This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json) Hash identifier: F2DTyuDW7DNqKs75cLdjwWlWzYkw4cfMb5bIxSPTwpc= Subject key identifier: 57:CE:E9:50:72:AE:6E:12:26:C9:D3:5A:0D:9F:C9:3C:E5:78:CC:CA Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b Certificate serial: 019B3344489708286745949F80A8D65ECBC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:01:11 +0000 Manifest this update: Thu 18 Dec 2025 21:01:11 +0000 Manifest next update: Fri 19 Dec 2025 21:01:11 +0000 Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=) 2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: RRnKeNW+YRPE7GrejqFj0mQcsm6KRUIhfMlkB4QhDUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:48:97:08:28:67:45:94:9f:80:a8:d6:5e:cb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b Validity Not Before: Dec 18 21:01:11 2025 GMT Not After : Dec 19 21:01:11 2025 GMT Subject: CN=57cee95072ae6e1226c9d35a0d9fc93ce578ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:fd:05:03:c8:26:0a:e8:91:5a:53:fd:54: 96:22:9a:71:42:aa:db:9e:04:62:dc:54:fd:d5:05: 9d:6e:fb:12:5d:bf:af:fc:32:b2:be:2a:d5:85:1c: 6f:2d:8f:73:cc:27:c6:64:ad:ea:be:49:02:88:3c: e0:e9:c1:55:14:72:f7:c1:ed:4e:f4:a6:30:68:2e: 6d:c8:0e:6c:c2:97:bf:21:05:74:40:50:1c:15:5e: 87:89:5b:47:23:d8:2d:1d:7e:ea:b6:c3:65:b8:94: 92:27:fc:90:40:29:3e:02:b9:84:3f:73:6c:87:26: 10:13:68:40:ec:21:37:72:06:23:67:e2:8a:97:0d: e4:59:d7:fe:4c:68:0e:c2:69:49:de:65:32:db:77: 47:98:0c:5e:f0:f0:71:c9:b5:d8:ed:c7:69:7c:82: b4:eb:bd:4a:9e:22:a0:e0:8d:13:30:6f:9e:c1:81: 4f:e4:21:2c:fe:19:e1:fb:1c:92:b5:6f:0a:2e:d8: 1e:4d:6c:d1:52:8f:94:02:01:8f:02:14:91:2e:91: 7e:ef:5f:46:f0:0c:81:0b:7d:63:a6:39:60:95:39: c6:c3:99:f3:f3:27:b0:37:11:46:e4:d9:2a:8e:65: 8c:4f:b0:9c:84:cf:e1:81:90:98:d1:3a:cb:49:f8: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CE:E9:50:72:AE:6E:12:26:C9:D3:5A:0D:9F:C9:3C:E5:78:CC:CA X509v3 Authority Key Identifier: keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:8f:60:9a:5e:38:c4:bc:2d:12:ea:e1:06:0f:a0:a6:38: 46:7a:13:70:f1:56:bd:8c:8e:8f:c7:fb:4a:9e:4d:0f:cf:7c: 8b:0d:0b:91:45:16:c2:cf:57:fb:a1:25:82:23:6b:ba:89:bb: 81:53:5f:2c:d3:f1:ef:69:56:29:bf:ce:4e:e3:2f:00:ef:20: 48:d4:7a:59:22:ab:4a:22:71:80:83:82:30:0d:90:41:76:86: 05:e1:e5:5d:d9:89:a2:e5:bd:e0:81:88:0d:25:fd:e0:1b:42: 44:03:ce:de:43:17:72:3e:81:8f:94:f7:f8:7d:1a:24:57:be: 99:fc:da:13:95:15:f9:94:64:ee:8e:80:c0:c7:e2:95:68:64: ba:f8:a5:f9:56:27:c3:cc:12:52:1a:71:b0:d1:9e:9f:83:ca: df:18:0d:b3:55:49:fc:d6:81:19:3a:09:33:7f:ae:f4:b4:0c: 0d:4e:7b:a1:92:e6:eb:db:69:cb:a6:ca:12:95:a6:76:a1:c0: d1:71:b7:c5:cb:a5:a7:06:7b:4b:9a:15:f2:6e:00:9b:03:10: c7:60:5a:af:79:8b:d8:08:27:d0:3d:7c:18:d9:17:b4:9c:f8: 81:34:37:b7:9b:80:aa:0d:ab:a4:10:6a:63:07:75:f1:eb:ff: 33:dc:e6:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszREiXCChnRZSfgKjWXsvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi YjQyN2IwHhcNMjUxMjE4MjEwMTExWhcNMjUxMjE5MjEwMTExWjAzMTEwLwYDVQQD Eyg1N2NlZTk1MDcyYWU2ZTEyMjZjOWQzNWEwZDlmYzkzY2U1NzhjY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun/9BQPIJgrokVpT/VSWIppxQqrb ngRi3FT91QWdbvsSXb+v/DKyvirVhRxvLY9zzCfGZK3qvkkCiDzg6cFVFHL3we1O 9KYwaC5tyA5swpe/IQV0QFAcFV6HiVtHI9gtHX7qtsNluJSSJ/yQQCk+ArmEP3Ns hyYQE2hA7CE3cgYjZ+KKlw3kWdf+TGgOwmlJ3mUy23dHmAxe8PBxybXY7cdpfIK0 671KniKg4I0TMG+ewYFP5CEs/hnh+xyStW8KLtgeTWzRUo+UAgGPAhSRLpF+719G 8AyBC31jpjlglTnGw5nz8yewNxFG5NkqjmWMT7CchM/hgZCY0TrLSfjoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfO6VByrm4SJsnTWg2fyTzleMzKMB8GA1UdIwQY MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2OPYJpe OMS8LRLq4QYPoKY4RnoTcPFWvYyOj8f7Sp5ND898iw0LkUUWws9X+6ElgiNruom7 gVNfLNPx72lWKb/OTuMvAO8gSNR6WSKrSiJxgIOCMA2QQXaGBeHlXdmJouW94IGI DSX94BtCRAPO3kMXcj6Bj5T3+H0aJFe+mfzaE5UV+ZRk7o6AwMfilWhkuvil+VYn w8wSUhpxsNGen4PK3xgNs1VJ/NaBGToJM3+u9LQMDU57oZLm69tpy6bKEpWmdqHA 0XG3xculpwZ7S5oV8m4AmwMQx2Bar3mL2Agn0D18GNkXtJz4gTQ3t5uAqg2rpBBq Ywd18ev/M9zmmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:48:03 2025 by rpki-client