This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json) Hash identifier: QiZYos/1Cnhxe2SfnaQ7eHc14ugniJezhCnHqt23JdE= Subject key identifier: 12:7F:DD:2E:C7:D3:17:2F:B5:75:C4:48:FC:F1:77:97:99:49:07:BC Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Certificate serial: 019B281BF18FB8954413E2CCCE3CEB5EEE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 17:01:18 +0000 Manifest this update: Tue 16 Dec 2025 17:01:18 +0000 Manifest next update: Wed 17 Dec 2025 17:01:18 +0000 Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=) 2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: YsOK1o88WMamIcUj1I5POG0hn+40nHxfJ+wfaGk4t0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:f1:8f:b8:95:44:13:e2:cc:ce:3c:eb:5e:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Validity Not Before: Dec 16 17:01:18 2025 GMT Not After : Dec 17 17:01:18 2025 GMT Subject: CN=127fdd2ec7d3172fb575c448fcf17797994907bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:7c:ea:96:96:1b:db:03:fc:e2:d5:31:6c: cd:bf:55:f5:60:06:08:2f:49:25:1c:91:28:c3:60: 9a:8d:45:af:1e:3a:13:c2:69:6a:e5:8e:89:ef:fe: 1b:87:24:9a:a0:80:12:1b:d0:dc:46:af:48:ca:e3: 8f:25:68:75:a4:0d:0b:49:4c:ca:01:71:0f:44:27: 7a:61:43:eb:6c:02:36:25:18:f4:4a:aa:18:81:d6: 03:7d:bc:3e:03:34:32:a1:52:70:62:3f:45:48:35: b7:6c:78:8c:83:b1:82:a5:6d:e9:e2:fa:19:ef:34: 7d:ac:2a:41:76:ae:cc:d2:40:38:ed:27:e5:e7:a1: 30:4d:0c:22:2b:2d:18:03:b7:3f:25:28:96:6c:f3: 1c:0c:b7:d0:d9:b9:46:01:a6:9e:c4:ae:06:de:02: 6b:96:15:33:54:f2:d5:38:54:e7:59:32:69:58:f5: 41:11:9b:12:c9:13:fd:e9:92:f7:47:37:54:93:7d: b0:9b:2a:84:a4:6b:da:2d:05:3a:a5:d5:36:ac:07: 63:2b:fa:f7:fc:75:fa:a7:41:7e:d6:30:6c:06:c2: 5b:d0:36:fb:71:9f:83:05:d8:37:da:c7:2c:46:b8: b6:f7:74:db:ad:38:25:b6:0e:ec:c7:ea:96:87:a7: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7F:DD:2E:C7:D3:17:2F:B5:75:C4:48:FC:F1:77:97:99:49:07:BC X509v3 Authority Key Identifier: keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:26:cd:11:1b:41:38:4b:6e:e4:1a:86:ae:59:56:6f:ea:55: 53:47:10:cf:90:a4:1b:6e:cc:09:38:78:79:42:40:6a:6a:19: 54:17:36:35:61:5b:29:2f:59:89:b6:e2:b8:6f:ea:d2:39:1b: 6f:dd:d2:bd:39:53:45:94:ca:85:d8:de:32:6d:7b:f5:84:60: 9e:93:dd:fe:fa:e1:44:f4:37:b5:c4:3f:91:68:42:a2:4e:bc: 67:9f:52:7d:39:2c:1e:c2:7d:0c:d7:fe:ca:17:6b:e3:64:fb: 00:04:6f:34:5d:63:51:43:8b:e1:2d:a1:08:75:14:e6:e7:b9: e3:03:4a:8c:27:75:af:5e:4e:a8:36:59:bd:62:58:3c:a1:d3: ac:b1:6b:30:ea:95:af:b2:1b:38:bc:5a:ac:bf:16:ee:af:a9: 55:ff:c8:fc:84:d7:83:03:63:2f:69:ae:c7:4c:c6:14:0b:40: c9:82:af:e9:f2:3e:8d:ce:c1:2d:87:c5:ff:0a:ea:43:c2:41: 39:08:bf:99:10:ab:42:9e:bb:06:82:be:9b:41:f6:40:ce:c0: 9a:43:92:88:28:9c:80:9f:39:bd:e9:29:67:03:e0:ba:a4:1c: b6:c1:f4:96:42:e2:a4:59:7e:bf:05:0b:a3:0b:22:39:ec:de: 46:fb:54:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG/GPuJVEE+LMzjzrXu6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk Mjc5YWIwHhcNMjUxMjE2MTcwMTE4WhcNMjUxMjE3MTcwMTE4WjAzMTEwLwYDVQQD EygxMjdmZGQyZWM3ZDMxNzJmYjU3NWM0NDhmY2YxNzc5Nzk5NDkwN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9h86paWG9sD/OLVMWzNv1X1YAYI L0klHJEow2CajUWvHjoTwmlq5Y6J7/4bhySaoIASG9DcRq9IyuOPJWh1pA0LSUzK AXEPRCd6YUPrbAI2JRj0SqoYgdYDfbw+AzQyoVJwYj9FSDW3bHiMg7GCpW3p4voZ 7zR9rCpBdq7M0kA47Sfl56EwTQwiKy0YA7c/JSiWbPMcDLfQ2blGAaaexK4G3gJr lhUzVPLVOFTnWTJpWPVBEZsSyRP96ZL3RzdUk32wmyqEpGvaLQU6pdU2rAdjK/r3 /HX6p0F+1jBsBsJb0Db7cZ+DBdg32scsRri293TbrTgltg7sx+qWh6dR6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ/3S7H0xcvtXXESPzxd5eZSQe8MB8GA1UdIwQY MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt YWU4YjhkNzg4NzAwLzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISbNERtB OEtu5BqGrllWb+pVU0cQz5CkG27MCTh4eUJAamoZVBc2NWFbKS9ZibbiuG/q0jkb b93SvTlTRZTKhdjeMm179YRgnpPd/vrhRPQ3tcQ/kWhCok68Z59SfTksHsJ9DNf+ yhdr42T7AARvNF1jUUOL4S2hCHUU5ue54wNKjCd1r15OqDZZvWJYPKHTrLFrMOqV r7IbOLxarL8W7q+pVf/I/ITXgwNjL2mux0zGFAtAyYKv6fI+jc7BLYfF/wrqQ8JB OQi/mRCrQp67BoK+m0H2QM7AmkOSiCicgJ85vekpZwPguqQctsH0lkLipFl+vwUL owsiOezeRvtUuA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:48:50 2025 by rpki-client