This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json) Hash identifier: TKl2MlzHNSWwL3LO6FzzXyGDCMrSjSgx0jMBK7dl9xU= Subject key identifier: AA:82:DC:69:4B:01:2C:EA:2F:82:23:A8:A9:73:69:F3:C1:CA:67:91 Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Certificate serial: 019B25530C25201412225122E66379779106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft Manifest number: 0316 Signing time: Tue 16 Dec 2025 04:02:38 +0000 Manifest this update: Tue 16 Dec 2025 04:02:38 +0000 Manifest next update: Wed 17 Dec 2025 04:02:38 +0000 Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=) 2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=) 3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: JKxoaGBHpkpCrmCP4RG/rvGwNYETpl2TEmBDOGKMfDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:0c:25:20:14:12:22:51:22:e6:63:79:77:91:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Validity Not Before: Dec 16 04:02:38 2025 GMT Not After : Dec 17 04:02:38 2025 GMT Subject: CN=aa82dc694b012cea2f8223a8a97369f3c1ca6791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:e6:75:2c:d8:df:71:03:61:1d:da:67:56: 80:7a:0f:9a:d5:53:ad:ed:6d:34:1d:d4:69:30:97: 66:36:21:55:51:74:7b:ba:48:84:e7:69:df:41:36: ae:8d:4f:c0:00:b3:ff:e5:5d:f0:09:42:4f:1d:9d: 29:ec:a4:a8:35:93:70:09:a3:65:67:20:e5:5e:2c: 11:38:06:77:88:94:10:41:4a:9b:8e:cb:54:2b:51: 53:2d:a0:14:86:d8:e9:11:aa:7e:6e:5c:79:5e:b9: 4e:c7:8b:15:1d:17:8a:b4:dd:bf:47:f2:30:0a:0d: d9:08:4e:e1:b9:62:aa:6c:e4:ba:e2:ed:49:4b:81: 6f:d5:5a:f6:f5:f5:95:2e:c9:06:a0:98:1f:0c:4d: 7b:82:e7:cd:67:73:3c:7c:a1:08:be:c7:3e:4a:15: 73:aa:be:42:da:f8:78:ae:61:1c:d4:15:cd:16:e2: ff:53:10:64:75:96:35:1e:f8:0a:c2:08:1d:87:dc: 45:2e:f1:5f:9b:18:ea:db:5f:84:30:99:17:21:3f: a7:63:8f:36:af:a8:23:cf:6c:de:e1:16:c8:4c:fe: 52:6d:ab:23:03:52:a4:c2:79:9a:43:44:d1:43:ef: a6:bd:8d:b7:80:22:2d:0f:65:48:3a:9b:f7:da:7c: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:82:DC:69:4B:01:2C:EA:2F:82:23:A8:A9:73:69:F3:C1:CA:67:91 X509v3 Authority Key Identifier: keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:92:34:8a:5a:02:b9:a3:eb:35:19:a1:fb:e7:75:dd:bd:0b: a0:8c:66:83:84:65:9c:dc:28:45:50:f2:36:7d:d6:95:f6:85: 57:d7:16:58:c7:78:99:a0:0d:8e:69:74:8d:0b:35:aa:c4:4e: b6:2a:d4:36:c7:3c:60:6b:0b:c3:82:35:42:96:f0:59:32:18: d3:d9:f8:8d:7a:15:8a:b1:aa:1b:d7:4a:b0:dd:76:a1:f4:ff: 0d:9b:6b:ef:02:81:f2:29:ce:4d:ed:fa:44:c7:38:ea:d2:50: e2:d5:c0:c9:83:55:6c:9e:99:72:4e:a5:68:5c:3a:98:aa:4c: 6f:1a:21:76:a4:b1:4c:e8:89:75:ed:f6:a9:0f:d1:c4:2e:6e: 18:ee:91:7b:2d:e9:e8:a2:df:92:d3:09:a2:45:17:b1:6c:d7: 39:d2:1d:f7:30:92:eb:e0:3d:7d:87:2d:33:f0:51:91:f4:68: ad:01:b1:11:8d:4b:cb:74:45:2c:58:fe:3d:57:12:72:1a:3f: a1:25:c6:30:47:fc:7b:ec:b7:f0:f8:4c:5a:c6:ef:65:e7:3e: 6e:6d:48:1e:a1:a5:87:1d:58:8b:2c:0f:d3:0b:9e:84:86:0d: 6f:67:ed:4a:6d:30:fa:64:da:27:c7:48:32:37:d7:15:38:67: d7:79:da:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUwwlIBQSIlEi5mN5d5EGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj YjUxOTgwHhcNMjUxMjE2MDQwMjM4WhcNMjUxMjE3MDQwMjM4WjAzMTEwLwYDVQQD EyhhYTgyZGM2OTRiMDEyY2VhMmY4MjIzYThhOTczNjlmM2MxY2E2NzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxijmdSzY33EDYR3aZ1aAeg+a1VOt 7W00HdRpMJdmNiFVUXR7ukiE52nfQTaujU/AALP/5V3wCUJPHZ0p7KSoNZNwCaNl ZyDlXiwROAZ3iJQQQUqbjstUK1FTLaAUhtjpEap+blx5XrlOx4sVHReKtN2/R/Iw Cg3ZCE7huWKqbOS64u1JS4Fv1Vr29fWVLskGoJgfDE17gufNZ3M8fKEIvsc+ShVz qr5C2vh4rmEc1BXNFuL/UxBkdZY1HvgKwggdh9xFLvFfmxjq21+EMJkXIT+nY482 r6gjz2ze4RbITP5SbasjA1KkwnmaQ0TRQ++mvY23gCItD2VIOpv32nwpEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqC3GlLASzqL4IjqKlzafPBymeRMB8GA1UdIwQY MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5I0iloC uaPrNRmh++d13b0LoIxmg4RlnNwoRVDyNn3WlfaFV9cWWMd4maANjml0jQs1qsRO tirUNsc8YGsLw4I1QpbwWTIY09n4jXoVirGqG9dKsN12ofT/DZtr7wKB8inOTe36 RMc46tJQ4tXAyYNVbJ6Zck6laFw6mKpMbxohdqSxTOiJde32qQ/RxC5uGO6Rey3p 6KLfktMJokUXsWzXOdId9zCS6+A9fYctM/BRkfRorQGxEY1Ly3RFLFj+PVcScho/ oSXGMEf8e+y38PhMWsbvZec+bm1IHqGlhx1YiywP0wuehIYNb2ftSm0w+mTaJ8dI MjfXFThn13napg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:09:29 2025 by rpki-client