This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json) Hash identifier: mRJb5I463AGrVLZME68voFo2Em/beLCniXzxx8idi4s= Subject key identifier: FC:04:2E:07:DB:C9:8B:9F:AE:75:0F:1E:F7:6C:F7:59:41:FA:E4:78 Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019B0E5BD07F6DB390B3943F4A514E505250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 17:00:56 +0000 Manifest this update: Thu 11 Dec 2025 17:00:56 +0000 Manifest next update: Fri 12 Dec 2025 17:00:56 +0000 Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=) 2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=) 3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: q4DBAFZSUdF/EgFYgTar16X3pV+b5MCUp2K8qbpbZao=) 4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:d0:7f:6d:b3:90:b3:94:3f:4a:51:4e:50:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Dec 11 17:00:56 2025 GMT Not After : Dec 12 17:00:56 2025 GMT Subject: CN=fc042e07dbc98b9fae750f1ef76cf75941fae478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:28:55:ea:08:d1:9f:b2:b9:99:79:f9:70: f5:a0:e3:6b:42:3e:b2:65:f6:1f:7c:1a:2f:4a:79: a2:f7:6b:4b:81:cc:78:03:17:be:69:1b:59:ab:50: 55:da:ed:1c:5a:20:cb:f9:1a:8f:c2:e7:5b:03:d8: bf:b2:02:ea:25:ea:b6:e4:2f:dd:e4:ee:d8:3c:93: 3f:79:62:27:0f:01:27:a8:fe:fd:85:2c:ac:ea:5e: b5:ca:5a:ef:46:59:2d:1e:89:c5:42:33:cd:18:00: aa:30:8b:bf:9e:05:91:53:aa:75:08:3e:b3:42:02: a5:05:fd:9d:b2:96:74:78:9b:25:41:bf:30:54:67: da:a8:1d:31:4a:57:8a:de:f9:22:e1:6d:a2:07:6d: 85:db:db:18:da:4d:3d:ae:67:a3:fd:76:01:45:65: 10:8c:dd:2c:6b:74:9c:83:fa:c9:6e:bc:7b:49:91: 75:b0:e2:9c:ed:76:d8:c4:9b:81:04:35:eb:e2:0a: 71:58:a3:a2:c8:7b:2f:19:c6:62:77:4e:12:fc:75: f9:45:6c:3e:34:39:fc:4f:a7:fb:29:b8:2d:55:80: a4:10:02:7b:13:db:27:b0:05:2a:26:fe:40:b0:b5: 32:fe:e2:1d:1c:61:de:3d:4b:05:b4:ae:af:72:3c: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:04:2E:07:DB:C9:8B:9F:AE:75:0F:1E:F7:6C:F7:59:41:FA:E4:78 X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:8d:7c:f8:0c:af:41:14:50:e3:e3:de:11:90:f2:f3:0a:d1: b6:31:aa:c2:2f:5e:7d:e6:78:30:e9:83:3e:a7:df:db:89:6c: 29:d6:a1:aa:e3:a0:cd:99:54:d1:15:6c:ba:c9:96:2f:fa:ad: 31:6a:a4:19:e4:8f:8c:c4:c6:47:ab:cb:57:1b:b8:d8:8c:4c: 58:80:6c:b7:0c:46:96:52:43:2e:df:8f:00:3c:fa:1a:44:f9: 00:6c:f5:98:a5:77:a5:48:06:e6:c2:5b:b1:c5:2a:8a:48:48: 54:b8:2b:51:b4:d2:09:d2:93:21:d9:0c:3c:78:4c:69:a9:79: f7:9e:57:e2:08:43:73:18:7b:60:9c:79:93:c2:20:8f:c4:b0: 58:fa:ce:d6:59:f4:74:4a:5e:6c:55:9a:51:3a:07:00:66:29: 21:91:e8:02:65:70:56:2e:20:e8:01:bd:6f:fd:12:00:09:66: 67:06:a2:9f:37:f9:a7:97:64:d7:d0:f9:42:3a:73:f7:4e:b6: 7f:47:64:36:12:5c:f0:48:4c:bc:68:cf:64:f8:86:36:7a:48: 62:dc:52:eb:57:19:9c:42:a9:e8:8e:84:7a:32:3e:d2:06:bd: 96:20:0c:a6:71:08:d3:6b:bd:f8:62:00:1a:e4:24:36:6b:fb: 72:0c:7f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW9B/bbOQs5Q/SlFOUFJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjUxMjExMTcwMDU2WhcNMjUxMjEyMTcwMDU2WjAzMTEwLwYDVQQD EyhmYzA0MmUwN2RiYzk4YjlmYWU3NTBmMWVmNzZjZjc1OTQxZmFlNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrQoVeoI0Z+yuZl5+XD1oONrQj6y ZfYffBovSnmi92tLgcx4Axe+aRtZq1BV2u0cWiDL+RqPwudbA9i/sgLqJeq25C/d 5O7YPJM/eWInDwEnqP79hSys6l61ylrvRlktHonFQjPNGACqMIu/ngWRU6p1CD6z QgKlBf2dspZ0eJslQb8wVGfaqB0xSleK3vki4W2iB22F29sY2k09rmej/XYBRWUQ jN0sa3Scg/rJbrx7SZF1sOKc7XbYxJuBBDXr4gpxWKOiyHsvGcZid04S/HX5RWw+ NDn8T6f7KbgtVYCkEAJ7E9snsAUqJv5AsLUy/uIdHGHePUsFtK6vcjy8UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwELgfbyYufrnUPHvds91lB+uR4MB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzI18+Ayv QRRQ4+PeEZDy8wrRtjGqwi9efeZ4MOmDPqff24lsKdahquOgzZlU0RVsusmWL/qt MWqkGeSPjMTGR6vLVxu42IxMWIBstwxGllJDLt+PADz6GkT5AGz1mKV3pUgG5sJb scUqikhIVLgrUbTSCdKTIdkMPHhMaal5955X4ghDcxh7YJx5k8Igj8SwWPrO1ln0 dEpebFWaUToHAGYpIZHoAmVwVi4g6AG9b/0SAAlmZwainzf5p5dk19D5Qjpz9062 f0dkNhJc8EhMvGjPZPiGNnpIYtxS61cZnEKp6I6EejI+0ga9liAMpnEI02u9+GIA GuQkNmv7cgx/jQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:02 2025 by rpki-client