This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json) Hash identifier: mrs+N01zucXwxI4TVWYOpG7AlTmqNIMIYPRv1FB4UxM= Subject key identifier: 6E:9C:BE:A8:FA:40:20:95:E6:F5:82:07:12:BB:1B:4C:9C:27:F8:23 Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f Certificate serial: 019B4C284CB7BE78483AC76EE2704B1F3848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 17:01:07 +0000 Manifest this update: Tue 23 Dec 2025 17:01:07 +0000 Manifest next update: Wed 24 Dec 2025 17:01:07 +0000 Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=) 2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=) 3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: nqtwJI8w+gJEvI3+AjKM+RVkJdv66uYveyz8GA5t8jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:4c:b7:be:78:48:3a:c7:6e:e2:70:4b:1f:38:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f Validity Not Before: Dec 23 17:01:07 2025 GMT Not After : Dec 24 17:01:07 2025 GMT Subject: CN=6e9cbea8fa402095e6f5820712bb1b4c9c27f823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:ec:e3:0a:8a:4b:06:f1:5b:21:05:2d:7c: b6:bc:08:ee:64:02:52:aa:38:4a:09:bc:24:08:5d: 98:4e:8e:2a:4d:77:eb:98:93:b1:ed:57:2e:aa:8f: e5:85:24:2f:10:7f:fd:6b:4c:64:ab:9d:9b:48:b1: 81:9d:20:22:5f:4c:a6:0f:c6:04:49:d9:73:0d:18: e1:85:23:e9:0e:7f:07:63:de:a6:31:74:73:a6:fa: ba:cd:2e:a4:66:48:8a:d5:ca:03:5d:60:ba:10:08: 96:da:86:a7:24:67:7b:31:9a:b6:f9:a3:b6:7b:65: a5:78:5d:d7:55:44:50:9e:db:de:2c:f9:d1:0b:69: a2:23:13:72:32:37:96:3f:d3:9d:34:aa:54:24:34: 35:c9:a7:0c:66:8c:13:0f:85:29:35:98:43:1d:ac: d5:aa:f6:41:67:91:87:3b:ff:2a:29:ab:f4:c1:75: 2a:2e:5e:f3:26:62:ee:88:93:49:d8:91:27:b9:65: 91:cd:0b:ad:e3:29:96:fd:2b:f3:70:22:c9:bb:48: c5:be:f2:fc:b7:56:7b:50:9a:ff:85:68:6c:aa:80: 1f:51:d5:e7:7f:94:be:61:cd:9c:da:8d:f7:1f:80: d9:a5:e7:8f:b5:16:4b:4b:b6:9b:dc:02:e8:a4:6f: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9C:BE:A8:FA:40:20:95:E6:F5:82:07:12:BB:1B:4C:9C:27:F8:23 X509v3 Authority Key Identifier: keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d5:88:c1:2d:f7:02:1a:ce:73:c7:18:a6:c6:63:ce:2c:b4: a8:6d:de:a9:62:e5:ab:38:04:ad:fc:e5:6e:7b:48:bd:ab:c9: a9:6e:db:b6:d3:71:98:f3:fc:a6:a8:85:fb:9a:94:8b:8e:d5: 3d:c9:d4:a4:af:df:53:c7:39:79:b2:20:33:fe:4f:fd:74:79: a7:c1:ee:de:15:43:49:ab:d3:22:40:82:cb:6c:2b:27:c4:32: be:b3:6e:ca:ed:23:29:0d:d0:79:67:f4:e7:b9:b0:c8:f2:67: a9:23:f7:ba:72:2f:30:d5:0e:fe:3f:9e:2a:3f:90:d1:f0:6a: 08:c4:79:3d:70:8c:03:0b:7b:46:1d:71:87:99:f4:b0:9a:cd: 2f:88:c6:d8:97:50:a7:98:46:f9:56:b3:a4:81:72:68:dc:65: e9:8a:d5:9f:c3:f6:45:b6:91:36:bd:47:42:3a:3f:5d:bb:84: 02:21:cb:14:bc:d7:cb:55:51:08:31:9e:2d:8e:ba:99:29:ff: 82:82:4a:ce:cf:f6:63:ad:e4:64:ac:b1:56:9f:b9:dc:40:49: ac:06:02:e8:f4:55:29:2b:a3:de:b5:31:1a:ad:25:6a:56:f0: f7:4a:7e:e8:3d:df:c6:c6:fe:87:80:7e:fb:5c:2d:63:2e:9a: 24:35:26:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKEy3vnhIOsdu4nBLHzhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzczZTljYzk3NDMwMWE3OGI3ZWU2ZDk5NDUyOGYxZjg4 MmU0NmYwHhcNMjUxMjIzMTcwMTA3WhcNMjUxMjI0MTcwMTA3WjAzMTEwLwYDVQQD Eyg2ZTljYmVhOGZhNDAyMDk1ZTZmNTgyMDcxMmJiMWI0YzljMjdmODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoHs4wqKSwbxWyEFLXy2vAjuZAJS qjhKCbwkCF2YTo4qTXfrmJOx7Vcuqo/lhSQvEH/9a0xkq52bSLGBnSAiX0ymD8YE SdlzDRjhhSPpDn8HY96mMXRzpvq6zS6kZkiK1coDXWC6EAiW2oanJGd7MZq2+aO2 e2WleF3XVURQntveLPnRC2miIxNyMjeWP9OdNKpUJDQ1yacMZowTD4UpNZhDHazV qvZBZ5GHO/8qKav0wXUqLl7zJmLuiJNJ2JEnuWWRzQut4ymW/SvzcCLJu0jFvvL8 t1Z7UJr/hWhsqoAfUdXnf5S+Yc2c2o33H4DZpeePtRZLS7ab3ALopG/yrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6cvqj6QCCV5vWCBxK7G0ycJ/gjMB8GA1UdIwQY MBaAFJZ3PpzJdDAaeLfubZlFKPH4guRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTct NzU3ODM4NjcwOTQ4LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTctNzU3ODM4NjcwOTQ4 LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9WIwS33 AhrOc8cYpsZjziy0qG3eqWLlqzgErfzlbntIvavJqW7bttNxmPP8pqiF+5qUi47V PcnUpK/fU8c5ebIgM/5P/XR5p8Hu3hVDSavTIkCCy2wrJ8QyvrNuyu0jKQ3QeWf0 57mwyPJnqSP3unIvMNUO/j+eKj+Q0fBqCMR5PXCMAwt7Rh1xh5n0sJrNL4jG2JdQ p5hG+VazpIFyaNxl6YrVn8P2RbaRNr1HQjo/XbuEAiHLFLzXy1VRCDGeLY66mSn/ goJKzs/2Y63kZKyxVp+53EBJrAYC6PRVKSuj3rUxGq0lalbw90p+6D3fxsb+h4B+ +1wtYy6aJDUmgw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:56:19 2025 by rpki-client