This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: pKp3PgLYSddSQjIxzr2jUv4Us+P5yPDhe9UzLfM3wgU=
Subject key identifier: BC:27:73:C0:9E:A0:A4:1E:E9:3D:55:A4:9C:B6:C3:F0:56:CE:33:47
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019B17CD654FB1ED2B389103C406B7C39B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1773
Signing time: Sat 13 Dec 2025 13:01:35 +0000
Manifest this update: Sat 13 Dec 2025 13:01:35 +0000
Manifest next update: Sun 14 Dec 2025 13:01:35 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: rObausGC9o9inTZRhyK5Ct4Xida0FfPQIArtF7Yr4R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:17:cd:65:4f:b1:ed:2b:38:91:03:c4:06:b7:c3:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Dec 13 13:01:35 2025 GMT
Not After : Dec 14 13:01:35 2025 GMT
Subject: CN=bc2773c09ea0a41ee93d55a49cb6c3f056ce3347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:ee:ea:2b:3a:28:e0:0a:47:46:25:66:6b:
56:4a:a8:8d:90:cc:37:e1:aa:73:34:89:65:6c:b8:
40:2d:a7:c8:66:52:50:db:2f:8a:00:e5:e5:e6:8c:
77:c4:09:b9:ad:cb:e7:f0:88:db:b6:ee:99:07:fc:
54:b5:1a:f7:a8:3e:36:3d:81:4b:b2:47:1e:dc:12:
68:81:c3:57:ad:76:ef:6b:53:e4:79:5f:17:7c:51:
cd:83:6b:1c:23:a4:be:d5:24:67:f2:ec:5a:ce:62:
ec:a5:fb:07:0e:8f:f7:e2:95:bb:ce:51:89:cf:cb:
a8:00:d7:0b:d5:ce:67:79:fe:99:04:fb:cc:c3:ae:
9e:02:0e:be:bf:e0:69:1d:8f:96:97:3b:08:35:cf:
42:3c:18:58:75:b0:b7:83:ad:a2:5f:cc:73:77:9e:
6e:2b:a0:f8:ea:66:d8:22:e5:85:6c:2c:49:73:c0:
4f:1b:fb:89:59:47:2c:58:15:cc:a9:d2:2b:8e:8b:
2e:c3:89:9e:aa:fa:f6:b1:dc:95:7c:05:86:cc:72:
c7:09:ae:03:d9:d0:6e:8d:ab:9b:9d:85:e6:d0:34:
17:c3:f1:2f:e2:54:21:e0:f2:4e:94:d5:02:b5:e7:
fc:6c:90:4d:57:8d:84:cd:8d:9a:4c:6a:5c:39:e6:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:27:73:C0:9E:A0:A4:1E:E9:3D:55:A4:9C:B6:C3:F0:56:CE:33:47
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:3d:86:5b:3a:71:8d:34:96:1b:3f:48:c9:b1:a8:5d:23:
8e:89:ef:c1:59:bf:ad:69:91:86:6c:2a:47:07:61:13:4c:4d:
40:04:ae:27:d3:62:50:7a:5e:46:d1:0b:46:b6:c5:24:41:28:
a5:6b:34:60:1d:2b:64:9b:3a:42:75:fc:96:88:d7:a8:07:96:
84:03:68:31:33:58:62:88:0a:4c:ce:c2:7c:75:a5:02:a5:9a:
09:b8:ca:43:df:80:79:47:d6:63:8f:aa:31:8f:13:1f:aa:15:
a3:96:a9:6d:04:ec:48:91:a4:09:db:97:2c:b0:78:ba:5d:15:
8f:46:32:cc:d1:50:a7:58:00:ea:bc:a6:f9:58:18:de:1a:83:
fb:0f:4a:f2:3e:ec:4b:0c:b9:34:25:e0:29:22:12:ff:4b:96:
e4:70:53:0c:89:cf:52:92:0f:b1:cc:42:88:01:2d:22:2d:3d:
42:60:aa:73:cb:41:76:d5:e9:42:1e:76:8a:76:a7:6d:33:0e:
2e:6d:76:6f:78:4c:29:8e:48:8e:68:80:0c:7a:6f:c2:1b:55:
7f:53:55:b0:f7:38:70:77:7c:85:af:8b:0d:3a:a8:da:bc:70:
25:c5:95:da:31:c3:3f:6f:d6:76:d7:1e:fb:fa:9e:c4:9a:61:
e5:ab:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 21:19:01 2025 by rpki-client