This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json) Hash identifier: 2LoSnbTj/KLHGHV8aW24Lj393smdiyZBrT029T0Ku4U= Subject key identifier: 0D:BD:5A:C9:65:90:A4:68:75:DB:58:24:0E:D9:3B:DB:7B:5F:F3:AC Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Certificate serial: 019B39EAEC5BA5635F4E3CF929AD725106BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:00:55 +0000 Manifest this update: Sat 20 Dec 2025 04:00:55 +0000 Manifest next update: Sun 21 Dec 2025 04:00:55 +0000 Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=) 2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=) 3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: 8MumEe8Os3dK1OKYCNv9o3EHWNYBbJ5IsyNXPFqvRjk=) 4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:ec:5b:a5:63:5f:4e:3c:f9:29:ad:72:51:06:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Validity Not Before: Dec 20 04:00:55 2025 GMT Not After : Dec 21 04:00:55 2025 GMT Subject: CN=0dbd5ac96590a46875db58240ed93bdb7b5ff3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:85:9e:49:b7:bb:da:94:d6:95:02:a2:2d: c6:69:fb:1c:8e:98:c7:a6:b4:bb:a6:1f:6e:5f:ca: 73:98:bb:f3:46:af:c5:f1:01:1a:00:e6:86:25:13: 84:33:05:54:f2:61:8a:5b:67:83:4f:63:49:f4:83: 65:f8:fc:5b:01:2b:f3:60:5b:0f:fa:92:aa:5d:e7: b9:24:2f:7e:42:e8:1a:f7:8e:9e:85:0d:e6:70:23: ae:e6:a3:c9:3d:03:fb:a0:51:bb:1f:25:08:9a:a2: 0d:4f:4e:9c:e4:c6:98:d3:f7:cd:45:ab:6e:12:a8: ce:f3:a7:14:5b:d1:75:37:c5:38:10:50:b3:b4:41: 08:16:86:72:12:e8:62:2c:b6:b4:90:44:72:9e:50: 32:cb:53:37:59:77:92:d1:7c:aa:7d:be:a3:93:7e: 46:7f:8f:05:cf:35:e1:7e:7f:df:e2:a5:bb:4b:35: 2f:85:86:62:f2:67:3e:df:ed:16:ef:eb:d3:36:fb: 0a:be:86:0e:78:5e:82:f0:77:7a:df:ba:92:19:af: 16:c7:36:43:a3:b0:0c:50:72:1c:39:7d:27:54:66: 7e:16:79:6a:45:53:99:1b:4a:b0:28:e4:3f:a9:83: f0:5a:d4:60:8c:bf:1b:63:88:ce:fe:fb:67:98:c3: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BD:5A:C9:65:90:A4:68:75:DB:58:24:0E:D9:3B:DB:7B:5F:F3:AC X509v3 Authority Key Identifier: keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a3:b2:25:12:16:fc:19:1b:1d:de:ab:5f:43:61:7e:ae:46: ad:72:89:79:d8:79:f6:29:a4:df:cb:c4:76:34:fb:45:cd:0b: 6d:8d:74:2f:5f:f6:bd:1e:4a:69:76:60:3b:ba:11:56:b1:58: f8:96:e3:85:19:8a:a2:28:e3:3e:46:da:fa:7a:1a:34:fd:ff: e3:e7:97:86:10:e2:6b:b7:d8:6b:b0:75:0d:69:a9:81:88:02: 23:6d:35:f6:d8:7d:cf:74:e1:d5:2a:c1:a2:c6:7b:4f:a0:e7: da:c9:6c:36:70:94:94:66:cf:5e:41:d7:53:0b:18:7f:be:c8: 08:60:12:ae:46:7f:99:5a:e9:d7:5d:f9:3c:90:4e:05:ae:9c: 58:80:6b:f6:b2:3f:68:f6:75:91:1c:50:bf:f8:e5:71:1a:96: b3:bc:43:0f:a0:e6:44:c0:86:3f:77:5b:c2:15:a5:9f:1c:5a: 30:c2:7f:07:a0:ab:dc:67:52:73:80:cc:31:a4:e2:40:7f:f8: a6:f8:4e:31:49:d3:f6:49:51:aa:80:56:21:60:2b:d0:5e:d0: f1:45:36:73:53:bf:52:95:3d:c1:01:61:55:5a:11:88:49:87: 52:1f:47:15:c2:e0:01:c7:09:35:ff:66:20:59:59:28:77:13: 89:b8:7c:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56uxbpWNfTjz5Ka1yUQa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1 MzI1ZGYwHhcNMjUxMjIwMDQwMDU1WhcNMjUxMjIxMDQwMDU1WjAzMTEwLwYDVQQD EygwZGJkNWFjOTY1OTBhNDY4NzVkYjU4MjQwZWQ5M2JkYjdiNWZmM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaiFnkm3u9qU1pUCoi3GafscjpjH prS7ph9uX8pzmLvzRq/F8QEaAOaGJROEMwVU8mGKW2eDT2NJ9INl+PxbASvzYFsP +pKqXee5JC9+Quga946ehQ3mcCOu5qPJPQP7oFG7HyUImqINT06c5MaY0/fNRatu EqjO86cUW9F1N8U4EFCztEEIFoZyEuhiLLa0kERynlAyy1M3WXeS0Xyqfb6jk35G f48FzzXhfn/f4qW7SzUvhYZi8mc+3+0W7+vTNvsKvoYOeF6C8Hd637qSGa8WxzZD o7AMUHIcOX0nVGZ+FnlqRVOZG0qwKOQ/qYPwWtRgjL8bY4jO/vtnmMMoyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA29WsllkKRoddtYJA7ZO9t7X/OsMB8GA1UdIwQY MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt OGRkODFlNGIzZTMzLzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKOyJRIW /BkbHd6rX0Nhfq5GrXKJedh59imk38vEdjT7Rc0LbY10L1/2vR5KaXZgO7oRVrFY +JbjhRmKoijjPkba+noaNP3/4+eXhhDia7fYa7B1DWmpgYgCI2019th9z3Th1SrB osZ7T6Dn2slsNnCUlGbPXkHXUwsYf77ICGASrkZ/mVrp1135PJBOBa6cWIBr9rI/ aPZ1kRxQv/jlcRqWs7xDD6DmRMCGP3dbwhWlnxxaMMJ/B6Cr3GdSc4DMMaTiQH/4 pvhOMUnT9klRqoBWIWAr0F7Q8UU2c1O/UpU9wQFhVVoRiEmHUh9HFcLgAccJNf9m IFlZKHcTibh8uQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:52 2025 by rpki-client