This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json) Hash identifier: ztGYW388SMTiJ4zq/y6uO3jMgFilaDeFF1CnPqkt4v4= Subject key identifier: BF:E8:A9:95:2A:6C:D5:E8:CC:07:A0:44:4F:CD:5B:A7:2D:07:48:36 Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84 Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084 Certificate serial: 019B6C20CE100D023EF649D388E49A315BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft Manifest number: 1764 Signing time: Mon 29 Dec 2025 22:00:47 +0000 Manifest this update: Mon 29 Dec 2025 22:00:47 +0000 Manifest next update: Tue 30 Dec 2025 22:00:47 +0000 Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: XWXK7ZA0V/N8Te/YSegTmxQNeaiNV17OL1B1O6K7Vi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:ce:10:0d:02:3e:f6:49:d3:88:e4:9a:31:5b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084 Validity Not Before: Dec 29 22:00:47 2025 GMT Not After : Dec 30 22:00:47 2025 GMT Subject: CN=bfe8a9952a6cd5e8cc07a0444fcd5ba72d074836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:a3:0d:e1:e1:23:f8:7a:db:40:fa:20:87: cb:aa:5e:9c:d8:4d:5a:47:ae:53:29:66:db:fc:b5: c8:02:20:4a:33:55:36:05:aa:db:50:c7:ce:f0:24: 50:d7:bf:2e:e2:6e:b0:5b:1f:87:4d:79:6d:4a:33: ef:6b:76:87:ad:f5:7d:74:89:19:2f:fd:2c:ee:c9: f6:52:e6:a3:9d:66:5d:81:df:60:9f:13:e5:0e:5b: 9c:30:5c:51:15:2e:41:7d:f3:4c:4d:1c:fc:5e:22: 4b:c8:c6:a7:f2:7e:e6:12:f1:2a:90:f8:2c:dc:b0: 81:e4:0f:c6:a3:12:06:cb:e6:ae:fc:86:5a:06:bf: d8:c2:1d:ca:ee:0b:51:00:a2:8b:8d:e2:f8:0b:4a: dd:8f:2c:cf:0a:5c:33:76:55:c4:7b:82:5c:58:0f: 73:e0:0e:8a:fe:bc:e3:56:ee:df:8b:13:34:2a:15: 47:cd:9a:f1:f9:f5:75:58:45:1f:3f:b0:a9:2c:79: 02:50:33:b0:89:8b:9b:75:1f:d2:40:51:18:ae:76: e5:56:65:2b:d7:3c:c3:38:4f:35:58:55:55:9e:9b: b4:d2:a6:2f:e1:58:d2:3f:1b:97:17:9b:c7:22:3b: 66:5e:86:9a:dc:34:b7:50:6f:de:93:ca:34:04:15: 27:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:A9:95:2A:6C:D5:E8:CC:07:A0:44:4F:CD:5B:A7:2D:07:48:36 X509v3 Authority Key Identifier: keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:31:9c:f6:6d:ff:82:80:ee:ae:89:c0:a5:36:b3:e5:25:b8: f9:3d:b9:de:0e:0c:94:b7:07:d2:7e:b1:ae:c5:30:d4:46:47: 27:ef:03:a5:2a:93:3a:bd:c5:70:c6:50:60:86:cb:48:f6:e3: 7b:8f:3a:5f:a4:31:53:f4:75:78:96:3e:95:31:d9:10:b1:63: cb:60:00:3f:93:99:8d:ff:19:ba:ff:7e:cf:36:6a:e8:e9:f1: a0:23:d7:ee:a5:2a:bc:ef:61:8b:e0:1a:0f:41:a1:d5:28:b7: ce:fb:59:38:c4:95:98:70:91:10:a9:96:78:e4:36:83:94:72: 9c:8a:70:86:96:32:c7:c7:23:d2:e1:a0:09:d8:5c:c5:2d:aa: 68:0a:6f:f3:7f:4f:52:42:77:5b:e9:a6:7c:dd:92:82:12:0c: 00:13:16:29:a2:20:2d:0f:69:e0:6b:2f:29:9d:7b:c7:d3:db: 53:6f:25:42:5c:3e:16:6b:12:60:fb:b5:67:a5:45:ba:9e:25: cc:e3:02:e6:36:4f:38:cb:5e:60:25:ac:ed:ee:8d:7d:b3:47: 3a:a9:9e:88:f4:3a:32:b0:55:37:9b:6c:1a:6c:0e:e9:c2:64: 22:33:59:ba:dc:d6:1c:ee:49:a6:1c:a1:de:9b:ca:d6:1f:5c: 9a:4d:95:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIM4QDQI+9knTiOSaMVu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh MTMwODQwHhcNMjUxMjI5MjIwMDQ3WhcNMjUxMjMwMjIwMDQ3WjAzMTEwLwYDVQQD EyhiZmU4YTk5NTJhNmNkNWU4Y2MwN2EwNDQ0ZmNkNWJhNzJkMDc0ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU+jDeHhI/h620D6IIfLql6c2E1a R65TKWbb/LXIAiBKM1U2BarbUMfO8CRQ178u4m6wWx+HTXltSjPva3aHrfV9dIkZ L/0s7sn2UuajnWZdgd9gnxPlDlucMFxRFS5BffNMTRz8XiJLyMan8n7mEvEqkPgs 3LCB5A/GoxIGy+au/IZaBr/Ywh3K7gtRAKKLjeL4C0rdjyzPClwzdlXEe4JcWA9z 4A6K/rzjVu7fixM0KhVHzZrx+fV1WEUfP7CpLHkCUDOwiYubdR/SQFEYrnblVmUr 1zzDOE81WFVVnpu00qYv4VjSPxuXF5vHIjtmXoaa3DS3UG/ek8o0BBUnJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/oqZUqbNXozAegRE/NW6ctB0g2MB8GA1UdIwQY MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0 LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjGc9m3/ goDuronApTaz5SW4+T253g4MlLcH0n6xrsUw1EZHJ+8DpSqTOr3FcMZQYIbLSPbj e486X6QxU/R1eJY+lTHZELFjy2AAP5OZjf8Zuv9+zzZq6OnxoCPX7qUqvO9hi+Aa D0Gh1Si3zvtZOMSVmHCREKmWeOQ2g5RynIpwhpYyx8cj0uGgCdhcxS2qaApv839P UkJ3W+mmfN2SghIMABMWKaIgLQ9p4GsvKZ17x9PbU28lQlw+FmsSYPu1Z6VFup4l zOMC5jZPOMteYCWs7e6NfbNHOqmeiPQ6MrBVN5tsGmwO6cJkIjNZutzWHO5Jphyh 3pvK1h9cmk2VoQ== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:48 2025 by rpki-client