This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json) Hash identifier: j0EzFBKy8F6M9KMt0ysye+f3jjJHHexpQl4llcNtjwQ= Subject key identifier: 68:7E:FF:56:81:D6:CB:5B:45:19:4D:39:AD:BF:75:98:42:6A:E4:C8 Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915 Certificate serial: 019B0E2591679144BAD89C9EE9EE275E191E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft Manifest number: 177A Signing time: Thu 11 Dec 2025 16:01:41 +0000 Manifest this update: Thu 11 Dec 2025 16:01:41 +0000 Manifest next update: Fri 12 Dec 2025 16:01:41 +0000 Files and hashes: 1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=) 2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=) 3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: f/KMRSLctmDB4ulmxxL6BWhKNVKWVjZ2yVavi1SK73I=) 4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:91:67:91:44:ba:d8:9c:9e:e9:ee:27:5e:19:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915 Validity Not Before: Dec 11 16:01:41 2025 GMT Not After : Dec 12 16:01:41 2025 GMT Subject: CN=687eff5681d6cb5b45194d39adbf7598426ae4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:36:79:18:64:3c:6a:dc:b9:99:7f:55:cd: 8f:df:3e:27:c4:68:b1:8e:a1:ac:42:c5:46:92:b7: 0c:4e:2e:84:1f:67:c8:cb:67:19:63:77:1c:d2:ba: 63:6d:99:ab:d1:ec:e8:b3:21:b9:48:1f:7a:43:bd: b6:f7:73:9c:e0:b9:e2:b0:ff:fc:a7:5a:f5:86:0a: e6:ba:67:52:c1:3e:72:59:9a:9e:32:8f:9f:ab:11: 5a:72:8d:71:d1:13:94:e6:f9:db:6e:a7:5b:49:62: 83:2a:88:bd:17:5e:38:2a:79:6a:03:88:d8:7d:71: f2:5e:dd:3f:e4:82:2c:3d:70:2f:5d:69:1d:73:f1: d0:b6:ce:b3:06:02:3c:32:31:40:84:e8:ee:0a:76: de:e6:15:c8:59:6b:73:a1:1d:18:13:09:07:9b:c9: a1:3b:32:33:b8:c2:df:98:7d:73:14:6b:79:b2:d1: 43:a2:58:f2:0c:0f:e6:65:4a:f8:0c:12:95:97:8e: d7:a9:b9:29:92:4a:05:ba:67:f0:d0:96:d4:a1:6e: cc:7f:81:33:0f:8d:25:42:a3:e2:3d:f3:8c:88:e2: ea:43:68:f7:d2:6e:d8:99:05:5a:e2:95:86:fd:f1: 55:a0:a1:65:49:5a:9b:f4:6e:1d:7e:32:d7:c3:09: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7E:FF:56:81:D6:CB:5B:45:19:4D:39:AD:BF:75:98:42:6A:E4:C8 X509v3 Authority Key Identifier: keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4e:d1:89:ba:28:58:ef:3f:36:b1:75:44:45:41:fc:e4:8f: 71:4b:c1:9f:8d:3e:c1:fc:b0:f1:eb:88:74:95:28:48:73:1b: 66:37:cf:90:b3:ac:5b:f0:39:b8:fb:1a:46:ce:38:11:fb:77: a6:40:89:ce:dc:f6:73:9b:50:ca:d3:21:e3:36:86:c0:71:f1: 89:73:10:4c:8e:f7:a7:e2:ec:40:6d:ed:91:6e:15:e4:36:e3: f1:e3:d9:9c:9d:f0:bb:87:d8:3e:9e:a0:72:6e:a7:92:c2:5f: b8:4d:5b:21:45:9d:f9:30:cf:aa:e7:95:4d:17:16:68:e9:2d: 0e:5e:41:3e:29:16:e7:e0:26:64:be:e6:7d:db:c6:82:a5:23: de:cb:e8:c7:6e:22:e8:ce:e6:a3:83:ff:b9:2f:34:8c:16:5c: 24:99:4c:d9:1b:63:5e:93:e4:b6:7e:49:54:e8:bc:0c:96:f0: 9e:0e:f7:63:82:96:2e:f2:ab:99:1b:8a:1a:64:d5:83:ee:4f: 62:a4:78:32:2c:ef:75:a7:00:83:87:04:0e:c3:e8:16:b9:17: 18:ae:7e:5d:b1:47:74:bd:f2:08:ce:7d:fd:e3:62:a4:0b:6b: e0:66:d0:3d:a4:16:4b:d4:ea:ef:e0:a7:94:0f:92:78:13:8f: 28:58:99:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJZFnkUS62Jye6e4nXhkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx YTM5MTUwHhcNMjUxMjExMTYwMTQxWhcNMjUxMjEyMTYwMTQxWjAzMTEwLwYDVQQD Eyg2ODdlZmY1NjgxZDZjYjViNDUxOTRkMzlhZGJmNzU5ODQyNmFlNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjg2eRhkPGrcuZl/Vc2P3z4nxGix jqGsQsVGkrcMTi6EH2fIy2cZY3cc0rpjbZmr0ezosyG5SB96Q72293Oc4LnisP/8 p1r1hgrmumdSwT5yWZqeMo+fqxFaco1x0ROU5vnbbqdbSWKDKoi9F144KnlqA4jY fXHyXt0/5IIsPXAvXWkdc/HQts6zBgI8MjFAhOjuCnbe5hXIWWtzoR0YEwkHm8mh OzIzuMLfmH1zFGt5stFDoljyDA/mZUr4DBKVl47XqbkpkkoFumfw0JbUoW7Mf4Ez D40lQqPiPfOMiOLqQ2j30m7YmQVa4pWG/fFVoKFlSVqb9G4dfjLXwwnXFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh+/1aB1stbRRlNOa2/dZhCauTIMB8GA1UdIwQY MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1 LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE7Riboo WO8/NrF1REVB/OSPcUvBn40+wfyw8euIdJUoSHMbZjfPkLOsW/A5uPsaRs44Eft3 pkCJztz2c5tQytMh4zaGwHHxiXMQTI73p+LsQG3tkW4V5Dbj8ePZnJ3wu4fYPp6g cm6nksJfuE1bIUWd+TDPqueVTRcWaOktDl5BPikW5+AmZL7mfdvGgqUj3svox24i 6M7mo4P/uS80jBZcJJlM2RtjXpPktn5JVOi8DJbwng73Y4KWLvKrmRuKGmTVg+5P YqR4MizvdacAg4cEDsPoFrkXGK5+XbFHdL3yCM59/eNipAtr4GbQPaQWS9Tq7+Cn lA+SeBOPKFiZHw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:21:39 2025 by rpki-client