This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json) Hash identifier: TaUUVPLEfXLczVGd6t+t1hOpOm/kP0CGfeSpg6HbF80= Subject key identifier: 88:56:E9:35:2C:00:B3:88:BD:63:79:9E:E9:65:4A:46:83:50:5B:D2 Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Certificate serial: 019B37FC3A3B98ED82C1553DF744CA8FC13D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft Manifest number: 049E Signing time: Fri 19 Dec 2025 19:00:35 +0000 Manifest this update: Fri 19 Dec 2025 19:00:35 +0000 Manifest next update: Sat 20 Dec 2025 19:00:35 +0000 Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=) 2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: qQLxWGT97G6exC3k5sIiPSnRCem6q8Rbv81N77kqyAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:3a:3b:98:ed:82:c1:55:3d:f7:44:ca:8f:c1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Validity Not Before: Dec 19 19:00:35 2025 GMT Not After : Dec 20 19:00:35 2025 GMT Subject: CN=8856e9352c00b388bd63799ee9654a4683505bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:8e:28:25:a9:5c:64:d3:3c:03:53:2c:96: fa:e8:b2:d9:71:d0:f8:0a:c9:b5:35:7c:32:1f:f7: f9:94:9b:56:00:35:a4:bf:40:0e:a6:8c:37:ed:c4: 5e:76:25:ad:9e:e0:9e:69:e5:41:a3:cd:a9:61:fd: fc:ec:ba:93:16:1c:51:d9:03:ac:6a:1d:0d:ea:00: d0:e1:8c:d9:9a:ca:3d:d6:8a:fd:a8:28:ba:ff:20: 4d:be:f4:a5:f9:92:c2:47:ce:ec:df:75:04:78:80: 62:63:0f:ac:e5:09:e4:c1:c3:cd:ba:0d:84:ae:d9: ef:3c:a0:a9:c0:da:ea:ff:62:bd:24:11:e6:55:ec: 95:90:45:c7:b7:c3:be:c0:a2:63:c2:5d:cf:e8:62: 62:6d:0d:37:59:f1:39:c7:01:75:b6:f6:2d:43:b9: 5d:e7:c0:f0:6d:8a:ac:77:4d:24:64:6a:12:35:96: 6a:46:6b:69:3b:00:a2:7e:03:f2:ca:48:33:3f:39: b3:15:96:3e:e2:24:ef:10:5a:8d:a8:a5:a8:86:31: 5a:03:b2:fb:3a:0b:05:e6:a4:92:7c:67:87:f6:fb: fa:48:96:33:03:b5:83:89:e8:4f:d5:87:0a:ca:b9: 81:ae:4c:6b:90:73:69:cf:d5:75:ec:6a:69:4c:57: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:E9:35:2C:00:B3:88:BD:63:79:9E:E9:65:4A:46:83:50:5B:D2 X509v3 Authority Key Identifier: keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7b:15:df:2e:da:42:4e:f7:c1:85:21:f5:85:b3:22:b5:d6: 8b:ae:77:7e:62:a0:12:e5:50:41:24:38:da:57:50:77:8c:16: 14:8b:ca:30:ce:37:55:ee:d1:4c:4a:ea:67:b9:05:52:02:a5: 9c:d2:c0:59:0c:71:b0:37:58:58:26:e4:c0:63:be:5d:85:65: 36:e4:71:2d:e2:92:04:43:e0:0e:68:bd:58:63:af:e3:e1:be: 9e:d5:a1:d0:a1:b3:93:ea:ba:b0:5a:99:c6:c6:6b:fd:fd:3d: 70:22:b6:52:db:71:3d:00:21:13:45:50:90:f6:91:fd:58:9f: 02:52:40:5f:e3:56:8e:4c:ba:02:8b:50:70:82:31:d4:66:73: ff:ce:34:b6:eb:0f:72:80:a4:db:e6:69:5c:1f:1a:15:cc:17: 6a:8a:76:bf:ea:e0:cf:03:ea:0f:ba:fd:e0:68:84:41:43:58: 27:04:0f:ad:98:5b:ef:1d:77:81:c5:91:d4:80:46:48:55:03: 56:76:7b:ee:1d:8c:4d:73:ed:41:fd:ae:65:d9:49:9c:ca:ae: 01:18:35:cc:bc:c1:b7:f4:ab:c8:29:bd:56:be:26:40:62:fc: f4:ce:5a:25:98:a2:15:02:67:3d:58:8f:88:e4:c6:cc:a6:53: 26:8d:3e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Do7mO2CwVU990TKj8E9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2 YzIwNDQwHhcNMjUxMjE5MTkwMDM1WhcNMjUxMjIwMTkwMDM1WjAzMTEwLwYDVQQD Eyg4ODU2ZTkzNTJjMDBiMzg4YmQ2Mzc5OWVlOTY1NGE0NjgzNTA1YmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QmOKCWpXGTTPANTLJb66LLZcdD4 Csm1NXwyH/f5lJtWADWkv0AOpow37cRediWtnuCeaeVBo82pYf387LqTFhxR2QOs ah0N6gDQ4YzZmso91or9qCi6/yBNvvSl+ZLCR87s33UEeIBiYw+s5QnkwcPNug2E rtnvPKCpwNrq/2K9JBHmVeyVkEXHt8O+wKJjwl3P6GJibQ03WfE5xwF1tvYtQ7ld 58DwbYqsd00kZGoSNZZqRmtpOwCifgPyykgzPzmzFZY+4iTvEFqNqKWohjFaA7L7 OgsF5qSSfGeH9vv6SJYzA7WDiehP1YcKyrmBrkxrkHNpz9V17GppTFdaTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhW6TUsALOIvWN5nullSkaDUFvSMB8GA1UdIwQY MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnsV3y7a Qk73wYUh9YWzIrXWi653fmKgEuVQQSQ42ldQd4wWFIvKMM43Ve7RTErqZ7kFUgKl nNLAWQxxsDdYWCbkwGO+XYVlNuRxLeKSBEPgDmi9WGOv4+G+ntWh0KGzk+q6sFqZ xsZr/f09cCK2UttxPQAhE0VQkPaR/VifAlJAX+NWjky6AotQcIIx1GZz/840tusP coCk2+ZpXB8aFcwXaop2v+rgzwPqD7r94GiEQUNYJwQPrZhb7x13gcWR1IBGSFUD VnZ77h2MTXPtQf2uZdlJnMquARg1zLzBt/SryCm9Vr4mQGL89M5aJZiiFQJnPViP iOTGzKZTJo0+Vw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:17 2025 by rpki-client