This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json) Hash identifier: w2ZjE2tVQBjfADyBYued/RrzPt2T23etHO4zsGjgBs4= Subject key identifier: EB:74:EB:14:52:52:A5:B6:20:C4:49:DC:81:DD:11:05:FB:E9:20:0D Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b Certificate serial: 019B46939541BD1C4F51D9FAC754CEBA7310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 15:00:35 +0000 Manifest this update: Mon 22 Dec 2025 15:00:35 +0000 Manifest next update: Tue 23 Dec 2025 15:00:35 +0000 Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=) 2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: GbYPDy9/awZJAQzvdjc/feez+GVEiwuId6eVUuI/YvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:95:41:bd:1c:4f:51:d9:fa:c7:54:ce:ba:73:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b Validity Not Before: Dec 22 15:00:35 2025 GMT Not After : Dec 23 15:00:35 2025 GMT Subject: CN=eb74eb145252a5b620c449dc81dd1105fbe9200d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:66:9b:25:b7:77:f4:ee:75:d0:63:11:cb: bb:53:90:9c:43:9a:48:ff:a1:45:3c:5b:2d:81:bd: 91:bd:1e:ed:83:db:c8:03:2b:73:c9:40:7e:43:62: b8:66:7c:85:6a:b1:d0:69:f5:0b:5b:86:06:b0:68: 69:62:57:c6:00:94:4b:05:b2:91:08:ea:df:6f:62: 8c:0c:98:ee:16:4f:fb:25:52:5c:02:11:61:21:0e: 03:cc:3a:5f:0a:a2:94:a9:43:e2:f6:88:1c:f1:c1: 2e:09:98:f5:df:dc:64:1d:35:e7:ad:d0:f2:3e:16: e6:03:0d:66:dc:93:74:68:40:7d:37:0e:d6:d7:7a: d2:6f:a8:09:e8:da:5c:26:0b:bc:f0:23:ee:51:67: 17:6f:4b:72:ce:96:a1:3b:54:90:b8:4c:d5:6e:f5: 5c:cf:c9:c1:80:9c:85:34:30:0a:79:1d:73:b2:92: 97:ac:ba:05:65:c3:9f:9a:56:98:a5:ee:2d:21:7a: 8f:4e:7e:bb:02:d9:3f:b6:42:73:c8:21:cd:bb:8a: e2:70:2f:8e:73:d2:34:02:51:40:5d:aa:84:70:fb: 55:5b:10:1c:47:5d:5b:9b:d8:9d:28:97:bc:d7:c7: 2b:55:3c:96:20:b6:9c:da:a7:97:a4:c2:3b:f0:97: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:74:EB:14:52:52:A5:B6:20:C4:49:DC:81:DD:11:05:FB:E9:20:0D X509v3 Authority Key Identifier: keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:6b:d1:eb:9d:fd:bc:ec:03:93:82:6b:71:65:04:fe:65:37: f3:e1:5a:86:9b:6b:ec:20:73:4d:9e:f0:bf:25:f0:12:65:f8: fd:c9:95:b8:46:e7:69:f6:1c:2b:4a:bb:71:04:b7:a8:1f:93: 50:c4:61:97:02:0b:4c:da:81:4d:64:e2:f2:99:5a:ac:3f:fa: 59:8d:aa:af:19:a7:37:b8:96:e3:70:82:ad:01:8e:2c:bf:25: 68:80:23:c4:b5:a0:83:77:53:6a:2f:3d:85:fd:86:7c:3f:22: 59:4e:33:1e:30:12:d1:f0:69:63:5e:36:f4:6b:f0:a0:71:50: 30:4a:04:b9:d6:bb:43:56:ad:f3:b0:64:4a:b8:d4:04:d2:ef: b8:97:32:c5:82:87:cb:7d:53:27:d8:85:aa:96:c2:5d:b0:aa: 15:41:7f:23:75:66:3f:4b:28:68:e0:53:65:47:32:6a:5a:8f: 71:01:c4:1e:29:a6:37:be:b8:80:dd:90:0b:b9:c9:54:c4:64: e4:86:7d:e8:cb:a0:bf:98:c6:9a:e2:60:85:cc:c1:1a:22:d4: ce:cc:96:0a:c4:3a:72:15:de:87:28:f4:cc:a0:b3:e2:a9:ab: 61:b0:27:03:5f:db:37:c8:12:52:83:d8:21:b3:aa:d1:69:14: 0a:48:20:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk5VBvRxPUdn6x1TOunMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi YjQyN2IwHhcNMjUxMjIyMTUwMDM1WhcNMjUxMjIzMTUwMDM1WjAzMTEwLwYDVQQD EyhlYjc0ZWIxNDUyNTJhNWI2MjBjNDQ5ZGM4MWRkMTEwNWZiZTkyMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys5mmyW3d/TuddBjEcu7U5CcQ5pI /6FFPFstgb2RvR7tg9vIAytzyUB+Q2K4ZnyFarHQafULW4YGsGhpYlfGAJRLBbKR COrfb2KMDJjuFk/7JVJcAhFhIQ4DzDpfCqKUqUPi9ogc8cEuCZj139xkHTXnrdDy PhbmAw1m3JN0aEB9Nw7W13rSb6gJ6NpcJgu88CPuUWcXb0tyzpahO1SQuEzVbvVc z8nBgJyFNDAKeR1zspKXrLoFZcOfmlaYpe4tIXqPTn67Atk/tkJzyCHNu4ricC+O c9I0AlFAXaqEcPtVWxAcR11bm9idKJe818crVTyWILac2qeXpMI78JdUJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt06xRSUqW2IMRJ3IHdEQX76SANMB8GA1UdIwQY MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmvR6539 vOwDk4JrcWUE/mU38+Fahptr7CBzTZ7wvyXwEmX4/cmVuEbnafYcK0q7cQS3qB+T UMRhlwILTNqBTWTi8plarD/6WY2qrxmnN7iW43CCrQGOLL8laIAjxLWgg3dTai89 hf2GfD8iWU4zHjAS0fBpY1429GvwoHFQMEoEuda7Q1at87BkSrjUBNLvuJcyxYKH y31TJ9iFqpbCXbCqFUF/I3VmP0soaOBTZUcyalqPcQHEHimmN764gN2QC7nJVMRk 5IZ96Mugv5jGmuJghczBGiLUzsyWCsQ6chXehyj0zKCz4qmrYbAnA1/bN8gSUoPY IbOq0WkUCkggjg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:58:56 2025 by rpki-client