This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json) Hash identifier: zBute4HLB05V2Dm6AjRnJavqyo/4sGvsR/HKpBjtCzw= Subject key identifier: 38:BE:A5:42:11:DB:FE:F7:A9:C5:BC:28:9C:94:F2:42:58:97:52:F5 Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee Certificate serial: 019AF389429488E0ECCB368FC03CD3BDC7BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft Manifest number: 07DE Signing time: Sat 06 Dec 2025 12:00:50 +0000 Manifest this update: Sat 06 Dec 2025 12:00:50 +0000 Manifest next update: Sun 07 Dec 2025 12:00:50 +0000 Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=) 2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: 4n563hEr4o2lIqHI1yzMCZdGOgPS7dn6bxB6QDuISio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:42:94:88:e0:ec:cb:36:8f:c0:3c:d3:bd:c7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee Validity Not Before: Dec 6 12:00:50 2025 GMT Not After : Dec 7 12:00:50 2025 GMT Subject: CN=38bea54211dbfef7a9c5bc289c94f242589752f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:42:a8:b8:1a:f4:1b:90:a9:2e:20:1d:6e: 4f:20:87:bc:31:15:26:21:d9:13:fa:19:56:d9:11: 40:02:2a:ba:87:89:0a:2b:a1:ee:44:c9:fa:19:8e: 55:37:4e:0c:44:c8:18:1a:8e:1a:6a:3a:b3:04:e3: e7:42:f8:55:4e:c2:6c:4f:75:51:7b:40:9c:92:b5: 2b:c9:5e:8f:78:80:47:35:b9:99:d0:6c:fd:43:10: fd:58:5a:0e:9a:7f:9b:b2:82:d2:17:96:10:9a:a9: 4e:05:4e:52:ba:08:12:f0:1f:24:45:f1:93:4e:66: de:db:c3:de:0e:68:e2:5d:49:3d:e3:f8:45:c0:88: 3a:d3:fc:06:51:88:ca:ca:f1:a4:7d:66:3e:10:27: ad:f0:c9:ed:63:fa:b5:7f:d0:3f:10:f1:48:50:06: db:ac:7c:1b:c4:fb:38:f3:66:1a:db:02:d2:c8:09: 57:32:57:48:42:22:50:13:4c:b2:f1:fa:a6:dc:53: e2:de:77:15:d7:28:a5:69:79:5f:ae:b7:52:c4:3a: 06:be:67:af:08:0f:2c:75:ea:2e:af:79:e1:2e:82: d6:d6:a6:ff:d9:50:69:48:51:80:a4:58:95:96:85: 05:d9:c6:b5:42:e3:8e:7c:c0:29:b4:5b:ff:b7:be: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:A5:42:11:DB:FE:F7:A9:C5:BC:28:9C:94:F2:42:58:97:52:F5 X509v3 Authority Key Identifier: keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:72:8c:ac:eb:db:90:08:42:4d:e7:f5:12:03:2c:66:ec:80: 08:b7:8d:7c:6d:f9:e8:99:e1:9e:58:f1:4c:d7:35:39:54:34: cd:19:a6:99:01:0a:bc:1f:55:ef:9d:73:e1:19:98:2a:9a:d9: 8b:93:a7:2a:d7:66:67:be:b4:9a:97:6f:72:7f:12:6c:7d:56: 2a:de:d7:a2:a5:24:04:27:a3:33:82:d3:ac:f5:96:32:75:a9: 34:dd:56:bc:f5:e4:22:9d:fd:b1:84:98:ae:c3:3b:55:44:e3: 50:a3:36:21:ae:3f:90:5d:0e:0c:05:31:3b:24:cd:af:99:a5: fc:38:85:25:1c:89:b8:06:e9:97:3b:ce:db:52:09:33:b0:12: 65:9d:df:39:da:e2:35:b3:cb:98:90:ad:cd:e1:4f:c2:17:59: 0e:26:31:d5:25:6f:3b:0f:7c:b7:4d:02:72:4a:f4:62:01:46: d2:f8:ec:ad:a5:2d:a8:35:a4:42:30:aa:4f:fb:15:75:b8:77: 67:2a:ab:dd:83:8d:bd:08:1f:2b:88:79:b6:c2:e3:20:fd:83: 7d:d5:ba:cc:69:f5:93:bd:a2:b6:9c:15:cf:c0:7d:a0:f9:f6: 0f:bf:a1:1e:31:2f:95:a1:79:e9:f4:38:35:5e:46:a8:92:d5: c4:51:ea:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUKUiODsyzaPwDzTvce/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw OTU0ZWUwHhcNMjUxMjA2MTIwMDUwWhcNMjUxMjA3MTIwMDUwWjAzMTEwLwYDVQQD EygzOGJlYTU0MjExZGJmZWY3YTljNWJjMjg5Yzk0ZjI0MjU4OTc1MmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtRCqLga9BuQqS4gHW5PIIe8MRUm IdkT+hlW2RFAAiq6h4kKK6HuRMn6GY5VN04MRMgYGo4aajqzBOPnQvhVTsJsT3VR e0CckrUryV6PeIBHNbmZ0Gz9QxD9WFoOmn+bsoLSF5YQmqlOBU5SuggS8B8kRfGT Tmbe28PeDmjiXUk94/hFwIg60/wGUYjKyvGkfWY+ECet8MntY/q1f9A/EPFIUAbb rHwbxPs482Ya2wLSyAlXMldIQiJQE0yy8fqm3FPi3ncV1yilaXlfrrdSxDoGvmev CA8sdeour3nhLoLW1qb/2VBpSFGApFiVloUF2ca1QuOOfMAptFv/t76j2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi+pUIR2/73qcW8KJyU8kJYl1L1MB8GA1UdIwQY MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct NjUxYjcxN2Y4YTlhLzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnKMrOvb kAhCTef1EgMsZuyACLeNfG356JnhnljxTNc1OVQ0zRmmmQEKvB9V751z4RmYKprZ i5OnKtdmZ760mpdvcn8SbH1WKt7XoqUkBCejM4LTrPWWMnWpNN1WvPXkIp39sYSY rsM7VUTjUKM2Ia4/kF0ODAUxOyTNr5ml/DiFJRyJuAbplzvO21IJM7ASZZ3fOdri NbPLmJCtzeFPwhdZDiYx1SVvOw98t00Cckr0YgFG0vjsraUtqDWkQjCqT/sVdbh3 Zyqr3YONvQgfK4h5tsLjIP2DfdW6zGn1k72itpwVz8B9oPn2D7+hHjEvlaF56fQ4 NV5GqJLVxFHqpw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:16 2025 by rpki-client