This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json) Hash identifier: R6d9FdIOrTqYAgHbXORHfAvTN5CNzIuI5xbQEOiWCFo= Subject key identifier: 46:27:14:0E:B7:93:BB:3F:0B:86:3B:E1:65:E4:FD:AB:66:42:EE:FC Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8 Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8 Certificate serial: 019B48B92789B8C68FD75C03FE6B19AD9BFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft Manifest number: 135E Signing time: Tue 23 Dec 2025 01:00:52 +0000 Manifest this update: Tue 23 Dec 2025 01:00:52 +0000 Manifest next update: Wed 24 Dec 2025 01:00:52 +0000 Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: I3abDIyFfoOn170ISrCGsEuWYtlUAN4ehm7bO3QjuEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:27:89:b8:c6:8f:d7:5c:03:fe:6b:19:ad:9b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8 Validity Not Before: Dec 23 01:00:52 2025 GMT Not After : Dec 24 01:00:52 2025 GMT Subject: CN=4627140eb793bb3f0b863be165e4fdab6642eefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:88:f5:5b:aa:38:34:3f:3e:32:52:f4:9e: e5:e6:92:a2:b7:a9:03:df:ae:ca:cf:c5:13:42:58: b3:3f:1b:19:bf:22:78:94:29:8f:fd:d8:9e:cb:65: a4:3a:07:27:9a:ff:82:ea:0f:55:49:15:70:0d:91: 4d:ca:af:61:1c:01:85:64:e0:02:3f:a3:df:9b:b9: 71:52:d6:78:90:bb:1f:3d:81:af:e1:85:87:f4:6f: 26:f6:e7:14:c2:6f:05:70:d1:56:2a:55:bd:fd:72: 6b:a6:d9:eb:18:55:fe:a8:45:31:fc:e0:81:6e:4a: 92:fc:12:48:21:41:0f:41:81:53:3e:ee:10:22:6f: 34:59:6a:9e:35:60:ed:e2:bc:34:d7:d5:79:fd:d4: 67:1e:ce:73:bd:9c:48:b6:ea:ac:c8:c8:4b:d4:d8: 92:85:16:e9:37:58:0d:4e:8f:8e:44:bf:44:1e:2a: b4:b8:3b:9b:53:bc:1c:12:df:df:5a:cd:be:91:ea: d5:f0:1f:b4:49:5d:e2:b8:cf:8d:f5:dc:d4:04:1f: d9:a7:82:df:3a:ff:93:e7:51:fd:ca:bf:1d:5b:09: f9:80:78:2e:09:c5:0a:e6:39:8d:3f:6b:8f:0a:06: 95:13:fb:a9:17:19:a0:15:88:b3:03:23:17:4b:d5: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:27:14:0E:B7:93:BB:3F:0B:86:3B:E1:65:E4:FD:AB:66:42:EE:FC X509v3 Authority Key Identifier: keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a6:1c:28:48:63:90:f9:f6:9b:07:05:0a:f3:d2:22:9e:bd: ff:f8:91:ee:30:dc:88:52:a0:38:e0:47:a6:3e:53:1d:a1:2f: f1:2d:bf:09:12:e9:ba:e1:36:1e:8e:6e:02:0b:f7:81:4c:02: 07:6f:e7:4d:6d:cd:28:80:60:15:92:8f:92:6b:b9:cd:70:e7: e2:1a:34:67:06:73:e2:f3:ea:6b:b0:b8:16:88:c8:ab:14:69: 44:52:06:c2:88:13:1a:ee:dc:a5:bf:03:d2:71:fd:98:b5:45: 0a:87:4b:00:59:a5:b4:4d:93:6b:f8:28:50:ea:5c:88:01:80: 05:8f:ce:98:f5:dc:35:99:b6:5c:3b:64:5a:a7:57:cc:e3:14: f0:dd:57:bc:bd:bd:be:13:f8:34:3b:b8:2b:05:92:cc:b6:da: d3:25:39:16:b2:ec:0d:c4:fc:86:61:d1:82:f2:a2:ae:b8:5c: ed:73:70:5a:53:97:90:dc:73:2d:09:01:fb:d8:c9:7a:33:59: 4f:9d:1f:b3:05:1e:ec:cd:08:8a:ab:13:47:35:97:ac:5a:e5: 3f:b2:9a:69:19:a0:21:2d:0a:98:ae:14:1e:63:00:71:a9:d8: ef:6b:b8:3b:36:8e:6a:56:ea:22:39:9e:dd:b0:5d:6d:09:23: 07:e1:fa:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuSeJuMaP11wD/msZrZv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YzE5MjA2NzE2YzVjNzlkMzViZjE1OTI0ZGIzMzIzYTRl YzE4YzgwHhcNMjUxMjIzMDEwMDUyWhcNMjUxMjI0MDEwMDUyWjAzMTEwLwYDVQQD Eyg0NjI3MTQwZWI3OTNiYjNmMGI4NjNiZTE2NWU0ZmRhYjY2NDJlZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJaI9VuqODQ/PjJS9J7l5pKit6kD 367Kz8UTQlizPxsZvyJ4lCmP/diey2WkOgcnmv+C6g9VSRVwDZFNyq9hHAGFZOAC P6Pfm7lxUtZ4kLsfPYGv4YWH9G8m9ucUwm8FcNFWKlW9/XJrptnrGFX+qEUx/OCB bkqS/BJIIUEPQYFTPu4QIm80WWqeNWDt4rw019V5/dRnHs5zvZxItuqsyMhL1NiS hRbpN1gNTo+ORL9EHiq0uDubU7wcEt/fWs2+kerV8B+0SV3iuM+N9dzUBB/Zp4Lf Ov+T51H9yr8dWwn5gHguCcUK5jmNP2uPCgaVE/upFxmgFYizAyMXS9VSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYnFA63k7s/C4Y74WXk/atmQu78MB8GA1UdIwQY MBaAFJXBkgZxbFx501vxWSTbMyOk7BjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5Yjkt YTRhOWNjNDcxNTk5LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5YjktYTRhOWNjNDcxNTk5 LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqYcKEhj kPn2mwcFCvPSIp69//iR7jDciFKgOOBHpj5THaEv8S2/CRLpuuE2Ho5uAgv3gUwC B2/nTW3NKIBgFZKPkmu5zXDn4ho0ZwZz4vPqa7C4FojIqxRpRFIGwogTGu7cpb8D 0nH9mLVFCodLAFmltE2Ta/goUOpciAGABY/OmPXcNZm2XDtkWqdXzOMU8N1XvL29 vhP4NDu4KwWSzLba0yU5FrLsDcT8hmHRgvKirrhc7XNwWlOXkNxzLQkB+9jJejNZ T50fswUe7M0IiqsTRzWXrFrlP7KaaRmgIS0KmK4UHmMAcanY72u4OzaOalbqIjme 3bBdbQkjB+H6Dg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:54 2025 by rpki-client