This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json) Hash identifier: vovJQ9oWpEjKe0+0SiinowuaolbEbwgYSmCLVHufinU= Subject key identifier: 2B:08:EA:73:D6:7B:C8:E6:65:53:70:2F:AC:C1:A9:F4:2E:83:37:B6 Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Certificate serial: 019B5486F58815BBAED7FA9B68D324D93DB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 08:01:29 +0000 Manifest this update: Thu 25 Dec 2025 08:01:29 +0000 Manifest next update: Fri 26 Dec 2025 08:01:29 +0000 Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=) 2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: TXLOZ+ABYkEkn8I7l3Gl5JYmUXn4Z+mxD/ahcwajsAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:f5:88:15:bb:ae:d7:fa:9b:68:d3:24:d9:3d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Validity Not Before: Dec 25 08:01:29 2025 GMT Not After : Dec 26 08:01:29 2025 GMT Subject: CN=2b08ea73d67bc8e66553702facc1a9f42e8337b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:d3:2a:c2:38:17:ed:72:53:a1:f0:6e:50: bd:f3:f9:1a:3c:a2:48:26:ad:d8:c5:67:8a:1f:e4: 28:18:63:bb:eb:56:23:c5:47:82:6d:f5:37:0a:d5: 7f:31:55:1b:c6:2e:a4:ef:65:8d:a0:35:dc:9e:9c: af:60:95:6e:fe:83:c7:43:74:4c:ed:32:ee:4a:10: 64:ae:0d:84:0a:c2:93:e0:37:79:ba:39:6e:09:fd: cb:1a:a6:96:f1:15:86:f5:c7:8c:cb:06:27:6c:96: 76:d2:bd:24:10:c8:25:de:17:37:31:ac:28:0c:13: ee:74:dc:15:61:be:ff:60:1a:d2:d1:17:76:80:d5: 8d:b2:c7:46:72:43:4a:c8:c8:4f:3f:18:e8:1a:e2: 5d:7e:4a:f2:05:74:18:33:50:b3:82:77:0f:8a:8e: c6:4f:c4:97:54:e2:af:2b:ae:b6:54:79:c4:03:16: f5:33:07:23:c4:d4:8f:12:8f:0f:cb:f9:26:1c:f5: c4:50:aa:f9:d9:33:e7:a6:04:54:8f:ce:bb:dc:f6: 39:d6:f5:01:7d:92:13:47:c3:d5:eb:b7:41:b7:ff: c1:43:cf:e3:65:47:3a:ae:ce:07:26:69:2b:ba:72: ef:d6:48:6f:21:0d:89:56:10:b5:f8:31:ec:b9:2a: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:08:EA:73:D6:7B:C8:E6:65:53:70:2F:AC:C1:A9:F4:2E:83:37:B6 X509v3 Authority Key Identifier: keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:a1:93:a6:c5:07:89:4c:30:b9:5e:17:45:ac:14:00:f1: ca:7e:8b:0e:dd:be:10:f6:17:85:3d:e5:a1:a8:6a:eb:44:60: 57:18:ff:b6:f7:bd:99:f5:4c:9f:f2:b5:5a:4e:3d:3a:95:04: 9a:08:d3:89:f1:e2:a2:c2:15:9f:ff:6b:c7:5b:21:69:1c:b7: 8d:2d:b5:4c:7c:cf:19:48:73:59:8e:3a:1c:5a:e1:40:51:45: f1:eb:77:4e:ec:21:b1:06:c2:df:e7:e4:45:f7:5e:e5:51:f1: 19:fa:c8:b3:4a:55:62:11:fb:45:38:4d:07:15:35:a4:57:da: a0:5f:ed:26:10:12:dd:46:27:59:43:dc:be:3b:6a:f2:c5:2c: 14:69:24:e9:ec:e4:fb:0e:6b:27:9e:36:64:9d:3f:40:05:0d: 7d:3b:6b:a3:70:19:d3:ea:5a:34:7a:f9:58:8b:00:97:7b:b8: d4:28:61:e1:0c:cb:05:7e:2d:89:8a:ad:ca:9e:d5:ab:75:a8: 48:3b:d3:5b:6b:48:95:e3:bd:74:09:18:7e:d8:e6:8c:77:ae: a9:40:4d:85:f9:10:0d:73:f3:7b:ae:01:78:21:58:65:47:06: 39:ec:88:aa:f7:0e:c9:1a:18:fc:e5:f5:6f:33:7f:60:ce:24: d0:08:91:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhvWIFbuu1/qbaNMk2T22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk Mjc5YWIwHhcNMjUxMjI1MDgwMTI5WhcNMjUxMjI2MDgwMTI5WjAzMTEwLwYDVQQD EygyYjA4ZWE3M2Q2N2JjOGU2NjU1MzcwMmZhY2MxYTlmNDJlODMzN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvLTKsI4F+1yU6HwblC98/kaPKJI Jq3YxWeKH+QoGGO761YjxUeCbfU3CtV/MVUbxi6k72WNoDXcnpyvYJVu/oPHQ3RM 7TLuShBkrg2ECsKT4Dd5ujluCf3LGqaW8RWG9ceMywYnbJZ20r0kEMgl3hc3Mawo DBPudNwVYb7/YBrS0Rd2gNWNssdGckNKyMhPPxjoGuJdfkryBXQYM1CzgncPio7G T8SXVOKvK662VHnEAxb1MwcjxNSPEo8Py/kmHPXEUKr52TPnpgRUj8673PY51vUB fZITR8PV67dBt//BQ8/jZUc6rs4HJmkrunLv1khvIQ2JVhC1+DHsuSoppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsI6nPWe8jmZVNwL6zBqfQugze2MB8GA1UdIwQY MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt YWU4YjhkNzg4NzAwLzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi+hk6bF B4lMMLleF0WsFADxyn6LDt2+EPYXhT3loahq60RgVxj/tve9mfVMn/K1Wk49OpUE mgjTifHiosIVn/9rx1shaRy3jS21THzPGUhzWY46HFrhQFFF8et3TuwhsQbC3+fk Rfde5VHxGfrIs0pVYhH7RThNBxU1pFfaoF/tJhAS3UYnWUPcvjtq8sUsFGkk6ezk +w5rJ542ZJ0/QAUNfTtro3AZ0+paNHr5WIsAl3u41Chh4QzLBX4tiYqtyp7Vq3Wo SDvTW2tIleO9dAkYftjmjHeuqUBNhfkQDXPze64BeCFYZUcGOeyIqvcOyRoY/OX1 bzN/YM4k0AiRhg== -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:25 2025 by rpki-client