This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json) Hash identifier: 7B1/u5rRchmjdfWEZXeDRAzVg26Y6FzAApgthZFKbbE= Subject key identifier: E4:F3:4F:ED:9C:65:7B:28:6C:84:A8:44:94:6B:57:0E:F4:45:6D:6C Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019B3CB52B95078DF8EC3B616EF1929B800E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=) 2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=) 3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: nuDtpztwQvdVuBtXCMaP4pK4plNJolZvbMfq9oPho1w=) 4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2b:95:07:8d:f8:ec:3b:61:6e:f1:92:9b:80:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=e4f34fed9c657b286c84a844946b570ef4456d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:4e:a6:b1:ca:b4:06:85:19:10:99:7b:dd: 81:22:ef:57:cd:e1:2f:4e:07:b1:a0:61:f2:45:be: b2:21:d9:ec:97:81:b3:73:f7:a1:a8:b6:d1:15:a7: 8f:a3:68:3c:7c:89:4c:ff:f3:5a:1b:2b:a8:70:0a: f3:3e:c0:c5:be:7f:34:a2:95:bc:a5:47:5f:87:e3: 8a:1b:7a:27:e4:22:33:98:9f:2b:06:f0:46:88:fc: d4:a4:4e:99:b0:09:d4:b9:86:b3:b3:ab:5a:37:87: 75:64:0f:6f:13:7a:b6:70:5d:25:79:a0:4e:f5:5e: 8a:d3:aa:2f:73:0a:e6:cd:19:b4:0e:5a:d7:3c:cf: 2e:99:67:7b:6c:80:34:56:57:58:65:9c:af:9d:2b: c2:18:e3:09:96:4c:e6:a4:69:4a:a7:ca:9d:5a:d8: e4:21:c1:9c:7f:49:a9:c0:fa:77:9d:06:ff:eb:78: 48:e7:2c:4c:45:85:a4:98:eb:b5:b1:93:c3:c6:6f: 71:0e:8b:98:9b:ad:c0:64:14:f4:01:b8:cc:95:10: 35:cd:4b:40:62:e5:8d:b8:06:86:74:d7:a9:91:61: 92:45:68:9c:dd:54:0e:d0:c0:fd:8f:0c:73:0a:22: 3e:84:3b:9b:a2:13:2b:15:11:8d:09:d1:ce:7a:ca: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F3:4F:ED:9C:65:7B:28:6C:84:A8:44:94:6B:57:0E:F4:45:6D:6C X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:87:bc:43:1c:1e:80:d9:47:47:d2:00:d2:7e:a9:42:9f:c1: 2c:de:65:42:d0:b8:4c:52:0b:66:e3:36:73:73:78:50:b7:a9: f3:84:17:70:bc:c3:ff:a2:fe:cc:f4:67:73:d1:97:78:31:fb: d4:27:ab:c4:c8:80:28:da:8b:95:92:30:12:82:e9:53:dc:59: 3f:8c:c5:fe:3c:21:a8:0c:3d:44:c2:07:27:0f:4e:ee:54:bb: f7:51:b5:28:29:f6:0b:bd:a0:19:f9:ee:cf:1c:3a:c1:a7:e6: 53:14:13:43:72:f4:54:9b:f8:32:72:1a:b9:f4:ca:0a:33:76: 70:83:92:cd:04:60:a1:5a:3e:70:bb:1d:82:26:af:c3:94:2f: b1:4b:b9:d7:2d:16:42:35:65:ce:dd:22:b4:d8:ac:22:5e:42: 0e:2a:89:3e:b9:78:bd:b6:a7:df:8f:57:41:8b:15:3f:96:d2: f9:c7:18:8d:d4:3f:f6:fa:d7:92:95:17:0d:a4:e3:78:48:8c: ff:ef:bd:61:64:33:1a:c1:b1:a8:0a:10:14:e0:1d:cc:2a:1c: e0:ab:8e:14:fb:ac:62:26:63:ba:11:cb:cd:38:c6:73:23:a2: 1c:0e:68:07:f1:16:80:d5:5b:4d:ef:a3:17:c5:a2:a6:86:26: 06:ed:9a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSuVB4347DthbvGSm4AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD EyhlNGYzNGZlZDljNjU3YjI4NmM4NGE4NDQ5NDZiNTcwZWY0NDU2ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt99OprHKtAaFGRCZe92BIu9XzeEv TgexoGHyRb6yIdnsl4Gzc/ehqLbRFaePo2g8fIlM//NaGyuocArzPsDFvn80opW8 pUdfh+OKG3on5CIzmJ8rBvBGiPzUpE6ZsAnUuYazs6taN4d1ZA9vE3q2cF0leaBO 9V6K06ovcwrmzRm0DlrXPM8umWd7bIA0VldYZZyvnSvCGOMJlkzmpGlKp8qdWtjk IcGcf0mpwPp3nQb/63hI5yxMRYWkmOu1sZPDxm9xDouYm63AZBT0AbjMlRA1zUtA YuWNuAaGdNepkWGSRWic3VQO0MD9jwxzCiI+hDubohMrFRGNCdHOespRaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTzT+2cZXsobISoRJRrVw70RW1sMB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIe8Qxwe gNlHR9IA0n6pQp/BLN5lQtC4TFILZuM2c3N4ULep84QXcLzD/6L+zPRnc9GXeDH7 1CerxMiAKNqLlZIwEoLpU9xZP4zF/jwhqAw9RMIHJw9O7lS791G1KCn2C72gGfnu zxw6wafmUxQTQ3L0VJv4MnIaufTKCjN2cIOSzQRgoVo+cLsdgiavw5QvsUu51y0W QjVlzt0itNisIl5CDiqJPrl4vban349XQYsVP5bS+ccYjdQ/9vrXkpUXDaTjeEiM /++9YWQzGsGxqAoQFOAdzCoc4KuOFPusYiZjuhHLzTjGcyOiHA5oB/EWgNVbTe+j F8WipoYmBu2aCg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:48:08 2025 by rpki-client