This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json) Hash identifier: DmC7tfm3/4F6IJpfNtON/RzZNQFaasm0J0OUSnDlCOw= Subject key identifier: 63:98:A5:90:9F:EB:1B:F8:C0:F1:F7:6A:85:7B:19:49:D2:4E:F7:D9 Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30 Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30 Certificate serial: 019AF49C1F401E611AFD6B15A111945D540D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft Manifest number: 03E6 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=) 2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: VGMeG+Xki872r8oJiyHlJCdymzuOVpGbbSFjxBzLXaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1f:40:1e:61:1a:fd:6b:15:a1:11:94:5d:54:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30 Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=6398a5909feb1bf8c0f1f76a857b1949d24ef7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:8f:af:5b:91:e1:6b:26:e6:67:2e:04:fd: 64:5c:26:da:ec:8b:8a:93:00:4d:5a:45:6e:d7:08: 2e:04:b7:f7:33:47:4f:a5:d6:93:70:86:21:06:f2: d7:b2:4c:01:4e:aa:25:3d:88:bc:6a:86:0e:c6:82: 84:0c:05:1a:e0:fc:3e:ed:d4:c5:2d:90:94:b1:bb: 5b:0b:39:6c:b6:50:f5:1e:52:6b:fc:cb:99:02:d6: 92:03:a5:65:df:9f:6e:f0:15:53:12:6f:1f:90:5c: 16:55:35:55:72:8d:2e:58:2e:3c:21:76:78:96:84: 17:39:0e:e8:6d:71:b0:b9:7a:e5:ed:0b:f4:84:e2: 10:a4:1e:1e:21:6e:a5:bd:de:35:54:40:57:dd:f0: e3:55:b2:76:14:e2:3a:61:db:2e:ae:a9:4c:30:b0: e5:32:98:15:85:1c:93:5c:28:7b:b6:4d:cf:f3:1c: 96:df:78:21:8f:40:a2:1c:94:73:18:f6:2d:a1:a4: ad:90:1d:3f:68:a2:16:49:cd:27:49:83:31:04:cb: 7d:dd:c7:84:b5:99:a3:6d:94:f0:0f:17:6d:e2:7d: fd:3a:97:83:98:1c:e1:ac:62:8d:d8:09:91:69:9d: ce:b7:54:3d:b5:76:06:73:b8:39:15:f7:b5:a8:d5: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:A5:90:9F:EB:1B:F8:C0:F1:F7:6A:85:7B:19:49:D2:4E:F7:D9 X509v3 Authority Key Identifier: keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:42:c5:ce:6d:66:66:ce:a6:4c:4e:ed:3d:5f:bf:5e:e8:99: 38:ef:bf:c4:92:fe:a2:3d:97:44:58:24:88:82:79:76:66:a1: b6:52:d9:be:cc:cc:c7:03:f0:2a:4a:a3:03:35:16:94:18:87: 0f:09:f1:53:eb:62:92:10:50:41:e2:8d:6c:c6:93:3c:9e:6b: 6b:9e:6f:ee:9e:40:9a:96:4e:e4:62:73:f3:d9:25:89:6c:da: d6:f5:ed:3b:03:04:7e:65:08:aa:c3:e5:34:01:f9:df:da:d3: a1:b5:2f:18:ae:2a:93:a8:b2:46:a2:27:ed:d9:97:48:7d:87: a4:25:d5:35:f6:f0:ff:0c:74:b6:0d:ca:aa:f3:b1:31:de:c4: d7:12:66:3c:14:4a:a0:c0:de:59:0b:6c:da:69:8f:2e:0e:4f: 6c:e1:f4:a6:3d:88:7c:a1:3f:e6:ce:26:05:6c:b8:0c:b2:86: 48:ce:0a:72:21:43:90:9e:ae:9a:14:61:18:d7:1b:c2:95:b9: fc:35:00:95:c3:90:bf:cc:1b:a2:1d:76:61:0f:32:8e:e9:fd: 02:0e:05:fa:84:52:46:83:3d:33:46:92:ed:0e:1b:32:c6:8f: e4:dc:da:a5:fd:40:03:d5:78:b4:a2:1c:b4:79:ef:d7:ee:55: 2e:de:6e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB9AHmEa/WsVoRGUXVQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMDcxOWViZDlhN2IyNTNlMTRiMjVjZGVjNGNkZDE1NGEx MTFlMzAwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD Eyg2Mzk4YTU5MDlmZWIxYmY4YzBmMWY3NmE4NTdiMTk0OWQyNGVmN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX+Pr1uR4Wsm5mcuBP1kXCba7IuK kwBNWkVu1wguBLf3M0dPpdaTcIYhBvLXskwBTqolPYi8aoYOxoKEDAUa4Pw+7dTF LZCUsbtbCzlstlD1HlJr/MuZAtaSA6Vl359u8BVTEm8fkFwWVTVVco0uWC48IXZ4 loQXOQ7obXGwuXrl7Qv0hOIQpB4eIW6lvd41VEBX3fDjVbJ2FOI6YdsurqlMMLDl MpgVhRyTXCh7tk3P8xyW33ghj0CiHJRzGPYtoaStkB0/aKIWSc0nSYMxBMt93ceE tZmjbZTwDxdt4n39OpeDmBzhrGKN2AmRaZ3Ot1Q9tXYGc7g5Ffe1qNVhlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOYpZCf6xv4wPH3aoV7GUnSTvfZMB8GA1UdIwQY MBaAFC0HGevZp7JT4UslzexM3RVKER4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAt Mzc3NDkzY2U1ODc3LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAtMzc3NDkzY2U1ODc3 LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARULFzm1m Zs6mTE7tPV+/XuiZOO+/xJL+oj2XRFgkiIJ5dmahtlLZvszMxwPwKkqjAzUWlBiH DwnxU+tikhBQQeKNbMaTPJ5ra55v7p5AmpZO5GJz89kliWza1vXtOwMEfmUIqsPl NAH539rTobUvGK4qk6iyRqIn7dmXSH2HpCXVNfbw/wx0tg3KqvOxMd7E1xJmPBRK oMDeWQts2mmPLg5PbOH0pj2IfKE/5s4mBWy4DLKGSM4KciFDkJ6umhRhGNcbwpW5 /DUAlcOQv8wboh12YQ8yjun9Ag4F+oRSRoM9M0aS7Q4bMsaP5Nzapf1AA9V4tKIc tHnv1+5VLt5uYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:59 2025 by rpki-client