This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft File: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json) Hash identifier: nCyLthoQfqw7sxpQOUofymzH+cydcZrJGDeIhgQ+8SA= Subject key identifier: 63:A2:5B:FB:04:F0:06:3C:37:CD:BC:72:08:74:EE:6F:AF:38:23:39 Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8 Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8 Certificate serial: 019B2399E80B26FF4CEE67078E90756C283F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft Manifest number: 0925 Signing time: Mon 15 Dec 2025 20:00:47 +0000 Manifest this update: Mon 15 Dec 2025 20:00:47 +0000 Manifest next update: Tue 16 Dec 2025 20:00:47 +0000 Files and hashes: 1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: +7YB8s/HXMqqiJp+p+bSfCDNlmdG6W+zGv5BlAMdfAc=) 2: s4AKgCvHin14a0p0jz13CHksENw.roa (hash: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:e8:0b:26:ff:4c:ee:67:07:8e:90:75:6c:28:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8 Validity Not Before: Dec 15 20:00:47 2025 GMT Not After : Dec 16 20:00:47 2025 GMT Subject: CN=63a25bfb04f0063c37cdbc720874ee6faf382339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:30:f1:9e:76:05:50:e6:03:63:7d:b0:95: 84:7b:c9:b8:6d:51:86:d6:99:b9:97:49:59:a2:45: a3:dd:14:31:d4:3e:55:25:17:32:e9:48:0c:a7:73: 78:fa:78:44:51:93:ef:64:34:90:e5:b9:1f:8f:ed: 0b:91:b1:44:93:ec:6a:89:69:9d:89:1e:91:56:fa: e1:6b:68:25:a0:67:f5:99:ae:de:c5:d9:25:39:27: 5d:f1:1a:eb:cc:30:cc:66:e6:bd:28:85:ee:10:12: 65:f8:8a:42:d5:99:f5:cf:95:4d:a8:d3:ac:46:79: f7:7f:eb:f3:fa:ef:16:1c:69:1a:af:af:59:c5:8a: 84:47:c7:26:3f:3d:1f:89:c1:61:51:a2:30:4c:cd: 9d:d6:b5:13:21:e3:1a:41:e4:c2:35:80:45:a3:68: 49:84:ce:8d:eb:2c:52:b8:8b:26:c8:1f:20:65:4d: 93:2f:b7:6c:98:7b:ef:8c:27:a7:03:72:86:79:22: c0:5b:fb:23:6a:ef:ce:d3:6a:a1:cc:65:93:64:2b: be:f9:7e:5b:38:3c:87:45:90:f8:a4:09:56:f2:40: 14:9a:6d:04:6f:86:4a:08:48:fd:0d:b2:d5:f7:94: ea:0c:f7:d1:ad:5b:99:6b:05:05:c3:70:87:c8:4b: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:5B:FB:04:F0:06:3C:37:CD:BC:72:08:74:EE:6F:AF:38:23:39 X509v3 Authority Key Identifier: keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:22:d2:fd:bc:7a:51:d8:dd:cf:a8:ff:5c:5e:44:af:47:de: 81:bd:9f:e5:24:21:08:ca:17:45:be:e0:4a:9a:b0:b4:7f:e4: 03:5a:61:61:50:79:b3:6a:04:bc:f4:5a:4b:e0:e3:1b:d7:a6: 4a:c0:00:cb:7d:90:74:dc:99:e6:29:95:3c:93:cd:1c:5a:a2: ed:40:08:e3:a4:e4:8e:30:07:f5:f4:2a:88:0a:f5:e2:67:b2: 11:dd:62:e4:23:d1:96:fa:d0:87:78:21:b4:74:4f:25:3c:d6: cf:ca:af:35:5f:17:ca:28:8c:18:59:b3:bd:28:59:2d:87:c2: a6:69:06:b8:f1:34:46:19:dd:00:16:ae:b3:4c:8a:53:6c:35: 45:6c:13:a1:fe:d6:ac:e7:f8:79:95:55:85:76:a7:58:0d:7b: c9:87:75:1f:56:67:dc:42:35:1d:10:82:da:c1:9d:6e:4f:75: 75:37:b8:77:fa:9d:3d:d4:c8:1d:42:c9:12:e0:70:e3:f0:f3: 3f:a2:8c:1f:70:73:a6:a5:75:a9:15:c4:d1:e8:98:7d:ab:90: fc:be:82:17:0f:94:43:1d:88:e2:45:d5:61:29:45:35:b7:1f: 55:1a:1b:1c:b2:5d:0f:b0:72:a4:55:51:2a:de:4a:a2:ce:15: 05:57:71:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmegLJv9M7mcHjpB1bCg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkY2Y2ZjM2MTMwNzA5NWMyODNiMGQ4OTE0MDU2OGFhNGVj OGQ0YTgwHhcNMjUxMjE1MjAwMDQ3WhcNMjUxMjE2MjAwMDQ3WjAzMTEwLwYDVQQD Eyg2M2EyNWJmYjA0ZjAwNjNjMzdjZGJjNzIwODc0ZWU2ZmFmMzgyMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmkw8Z52BVDmA2N9sJWEe8m4bVGG 1pm5l0lZokWj3RQx1D5VJRcy6UgMp3N4+nhEUZPvZDSQ5bkfj+0LkbFEk+xqiWmd iR6RVvrha2gloGf1ma7exdklOSdd8RrrzDDMZua9KIXuEBJl+IpC1Zn1z5VNqNOs Rnn3f+vz+u8WHGkar69ZxYqER8cmPz0ficFhUaIwTM2d1rUTIeMaQeTCNYBFo2hJ hM6N6yxSuIsmyB8gZU2TL7dsmHvvjCenA3KGeSLAW/sjau/O02qhzGWTZCu++X5b ODyHRZD4pAlW8kAUmm0Eb4ZKCEj9DbLV95TqDPfRrVuZawUFw3CHyEtfrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOiW/sE8AY8N828cgh07m+vOCM5MB8GA1UdIwQY MBaAFC3PbzYTBwlcKDsNiRQFaKpOyNSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGM5dk5oTUhDVndvT3cySkZBVm9xazdJMUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NzA3YzUtYWMzMi00OTA1LWE4M2Mt NWZkNjkwMTg3ODJmLzEvTGM5dk5oTUhDVndvT3cySkZBVm9xazdJMUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NzA3YzUtYWMzMi00OTA1LWE4M2MtNWZkNjkwMTg3ODJm LzEvTGM5dk5oTUhDVndvT3cySkZBVm9xazdJMUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSLS/bx6 Udjdz6j/XF5Er0fegb2f5SQhCMoXRb7gSpqwtH/kA1phYVB5s2oEvPRaS+DjG9em SsAAy32QdNyZ5imVPJPNHFqi7UAI46TkjjAH9fQqiAr14meyEd1i5CPRlvrQh3gh tHRPJTzWz8qvNV8XyiiMGFmzvShZLYfCpmkGuPE0RhndABaus0yKU2w1RWwTof7W rOf4eZVVhXanWA17yYd1H1Zn3EI1HRCC2sGdbk91dTe4d/qdPdTIHULJEuBw4/Dz P6KMH3BzpqV1qRXE0eiYfauQ/L6CFw+UQx2I4kXVYSlFNbcfVRobHLJdD7BypFVR Kt5Kos4VBVdxDw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:04:51 2025 by rpki-client