This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json) Hash identifier: 11oeVElLGGjyTHKbqNAnOT+i20FNENZblCwXXgtZ6X0= Subject key identifier: A7:2C:55:0C:94:A2:94:D0:F4:B4:66:EC:01:5D:E7:B1:F8:D1:6B:B4 Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Certificate serial: 019B5975CC71C4605B49284EFA072C702B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:00:50 +0000 Manifest this update: Fri 26 Dec 2025 07:00:50 +0000 Manifest next update: Sat 27 Dec 2025 07:00:50 +0000 Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=) 2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: q6vFFrOVZN3Kl9mkAcZgBdL3k1JgbWTOYb85gk0pDpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:cc:71:c4:60:5b:49:28:4e:fa:07:2c:70:2b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827 Validity Not Before: Dec 26 07:00:50 2025 GMT Not After : Dec 27 07:00:50 2025 GMT Subject: CN=a72c550c94a294d0f4b466ec015de7b1f8d16bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:e5:e9:c3:1c:84:fc:24:bf:40:15:58:9f: 33:db:af:c2:31:5e:38:8e:51:3f:b8:2a:8f:39:e9: 0c:f3:43:70:68:03:26:5b:8b:f3:a6:22:8a:05:7b: 2b:f1:4b:39:c8:48:56:5b:88:7a:f8:92:c4:68:28: 93:e5:4b:c7:00:ba:cc:c6:05:91:f4:95:06:65:79: 56:95:7c:34:82:31:8f:46:fd:c6:8c:36:59:91:84: b9:56:67:dd:97:be:bb:00:ff:ae:20:66:2d:94:3d: f3:15:45:9f:01:20:43:d2:bb:75:95:5b:d3:02:0d: 4e:17:86:a4:91:4c:c5:d8:12:b6:1b:4b:14:6f:4e: c8:88:46:7a:45:b8:f8:54:0c:e8:37:09:ec:91:be: aa:7a:e5:41:fd:aa:79:6b:00:cb:de:c1:b3:12:68: 55:e3:c5:81:0a:ed:93:d9:7d:49:ea:c3:2d:c2:e3: ea:2f:1b:97:49:0c:46:1c:1d:9a:58:44:1c:92:ab: 37:30:4e:4c:6a:4d:fa:55:44:88:a6:a0:d2:d1:59: 3d:7b:f8:a9:86:3c:d6:22:38:61:70:49:33:a4:7e: 2d:9a:56:52:2b:33:ee:75:26:24:a1:07:22:23:16: 9d:67:06:c0:8a:25:ec:2a:e4:f5:38:0a:cb:68:87: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:55:0C:94:A2:94:D0:F4:B4:66:EC:01:5D:E7:B1:F8:D1:6B:B4 X509v3 Authority Key Identifier: keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8e:bc:59:02:80:c7:dd:18:18:ea:ed:38:84:2b:a9:b0:1f: 84:55:86:a9:75:49:0b:82:96:4f:fb:e1:d8:dd:2a:a8:cf:45: ff:9b:3b:23:6c:34:72:3a:2d:86:2f:f4:c2:3a:bd:dc:fc:c3: 10:39:15:7f:4f:de:05:99:0d:45:0d:a9:d5:47:6b:4e:d7:9a: 0f:45:5f:4e:ee:87:80:ac:69:f1:df:aa:d7:e4:63:3d:bc:c8: 9b:96:77:2d:d0:f6:5c:de:d8:38:bd:bf:28:af:d5:a0:e1:82: c0:2c:7c:57:a2:34:cc:15:20:ad:6b:96:fe:fa:7b:1f:df:f1: ee:b5:6b:c4:16:33:4d:8a:f4:06:b3:a9:5e:2a:e6:d0:85:bd: 5d:ad:2c:39:1a:17:45:b9:b9:54:cb:71:34:33:b5:51:61:fd: 83:45:1c:21:67:d4:81:ca:4c:9d:4d:b3:dc:04:c5:62:42:1b: fa:6c:ad:03:12:43:6f:ed:bd:6c:94:01:83:b3:19:bd:01:3f: ed:0e:0d:c0:ed:52:d1:c4:53:79:a8:6d:58:4b:e1:d4:ea:5c: 00:1b:0f:b9:73:59:2e:a6:39:d4:5a:1b:5a:23:f3:04:9e:1c: 8b:1c:8f:02:a5:06:60:e0:74:ef:6b:74:53:98:85:72:e5:2e: dc:51:6a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcxxxGBbSShO+gcscCuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw MTQ4MjcwHhcNMjUxMjI2MDcwMDUwWhcNMjUxMjI3MDcwMDUwWjAzMTEwLwYDVQQD EyhhNzJjNTUwYzk0YTI5NGQwZjRiNDY2ZWMwMTVkZTdiMWY4ZDE2YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikvl6cMchPwkv0AVWJ8z26/CMV44 jlE/uCqPOekM80NwaAMmW4vzpiKKBXsr8Us5yEhWW4h6+JLEaCiT5UvHALrMxgWR 9JUGZXlWlXw0gjGPRv3GjDZZkYS5Vmfdl767AP+uIGYtlD3zFUWfASBD0rt1lVvT Ag1OF4akkUzF2BK2G0sUb07IiEZ6Rbj4VAzoNwnskb6qeuVB/ap5awDL3sGzEmhV 48WBCu2T2X1J6sMtwuPqLxuXSQxGHB2aWEQckqs3ME5Mak36VUSIpqDS0Vk9e/ip hjzWIjhhcEkzpH4tmlZSKzPudSYkoQciIxadZwbAiiXsKuT1OArLaIeKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcsVQyUopTQ9LRm7AFd57H40Wu0MB8GA1UdIwQY MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI68WQKA x90YGOrtOIQrqbAfhFWGqXVJC4KWT/vh2N0qqM9F/5s7I2w0cjothi/0wjq93PzD EDkVf0/eBZkNRQ2p1UdrTteaD0VfTu6HgKxp8d+q1+RjPbzIm5Z3LdD2XN7YOL2/ KK/VoOGCwCx8V6I0zBUgrWuW/vp7H9/x7rVrxBYzTYr0BrOpXirm0IW9Xa0sORoX Rbm5VMtxNDO1UWH9g0UcIWfUgcpMnU2z3ATFYkIb+mytAxJDb+29bJQBg7MZvQE/ 7Q4NwO1S0cRTeahtWEvh1OpcABsPuXNZLqY51FobWiPzBJ4cixyPAqUGYOB072t0 U5iFcuUu3FFqKg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:03 2025 by rpki-client