This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json) Hash identifier: i417qvP/slgDI6dFEmHYGvJRomO8V1hdIMLfvbEdGhY= Subject key identifier: 40:13:A0:4F:43:DE:F7:6B:68:A2:51:FD:A1:E6:D0:69:99:2B:2C:BA Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Certificate serial: 019B608A5DF2D6E79921DB10934E4910716D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft Manifest number: 04B3 Signing time: Sat 27 Dec 2025 16:00:39 +0000 Manifest this update: Sat 27 Dec 2025 16:00:39 +0000 Manifest next update: Sun 28 Dec 2025 16:00:39 +0000 Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=) 2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: LXSKuEEWuCqqBx7n2s6rSkZGGH+gKabwhmBD3tuAjcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:5d:f2:d6:e7:99:21:db:10:93:4e:49:10:71:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Validity Not Before: Dec 27 16:00:39 2025 GMT Not After : Dec 28 16:00:39 2025 GMT Subject: CN=4013a04f43def76b68a251fda1e6d069992b2cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:93:db:7b:c8:02:8f:f8:66:4e:37:04:3e: d7:e8:42:64:ca:7f:0f:38:d1:79:48:07:8b:d1:31: 28:49:0c:3b:f7:62:9a:63:07:ae:84:61:f0:83:44: 2f:9b:b9:2c:a3:e4:90:dd:f4:07:33:1e:fb:0b:9c: c7:6a:4e:af:c0:bb:88:33:92:f4:48:d9:15:ef:b3: 83:b9:d8:20:b1:96:fa:d2:9b:5a:3a:43:fd:28:81: 45:c4:fe:fa:bb:87:b6:d6:f5:4a:32:d3:52:40:5a: d5:7f:2e:b2:e4:6c:3b:65:00:5a:3c:0b:57:73:cb: ea:2d:ac:29:cb:7d:08:1f:25:2a:53:c5:aa:78:a2: d8:c4:e1:1a:0a:53:15:ab:66:78:69:0b:d1:1b:a7: 9a:76:11:5c:0e:af:de:16:0b:01:f4:eb:77:c6:d5: af:a6:84:92:f4:7a:21:6e:0a:81:23:ef:aa:41:3e: 9f:0d:98:e7:8f:d2:43:d8:de:83:36:d9:d4:85:81: be:fa:d7:46:89:c0:b0:e8:19:91:81:5f:60:c9:77: c0:80:8a:00:66:f7:33:41:bc:fb:79:16:f2:fa:5a: c1:33:07:ed:4a:9c:b4:cc:5d:33:ed:31:b1:4f:c5: 64:a9:c1:8c:79:cc:ac:d6:48:69:ec:49:d6:57:2c: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:A0:4F:43:DE:F7:6B:68:A2:51:FD:A1:E6:D0:69:99:2B:2C:BA X509v3 Authority Key Identifier: keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:50:30:82:fe:5d:7f:74:af:85:47:f8:34:11:63:3b:eb:b6: a5:7c:5b:e8:f4:eb:82:5b:6a:19:e8:d9:99:31:42:41:ce:0f: 4a:e3:02:9e:7c:fe:6d:0b:1c:2f:b1:4a:96:76:a8:fb:b5:dc: 08:a1:05:40:95:9f:c0:59:aa:74:48:5f:f2:4a:b9:d2:5e:d3: 43:d0:f9:b4:c5:cd:7b:37:28:c2:08:79:32:2d:43:06:03:47: 67:1a:8f:19:cf:a3:db:ca:5b:44:87:c6:cb:f0:5b:1e:2e:da: 7f:3b:f6:2f:cc:a9:70:7d:9a:57:94:2b:7a:44:f6:53:c5:8d: 73:32:40:aa:e8:6d:c3:2a:eb:ee:bf:aa:d0:8e:c8:f3:fb:86: 71:cc:3e:d9:b7:be:96:c4:38:2f:bb:9e:1c:13:e6:af:c6:ce: ef:1e:5f:47:52:30:5f:86:40:db:7c:66:4a:cd:0a:90:2e:36: d4:f2:4d:1c:16:4d:e6:15:75:dd:40:13:ec:5c:37:12:a6:80: 9b:47:51:a7:db:4e:6d:ef:f6:64:5b:c0:fd:1e:14:2b:88:ac: 9b:6c:ca:eb:31:30:5f:bc:ca:b3:db:fa:e3:f4:ee:a1:9f:69: 0e:01:c0:50:a8:53:61:e2:65:17:0b:42:91:b5:51:a1:14:ff: 1c:2a:4a:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgil3y1ueZIdsQk05JEHFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2 YzIwNDQwHhcNMjUxMjI3MTYwMDM5WhcNMjUxMjI4MTYwMDM5WjAzMTEwLwYDVQQD Eyg0MDEzYTA0ZjQzZGVmNzZiNjhhMjUxZmRhMWU2ZDA2OTk5MmIyY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4OT23vIAo/4Zk43BD7X6EJkyn8P ONF5SAeL0TEoSQw792KaYweuhGHwg0Qvm7kso+SQ3fQHMx77C5zHak6vwLuIM5L0 SNkV77ODudggsZb60ptaOkP9KIFFxP76u4e21vVKMtNSQFrVfy6y5Gw7ZQBaPAtX c8vqLawpy30IHyUqU8WqeKLYxOEaClMVq2Z4aQvRG6eadhFcDq/eFgsB9Ot3xtWv poSS9HohbgqBI++qQT6fDZjnj9JD2N6DNtnUhYG++tdGicCw6BmRgV9gyXfAgIoA ZvczQbz7eRby+lrBMwftSpy0zF0z7TGxT8VkqcGMecys1khp7EnWVyyaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAToE9D3vdraKJR/aHm0GmZKyy6MB8GA1UdIwQY MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFAwgv5d f3SvhUf4NBFjO+u2pXxb6PTrgltqGejZmTFCQc4PSuMCnnz+bQscL7FKlnao+7Xc CKEFQJWfwFmqdEhf8kq50l7TQ9D5tMXNezcowgh5Mi1DBgNHZxqPGc+j28pbRIfG y/BbHi7afzv2L8ypcH2aV5QrekT2U8WNczJAquhtwyrr7r+q0I7I8/uGccw+2be+ lsQ4L7ueHBPmr8bO7x5fR1IwX4ZA23xmSs0KkC421PJNHBZN5hV13UAT7Fw3EqaA m0dRp9tObe/2ZFvA/R4UK4ism2zK6zEwX7zKs9v64/TuoZ9pDgHAUKhTYeJlFwtC kbVRoRT/HCpKsA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:47 2025 by rpki-client