This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft File: LC6uaapwrwN7XSx-gSO-pAwpXn4.mft (raw, json) Hash identifier: Tm8VhmAjor5r5uwpf79vwJwoo7Tn6hswo45In7LrsSY= Subject key identifier: B2:6F:21:3E:B2:D4:6F:C5:56:0B:B7:45:4D:D2:0B:F3:6B:4F:60:71 Authority key identifier: 2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E Certificate issuer: /CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e Certificate serial: 019B4FCEBFB2D23AECBC0428198B9409E3C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft Manifest number: 0BDF Signing time: Wed 24 Dec 2025 10:01:48 +0000 Manifest this update: Wed 24 Dec 2025 10:01:48 +0000 Manifest next update: Thu 25 Dec 2025 10:01:48 +0000 Files and hashes: 1: LC6uaapwrwN7XSx-gSO-pAwpXn4.crl (hash: BQPSJ2mJCOsIruLqlAF3Fkytxe36E4sh4qwXX/JzC0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:bf:b2:d2:3a:ec:bc:04:28:19:8b:94:09:e3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e Validity Not Before: Dec 24 10:01:48 2025 GMT Not After : Dec 25 10:01:48 2025 GMT Subject: CN=b26f213eb2d46fc5560bb7454dd20bf36b4f6071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5f:c6:82:64:46:5d:46:5c:53:04:68:65:fb: ac:25:b0:3a:03:4d:3c:c8:dd:fd:7b:64:03:03:e2: 92:59:0e:15:96:ff:f0:5c:4f:5f:47:85:e0:1f:e1: 7f:13:f2:06:b2:00:fb:c4:8d:32:64:65:a0:7b:f6: b3:04:6b:d3:59:8c:8e:6e:bb:78:89:55:77:54:6a: c4:54:5e:e8:8d:ed:5f:87:2b:33:b2:18:df:5c:7b: c0:e0:de:6d:0f:13:5d:e2:5f:a3:08:4a:9f:5a:8f: 9d:6c:cf:1f:0b:7d:fb:9f:ae:a3:be:5e:ed:3e:9c: ea:da:73:21:44:22:e7:33:01:bf:a5:15:1a:97:35: b4:e7:67:96:b5:fb:11:c4:75:08:b3:99:d9:ab:73: f5:58:85:10:64:a6:f1:9d:d9:de:06:12:a0:02:4c: 94:99:82:71:52:10:69:48:76:05:04:c3:59:f0:e8: fc:2b:a1:04:f5:35:1e:d7:15:ad:29:e2:9f:b1:78: 2a:59:1c:42:ea:3b:da:db:d3:1c:b7:b5:d6:76:09: 18:a4:ab:09:32:c8:b5:f0:6b:0a:ca:91:63:0e:12: ff:b6:38:64:1c:b3:df:5c:f0:e9:30:46:1e:20:ba: 76:d9:82:14:58:4b:85:54:46:0a:e3:13:3c:58:b1: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6F:21:3E:B2:D4:6F:C5:56:0B:B7:45:4D:D2:0B:F3:6B:4F:60:71 X509v3 Authority Key Identifier: keyid:2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:79:1a:6d:90:10:b5:06:c0:88:99:89:3a:27:15:95:d8:71: c3:8b:63:26:05:d0:3f:fe:0d:5b:7b:9a:05:f4:31:5f:14:70: db:8e:fa:97:7b:d3:d5:86:6d:b8:1b:ae:27:c6:54:ae:0f:84: fe:95:34:d1:a1:b5:12:3f:cc:f9:1a:c9:bf:4f:63:1f:40:7c: 71:7e:f3:7e:f5:47:8a:b9:db:57:66:28:dd:82:b5:77:f3:16: da:2e:e6:0b:9e:61:3a:e4:84:fb:f0:90:c6:e9:d8:92:96:67: 93:c5:5e:b8:49:04:5f:cf:ce:e2:25:05:fd:24:03:21:53:eb: 3f:2a:d1:2c:7b:34:a0:8f:4e:9e:f7:d7:99:d7:84:d1:dc:fc: 91:81:da:97:37:d0:f7:ce:78:56:52:62:72:bd:0b:bc:67:9c: 74:59:c7:e4:32:1f:9b:e6:44:8a:36:e5:4b:47:d6:1d:61:6a: 68:42:c3:1d:97:2a:82:ac:4f:84:27:4c:34:e4:41:98:ec:86: 83:ee:25:87:46:90:fe:a8:31:60:73:25:5b:03:63:76:34:27: e6:ab:bf:bf:8d:6a:08:e3:cb:9b:28:c7:a7:67:5b:1b:d5:d7: 1d:d0:03:55:eb:1e:f7:97:05:82:6f:cd:2f:5c:cc:d1:fb:53: 12:de:04:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzr+y0jrsvAQoGYuUCePHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMmVhZTY5YWE3MGFmMDM3YjVkMmM3ZTgxMjNiZWE0MGMy OTVlN2UwHhcNMjUxMjI0MTAwMTQ4WhcNMjUxMjI1MTAwMTQ4WjAzMTEwLwYDVQQD EyhiMjZmMjEzZWIyZDQ2ZmM1NTYwYmI3NDU0ZGQyMGJmMzZiNGY2MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1/GgmRGXUZcUwRoZfusJbA6A008 yN39e2QDA+KSWQ4Vlv/wXE9fR4XgH+F/E/IGsgD7xI0yZGWge/azBGvTWYyObrt4 iVV3VGrEVF7oje1fhyszshjfXHvA4N5tDxNd4l+jCEqfWo+dbM8fC337n66jvl7t Ppzq2nMhRCLnMwG/pRUalzW052eWtfsRxHUIs5nZq3P1WIUQZKbxndneBhKgAkyU mYJxUhBpSHYFBMNZ8Oj8K6EE9TUe1xWtKeKfsXgqWRxC6jva29Mct7XWdgkYpKsJ Msi18GsKypFjDhL/tjhkHLPfXPDpMEYeILp22YIUWEuFVEYK4xM8WLFKyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJvIT6y1G/FVgu3RU3SC/NrT2BxMB8GA1UdIwQY MBaAFCwurmmqcK8De10sfoEjvqQMKV5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2Mt NzIzNTU3N2I2ZDU2LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2MtNzIzNTU3N2I2ZDU2 LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXkabZAQ tQbAiJmJOicVldhxw4tjJgXQP/4NW3uaBfQxXxRw2476l3vT1YZtuBuuJ8ZUrg+E /pU00aG1Ej/M+RrJv09jH0B8cX7zfvVHirnbV2Yo3YK1d/MW2i7mC55hOuSE+/CQ xunYkpZnk8VeuEkEX8/O4iUF/SQDIVPrPyrRLHs0oI9OnvfXmdeE0dz8kYHalzfQ 9854VlJicr0LvGecdFnH5DIfm+ZEijblS0fWHWFqaELDHZcqgqxPhCdMNORBmOyG g+4lh0aQ/qgxYHMlWwNjdjQn5qu/v41qCOPLmyjHp2dbG9XXHdADVese95cFgm/N L1zM0ftTEt4EwA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:19 2025 by rpki-client