This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft File: lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json) Hash identifier: eY9zWx0VVMvYUcNcautwd55VKwGa/UO2C1OtCTWPQ44= Subject key identifier: 87:CB:04:FC:5C:72:EA:2D:78:1D:F7:A7:F0:A6:AC:36:CF:AC:50:26 Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec Certificate serial: 019B33E8E3A3EC79FC95E602C973647F993B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft Manifest number: 10C2 Signing time: Fri 19 Dec 2025 00:00:59 +0000 Manifest this update: Fri 19 Dec 2025 00:00:59 +0000 Manifest next update: Sat 20 Dec 2025 00:00:59 +0000 Files and hashes: 1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=) 2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: pLJTjGEOGokX13jlI8BFk6VaU+srwn/KY2O32qFYnY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:e3:a3:ec:79:fc:95:e6:02:c9:73:64:7f:99:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec Validity Not Before: Dec 19 00:00:59 2025 GMT Not After : Dec 20 00:00:59 2025 GMT Subject: CN=87cb04fc5c72ea2d781df7a7f0a6ac36cfac5026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:67:38:5c:ea:06:e2:3d:13:c7:57:ee:28: 35:21:d6:f3:52:61:1f:45:d0:c8:57:75:e8:7a:75: 06:99:9b:1b:ad:c7:75:e5:60:48:95:71:ce:c3:83: d5:c8:12:54:f1:e9:47:43:2f:08:3d:e0:84:ce:44: 3a:e8:92:ad:79:5c:a0:f4:cc:35:38:c7:33:3a:67: 0c:e8:1a:a0:dc:11:19:44:9a:1e:3c:3a:1a:da:a8: c0:2e:a4:e2:f4:a8:b5:6c:a2:27:48:d3:ed:58:52: f6:99:bb:26:60:9b:50:30:cc:f0:b3:dc:b1:a2:df: 53:03:8e:92:89:a3:0b:cf:72:e3:c5:92:ef:ed:a7: b5:59:93:63:8d:6a:26:38:3d:ad:c6:c9:3e:02:51: a2:cf:d2:a7:d4:0f:6d:16:c3:53:c7:e6:cb:ca:0d: 22:91:b5:ee:6d:f9:0c:9c:d2:ee:03:2c:59:1d:41: d6:ed:db:42:8b:99:f6:a2:87:30:15:24:97:dc:b0: 74:28:6c:42:5d:3a:07:d5:44:9b:ca:8c:ca:bd:fb: ad:b5:e6:0e:a4:7b:19:04:d5:5c:02:cd:db:f2:45: f7:0a:c8:c6:14:bc:d8:e2:b1:06:0e:c4:a6:8c:23: 08:1c:d7:13:bd:ef:de:a2:25:13:55:0a:e5:04:1f: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CB:04:FC:5C:72:EA:2D:78:1D:F7:A7:F0:A6:AC:36:CF:AC:50:26 X509v3 Authority Key Identifier: keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:67:f9:2f:e3:ba:72:77:cd:69:07:a1:cb:06:85:2b:87:fe: 46:06:71:a9:1a:bb:c1:87:e1:a1:8a:98:2d:ce:da:39:5b:03: b6:20:96:36:80:cc:ce:cc:7d:f2:1f:33:26:83:4d:a6:14:67: 97:8f:98:e9:b4:dd:1f:a9:ef:15:ff:aa:e1:3b:b4:db:11:22: 9c:14:19:92:4f:ff:78:df:d0:d8:4d:ab:1d:69:91:43:93:cc: f3:64:c0:e6:6f:e5:00:02:b3:ee:e1:f3:d9:6e:2b:0e:f5:d2: fa:88:b2:14:3c:99:0a:79:b5:d5:6f:d5:37:bc:ff:f6:d1:c4: b3:90:e7:25:71:93:14:da:3f:9b:e1:2f:be:f9:5f:76:30:84: ac:7c:d2:67:20:ff:c2:52:d7:d7:cd:26:b1:02:40:2d:1f:e4: 0d:60:f6:a7:76:92:e5:14:57:4e:88:9c:72:53:93:62:67:ee: 2f:ab:39:51:e4:68:6c:6a:cd:39:b6:37:d5:95:67:b9:8a:6d: f6:55:ed:d4:fe:b4:30:fc:c4:6c:31:11:34:28:d8:4b:14:0b: a9:83:dc:15:7c:60:72:04:7c:a0:95:6e:62:92:7e:26:2f:24: 50:b8:62:f2:68:7e:de:58:94:a9:33:96:9e:6c:68:f8:dd:26: af:a2:93:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OOj7Hn8leYCyXNkf5k7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NjZjMjM4ZjdmZmRhY2YxNWM4MDJlMzIwYjUyZTA5ODA4 NjljZWMwHhcNMjUxMjE5MDAwMDU5WhcNMjUxMjIwMDAwMDU5WjAzMTEwLwYDVQQD Eyg4N2NiMDRmYzVjNzJlYTJkNzgxZGY3YTdmMGE2YWMzNmNmYWM1MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MNnOFzqBuI9E8dX7ig1IdbzUmEf RdDIV3XoenUGmZsbrcd15WBIlXHOw4PVyBJU8elHQy8IPeCEzkQ66JKteVyg9Mw1 OMczOmcM6Bqg3BEZRJoePDoa2qjALqTi9Ki1bKInSNPtWFL2mbsmYJtQMMzws9yx ot9TA46SiaMLz3LjxZLv7ae1WZNjjWomOD2txsk+AlGiz9Kn1A9tFsNTx+bLyg0i kbXubfkMnNLuAyxZHUHW7dtCi5n2oocwFSSX3LB0KGxCXToH1USbyozKvfutteYO pHsZBNVcAs3b8kX3CsjGFLzY4rEGDsSmjCMIHNcTve/eoiUTVQrlBB86ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfLBPxccuoteB33p/CmrDbPrFAmMB8GA1UdIwQY MBaAFJZmwjj3/9rPFcgC4yC1LgmAhpzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzIt YTAwMGQ3NjllMDI2LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzItYTAwMGQ3NjllMDI2 LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmf5L+O6 cnfNaQehywaFK4f+RgZxqRq7wYfhoYqYLc7aOVsDtiCWNoDMzsx98h8zJoNNphRn l4+Y6bTdH6nvFf+q4Tu02xEinBQZkk//eN/Q2E2rHWmRQ5PM82TA5m/lAAKz7uHz 2W4rDvXS+oiyFDyZCnm11W/VN7z/9tHEs5DnJXGTFNo/m+EvvvlfdjCErHzSZyD/ wlLX180msQJALR/kDWD2p3aS5RRXToicclOTYmfuL6s5UeRobGrNObY31ZVnuYpt 9lXt1P60MPzEbDERNCjYSxQLqYPcFXxgcgR8oJVuYpJ+Ji8kULhi8mh+3liUqTOW nmxo+N0mr6KTMg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:56 2025 by rpki-client