This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json) Hash identifier: mG1FOsOJ3v0qQ9eW+niyu1trbHcSLJFFSNlL5cFsrY4= Subject key identifier: FB:34:6A:2C:09:68:E6:38:BB:6F:A7:D1:F6:B5:AC:A5:6D:75:95:D2 Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Certificate serial: 019B0F6E47C9B075DB162B7BC4D9E08C11FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 22:00:44 +0000 Manifest this update: Thu 11 Dec 2025 22:00:44 +0000 Manifest next update: Fri 12 Dec 2025 22:00:44 +0000 Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=) 2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: QA3m+i5yQRS2q+gkdg6kGJdjLVDGOdbp6s/C4u66h3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:47:c9:b0:75:db:16:2b:7b:c4:d9:e0:8c:11:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044 Validity Not Before: Dec 11 22:00:44 2025 GMT Not After : Dec 12 22:00:44 2025 GMT Subject: CN=fb346a2c0968e638bb6fa7d1f6b5aca56d7595d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:05:60:a2:3f:ae:7c:d9:35:2f:52:75:4b: 30:cb:e1:a8:4f:b8:ee:92:14:20:bd:ed:15:cc:a9: d2:04:09:d9:0a:2b:39:d2:a7:c5:3f:59:8b:bb:0d: 14:14:66:72:86:f2:ff:de:4b:ca:3d:12:92:2c:98: 96:53:1d:08:74:2d:7e:49:92:c3:5f:3c:24:11:45: c0:d4:78:8a:82:25:f5:2e:ed:f5:57:e4:05:e9:5f: b2:d7:2d:91:1c:df:88:88:5b:a0:ab:0d:da:5f:0c: 84:c5:78:c7:d8:92:f1:76:a2:d1:98:72:eb:de:ca: 5e:98:77:49:7a:33:e4:99:bb:a2:7f:dd:47:27:fc: a0:17:cb:98:12:6f:e4:51:3d:2b:13:6a:63:73:a5: 0d:6f:c7:bd:ce:53:41:2c:46:fb:97:17:4e:43:63: 29:c9:8e:36:f3:38:ac:ba:50:9a:a0:69:fa:af:f4: c1:b1:0d:79:2f:93:f2:ee:d8:e8:40:3b:26:d3:58: 47:9c:3c:24:f1:4f:a8:e7:e2:5e:3a:eb:b4:f9:af: 1d:e9:a2:58:c6:03:e4:2a:a0:2a:44:2c:70:45:45: 7d:88:8a:d5:ca:f3:a0:b8:43:a2:79:97:f2:97:0b: a6:40:45:eb:90:fd:07:f1:63:7a:02:e2:d3:21:81: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:34:6A:2C:09:68:E6:38:BB:6F:A7:D1:F6:B5:AC:A5:6D:75:95:D2 X509v3 Authority Key Identifier: keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dc:44:68:11:b9:04:d2:41:59:2b:d8:0e:97:b2:3a:fa:20: 35:88:8d:9a:90:4e:cf:3e:d3:58:e5:50:fe:e9:1e:66:3e:93: fb:dc:18:30:09:87:9d:94:67:dc:d3:92:20:35:33:5a:08:66: c9:c5:13:40:67:d4:23:e4:54:ab:d4:8d:11:06:f0:b9:8f:64: 2e:c7:94:f4:3b:24:5f:aa:9a:df:8d:85:86:c8:13:14:1f:dc: 7b:f5:8b:34:72:04:d6:9f:5b:70:48:2f:4e:8e:4d:d6:01:80: 2d:e9:8c:d6:55:50:6b:99:a0:43:a6:73:a4:4c:25:73:42:2d: 99:42:ff:70:be:bf:96:4f:df:41:e3:aa:35:46:7f:4b:2a:58: af:9f:cc:b6:c7:7f:89:a6:82:e2:38:ac:69:79:a4:62:6f:53: 60:e2:d2:de:34:68:d7:fb:82:6d:5f:82:cd:89:5b:5c:15:f0: 44:a0:e9:a3:3d:bb:27:78:4b:26:e0:54:93:31:15:ad:cf:0e: 9a:b4:b1:f8:4d:4f:37:0a:88:e5:38:67:32:09:d7:ba:46:bd: d3:0d:18:bc:94:01:a0:d3:89:5e:90:de:70:1b:f9:ef:83:44: 40:4a:1b:ed:d5:c1:85:d8:31:7e:52:72:55:04:17:d6:dd:36: ea:9b:eb:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbkfJsHXbFit7xNngjBH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2 YzIwNDQwHhcNMjUxMjExMjIwMDQ0WhcNMjUxMjEyMjIwMDQ0WjAzMTEwLwYDVQQD EyhmYjM0NmEyYzA5NjhlNjM4YmI2ZmE3ZDFmNmI1YWNhNTZkNzU5NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI8FYKI/rnzZNS9SdUswy+GoT7ju khQgve0VzKnSBAnZCis50qfFP1mLuw0UFGZyhvL/3kvKPRKSLJiWUx0IdC1+SZLD XzwkEUXA1HiKgiX1Lu31V+QF6V+y1y2RHN+IiFugqw3aXwyExXjH2JLxdqLRmHLr 3spemHdJejPkmbuif91HJ/ygF8uYEm/kUT0rE2pjc6UNb8e9zlNBLEb7lxdOQ2Mp yY428zisulCaoGn6r/TBsQ15L5Py7tjoQDsm01hHnDwk8U+o5+JeOuu0+a8d6aJY xgPkKqAqRCxwRUV9iIrVyvOguEOieZfylwumQEXrkP0H8WN6AuLTIYFxXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs0aiwJaOY4u2+n0fa1rKVtdZXSMB8GA1UdIwQY MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtxEaBG5 BNJBWSvYDpeyOvogNYiNmpBOzz7TWOVQ/ukeZj6T+9wYMAmHnZRn3NOSIDUzWghm ycUTQGfUI+RUq9SNEQbwuY9kLseU9DskX6qa342FhsgTFB/ce/WLNHIE1p9bcEgv To5N1gGALemM1lVQa5mgQ6ZzpEwlc0ItmUL/cL6/lk/fQeOqNUZ/SypYr5/Mtsd/ iaaC4jisaXmkYm9TYOLS3jRo1/uCbV+CzYlbXBXwRKDpoz27J3hLJuBUkzEVrc8O mrSx+E1PNwqI5ThnMgnXuka90w0YvJQBoNOJXpDecBv574NEQEob7dXBhdgxflJy VQQX1t026pvrzw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:21:48 2025 by rpki-client