This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json) Hash identifier: 3GqiG2pufGLIy1xXRTOX1XRG0Xx7vcSoaA5HDRW77+k= Subject key identifier: 6F:B4:BE:87:7A:BE:BD:00:ED:AF:5D:02:6C:F3:1E:3B:CA:35:44:EB Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915 Certificate serial: 019B4DDFB979ACA65B33EA45AC440B362B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft Manifest number: 179B Signing time: Wed 24 Dec 2025 01:01:06 +0000 Manifest this update: Wed 24 Dec 2025 01:01:06 +0000 Manifest next update: Thu 25 Dec 2025 01:01:06 +0000 Files and hashes: 1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=) 2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=) 3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: EEcejmM/1CJVZky7rjB6Ed3ToaOpp/ZXkGbzO0B0umc=) 4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:b9:79:ac:a6:5b:33:ea:45:ac:44:0b:36:2b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915 Validity Not Before: Dec 24 01:01:06 2025 GMT Not After : Dec 25 01:01:06 2025 GMT Subject: CN=6fb4be877abebd00edaf5d026cf31e3bca3544eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:76:68:d0:c3:b9:90:2d:c3:b3:e9:07:91: 1a:09:92:26:17:59:c9:a6:58:be:e9:0c:68:83:ec: cf:87:26:1a:e0:22:72:15:74:c8:6c:55:97:e4:0a: 47:2d:40:39:00:12:18:9c:13:7f:82:97:af:d5:f6: 0b:de:04:54:ed:3e:26:e2:e2:34:dd:c2:e5:43:16: dd:c5:72:93:4e:76:11:c5:14:29:70:ec:b8:f2:a2: 55:90:82:a6:f0:da:14:dc:c3:94:26:57:a9:6f:46: 6e:18:53:f6:63:ed:b8:c1:12:56:cb:0d:d7:b6:3e: c2:53:d3:a5:c2:db:bd:6e:71:25:02:75:9a:71:eb: 8e:f1:45:2d:3c:21:e9:c3:93:53:cd:09:70:e4:7e: b1:41:14:3d:7a:fd:4f:b0:8e:29:06:b3:53:fd:ff: 11:41:b7:d1:5c:1d:2e:fb:b4:b4:e1:44:09:9e:d1: 9a:bc:d6:70:65:79:94:27:2f:2b:8a:65:5a:df:88: f5:7c:e5:e2:57:9b:c4:00:4f:a6:00:cd:dc:5d:60: 00:8d:f0:3e:0f:10:eb:cf:a2:e8:2c:72:5e:e1:b6: 4a:3f:08:c9:f0:20:93:9c:15:e9:3d:66:be:2c:16: 8c:ca:da:ef:f0:2a:a4:70:ef:0f:ad:af:6b:be:d7: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B4:BE:87:7A:BE:BD:00:ED:AF:5D:02:6C:F3:1E:3B:CA:35:44:EB X509v3 Authority Key Identifier: keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0b:09:e5:e2:8d:1f:ce:fc:a6:b9:f8:c3:2a:9e:d4:29:8c: af:0d:0e:f3:42:b7:fc:b5:e4:6e:05:9b:f8:57:29:5c:a1:a1: d8:82:40:b5:0a:63:3c:da:47:ab:1a:38:f3:78:c5:b3:79:21: 4b:74:ca:0d:ec:fb:b5:6e:92:09:00:1b:28:12:59:d4:f5:78: 02:70:c6:dc:a1:94:f9:aa:36:1f:44:d1:bd:23:8b:6e:6f:0b: 91:57:30:5a:fd:7b:4b:2e:c1:8c:ef:c6:53:36:f8:4b:cb:8c: 0d:d5:aa:aa:f4:e5:9f:f8:e2:44:b1:1c:a5:2e:cc:15:9f:cd: d1:db:b7:e3:4e:dd:c2:ee:f7:ce:ec:e0:e8:ee:9e:06:8c:ba: 3a:a9:98:57:fe:c2:a5:43:2b:9d:b3:6b:24:2c:37:f7:a1:d4: ad:d4:0b:a8:01:0b:a0:17:3c:64:6b:e5:31:86:0e:31:ab:9c: e0:38:9b:50:b3:fa:cd:84:b7:6c:68:1f:f8:be:17:48:48:4c: 02:72:00:66:0a:d2:1c:26:a6:d2:99:37:db:e5:50:05:ac:68: 7b:8b:07:3e:c9:bf:4a:d3:a0:40:44:6e:79:0c:98:54:d1:85: 6e:6d:18:b5:a7:98:f1:b1:8c:35:13:b4:70:07:71:68:cd:fd: 26:5c:dd:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN37l5rKZbM+pFrEQLNisNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx YTM5MTUwHhcNMjUxMjI0MDEwMTA2WhcNMjUxMjI1MDEwMTA2WjAzMTEwLwYDVQQD Eyg2ZmI0YmU4NzdhYmViZDAwZWRhZjVkMDI2Y2YzMWUzYmNhMzU0NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbV2aNDDuZAtw7PpB5EaCZImF1nJ pli+6Qxog+zPhyYa4CJyFXTIbFWX5ApHLUA5ABIYnBN/gpev1fYL3gRU7T4m4uI0 3cLlQxbdxXKTTnYRxRQpcOy48qJVkIKm8NoU3MOUJlepb0ZuGFP2Y+24wRJWyw3X tj7CU9Olwtu9bnElAnWaceuO8UUtPCHpw5NTzQlw5H6xQRQ9ev1PsI4pBrNT/f8R QbfRXB0u+7S04UQJntGavNZwZXmUJy8rimVa34j1fOXiV5vEAE+mAM3cXWAAjfA+ DxDrz6LoLHJe4bZKPwjJ8CCTnBXpPWa+LBaMytrv8CqkcO8Pra9rvtec+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+0vod6vr0A7a9dAmzzHjvKNUTrMB8GA1UdIwQY MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1 LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQsJ5eKN H878prn4wyqe1CmMrw0O80K3/LXkbgWb+FcpXKGh2IJAtQpjPNpHqxo483jFs3kh S3TKDez7tW6SCQAbKBJZ1PV4AnDG3KGU+ao2H0TRvSOLbm8LkVcwWv17Sy7BjO/G Uzb4S8uMDdWqqvTln/jiRLEcpS7MFZ/N0du3407dwu73zuzg6O6eBoy6OqmYV/7C pUMrnbNrJCw396HUrdQLqAELoBc8ZGvlMYYOMauc4DibULP6zYS3bGgf+L4XSEhM AnIAZgrSHCam0pk32+VQBaxoe4sHPsm/StOgQERueQyYVNGFbm0YtaeY8bGMNRO0 cAdxaM39JlzdUg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:08:44 2025 by rpki-client