This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json) Hash identifier: wOIey14KPIenxJwCt9/K7ckvA97LfRkMO4TQWKFwls0= Subject key identifier: 9E:AA:90:84:8C:3F:B9:64:60:70:5B:62:14:A8:34:A0:2F:A2:D6:59 Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73 Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273 Certificate serial: 019B34C5805D0B23BB957C892EEC712EC29B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft Manifest number: 1713 Signing time: Fri 19 Dec 2025 04:01:57 +0000 Manifest this update: Fri 19 Dec 2025 04:01:57 +0000 Manifest next update: Sat 20 Dec 2025 04:01:57 +0000 Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: Mg/QRJ5CT2YthFtrv6jw7EXwoM9eIEFqvuaB++5Bao8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:80:5d:0b:23:bb:95:7c:89:2e:ec:71:2e:c2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273 Validity Not Before: Dec 19 04:01:57 2025 GMT Not After : Dec 20 04:01:57 2025 GMT Subject: CN=9eaa90848c3fb96460705b6214a834a02fa2d659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:a4:d4:bb:d0:cb:04:33:ad:cf:e7:66:d7: 25:3b:38:90:bf:fa:39:f7:72:bc:c3:85:3c:87:bd: a2:55:44:20:85:48:8a:8f:3d:ec:b7:90:ab:35:69: c2:b1:4b:e4:9c:61:e6:0e:a9:9c:fb:16:0c:ed:16: b1:77:08:68:15:4a:ae:d4:d3:3f:f1:80:b8:d0:f7: 05:ca:4d:22:01:c8:de:30:f8:a1:5c:5e:fe:8e:fa: c0:86:33:9f:fb:6e:9c:b4:6f:c7:62:28:77:dc:0a: f0:34:bb:fa:85:42:bb:11:5b:27:c3:02:89:46:2d: e9:df:f5:ea:fd:f4:2f:44:91:ea:b9:01:06:34:57: 1b:ff:ef:c9:98:6a:37:bc:62:08:0e:8b:ca:53:51: c8:9c:58:11:12:3f:62:d3:e1:ca:3a:00:c6:9b:05: 94:4b:84:b8:85:29:1c:64:a9:58:2e:26:7f:cc:07: 8d:a1:83:e2:4e:ae:bc:9c:e6:22:60:cc:9a:0e:e0: 1b:d8:09:eb:56:d2:58:eb:bf:25:89:5b:46:77:0c: 73:2c:c8:77:ec:5b:2f:05:04:95:d9:e7:0a:39:d1: a7:0c:9a:45:de:8e:f1:4f:e1:e9:21:19:37:1e:fd: 25:98:75:4c:a7:97:20:f1:7e:93:00:96:b4:54:70: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AA:90:84:8C:3F:B9:64:60:70:5B:62:14:A8:34:A0:2F:A2:D6:59 X509v3 Authority Key Identifier: keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:86:15:74:34:15:62:25:6d:98:cb:83:24:91:95:8d:03:ba: 3d:41:8b:d5:f5:17:9d:2e:9d:e3:ab:c5:d0:8e:88:65:54:4f: 5d:5d:fb:d5:c2:48:92:11:89:b5:be:a6:78:22:b5:0c:43:5c: 73:ff:b2:46:aa:d1:f2:15:cd:45:47:8f:66:83:70:1d:87:07: 73:6b:52:3f:9c:f2:ea:b1:4a:2d:f5:c1:b6:8a:e0:e6:7d:86: b8:3e:11:65:c4:97:f9:06:a9:e1:fe:71:ab:6f:4a:15:e6:1e: fc:26:ad:2e:ad:92:30:aa:85:7b:e0:05:8b:e3:5a:c6:c4:cf: f1:e5:7f:98:a7:c7:e9:04:cd:06:47:bd:14:32:4b:23:d7:cf: a2:df:89:d2:11:6b:6a:d4:12:78:01:05:ef:f8:3d:9b:d1:ac: 44:3f:eb:f3:39:14:ac:db:d4:8c:2c:af:e3:1b:46:39:48:ff: be:83:c2:54:84:42:1e:0a:d2:3a:7a:e3:e0:e2:c7:da:5c:51: 43:55:81:17:a3:cd:72:14:11:c9:d0:0a:5d:2a:1f:b4:dd:ef: 6b:e9:63:74:0e:96:c4:b7:e5:44:00:84:81:dd:c3:86:88:b0: 7c:34:d3:b9:11:f0:d3:8e:60:cb:7e:4a:00:3c:e6:1e:ad:1d: 7a:ad:3a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xYBdCyO7lXyJLuxxLsKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzM1YzIwOTA5OTk0MjFkMzNjNjM1OWM5YjZlNjgxODJh MGYyNzMwHhcNMjUxMjE5MDQwMTU3WhcNMjUxMjIwMDQwMTU3WjAzMTEwLwYDVQQD Eyg5ZWFhOTA4NDhjM2ZiOTY0NjA3MDViNjIxNGE4MzRhMDJmYTJkNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG6k1LvQywQzrc/nZtclOziQv/o5 93K8w4U8h72iVUQghUiKjz3st5CrNWnCsUvknGHmDqmc+xYM7RaxdwhoFUqu1NM/ 8YC40PcFyk0iAcjeMPihXF7+jvrAhjOf+26ctG/HYih33ArwNLv6hUK7EVsnwwKJ Ri3p3/Xq/fQvRJHquQEGNFcb/+/JmGo3vGIIDovKU1HInFgREj9i0+HKOgDGmwWU S4S4hSkcZKlYLiZ/zAeNoYPiTq68nOYiYMyaDuAb2AnrVtJY678liVtGdwxzLMh3 7FsvBQSV2ecKOdGnDJpF3o7xT+HpIRk3Hv0lmHVMp5cg8X6TAJa0VHAzywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6qkISMP7lkYHBbYhSoNKAvotZZMB8GA1UdIwQY MBaAFCzDXCCQmZQh0zxjWcm25oGCoPJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jNjM3ZGUtYmVmNy00ZGEzLTgwM2Yt ODRlNWYxYWY2ZTkyLzEvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jNjM3ZGUtYmVmNy00ZGEzLTgwM2YtODRlNWYxYWY2ZTky LzEvTE1OY0lKQ1psQ0hUUEdOWnliYm1nWUtnOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtIYVdDQV YiVtmMuDJJGVjQO6PUGL1fUXnS6d46vF0I6IZVRPXV371cJIkhGJtb6meCK1DENc c/+yRqrR8hXNRUePZoNwHYcHc2tSP5zy6rFKLfXBtorg5n2GuD4RZcSX+Qap4f5x q29KFeYe/CatLq2SMKqFe+AFi+NaxsTP8eV/mKfH6QTNBke9FDJLI9fPot+J0hFr atQSeAEF7/g9m9GsRD/r8zkUrNvUjCyv4xtGOUj/voPCVIRCHgrSOnrj4OLH2lxR Q1WBF6PNchQRydAKXSoftN3va+ljdA6WxLflRACEgd3DhoiwfDTTuRHw045gy35K ADzmHq0deq06KQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:07 2025 by rpki-client