This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json) Hash identifier: FTT17V55ideK1UcknzDYhreuxugCy6w/T/gmJOdCzU8= Subject key identifier: FE:7B:D6:00:10:69:AF:B3:42:2B:23:34:51:BA:96:29:68:44:14:7E Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Certificate serial: 019B4325335E4F09AD567D98809338C48E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft Manifest number: 1785 Signing time: Sun 21 Dec 2025 23:01:09 +0000 Manifest this update: Sun 21 Dec 2025 23:01:09 +0000 Manifest next update: Mon 22 Dec 2025 23:01:09 +0000 Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: DxCebvwjOplsJxyy4x58eZSaF+7mKqu1eOofMvm//js=) 2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:33:5e:4f:09:ad:56:7d:98:80:93:38:c4:8e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Validity Not Before: Dec 21 23:01:09 2025 GMT Not After : Dec 22 23:01:09 2025 GMT Subject: CN=fe7bd6001069afb3422b233451ba96296844147e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:29:f4:a0:b9:d7:c4:d2:2b:39:3f:e7:7c: 1c:af:37:77:c0:e9:55:03:93:1c:8e:87:5a:dc:79: 54:0a:57:02:00:a7:f9:b1:66:4e:eb:5d:b4:5b:cc: b1:fb:d9:60:5b:67:5c:f8:b0:01:ec:17:19:74:b5: cc:18:68:e4:d3:1b:ae:2e:6b:2e:fc:ef:95:77:a9: 54:55:96:75:64:5a:f1:7a:99:b6:e7:93:ac:68:c5: e3:35:b5:b3:67:c3:51:09:d4:03:db:70:75:2d:be: 14:60:7d:64:93:8c:31:1f:eb:8b:c4:da:7f:50:82: 96:2b:64:cc:ba:02:f8:20:84:2e:c4:72:10:5c:85: d4:14:46:1a:bb:94:eb:3a:8c:c4:97:1f:53:83:48: ba:90:19:60:be:98:e9:a4:f9:77:26:bb:0c:a3:fe: 3d:65:46:b5:c4:29:7f:7c:fe:e8:2f:f3:65:ac:67: ff:a4:ba:d2:b7:a5:8d:1a:8f:40:d6:7e:75:08:cd: 08:75:d3:aa:90:fd:ae:9e:f3:3e:09:bb:3c:82:92: 26:34:67:e0:6f:86:8c:96:f1:08:37:2b:cc:29:e3: 63:6f:a4:47:db:cc:f7:41:13:e6:e0:d2:21:12:70: eb:5d:e1:cf:5b:ad:18:9d:63:17:10:a8:43:5d:29: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:D6:00:10:69:AF:B3:42:2B:23:34:51:BA:96:29:68:44:14:7E X509v3 Authority Key Identifier: keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ee:b1:fc:09:94:8e:3c:44:1d:3b:eb:81:b1:33:23:54:09: c6:c7:d3:65:a9:27:cb:63:10:99:bd:80:6a:b6:be:26:b8:f9: 94:54:6f:d3:fc:a5:26:28:76:66:c7:c4:9b:5b:c7:05:d2:29: be:da:4c:a1:76:22:07:a1:ed:b3:89:48:a6:ad:f2:5e:e1:9f: aa:d0:81:98:17:62:d8:58:64:76:7b:6e:72:73:d6:f5:e4:fb: a9:42:04:82:c7:d3:a9:f5:4f:d1:9d:e6:d5:52:af:c2:05:78: f0:5a:5b:94:ce:94:f9:27:6e:b3:74:28:1f:06:d3:67:33:2b: 88:29:25:b6:77:02:a2:ae:ee:c7:05:b2:f4:16:18:d9:bb:a0: 0d:55:d4:04:2a:20:9b:9a:df:38:be:e2:b0:85:08:a2:73:84: 52:88:48:62:4d:54:7d:79:72:c6:73:f5:f6:c0:75:63:69:6e: c9:c5:20:4b:1c:3c:01:4d:94:70:fe:de:04:dc:10:5c:f1:1a: be:2f:af:b3:83:83:1a:1b:81:65:5c:b2:2e:e2:33:d6:56:5c: 49:f6:74:3b:07:27:ab:d2:55:d9:c3:9a:d5:97:92:a4:4b:8d: 0a:90:ce:7d:f1:bb:ec:2d:86:f6:86:6a:f4:8c:39:b8:b4:23: 1b:4f:7c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJTNeTwmtVn2YgJM4xI4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1 N2JlZGMwHhcNMjUxMjIxMjMwMTA5WhcNMjUxMjIyMjMwMTA5WjAzMTEwLwYDVQQD EyhmZTdiZDYwMDEwNjlhZmIzNDIyYjIzMzQ1MWJhOTYyOTY4NDQxNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVIp9KC518TSKzk/53wcrzd3wOlV A5Mcjoda3HlUClcCAKf5sWZO6120W8yx+9lgW2dc+LAB7BcZdLXMGGjk0xuuLmsu /O+Vd6lUVZZ1ZFrxepm255OsaMXjNbWzZ8NRCdQD23B1Lb4UYH1kk4wxH+uLxNp/ UIKWK2TMugL4IIQuxHIQXIXUFEYau5TrOozElx9Tg0i6kBlgvpjppPl3JrsMo/49 ZUa1xCl/fP7oL/NlrGf/pLrSt6WNGo9A1n51CM0IddOqkP2unvM+Cbs8gpImNGfg b4aMlvEINyvMKeNjb6RH28z3QRPm4NIhEnDrXeHPW60YnWMXEKhDXSmoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP571gAQaa+zQisjNFG6liloRBR+MB8GA1UdIwQY MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+6x/AmU jjxEHTvrgbEzI1QJxsfTZakny2MQmb2Aara+Jrj5lFRv0/ylJih2ZsfEm1vHBdIp vtpMoXYiB6Hts4lIpq3yXuGfqtCBmBdi2FhkdntucnPW9eT7qUIEgsfTqfVP0Z3m 1VKvwgV48FpblM6U+Sdus3QoHwbTZzMriCkltncCoq7uxwWy9BYY2bugDVXUBCog m5rfOL7isIUIonOEUohIYk1UfXlyxnP19sB1Y2luycUgSxw8AU2UcP7eBNwQXPEa vi+vs4ODGhuBZVyyLuIz1lZcSfZ0Owcnq9JV2cOa1ZeSpEuNCpDOffG77C2G9oZq 9Iw5uLQjG0981w== -----END CERTIFICATE-----Generated at Mon Dec 22 06:52:15 2025 by rpki-client