This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json) Hash identifier: ZAXzUneZenZU8U5ApmFZ8C7IRv7CZvjBCx0oXrOg6VA= Subject key identifier: 4A:F0:B2:E5:6A:09:29:E1:B8:6D:61:71:B6:78:27:CA:B5:40:A7:18 Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa Certificate serial: 019B300BE45A6634638F00DC23D443C2453C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft Manifest number: 09A7 Signing time: Thu 18 Dec 2025 06:00:44 +0000 Manifest this update: Thu 18 Dec 2025 06:00:44 +0000 Manifest next update: Fri 19 Dec 2025 06:00:44 +0000 Files and hashes: 1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: ydqFWJfnscCVUDI18IPxlfPLmfEPdXDIHup03KRnnGo=) 2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:e4:5a:66:34:63:8f:00:dc:23:d4:43:c2:45:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa Validity Not Before: Dec 18 06:00:44 2025 GMT Not After : Dec 19 06:00:44 2025 GMT Subject: CN=4af0b2e56a0929e1b86d6171b67827cab540a718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:c9:a9:a0:a1:3f:06:e7:e2:45:66:1a:6b: 7b:7b:0c:42:67:d1:8e:97:56:2f:c1:ed:6d:20:60: f8:57:2d:4e:05:04:32:2e:41:12:09:cc:ff:47:19: c1:75:70:71:67:da:8b:69:6c:df:03:e4:8c:3e:59: 83:5a:10:39:ac:08:64:54:de:f4:1f:e9:37:d8:85: 25:26:d6:22:13:6b:bc:ce:2f:f7:d5:26:fd:d0:2d: c1:7d:da:20:dd:6e:c3:9e:06:34:38:34:8e:d8:3c: d3:08:bf:8d:31:d5:ae:17:a6:fa:58:3b:4b:80:b4: 6b:ec:62:e4:a3:e2:5f:ce:33:6d:4e:f3:a3:db:37: a0:75:19:9f:03:eb:fb:25:94:2d:59:92:87:e8:3b: f5:82:70:46:66:5c:17:8f:b6:94:9c:d6:9d:b2:21: 17:b6:3d:b2:b9:ab:12:17:db:b9:ae:63:85:a9:65: 8b:88:b8:2b:11:8f:58:81:29:b3:45:69:e4:34:5e: ce:c2:ae:00:10:bc:d0:50:f3:9c:ed:6c:61:d2:7a: c0:c9:bd:49:6f:7c:ea:87:f8:5b:51:f0:86:5c:27: 11:8a:33:78:9a:4b:c8:94:0e:4e:54:cc:ab:fc:78: 27:8b:d3:eb:60:9a:d5:0f:ce:1d:3c:5a:53:12:1d: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:B2:E5:6A:09:29:E1:B8:6D:61:71:B6:78:27:CA:B5:40:A7:18 X509v3 Authority Key Identifier: keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6f:e9:1a:65:a9:74:cf:e4:4f:41:06:59:5e:08:db:f4:db: 46:db:64:ad:04:17:f1:5a:73:ea:00:2e:c4:00:3e:52:31:b0: 78:a2:ac:6f:22:66:c4:56:30:63:a5:c3:a6:31:a0:ef:02:7e: 33:89:2b:89:cf:06:07:4e:f4:12:e9:c4:ad:fb:46:70:19:00: 73:f2:d4:6a:1d:2a:41:65:f7:c3:eb:e2:d0:3e:c1:b5:70:0c: 51:63:06:d7:b4:19:bb:76:43:cf:27:c1:3e:ca:7b:4b:62:29: cf:bc:8b:36:78:82:26:c0:7c:b9:3d:10:3d:7b:06:2f:c5:ed: d8:38:07:ba:92:cd:cc:de:bc:4c:ee:cf:e4:b6:b5:86:fa:14: 26:e1:ce:e6:41:a3:a8:2a:8f:14:77:50:4e:ea:d8:ee:25:d4: 5a:1a:14:1f:ee:42:38:36:81:69:23:4a:0b:a4:72:a5:29:a0: cc:48:cd:3f:0a:9f:80:48:48:57:be:90:d3:82:ed:15:3b:7c: 4d:19:90:fe:b1:e6:2f:fa:42:ce:73:09:07:0f:10:1c:10:90: 9e:34:02:95:3e:53:df:51:82:3d:92:6e:16:74:8c:15:50:a0: 37:ca:45:35:d0:2d:39:b4:a2:e6:8d:b5:6a:4b:fa:4f:bf:8b: 78:0a:c1:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC+RaZjRjjwDcI9RDwkU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWM4NGNlZWM1N2IzNWZhMzk1MzRhZTIzMDA5YWVhODIw MjM5YWEwHhcNMjUxMjE4MDYwMDQ0WhcNMjUxMjE5MDYwMDQ0WjAzMTEwLwYDVQQD Eyg0YWYwYjJlNTZhMDkyOWUxYjg2ZDYxNzFiNjc4MjdjYWI1NDBhNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L7JqaChPwbn4kVmGmt7ewxCZ9GO l1Yvwe1tIGD4Vy1OBQQyLkESCcz/RxnBdXBxZ9qLaWzfA+SMPlmDWhA5rAhkVN70 H+k32IUlJtYiE2u8zi/31Sb90C3Bfdog3W7DngY0ODSO2DzTCL+NMdWuF6b6WDtL gLRr7GLko+JfzjNtTvOj2zegdRmfA+v7JZQtWZKH6Dv1gnBGZlwXj7aUnNadsiEX tj2yuasSF9u5rmOFqWWLiLgrEY9YgSmzRWnkNF7Owq4AELzQUPOc7Wxh0nrAyb1J b3zqh/hbUfCGXCcRijN4mkvIlA5OVMyr/Hgni9PrYJrVD84dPFpTEh0ElwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErwsuVqCSnhuG1hcbZ4J8q1QKcYMB8GA1UdIwQY MBaAFCyshM7sV7Nfo5U0riMAmuqCAjmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYt ZWRlNzBjOGVkNTEzLzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYtZWRlNzBjOGVkNTEz LzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW/pGmWp dM/kT0EGWV4I2/TbRttkrQQX8Vpz6gAuxAA+UjGweKKsbyJmxFYwY6XDpjGg7wJ+ M4kric8GB070EunErftGcBkAc/LUah0qQWX3w+vi0D7BtXAMUWMG17QZu3ZDzyfB Psp7S2Ipz7yLNniCJsB8uT0QPXsGL8Xt2DgHupLNzN68TO7P5La1hvoUJuHO5kGj qCqPFHdQTurY7iXUWhoUH+5CODaBaSNKC6RypSmgzEjNPwqfgEhIV76Q04LtFTt8 TRmQ/rHmL/pCznMJBw8QHBCQnjQClT5T31GCPZJuFnSMFVCgN8pFNdAtObSi5o21 akv6T7+LeArBoQ== -----END CERTIFICATE-----Generated at Thu Dec 18 13:06:03 2025 by rpki-client