This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json) Hash identifier: C/MIpiuOwFOvH6aE6lsHU8ACMDmdGKmyWYNDHmfoeBw= Subject key identifier: AD:60:CA:73:73:53:8D:C5:60:86:B2:77:97:2A:C5:19:0F:41:7F:07 Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f Certificate serial: 019B194D4F8ED32A8B5DFF47F0D531F26685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft Manifest number: 037C Signing time: Sat 13 Dec 2025 20:00:55 +0000 Manifest this update: Sat 13 Dec 2025 20:00:55 +0000 Manifest next update: Sun 14 Dec 2025 20:00:55 +0000 Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=) 2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: C0yL3eHwErZca0lOy+LvEt4n29cYD0ivf/RG2BRq0z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:4f:8e:d3:2a:8b:5d:ff:47:f0:d5:31:f2:66:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f Validity Not Before: Dec 13 20:00:55 2025 GMT Not After : Dec 14 20:00:55 2025 GMT Subject: CN=ad60ca7373538dc56086b277972ac5190f417f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:b4:6d:fa:fa:27:e3:16:04:3c:94:05:80: f6:38:44:67:5b:fb:64:a5:8b:f7:94:a7:e9:ac:2a: 09:0b:fc:8d:f6:4a:bc:46:9d:39:81:4e:13:93:34: fc:be:e0:a0:5e:ae:56:e8:ab:cd:7a:48:dc:bf:4a: 81:16:d9:e1:f1:3d:99:88:9d:6f:ec:b8:5d:e3:71: 5e:40:7a:85:4a:cd:c5:02:27:e3:84:98:64:69:6c: 19:0d:ea:a1:6c:10:12:03:f6:a9:55:fd:07:a0:95: 58:2e:75:2b:27:fc:8c:75:58:77:2c:b8:6a:a1:0b: fc:31:fa:55:95:ef:43:db:fb:e0:9f:53:87:22:f3: 8d:d4:16:7d:b4:84:4d:d0:2e:fb:b6:f3:8b:90:7e: 51:21:93:09:2e:8c:f8:43:35:fd:df:18:15:31:8a: f0:b5:51:96:a8:34:84:dd:12:5f:e9:09:83:5f:50: a3:62:30:cb:c4:c1:b4:49:2a:e9:81:a4:d7:6b:d6: e3:93:1b:1b:dd:d6:81:48:19:3a:29:a4:5e:4f:5c: d8:40:e2:bf:f9:06:e3:08:be:6d:76:ab:e2:07:ae: e5:13:28:1c:5e:d3:5e:fd:5d:86:08:6d:05:de:d5: c4:c0:9e:f3:c0:2b:a1:03:c4:0b:5e:6c:de:28:5b: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:60:CA:73:73:53:8D:C5:60:86:B2:77:97:2A:C5:19:0F:41:7F:07 X509v3 Authority Key Identifier: keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d7:8a:54:1c:c0:e3:ba:24:af:48:9f:87:8e:85:0f:ef:d2: 37:44:9e:02:8f:e6:ac:74:4a:9a:87:c6:fa:ac:87:d1:db:50: e0:40:4c:86:d8:6a:38:6f:fc:1f:58:23:1a:d3:8a:ee:92:77: b4:16:bb:97:6f:9b:73:8e:bf:18:0e:35:c5:1a:2f:e1:47:e6: 65:5b:b1:97:09:78:df:19:b5:2e:17:a5:af:d2:1f:dd:58:4a: 59:66:ff:24:45:73:b5:83:9f:6b:c7:80:40:2a:a2:08:97:8e: 9d:a4:f5:4d:43:ec:cc:bd:c0:c0:f0:43:49:ec:23:33:8f:a3: 02:41:7b:eb:0b:da:b7:75:5b:04:4e:83:0a:67:18:93:17:31: 6d:27:19:1c:a7:33:c7:7a:fe:7f:92:12:ab:6b:c7:62:6b:76: c3:05:2e:1b:1d:78:00:d3:b6:9b:69:7f:83:7c:2b:a7:c1:0b: c6:4c:c2:8c:c9:bf:5b:46:23:e1:a2:04:41:54:aa:71:95:e4: 4f:99:a0:a4:d6:61:d6:43:92:4b:65:ac:31:3e:2d:6a:31:1e: 20:31:ad:e4:91:3d:87:30:13:3f:0c:ce:10:77:54:60:7f:ba: 75:c9:cf:71:b1:49:07:57:e6:a6:3e:5a:7e:90:ab:26:fd:de: d8:2a:22:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTU+O0yqLXf9H8NUx8maFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjZmZTlhN2UyMWE3NzNmNjFkNjUxMjNmODNlMjgyOGZk MDQyOWYwHhcNMjUxMjEzMjAwMDU1WhcNMjUxMjE0MjAwMDU1WjAzMTEwLwYDVQQD EyhhZDYwY2E3MzczNTM4ZGM1NjA4NmIyNzc5NzJhYzUxOTBmNDE3ZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzS0bfr6J+MWBDyUBYD2OERnW/tk pYv3lKfprCoJC/yN9kq8Rp05gU4TkzT8vuCgXq5W6KvNekjcv0qBFtnh8T2ZiJ1v 7Lhd43FeQHqFSs3FAifjhJhkaWwZDeqhbBASA/apVf0HoJVYLnUrJ/yMdVh3LLhq oQv8MfpVle9D2/vgn1OHIvON1BZ9tIRN0C77tvOLkH5RIZMJLoz4QzX93xgVMYrw tVGWqDSE3RJf6QmDX1CjYjDLxMG0SSrpgaTXa9bjkxsb3daBSBk6KaReT1zYQOK/ +QbjCL5tdqviB67lEygcXtNe/V2GCG0F3tXEwJ7zwCuhA8QLXmzeKFuidQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1gynNzU43FYIayd5cqxRkPQX8HMB8GA1UdIwQY MBaAFC0m/pp+Iadz9h1lEj+D4oKP0EKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUt ZWIzMDZhOGQ0YWI1LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUtZWIzMDZhOGQ0YWI1 LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9eKVBzA 47okr0ifh46FD+/SN0SeAo/mrHRKmofG+qyH0dtQ4EBMhthqOG/8H1gjGtOK7pJ3 tBa7l2+bc46/GA41xRov4UfmZVuxlwl43xm1Lhelr9If3VhKWWb/JEVztYOfa8eA QCqiCJeOnaT1TUPszL3AwPBDSewjM4+jAkF76wvat3VbBE6DCmcYkxcxbScZHKcz x3r+f5ISq2vHYmt2wwUuGx14ANO2m2l/g3wrp8ELxkzCjMm/W0Yj4aIEQVSqcZXk T5mgpNZh1kOSS2WsMT4tajEeIDGt5JE9hzATPwzOEHdUYH+6dcnPcbFJB1fmpj5a fpCrJv3e2Coing== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:25 2025 by rpki-client