This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json) Hash identifier: VNg6lWIYPKcDgfDFhDSVTIFmf6L90i9RS1rUe0DOg/E= Subject key identifier: 58:BB:DC:B0:81:33:E1:CF:41:9B:F0:73:CF:9C:79:E9:40:66:E4:71 Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c Certificate serial: 019B5A518BB84856714644529FF2CF379B11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft Manifest number: 040A Signing time: Fri 26 Dec 2025 11:00:52 +0000 Manifest this update: Fri 26 Dec 2025 11:00:52 +0000 Manifest next update: Sat 27 Dec 2025 11:00:52 +0000 Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: arxYWNHL30+DF2CT9DywzDjidO2/s5w6p42iTyfqZIY=) 2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:8b:b8:48:56:71:46:44:52:9f:f2:cf:37:9b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c Validity Not Before: Dec 26 11:00:52 2025 GMT Not After : Dec 27 11:00:52 2025 GMT Subject: CN=58bbdcb08133e1cf419bf073cf9c79e94066e471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:e0:cb:64:41:59:4d:9d:a7:09:fa:bd:f2: b1:4f:2f:32:00:df:74:c4:1e:80:d2:12:ce:97:06: d0:60:31:04:54:f4:0b:b7:c8:ac:89:0f:5b:86:ab: 93:ff:03:be:7d:e6:25:7a:80:4f:00:b4:e6:e2:1b: e6:2c:b7:c4:51:de:c2:f8:af:74:ce:17:5e:33:3f: 65:88:10:1c:9d:27:a2:4c:84:29:00:29:e1:1d:ac: e4:3e:97:65:f5:04:19:c2:1c:8b:86:9b:65:71:57: 56:0f:22:7a:0a:5a:23:98:f3:dc:45:24:43:4b:7b: ce:6c:8c:17:19:19:36:cb:80:cf:f4:5e:70:58:9f: 27:dd:cf:b6:14:6e:58:79:68:6f:f8:79:ae:fc:d9: 22:76:be:b0:cd:71:e8:b6:36:5a:a6:a6:ea:1c:43: bf:82:a9:b7:8b:63:d7:b4:5e:ce:a4:52:fb:12:b8: 8b:4c:3c:96:4d:e9:24:41:c0:83:2d:fb:65:c6:cf: 33:fd:f9:6e:22:aa:13:79:70:66:ed:b3:42:47:1c: be:f4:b2:03:c6:ff:da:36:dc:97:98:bc:bc:c3:0c: 6d:38:3b:50:1b:f4:75:24:9f:15:b7:ef:c8:2d:e2: dd:c5:c9:4c:aa:9b:de:15:16:04:1a:10:7f:a9:d5: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BB:DC:B0:81:33:E1:CF:41:9B:F0:73:CF:9C:79:E9:40:66:E4:71 X509v3 Authority Key Identifier: keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c1:53:07:60:60:61:a1:4d:26:3c:3e:a7:36:4e:9d:2a:f3: c9:4d:1b:0a:18:0d:f2:d8:a2:cf:67:26:1c:07:58:c4:0d:ed: f9:a5:ae:87:a4:93:44:51:63:2d:76:7f:b4:a2:ba:ea:e6:6a: 34:a2:e9:dc:db:d9:fd:06:35:37:ef:d3:76:0d:43:59:a3:b1: 58:90:6e:f4:3f:85:a1:ab:96:2e:4e:7b:94:61:a1:ae:b9:ed: 3b:7d:52:ea:1b:ca:17:7e:75:38:f8:a5:ba:9a:94:a9:03:a1: 4c:66:fb:69:78:53:08:d7:e5:9b:59:82:8d:c7:3d:89:da:52: 59:a3:0c:8d:d1:15:29:94:e9:b4:d6:45:93:84:8e:08:74:21: 2f:ca:0c:77:fa:c4:ff:b9:78:d8:80:dd:71:b8:b6:37:dd:8f: 12:d0:39:09:ae:06:cf:3c:59:5c:8b:93:6e:62:e5:cf:6b:aa: 69:45:4b:c5:45:02:5d:6e:18:c4:4f:8c:bd:d4:61:cb:43:e9: b4:61:e2:bc:d8:4d:49:5a:d4:0a:05:01:e5:4b:29:76:d5:88: dd:b6:e4:b3:6a:66:7b:b1:f3:51:23:a4:90:83:6c:99:c4:91: 27:b2:f7:be:2e:aa:9f:86:33:d6:5c:5f:d9:28:cc:87:7f:fc: 2a:df:20:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYu4SFZxRkRSn/LPN5sRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZjU4YWE1MjZjODFlMzJjMWI5NTliZmNhZGYwOGMxOWFk YzQxMmMwHhcNMjUxMjI2MTEwMDUyWhcNMjUxMjI3MTEwMDUyWjAzMTEwLwYDVQQD Eyg1OGJiZGNiMDgxMzNlMWNmNDE5YmYwNzNjZjljNzllOTQwNjZlNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuTgy2RBWU2dpwn6vfKxTy8yAN90 xB6A0hLOlwbQYDEEVPQLt8isiQ9bhquT/wO+feYleoBPALTm4hvmLLfEUd7C+K90 zhdeMz9liBAcnSeiTIQpACnhHazkPpdl9QQZwhyLhptlcVdWDyJ6ClojmPPcRSRD S3vObIwXGRk2y4DP9F5wWJ8n3c+2FG5YeWhv+Hmu/Nkidr6wzXHotjZapqbqHEO/ gqm3i2PXtF7OpFL7EriLTDyWTekkQcCDLftlxs8z/fluIqoTeXBm7bNCRxy+9LID xv/aNtyXmLy8wwxtODtQG/R1JJ8Vt+/ILeLdxclMqpveFRYEGhB/qdVPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFi73LCBM+HPQZvwc8+ceelAZuRxMB8GA1UdIwQY MBaAFC31iqUmyB4ywblZv8rfCMGa3EEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODkt N2U4Yjk3NTI4YjFjLzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYzhjYzgtMGZlMi00OTFlLWFkODktN2U4Yjk3NTI4YjFj LzEvTGZXS3BTYklIakxCdVZtX3l0OEl3WnJjUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMFTB2Bg YaFNJjw+pzZOnSrzyU0bChgN8tiiz2cmHAdYxA3t+aWuh6STRFFjLXZ/tKK66uZq NKLp3NvZ/QY1N+/Tdg1DWaOxWJBu9D+FoauWLk57lGGhrrntO31S6hvKF351OPil upqUqQOhTGb7aXhTCNflm1mCjcc9idpSWaMMjdEVKZTptNZFk4SOCHQhL8oMd/rE /7l42IDdcbi2N92PEtA5Ca4GzzxZXIuTbmLlz2uqaUVLxUUCXW4YxE+MvdRhy0Pp tGHivNhNSVrUCgUB5UspdtWI3bbks2pme7HzUSOkkINsmcSRJ7L3vi6qn4Yz1lxf 2SjMh3/8Kt8gIg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client