This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json) Hash identifier: R5dyLRLp82lacgZ6GnYtmHwXwg7zzsulEB98mbgVU2Y= Subject key identifier: 8C:7E:83:09:74:53:EE:B0:79:DE:8D:A6:2D:4B:94:0B:C3:35:73:62 Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Certificate serial: 019B0F00BB3BAEA3F0ADB9FBBAE8E1667014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft Manifest number: 176A Signing time: Thu 11 Dec 2025 20:01:04 +0000 Manifest this update: Thu 11 Dec 2025 20:01:04 +0000 Manifest next update: Fri 12 Dec 2025 20:01:04 +0000 Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: r8xHBxpg9o8QGM2WDue39f9e5Vs3FLNcvE8uJZYV3gs=) 2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:bb:3b:ae:a3:f0:ad:b9:fb:ba:e8:e1:66:70:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc Validity Not Before: Dec 11 20:01:04 2025 GMT Not After : Dec 12 20:01:04 2025 GMT Subject: CN=8c7e83097453eeb079de8da62d4b940bc3357362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:58:74:6c:1a:e9:2a:39:2c:8b:5b:02:37: 13:a3:91:08:59:cc:61:94:5f:9e:9b:be:43:e6:3d: 86:ee:c3:ea:17:4f:61:89:69:87:bf:25:e0:5f:34: be:81:09:6e:87:e1:7f:ec:5c:2f:3e:9e:73:5b:ba: 12:85:30:b3:52:6a:45:07:0d:3b:b9:77:e8:14:86: 4e:c9:62:58:14:b4:cd:1b:9c:fe:32:ef:db:c8:5c: 29:59:2a:9f:72:b3:e6:8d:8c:51:55:e1:26:bf:9d: fb:b8:9c:1d:ed:82:55:46:76:a2:46:12:b7:97:79: ca:82:bf:51:f1:e5:11:30:a9:c0:9e:1b:97:e1:c9: 88:91:31:80:76:46:8c:4f:7d:66:b9:b1:3c:29:6c: ba:e3:96:fb:df:dc:d1:c8:c3:7d:74:5c:cb:f1:83: c9:cf:9e:31:cf:e6:5f:b2:65:de:0e:28:4a:0e:2a: 85:64:56:da:da:57:14:27:47:5b:61:e4:2f:8b:ab: a9:95:df:00:7b:3b:e5:28:19:cf:17:dc:5e:04:5b: a9:01:d7:f9:6f:9b:a6:6c:f0:27:f9:89:28:12:49: 3e:0b:07:46:f8:0d:b2:87:ce:39:6c:c4:68:77:fa: 84:bb:95:ee:04:53:c5:3b:78:6b:72:28:0f:37:36: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:83:09:74:53:EE:B0:79:DE:8D:A6:2D:4B:94:0B:C3:35:73:62 X509v3 Authority Key Identifier: keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bc:6f:91:c9:ca:d2:e6:53:12:8f:ee:eb:33:50:54:b2:49: b0:2c:94:fd:f3:21:64:61:2d:a2:c9:21:3b:2a:8a:bd:ad:04: ee:89:ad:ec:c8:d2:7f:01:39:57:a9:d6:86:f9:07:d6:75:a9: 92:4c:9f:d2:82:c6:b8:39:6d:3d:c2:48:d1:3f:9e:b9:64:90: ff:07:e6:21:72:ee:cd:cc:cd:91:9a:f7:1f:2d:23:9f:f8:c9: 7b:81:3f:ad:d0:35:bd:13:88:a9:53:a4:66:46:16:43:ba:43: 5a:46:e1:9e:e3:ff:18:cd:84:8c:0a:f4:42:0a:cd:8f:1e:f2: dd:5d:29:8f:21:5a:48:0b:cd:c8:92:fa:52:81:a4:9b:4c:cd: 73:ce:5b:1c:a6:e3:16:95:6d:e4:0f:22:90:be:63:c6:2f:34: 32:b0:cd:2c:08:8d:fc:be:cb:b9:d9:2a:d2:23:f0:da:42:86: b4:15:8f:dc:36:4b:de:8c:e1:eb:dc:31:8b:d0:7a:88:f4:99: 7b:3d:5b:1e:ef:71:de:f6:4b:ad:2b:e9:4c:b2:e9:2f:43:50: 12:f2:b1:50:fb:f5:bf:a4:8d:c1:2b:5f:6c:5e:95:d5:81:a0: 62:fe:c6:1b:11:2a:53:eb:ae:19:f9:3e:e1:34:48:5e:3f:a6: 77:a8:80:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPALs7rqPwrbn7uujhZnAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1 N2JlZGMwHhcNMjUxMjExMjAwMTA0WhcNMjUxMjEyMjAwMTA0WjAzMTEwLwYDVQQD Eyg4YzdlODMwOTc0NTNlZWIwNzlkZThkYTYyZDRiOTQwYmMzMzU3MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zpYdGwa6So5LItbAjcTo5EIWcxh lF+em75D5j2G7sPqF09hiWmHvyXgXzS+gQluh+F/7FwvPp5zW7oShTCzUmpFBw07 uXfoFIZOyWJYFLTNG5z+Mu/byFwpWSqfcrPmjYxRVeEmv537uJwd7YJVRnaiRhK3 l3nKgr9R8eURMKnAnhuX4cmIkTGAdkaMT31mubE8KWy645b739zRyMN9dFzL8YPJ z54xz+ZfsmXeDihKDiqFZFba2lcUJ0dbYeQvi6upld8AezvlKBnPF9xeBFupAdf5 b5umbPAn+YkoEkk+CwdG+A2yh845bMRod/qEu5XuBFPFO3hrcigPNzauiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx+gwl0U+6wed6Npi1LlAvDNXNiMB8GA1UdIwQY MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLxvkcnK 0uZTEo/u6zNQVLJJsCyU/fMhZGEtoskhOyqKva0E7omt7MjSfwE5V6nWhvkH1nWp kkyf0oLGuDltPcJI0T+euWSQ/wfmIXLuzczNkZr3Hy0jn/jJe4E/rdA1vROIqVOk ZkYWQ7pDWkbhnuP/GM2EjAr0QgrNjx7y3V0pjyFaSAvNyJL6UoGkm0zNc85bHKbj FpVt5A8ikL5jxi80MrDNLAiN/L7Ludkq0iPw2kKGtBWP3DZL3ozh69wxi9B6iPSZ ez1bHu9x3vZLrSvpTLLpL0NQEvKxUPv1v6SNwStfbF6V1YGgYv7GGxEqU+uuGfk+ 4TRIXj+md6iAxA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:49 2025 by rpki-client