This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json) Hash identifier: HPzfMpZG2jtdN2ocMgERF/ubkZEEX09ytRO8mMktQo0= Subject key identifier: 70:B6:18:AC:CA:A8:2F:20:F6:87:FD:E5:F4:B0:89:DE:0F:6C:E9:35 Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Certificate serial: 019B451333D5C1E1823FC11DBFE8E2041BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft Manifest number: 1786 Signing time: Mon 22 Dec 2025 08:00:44 +0000 Manifest this update: Mon 22 Dec 2025 08:00:44 +0000 Manifest next update: Tue 23 Dec 2025 08:00:44 +0000 Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: B+jRmrNX+mBTNopTv51hltI+lJ58N1RB3DV8tKTXrx4=) 2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:33:d5:c1:e1:82:3f:c1:1d:bf:e8:e2:04:1b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Validity Not Before: Dec 22 08:00:44 2025 GMT Not After : Dec 23 08:00:44 2025 GMT Subject: CN=70b618accaa82f20f687fde5f4b089de0f6ce935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:36:f0:af:d0:40:a2:ce:11:e1:bd:87:c4: 3a:de:22:db:2c:3b:dd:5d:91:50:cf:6f:59:61:e1: 3f:fc:e9:d0:fd:7e:3b:49:e6:5b:45:fd:e4:bf:f5: e6:56:f1:52:9f:3e:80:68:d1:a5:8f:47:7d:d3:37: 6f:ce:2e:67:3c:08:1d:db:97:c1:47:50:33:3e:bf: fb:38:4e:b7:d5:b1:6f:c4:75:f9:5a:b2:4a:63:04: a9:e8:e3:fc:93:0b:58:00:55:2d:78:a9:d3:c6:42: 9e:59:f3:3a:db:fb:98:47:fd:54:8a:f5:50:c6:c2: b2:99:7b:0f:37:17:3c:33:73:31:e5:12:51:bf:3c: 66:f7:2e:2e:22:de:d4:8d:ec:ea:48:92:0f:a8:11: 61:e6:7e:5b:8f:66:af:57:94:ce:7b:e4:93:b6:32: ac:78:fc:9d:89:d4:48:92:26:2a:d1:29:77:92:b6: 8c:a8:31:da:94:8f:fe:8d:67:0c:14:69:01:d8:0b: 1e:fb:80:e2:0e:eb:d5:a8:9e:5f:85:a1:74:37:05: cf:c3:bd:b6:52:ce:86:fe:6a:12:c6:93:de:1a:8d: 39:48:bf:24:7a:28:ab:7b:96:c1:66:83:72:23:67: a2:94:54:ce:cb:b9:58:34:ec:4d:ba:6a:0f:df:b4: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B6:18:AC:CA:A8:2F:20:F6:87:FD:E5:F4:B0:89:DE:0F:6C:E9:35 X509v3 Authority Key Identifier: keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:94:79:2e:8b:cc:87:ec:d5:9b:8b:1a:25:c6:74:67:6c:80: 9d:bc:21:95:03:7b:87:2e:f0:f0:df:49:28:af:03:1f:17:6d: 53:cc:f0:9f:7b:e7:f3:75:2b:5b:8c:04:ad:b2:a3:80:a5:aa: 68:0b:dc:23:50:61:27:89:1b:b5:c1:2f:b9:bb:c0:1b:ca:02: 4a:09:18:5e:1b:bd:a0:07:0f:1f:d2:f8:29:4b:fe:56:84:f8: 24:c8:47:c8:bc:dd:48:80:1e:e5:71:c8:ca:3d:30:9d:e1:51: f7:7c:da:70:20:a3:27:f5:37:50:b8:5e:31:15:a7:de:9e:fe: 56:8f:fd:90:3f:79:cf:ba:88:1f:e2:62:5a:4c:4e:e8:c0:a5: d3:18:f0:c5:ed:e3:0f:cd:34:54:67:d6:22:1b:61:2e:97:b7: 6d:ab:31:d0:57:7d:01:d6:b2:29:f2:3e:5b:a2:68:0e:04:a5: 9e:4f:00:85:c6:05:01:27:07:87:91:1b:ec:6e:8b:e7:11:e6: b7:91:91:89:24:cf:14:f7:f1:12:bf:69:e3:22:b7:81:ee:04: 68:8c:1c:60:c0:42:5b:25:77:33:5d:1f:08:8c:a5:c0:cc:a7: d6:2f:27:93:51:06:5d:d1:b0:28:15:17:65:17:a3:9f:91:c8: a7:59:d7:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEzPVweGCP8Edv+jiBBvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1 N2JlZGMwHhcNMjUxMjIyMDgwMDQ0WhcNMjUxMjIzMDgwMDQ0WjAzMTEwLwYDVQQD Eyg3MGI2MThhY2NhYTgyZjIwZjY4N2ZkZTVmNGIwODlkZTBmNmNlOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6k28K/QQKLOEeG9h8Q63iLbLDvd XZFQz29ZYeE//OnQ/X47SeZbRf3kv/XmVvFSnz6AaNGlj0d90zdvzi5nPAgd25fB R1AzPr/7OE631bFvxHX5WrJKYwSp6OP8kwtYAFUteKnTxkKeWfM62/uYR/1UivVQ xsKymXsPNxc8M3Mx5RJRvzxm9y4uIt7UjezqSJIPqBFh5n5bj2avV5TOe+STtjKs ePydidRIkiYq0Sl3kraMqDHalI/+jWcMFGkB2Ase+4DiDuvVqJ5fhaF0NwXPw722 Us6G/moSxpPeGo05SL8keiire5bBZoNyI2eilFTOy7lYNOxNumoP37QYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC2GKzKqC8g9of95fSwid4PbOk1MB8GA1UdIwQY MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA05R5LovM h+zVm4saJcZ0Z2yAnbwhlQN7hy7w8N9JKK8DHxdtU8zwn3vn83UrW4wErbKjgKWq aAvcI1BhJ4kbtcEvubvAG8oCSgkYXhu9oAcPH9L4KUv+VoT4JMhHyLzdSIAe5XHI yj0wneFR93zacCCjJ/U3ULheMRWn3p7+Vo/9kD95z7qIH+JiWkxO6MCl0xjwxe3j D800VGfWIhthLpe3basx0Fd9AdayKfI+W6JoDgSlnk8AhcYFAScHh5Eb7G6L5xHm t5GRiSTPFPfxEr9p4yK3ge4EaIwcYMBCWyV3M10fCIylwMyn1i8nk1EGXdGwKBUX ZRejn5HIp1nXtg== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:25 2025 by rpki-client