This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json) Hash identifier: RuOYL+HUj+rGVLIfXk3CGExrv0O0UyveU6CMeGZrLPA= Subject key identifier: 1C:AE:A4:EF:DF:C2:EA:CA:C2:7F:83:94:34:E7:F4:90:F4:FB:E1:71 Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98 Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98 Certificate serial: 019B24ACEC634584EBD65903D556B348B03A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft Manifest number: 17C2 Signing time: Tue 16 Dec 2025 01:01:10 +0000 Manifest this update: Tue 16 Dec 2025 01:01:10 +0000 Manifest next update: Wed 17 Dec 2025 01:01:10 +0000 Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: pR76OaJ3H28o+SfQCJV0hAYkPtLMCc5e77tNXHoYZRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:ec:63:45:84:eb:d6:59:03:d5:56:b3:48:b0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98 Validity Not Before: Dec 16 01:01:10 2025 GMT Not After : Dec 17 01:01:10 2025 GMT Subject: CN=1caea4efdfc2eacac27f839434e7f490f4fbe171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:90:ec:9d:82:76:d7:92:33:d8:71:38:04: 70:af:10:ef:ff:57:5b:12:3d:77:b4:10:91:e3:84: fb:6c:0f:a0:e8:7b:d3:92:88:f7:2d:22:94:d3:75: 3f:e9:60:c5:31:09:c3:01:c0:de:72:70:91:0f:d4: f6:41:fa:27:98:9b:e6:e7:22:b1:be:80:41:ac:86: 52:0b:5e:0b:e6:54:73:fe:db:e8:de:13:46:1d:79: bb:e6:16:dd:2e:6d:6f:59:40:3c:bd:51:b1:e8:21: 6b:53:a1:38:a7:80:4d:97:65:ee:6b:62:b3:e4:2e: bf:21:d1:07:2f:19:c3:de:b7:43:da:18:95:f7:30: 58:db:8a:dc:33:73:d8:56:bf:ae:fb:44:ea:e6:5b: 89:42:60:e8:8c:87:8a:95:17:8a:b4:2c:63:d4:40: e9:eb:00:88:cb:f4:fa:37:ae:22:d6:3b:bf:20:d7: 2b:b4:54:3d:9c:39:66:c9:e4:e0:22:1b:f0:5c:5c: 42:04:a1:4b:39:5b:5e:f6:5b:5f:a2:2f:37:45:42: 24:e2:1d:d7:7b:4d:4f:61:56:41:8b:97:cf:e8:ad: 5b:c0:ea:11:d2:5f:6c:bf:d1:72:e5:d3:af:8c:24: d9:39:f6:b2:26:49:10:eb:e0:f0:01:9d:d7:06:6f: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:A4:EF:DF:C2:EA:CA:C2:7F:83:94:34:E7:F4:90:F4:FB:E1:71 X509v3 Authority Key Identifier: keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:17:7e:6b:c5:14:7c:8b:45:61:85:e5:b5:4b:c9:d2:d7:4c: 51:5b:61:38:3b:78:dd:dd:0d:df:9b:b8:c5:68:7d:94:43:ea: 76:82:74:21:d9:47:bf:81:b1:19:88:7a:65:3b:62:76:29:3d: e9:4e:ef:53:5d:2c:16:dd:3c:17:be:e1:28:a3:2a:b8:8c:2f: bc:34:fc:74:c3:b9:f8:57:01:34:1f:89:ef:fb:20:a9:64:ba: 6e:78:09:b6:56:d7:06:1a:3c:e9:49:96:9e:1e:34:55:85:9b: 90:34:0a:cf:8a:f0:eb:31:fc:65:eb:d7:0b:0d:8d:70:a0:c4: c5:f5:a5:36:fb:a3:44:27:7c:d3:56:d2:9e:49:cf:50:23:13: 02:06:22:dd:6a:a5:45:0b:dc:d2:15:09:7e:e2:65:db:8a:46: 18:c0:b0:36:bb:75:65:16:b7:39:3f:a7:50:f9:08:2c:5c:58: 50:9c:9e:73:7b:53:7b:fb:eb:5f:d5:b1:1a:22:68:d1:50:fb: 10:c1:6a:4c:4d:25:ad:ae:c7:34:6a:b1:57:13:6b:cb:8d:ee: 95:ec:d0:c7:64:07:8b:64:fb:e3:0f:a0:d2:30:32:68:78:5f: 2e:f8:2f:d5:58:8c:92:1f:b2:8d:40:ff:7b:30:f9:6e:a3:c9: d7:d4:5e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrOxjRYTr1lkD1VazSLA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi ZGRjOTgwHhcNMjUxMjE2MDEwMTEwWhcNMjUxMjE3MDEwMTEwWjAzMTEwLwYDVQQD EygxY2FlYTRlZmRmYzJlYWNhYzI3ZjgzOTQzNGU3ZjQ5MGY0ZmJlMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSOQ7J2CdteSM9hxOARwrxDv/1db Ej13tBCR44T7bA+g6HvTkoj3LSKU03U/6WDFMQnDAcDecnCRD9T2QfonmJvm5yKx voBBrIZSC14L5lRz/tvo3hNGHXm75hbdLm1vWUA8vVGx6CFrU6E4p4BNl2Xua2Kz 5C6/IdEHLxnD3rdD2hiV9zBY24rcM3PYVr+u+0Tq5luJQmDojIeKlReKtCxj1EDp 6wCIy/T6N64i1ju/INcrtFQ9nDlmyeTgIhvwXFxCBKFLOVte9ltfoi83RUIk4h3X e01PYVZBi5fP6K1bwOoR0l9sv9Fy5dOvjCTZOfayJkkQ6+DwAZ3XBm9jHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByupO/fwurKwn+DlDTn9JD0++FxMB8GA1UdIwQY MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3 LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBd+a8UU fItFYYXltUvJ0tdMUVthODt43d0N35u4xWh9lEPqdoJ0IdlHv4GxGYh6ZTtidik9 6U7vU10sFt08F77hKKMquIwvvDT8dMO5+FcBNB+J7/sgqWS6bngJtlbXBho86UmW nh40VYWbkDQKz4rw6zH8ZevXCw2NcKDExfWlNvujRCd801bSnknPUCMTAgYi3Wql RQvc0hUJfuJl24pGGMCwNrt1ZRa3OT+nUPkILFxYUJyec3tTe/vrX9WxGiJo0VD7 EMFqTE0lra7HNGqxVxNry43ulezQx2QHi2T74w+g0jAyaHhfLvgv1ViMkh+yjUD/ ezD5bqPJ19Re0Q== -----END CERTIFICATE-----Generated at Tue Dec 16 03:03:58 2025 by rpki-client