62:76:5e:26:7e:7e:09:0b:30:6d:c1:83: 47:6a:33:76:05:98:af:83:89:85:eb:02:8c:fe:5f:0d:ca:b9: 72:95:1f:44:3f:51:c2:a6:bb:fe:84:82:bc:c7:26:bc:07:79: ff:3c:5e:30:81:75:d9:4b:f1:88:29:f0:82:73:73:f0:57:21: 83:46:ab:f6:99:c7:b6:46:ee:87:e8:b0:ee:0e:79:a3:00:46: 23:2d:1c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrvOEvDctpCyu3saycxvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0 ZWZhODIwHhcNMjUxMjE3MDUwMTA3WhcNMjUxMjE4MDUwMTA3WjAzMTEwLwYDVQQD EyhiYTcyN2NiMzJjOGQ4ZWY1MTJjYzc0ZmJlNjkyMWQzZWRhYzU1NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0jEHtnf2BpXX9cUUdsJLwiYDDmg WCQZFY7rwiNyfK3fnxaD3PxagOevKfXTqPKTG+CayQWkwGYl0EC98AWb4cwXfxsk vL0mfdRRNi1LzUYsD5PBSg85Q3GlChY76rt53chFVpTtYaDUtuTLEx5tzYZiymmU XXGoLQlPsTvlxNtXwO7RQI5YiGiZQA8mUvjR91RONl6EnmOWwbV7doGyL1ga2Hgf EJ4aYDD5wRq2hVT64m1XkfwjKZF3W/lGwkqeTq3SbdeeWbHIL+2rBy8Nu8ce8Fu3 aNzlCWXduAXoQbzWkOi9yf7/RjVDfGO8TvVYbl9mD6+vjBxX9fzm6vWF2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpyfLMsjY71Esx0++aSHT7axVb6MB8GA1UdIwQY MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt MTE1NzVkYjY0ZmJlLzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1OkvF0Z pKKszn0Sq80/35uJbdiP3ytb37bD2H0F3XyYZ8YIZxqRUmktS36CQkCt4Dk0a9tc M5pLFfj6BtxfZ/A9YzhLYPLN9nCHQnYFS2+2SUrBF2rNedPrpfHDYz+Tq0/0W2NC X1nqspQfYSnyynDyPxVCONS4s8w4j/rgi6H0S9TsR5yHXFwpLYAZ6BZ+kGosyWPG sO8cLvH64f4vmKoqko6Sa49GYnZeJn5+CQswbcGDR2ozdgWYr4OJhesCjP5fDcq5 cpUfRD9Rwqa7/oSCvMcmvAd5/zxeMIF12UvxiCnwgnNz8Fchg0ar9pnHtkbuh+iw 7g55owBGIy0cpA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:09:49 2025 by rpki-client