This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json) Hash identifier: Pic67zv8736VpfLEqV5FzMtv2jww2drOUj/dvzAzCZ8= Subject key identifier: 40:CB:73:7E:55:F1:34:27:30:A6:64:1C:52:6A:71:D7:4F:3A:EB:BF Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Certificate serial: 019B3DFE9FE08662B24BE91D3FD07B00D863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 23:00:55 +0000 Manifest this update: Sat 20 Dec 2025 23:00:55 +0000 Manifest next update: Sun 21 Dec 2025 23:00:55 +0000 Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=) 2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: +eS4qCdzooxDVhXBtVWPkEbWLOYiB2ABjHdqlrdJBKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:9f:e0:86:62:b2:4b:e9:1d:3f:d0:7b:00:d8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e Validity Not Before: Dec 20 23:00:55 2025 GMT Not After : Dec 21 23:00:55 2025 GMT Subject: CN=40cb737e55f1342730a6641c526a71d74f3aebbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:3f:3b:13:9e:fe:8e:2b:ab:06:d6:2f:dd: 18:c5:50:86:ce:bf:73:17:57:94:3a:72:e2:b2:f9: 26:da:6f:1a:cf:f3:3f:a5:00:e5:18:aa:7d:08:7f: a1:e6:24:e1:23:bf:f9:99:92:c8:df:15:5a:2f:6b: 69:a9:a5:4d:03:43:6f:18:6d:d3:ce:cc:37:4e:93: 19:a0:8a:78:65:dc:17:90:83:90:20:d1:88:58:e5: a6:4f:d2:af:51:e2:73:ab:59:b0:d1:cb:2c:dd:9b: 8f:02:8f:da:20:18:4b:38:8e:25:47:7c:a7:c5:70: ba:28:58:32:f4:a5:bc:e3:51:68:82:41:a4:08:f4: b7:37:41:ff:67:cf:b8:e3:a1:bf:c3:a1:d6:e7:0e: 87:06:89:a9:21:3a:27:3d:92:24:d5:e6:c8:50:73: 0c:38:8c:9f:21:08:30:12:83:15:52:8f:b2:37:23: 1b:74:52:e6:70:b1:e7:79:ec:9b:22:7c:af:4c:f5: 47:95:47:54:48:38:c0:9a:37:7d:85:21:ad:71:af: c2:ef:f6:28:37:54:b4:44:d0:ee:19:03:d7:a8:16: 3f:ed:5d:e3:f6:ee:45:40:95:14:16:2b:39:23:6f: f7:41:a3:7d:83:3b:ae:8e:3b:89:ed:52:a1:55:7c: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:73:7E:55:F1:34:27:30:A6:64:1C:52:6A:71:D7:4F:3A:EB:BF X509v3 Authority Key Identifier: keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:78:a1:41:4f:a5:ec:31:fa:77:57:5a:b3:7b:93:b4:80:8c: b5:0c:10:1c:b1:a8:f2:f4:ea:3b:b4:a8:3e:e4:4a:c7:64:99: 05:76:a4:e3:50:5a:31:df:1e:83:bd:84:15:a1:0d:d7:6c:b0: 83:ae:0c:2c:10:a4:fe:ae:d4:a4:01:a3:cf:34:57:83:34:27: b8:a4:fe:25:15:62:1b:2a:b1:87:4c:4d:87:eb:18:7b:ad:84: c8:fc:0c:46:64:44:46:98:67:d9:8f:c1:73:e7:fd:d2:69:05: 56:1d:ad:fa:d1:a7:8d:44:01:8a:a7:2d:e9:5d:b9:45:3f:bb: d3:65:1d:b7:45:ed:6b:81:03:1f:ce:ea:36:41:ba:b6:7d:61: 1b:2d:c1:24:e5:db:3c:7c:5c:39:89:15:69:d0:d1:81:4c:63: ac:dd:eb:3a:ff:4a:e9:38:1f:78:b2:f6:47:6d:ac:f8:77:53: bc:93:2e:59:94:5c:70:16:05:27:b6:54:7a:53:ca:19:1c:6b: c9:1c:46:1a:df:36:27:15:b7:c0:70:3a:ff:47:99:bf:03:9a: de:02:5d:94:d0:e2:10:ac:2c:a5:10:f4:1f:b4:9c:5a:46:f3: 42:00:35:95:69:ef:d2:a5:d1:62:23:3b:37:fa:19:6f:46:07: 1c:0b:d1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/p/ghmKyS+kdP9B7ANhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZjg3NzlhM2M4MmYwMGZjMTQ0MzVlZTdkOGQwYjhkNmRk ODIwNGUwHhcNMjUxMjIwMjMwMDU1WhcNMjUxMjIxMjMwMDU1WjAzMTEwLwYDVQQD Eyg0MGNiNzM3ZTU1ZjEzNDI3MzBhNjY0MWM1MjZhNzFkNzRmM2FlYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m0/OxOe/o4rqwbWL90YxVCGzr9z F1eUOnLisvkm2m8az/M/pQDlGKp9CH+h5iThI7/5mZLI3xVaL2tpqaVNA0NvGG3T zsw3TpMZoIp4ZdwXkIOQINGIWOWmT9KvUeJzq1mw0css3ZuPAo/aIBhLOI4lR3yn xXC6KFgy9KW841FogkGkCPS3N0H/Z8+446G/w6HW5w6HBompITonPZIk1ebIUHMM OIyfIQgwEoMVUo+yNyMbdFLmcLHneeybInyvTPVHlUdUSDjAmjd9hSGtca/C7/Yo N1S0RNDuGQPXqBY/7V3j9u5FQJUUFis5I2/3QaN9gzuujjuJ7VKhVXzCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDLc35V8TQnMKZkHFJqcddPOuu/MB8GA1UdIwQY MBaAFC34d5o8gvAPwUQ17n2NC41t2CBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4Yjct ZTJhZTA1NWVjZWQxLzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4YjctZTJhZTA1NWVjZWQx LzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXihQU+l 7DH6d1das3uTtICMtQwQHLGo8vTqO7SoPuRKx2SZBXak41BaMd8eg72EFaEN12yw g64MLBCk/q7UpAGjzzRXgzQnuKT+JRViGyqxh0xNh+sYe62EyPwMRmRERphn2Y/B c+f90mkFVh2t+tGnjUQBiqct6V25RT+702Udt0Xta4EDH87qNkG6tn1hGy3BJOXb PHxcOYkVadDRgUxjrN3rOv9K6TgfeLL2R22s+HdTvJMuWZRccBYFJ7ZUelPKGRxr yRxGGt82JxW3wHA6/0eZvwOa3gJdlNDiEKwspRD0H7ScWkbzQgA1lWnv0qXRYiM7 N/oZb0YHHAvR6A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:25 2025 by rpki-client