This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: n96O0FBkz2M3ScK9FFtKbwpyqh09svnDLVhIiI5uW2A= Subject key identifier: 52:3A:D4:0F:89:52:A8:F4:9E:28:64:1E:81:65:B3:14:34:04:1F:79 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B4926F15B7D84F94268023B66B83D0C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 17C0 Signing time: Tue 23 Dec 2025 03:00:47 +0000 Manifest this update: Tue 23 Dec 2025 03:00:47 +0000 Manifest next update: Wed 24 Dec 2025 03:00:47 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: AY_WLc-0HtZ3hixtwdogLmPKXhE.roa (hash: fnYmgKRqcujwjHKJHjsTwufzR5xIWY84VoLFf58blrI=) 4: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 5: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 6: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: WxQO-9CxlXG8zE5QdPlu1u0G9Lg.roa (hash: 9WXS6IOJjMtxtBOUiDL28bN6truRYGAJ2euUD+fKyK8=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: JOxahSBu7UApM18fOa6dM3cyUNtDofzwgtD7g3eBPDM=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:f1:5b:7d:84:f9:42:68:02:3b:66:b8:3d:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Dec 23 03:00:47 2025 GMT Not After : Dec 24 03:00:47 2025 GMT Subject: CN=523ad40f8952a8f49e28641e8165b31434041f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:b1:5b:5c:71:7f:d8:b3:f0:c2:db:22:3a: cf:cf:81:3d:37:0a:5c:5f:f6:4d:8c:05:74:aa:3e: 46:21:48:01:ac:b3:76:f6:13:31:da:bd:15:bf:c4: 5c:d3:34:64:9a:d9:df:79:eb:36:18:36:62:ea:7e: a6:0d:b0:fd:38:cb:cd:43:f8:77:e6:7c:b6:8e:13: 41:2c:32:34:9b:9a:42:58:6c:bc:60:b0:3e:c2:76: ec:8b:5e:ef:cd:d1:4e:e6:f7:dc:7a:b3:f1:6f:8d: 77:ef:61:6a:e6:f4:74:db:2a:9b:35:22:78:9f:05: 9d:a6:5b:c9:d2:49:ed:87:a2:8b:84:c9:7b:96:bb: b3:7c:0f:c4:08:9c:51:c0:25:c9:85:a3:4c:5c:a1: 0e:04:1a:ed:6f:c9:f4:97:a5:ff:38:28:6b:bf:57: ce:bc:14:b6:79:9d:0f:f2:32:df:f5:96:f1:0b:88: 38:b8:76:d1:c1:28:44:c4:2e:56:50:66:6f:dc:c4: 02:f7:91:a5:f5:6c:65:a1:fc:74:56:d9:a7:83:4e: 2b:c5:9f:68:d7:2e:f4:04:82:0a:c2:36:d0:da:5b: 36:60:ab:1e:21:fd:3c:8c:19:3d:7d:39:e5:5e:48: 63:12:f4:ea:48:63:65:91:61:c6:ec:59:ce:df:d7: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3A:D4:0F:89:52:A8:F4:9E:28:64:1E:81:65:B3:14:34:04:1F:79 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8b:f8:7a:c9:6d:83:37:20:47:26:76:58:19:be:6a:37:94: 13:17:53:57:84:de:ff:81:6c:dc:55:19:4c:df:df:69:2f:89: af:fc:e3:df:41:f4:fd:cf:13:96:58:ca:fa:25:2c:6d:67:43: ea:5d:1f:48:be:22:a3:05:f3:9b:ae:d3:e3:0f:22:03:08:e7: 7d:20:80:9b:28:99:15:0f:43:d3:a7:ac:4e:c1:0d:67:c3:36: 51:1b:90:08:6f:51:bd:ac:c5:62:c7:b0:48:01:e3:b1:73:30: d9:c1:99:47:b7:d2:6b:47:73:63:64:06:c9:a1:d8:72:88:6f: 9b:66:d8:03:fe:d4:42:7b:85:d5:d0:aa:f7:c6:22:60:e5:b1: 32:31:f5:26:e9:aa:5b:60:d6:26:5c:1d:e1:96:67:d5:c5:c0: 2d:7c:a7:5f:4f:b8:1b:53:e0:b0:f5:3a:6c:1a:80:77:44:68: 7d:69:9e:52:33:48:4e:e0:08:d4:77:4e:39:45:33:c4:4e:75: 75:e5:2b:bf:76:3f:ce:58:03:b4:d8:ae:5d:51:a3:6a:d8:04: ef:82:af:ce:fc:f9:63:4d:2f:60:8f:dc:4b:8d:e7:ed:62:fb: 8f:ae:81:1e:0a:b9:e6:30:03:7c:db:37:06:5f:8e:55:86:22: ec:37:27:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJvFbfYT5QmgCO2a4PQwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMjIzMDMwMDQ3WhcNMjUxMjI0MDMwMDQ3WjAzMTEwLwYDVQQD Eyg1MjNhZDQwZjg5NTJhOGY0OWUyODY0MWU4MTY1YjMxNDM0MDQxZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT2xW1xxf9iz8MLbIjrPz4E9Nwpc X/ZNjAV0qj5GIUgBrLN29hMx2r0Vv8Rc0zRkmtnfees2GDZi6n6mDbD9OMvNQ/h3 5ny2jhNBLDI0m5pCWGy8YLA+wnbsi17vzdFO5vfcerPxb41372Fq5vR02yqbNSJ4 nwWdplvJ0knth6KLhMl7lruzfA/ECJxRwCXJhaNMXKEOBBrtb8n0l6X/OChrv1fO vBS2eZ0P8jLf9ZbxC4g4uHbRwShExC5WUGZv3MQC95Gl9Wxlofx0Vtmng04rxZ9o 1y70BIIKwjbQ2ls2YKseIf08jBk9fTnlXkhjEvTqSGNlkWHG7FnO39cPHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI61A+JUqj0nihkHoFlsxQ0BB95MB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYv4eslt gzcgRyZ2WBm+ajeUExdTV4Te/4Fs3FUZTN/faS+Jr/zj30H0/c8TlljK+iUsbWdD 6l0fSL4iowXzm67T4w8iAwjnfSCAmyiZFQ9D06esTsENZ8M2URuQCG9RvazFYsew SAHjsXMw2cGZR7fSa0dzY2QGyaHYcohvm2bYA/7UQnuF1dCq98YiYOWxMjH1Jumq W2DWJlwd4ZZn1cXALXynX0+4G1PgsPU6bBqAd0RofWmeUjNITuAI1HdOOUUzxE51 deUrv3Y/zlgDtNiuXVGjatgE74Kvzvz5Y00vYI/cS43n7WL7j66BHgq55jADfNs3 Bl+OVYYi7Dcnjw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:24 2025 by rpki-client