This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json) Hash identifier: rVQYgoqpO59geMqY0gC/kVsiglOJojFo/+XQ/MNzFJM= Subject key identifier: 22:92:40:6A:C1:96:E3:27:B0:49:C3:FC:12:78:28:9C:16:2B:B8:8F Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7 Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7 Certificate serial: 019B3F118E53FC9EF44AA57F5336BB2AF8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft Manifest number: 1744 Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: DBxzAZVNSJPu_D0QGXT-19vacIM.roa (hash: bIWX7NiEWiqzGP0lZHaLTFhN+7dD70TkNkDzreVHTKQ=) 2: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: tl3UvM4H2RqawXO6Y+8b9RexjIjNs4ZD0cyXaHBhgcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8e:53:fc:9e:f4:4a:a5:7f:53:36:bb:2a:f8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7 Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=2292406ac196e327b049c3fc1278289c162bb88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:85:51:57:51:28:78:e1:d5:9f:8b:79:f0: 49:c0:f5:ce:24:4b:31:d2:e4:83:54:16:b7:9e:90: 93:51:93:c0:6c:58:58:0d:98:66:e4:fd:10:61:5e: 73:99:0c:e6:d5:2d:22:40:aa:e7:49:bd:f1:fc:c6: 3a:dd:76:ef:1c:ea:9e:62:93:35:cd:32:c2:b4:74: e4:9d:48:1e:32:57:b7:3a:04:9f:94:05:24:14:16: ce:c4:02:75:ad:da:46:bc:22:92:1b:27:a5:0a:2d: 1e:97:35:60:76:7f:d7:ba:24:cf:0b:2e:91:ec:f7: 38:06:e2:4f:a4:3e:27:e4:10:ad:25:f5:bf:8e:4c: 6d:9b:dc:c2:41:17:39:88:27:2a:f2:95:70:28:43: 52:9a:7c:28:e3:83:f5:0b:b4:52:fc:83:94:68:83: d3:a3:65:76:1f:bf:51:2e:6d:e7:22:3d:c1:ec:b0: 96:ea:a1:c7:82:bb:f7:4b:84:35:17:2f:2f:39:c1: f4:86:1b:fc:1e:62:31:4c:81:5a:76:a8:6e:64:5a: 5b:62:e1:14:47:ca:0e:18:de:7f:21:e1:c9:44:cc: 9a:ab:70:49:ed:63:f8:89:a4:5e:d7:1c:5c:9e:ec: c1:e3:ee:b3:d6:b8:64:85:78:46:2c:02:92:93:66: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:92:40:6A:C1:96:E3:27:B0:49:C3:FC:12:78:28:9C:16:2B:B8:8F X509v3 Authority Key Identifier: keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2e:12:ba:b5:f1:18:2b:9c:e8:b6:80:d6:c7:56:46:c3:b9: 05:4f:89:05:3c:b3:00:26:b4:9a:ef:85:a7:55:c9:19:72:1a: e4:a8:80:33:27:ab:ec:ba:ae:ca:bb:7d:b9:8e:49:9e:a7:dc: 80:45:a6:04:52:31:d9:87:da:ba:d7:cc:1c:8f:86:16:10:4e: e9:77:37:c7:c8:00:e2:9c:2b:7a:24:6d:44:2b:a2:00:b4:15: b6:f0:90:10:21:ce:e8:cd:1a:9f:30:29:02:b9:eb:59:61:76: 42:06:81:0a:ed:99:09:60:db:87:43:2e:6e:50:e6:5d:66:d9: c1:ab:00:c0:72:f6:5d:1d:c5:9f:d6:a3:36:93:5e:9e:b4:2e: 89:e8:7e:7f:59:49:cc:85:4f:0d:97:0a:1c:2a:04:18:7a:64: fc:84:39:3f:d5:17:ac:44:ca:33:b6:40:57:1d:c4:56:6e:1e: eb:d4:33:ff:91:ff:29:b8:33:8b:f6:a2:08:8a:a3:01:62:b6: e5:e9:9d:ed:4f:fe:50:8f:00:69:f8:8a:4f:b1:e6:51:b6:ce: 5b:14:ea:4f:69:55:8a:36:40:ec:40:cc:b7:b0:eb:78:6e:26: 1c:62:e9:1c:00:c6:d9:29:7a:44:33:61:24:18:1b:5a:a9:d8: 09:9f:64:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EY5T/J70SqV/Uza7KvjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzJmZTg3MTViNjNhMTIwZWQ3ZDA2N2ViNTI1ZmU0YjZk ZTkwZjcwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD EygyMjkyNDA2YWMxOTZlMzI3YjA0OWMzZmMxMjc4Mjg5YzE2MmJiODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8OFUVdRKHjh1Z+LefBJwPXOJEsx 0uSDVBa3npCTUZPAbFhYDZhm5P0QYV5zmQzm1S0iQKrnSb3x/MY63XbvHOqeYpM1 zTLCtHTknUgeMle3OgSflAUkFBbOxAJ1rdpGvCKSGyelCi0elzVgdn/XuiTPCy6R 7Pc4BuJPpD4n5BCtJfW/jkxtm9zCQRc5iCcq8pVwKENSmnwo44P1C7RS/IOUaIPT o2V2H79RLm3nIj3B7LCW6qHHgrv3S4Q1Fy8vOcH0hhv8HmIxTIFadqhuZFpbYuEU R8oOGN5/IeHJRMyaq3BJ7WP4iaRe1xxcnuzB4+6z1rhkhXhGLAKSk2aS1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKSQGrBluMnsEnD/BJ4KJwWK7iPMB8GA1UdIwQY MBaAFJZy/ocVtjoSDtfQZ+tSX+S23pD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85NmI1OTctY2EyYi00YTljLWJiODIt NWJiZTdiMjBmM2ZjLzEvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85NmI1OTctY2EyYi00YTljLWJiODItNWJiZTdiMjBmM2Zj LzEvbG5MLWh4VzJPaElPMTlCbjYxSmY1TGJla1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS4SurXx GCuc6LaA1sdWRsO5BU+JBTyzACa0mu+Fp1XJGXIa5KiAMyer7Lquyrt9uY5Jnqfc gEWmBFIx2YfautfMHI+GFhBO6Xc3x8gA4pwreiRtRCuiALQVtvCQECHO6M0anzAp ArnrWWF2QgaBCu2ZCWDbh0MublDmXWbZwasAwHL2XR3Fn9ajNpNenrQuieh+f1lJ zIVPDZcKHCoEGHpk/IQ5P9UXrETKM7ZAVx3EVm4e69Qz/5H/Kbgzi/aiCIqjAWK2 5emd7U/+UI8AafiKT7HmUbbOWxTqT2lVijZA7EDMt7DreG4mHGLpHADG2Sl6RDNh JBgbWqnYCZ9ksQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:50 2025 by rpki-client