This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json) Hash identifier: C60/GSepPacF2UHeIjPvfti+b4RMZKmIeaHuuSbpqzs= Subject key identifier: 6F:25:F8:E8:D8:2B:24:7D:5B:32:94:DE:07:E0:33:72:2D:CF:57:30 Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019B409167574DEFA1A30ED46C700B06C1C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 11:00:29 +0000 Manifest this update: Sun 21 Dec 2025 11:00:29 +0000 Manifest next update: Mon 22 Dec 2025 11:00:29 +0000 Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=) 2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=) 3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: 9CqLkRZWS5zOCrMxaVRiDAxifmlLy45n07J1xsmSaJ8=) 4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:67:57:4d:ef:a1:a3:0e:d4:6c:70:0b:06:c1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Dec 21 11:00:29 2025 GMT Not After : Dec 22 11:00:29 2025 GMT Subject: CN=6f25f8e8d82b247d5b3294de07e033722dcf5730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:80:e7:d0:be:f5:af:7c:42:c6:54:d3:b2: 00:2d:7d:6d:f5:11:13:14:f9:d8:d3:83:b1:38:2e: 65:56:1e:da:12:b8:e7:97:d4:34:b2:41:c7:64:24: ca:c0:6d:4e:58:c4:f7:e9:bd:bf:c6:ce:ef:39:ed: 0b:54:75:15:f9:79:d4:68:5b:ae:90:19:1f:5b:41: 41:d2:df:37:e9:52:ad:d7:be:38:59:6e:57:51:84: 01:20:21:a9:ea:41:2d:22:28:b4:10:2a:e7:e6:49: 6f:01:ff:11:78:75:cd:7e:3b:74:01:a5:65:28:55: 25:49:ed:ed:49:c5:f8:a6:26:b1:44:99:fc:55:01: 02:a6:7f:1c:21:89:7b:a8:9d:6b:a8:ff:77:71:bc: 9b:c8:7d:aa:7d:fb:18:25:85:25:c0:6c:b6:54:55: 38:09:2f:58:ca:67:0c:4d:ba:db:16:da:63:aa:34: 71:eb:d4:18:f1:43:0b:64:fd:23:f8:a3:94:10:d2: 0f:2d:1f:43:05:c4:31:ee:b6:bb:48:7e:72:a7:08: ef:a7:b1:2b:3c:b2:58:c8:1c:b7:b7:86:4a:ce:76: ce:b9:80:9a:fc:eb:b2:cb:03:8b:16:ab:3e:5c:92: 35:2a:a7:5d:1a:9e:55:11:7b:c2:ff:eb:5d:de:a3: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:25:F8:E8:D8:2B:24:7D:5B:32:94:DE:07:E0:33:72:2D:CF:57:30 X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:5a:8d:8f:e6:aa:57:08:cb:5e:8b:7b:f3:a3:e5:ce:09:7f: 6b:3e:ec:55:14:c0:be:d4:59:f5:56:46:ef:e5:a5:7f:73:47: 5f:3e:69:d7:f2:b7:9f:06:de:ef:f3:4e:4f:74:8f:44:47:20: 5e:88:5b:3a:9e:fe:f8:20:b6:1f:68:b7:51:eb:43:07:08:f8: 8f:e6:ff:0f:c0:cb:ec:6b:77:f7:37:b4:9d:aa:da:dc:9c:ef: e6:c7:f4:f9:d8:64:97:d8:57:0a:fd:c0:c7:a4:f8:e3:95:5d: 77:35:38:83:8c:89:83:ef:2c:95:e3:4d:8c:e5:fd:aa:4f:4c: 6d:f4:15:e2:15:cb:fe:81:e7:4d:9c:50:6a:01:03:63:8b:b9: ce:5a:2a:47:c6:a3:a6:b2:e8:44:2e:80:f8:6b:d6:fd:4d:59: 07:6c:85:06:9b:fc:79:44:11:f4:37:ed:2d:22:cf:eb:16:b7: 2b:b9:61:f7:34:22:c6:72:81:89:39:25:ce:60:9f:52:5b:d4: 81:eb:72:2b:1d:84:bd:ae:eb:00:7d:c0:dd:a1:35:b0:bf:85: 12:a6:59:3a:87:e8:f2:2e:29:27:ad:e9:f1:75:d2:56:4a:41: e3:4e:bd:0f:ef:bc:73:34:2a:39:e3:60:03:ce:8f:e5:3a:90: e2:96:cd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkWdXTe+how7UbHALBsHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjUxMjIxMTEwMDI5WhcNMjUxMjIyMTEwMDI5WjAzMTEwLwYDVQQD Eyg2ZjI1ZjhlOGQ4MmIyNDdkNWIzMjk0ZGUwN2UwMzM3MjJkY2Y1NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziCA59C+9a98QsZU07IALX1t9RET FPnY04OxOC5lVh7aErjnl9Q0skHHZCTKwG1OWMT36b2/xs7vOe0LVHUV+XnUaFuu kBkfW0FB0t836VKt1744WW5XUYQBICGp6kEtIii0ECrn5klvAf8ReHXNfjt0AaVl KFUlSe3tScX4piaxRJn8VQECpn8cIYl7qJ1rqP93cbybyH2qffsYJYUlwGy2VFU4 CS9YymcMTbrbFtpjqjRx69QY8UMLZP0j+KOUENIPLR9DBcQx7ra7SH5ypwjvp7Er PLJYyBy3t4ZKznbOuYCa/OuyywOLFqs+XJI1KqddGp5VEXvC/+td3qMq0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8l+OjYKyR9WzKU3gfgM3Itz1cwMB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2FqNj+aq VwjLXot786Plzgl/az7sVRTAvtRZ9VZG7+Wlf3NHXz5p1/K3nwbe7/NOT3SPREcg XohbOp7++CC2H2i3UetDBwj4j+b/D8DL7Gt39ze0nara3Jzv5sf0+dhkl9hXCv3A x6T445VddzU4g4yJg+8sleNNjOX9qk9MbfQV4hXL/oHnTZxQagEDY4u5zloqR8aj prLoRC6A+GvW/U1ZB2yFBpv8eUQR9DftLSLP6xa3K7lh9zQixnKBiTklzmCfUlvU getyKx2Eva7rAH3A3aE1sL+FEqZZOofo8i4pJ63p8XXSVkpB4069D++8czQqOeNg A86P5TqQ4pbN/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:04 2025 by rpki-client