This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json) Hash identifier: PpJ8bDssQK+hynlNyU927w5XpHNahy3zQdf+7fyB18E= Subject key identifier: A1:22:CD:67:C4:09:8C:FF:8B:8D:E9:D5:B1:AF:E0:B5:B7:7E:D2:44 Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Certificate serial: 019B19F246F31B00C9EFB43BA3B222EDEA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft Manifest number: 0E22 Signing time: Sat 13 Dec 2025 23:01:06 +0000 Manifest this update: Sat 13 Dec 2025 23:01:06 +0000 Manifest next update: Sun 14 Dec 2025 23:01:06 +0000 Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=) 2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: wU3awavZW6vVoRSelTLcM8s9BMwNdBMxWjyz+x5rziw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:46:f3:1b:00:c9:ef:b4:3b:a3:b2:22:ed:ea:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Validity Not Before: Dec 13 23:01:06 2025 GMT Not After : Dec 14 23:01:06 2025 GMT Subject: CN=a122cd67c4098cff8b8de9d5b1afe0b5b77ed244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:bc:6a:28:0a:77:b2:1f:10:f2:18:1b:58: 0f:8d:ea:d9:37:83:8f:92:60:b4:0f:a7:c3:73:3a: 3e:63:a2:9a:36:92:3d:79:ce:04:9c:32:83:3d:06: 2b:c7:92:15:6e:15:c4:fc:45:76:16:c0:59:ed:1d: 22:6c:5a:7a:f5:d6:ad:96:c7:99:01:50:3a:fd:82: 2e:8f:6c:a2:9e:68:3d:f2:c5:07:f8:2d:59:c9:94: b9:3e:53:17:e5:51:bd:f5:a3:d2:ae:ef:9c:62:96: f7:53:71:9c:76:ea:23:62:4b:f5:40:aa:4b:74:ff: a9:f4:42:29:43:5a:6a:4b:ce:bc:fa:99:46:c1:76: cf:bf:69:87:9d:32:f5:96:6f:77:65:d3:87:d4:46: 8c:eb:9e:b5:05:b8:3d:22:7d:76:ae:15:0b:24:b2: 30:27:b4:53:af:23:13:4d:db:3e:9f:d0:3a:49:80: 5c:30:5f:d1:83:c2:55:45:4e:72:f1:5e:6b:92:b5: 54:a5:db:18:de:91:6a:ae:09:a4:a0:50:2e:4f:c2: 59:33:55:70:42:46:fb:bc:e5:d0:40:07:7a:33:9c: f1:2e:19:f8:01:7d:cf:6f:f4:18:9e:5e:a5:b4:d8: dd:e5:b2:e7:c5:17:bb:b4:15:33:9e:ef:86:62:be: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:22:CD:67:C4:09:8C:FF:8B:8D:E9:D5:B1:AF:E0:B5:B7:7E:D2:44 X509v3 Authority Key Identifier: keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:52:ab:1b:34:a9:6a:1b:9c:06:bd:cd:78:29:ab:47:26:82: de:05:d5:74:68:34:75:cf:53:9a:f0:f7:dd:f1:11:8e:2f:49: 0b:f4:19:00:a1:25:30:e7:f3:da:81:3c:bd:57:0e:b3:ce:53: ff:2b:71:c1:b6:1f:54:70:c5:8c:8a:67:5a:af:b8:d5:12:11: dc:d1:3c:42:bb:b0:ac:51:c4:09:10:7f:9a:39:fa:5e:90:49: 33:ff:d2:2c:31:88:5c:e9:67:f9:5e:4f:6c:f0:4a:c2:64:44: 8c:82:0b:3f:26:3e:8b:ee:97:81:d6:7b:57:f7:a4:22:6e:05: fe:0e:91:47:e7:ea:48:4d:32:51:fb:f3:28:11:fe:44:f7:18: 91:6d:a8:7c:2b:66:c7:98:79:77:7f:ad:36:0c:29:96:38:3b: 52:b1:12:55:fe:b1:44:dc:e3:e7:b7:41:10:c3:bf:dd:54:7f: 05:3c:dd:d8:4d:67:79:7d:55:fe:1b:f7:db:7d:28:ee:35:f6: a4:63:c6:5d:84:54:a1:95:ad:dd:26:2d:a2:ba:22:cc:dd:59: 3c:69:46:1b:45:40:07:92:f5:41:9c:4e:c3:74:d3:93:ee:a6: 6f:88:1d:29:09:15:d2:cf:c8:e4:ed:40:42:94:29:35:a2:a4: 05:e6:2c:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8kbzGwDJ77Q7o7Ii7eo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0 Y2UxNDcwHhcNMjUxMjEzMjMwMTA2WhcNMjUxMjE0MjMwMTA2WjAzMTEwLwYDVQQD EyhhMTIyY2Q2N2M0MDk4Y2ZmOGI4ZGU5ZDViMWFmZTBiNWI3N2VkMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC68aigKd7IfEPIYG1gPjerZN4OP kmC0D6fDczo+Y6KaNpI9ec4EnDKDPQYrx5IVbhXE/EV2FsBZ7R0ibFp69datlseZ AVA6/YIuj2yinmg98sUH+C1ZyZS5PlMX5VG99aPSru+cYpb3U3GcduojYkv1QKpL dP+p9EIpQ1pqS868+plGwXbPv2mHnTL1lm93ZdOH1EaM6561Bbg9In12rhULJLIw J7RTryMTTds+n9A6SYBcMF/Rg8JVRU5y8V5rkrVUpdsY3pFqrgmkoFAuT8JZM1Vw Qkb7vOXQQAd6M5zxLhn4AX3Pb/QYnl6ltNjd5bLnxRe7tBUznu+GYr70nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEizWfECYz/i43p1bGv4LW3ftJEMB8GA1UdIwQY MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt NDc3NTVjNjNjYzAzLzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFKrGzSp ahucBr3NeCmrRyaC3gXVdGg0dc9TmvD33fERji9JC/QZAKElMOfz2oE8vVcOs85T /ytxwbYfVHDFjIpnWq+41RIR3NE8QruwrFHECRB/mjn6XpBJM//SLDGIXOln+V5P bPBKwmREjIILPyY+i+6XgdZ7V/ekIm4F/g6RR+fqSE0yUfvzKBH+RPcYkW2ofCtm x5h5d3+tNgwpljg7UrESVf6xRNzj57dBEMO/3VR/BTzd2E1neX1V/hv3230o7jX2 pGPGXYRUoZWt3SYtoroizN1ZPGlGG0VAB5L1QZxOw3TTk+6mb4gdKQkV0s/I5O1A QpQpNaKkBeYsew== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:45 2025 by rpki-client