This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json) Hash identifier: mKd+vU+a+o+GhVhcBv5kQ9/dDJlGmnP0ON2jT7n3V2I= Subject key identifier: AD:F7:2F:EA:13:AB:09:66:A6:BB:5A:52:AC:E0:C4:5F:FC:D3:68:58 Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f Certificate serial: 019AF19B1C4276EB35ADE4181DB25A8D5C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=) 2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: J5Ifi3coTu9EcDQ2KkwOfuEpX63EYpNKDJfbNogWjXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1c:42:76:eb:35:ad:e4:18:1d:b2:5a:8d:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=adf72fea13ab0966a6bb5a52ace0c45ffcd36858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:0d:07:08:95:d3:25:27:4c:ad:3f:f7:8f: 85:60:44:7e:ab:9f:44:0e:27:ec:95:32:5d:f7:ba: 7d:13:b1:29:8a:9a:6f:89:69:2a:b8:c3:1a:98:17: 8d:39:85:f1:6f:0c:9e:d2:68:1c:51:e7:0e:4b:2f: 77:04:97:ad:87:3e:61:fa:90:40:b3:09:a4:23:90: 3e:0a:50:0a:b4:a0:55:da:e7:81:5b:84:c7:56:48: d4:d6:b4:7b:99:93:40:56:18:5f:6c:cc:60:18:1e: 9d:62:f3:90:b0:e5:fc:53:aa:36:77:1c:ef:75:c7: d5:48:36:92:81:d5:4b:e3:e5:2f:c6:f0:51:d1:fe: 90:73:51:cc:51:08:67:6c:9c:42:64:6e:6c:b0:1d: 89:ad:e8:94:43:3d:3e:e6:a5:99:24:c6:d7:e6:66: 16:11:84:84:a1:b6:36:b5:d6:84:f1:0c:fc:c2:df: 43:f0:d1:83:f4:ca:4d:c8:3d:31:07:2d:e7:4e:92: 99:68:18:9e:92:f5:74:e6:52:5e:16:35:8c:f5:61: af:b5:b3:7b:89:cf:d6:8d:ae:f1:d1:69:00:77:9f: a0:27:00:48:8d:76:73:6f:db:b4:50:c0:c5:b1:5a: 05:d7:a7:e7:9d:0b:9c:3c:c3:88:96:5c:ed:de:87: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F7:2F:EA:13:AB:09:66:A6:BB:5A:52:AC:E0:C4:5F:FC:D3:68:58 X509v3 Authority Key Identifier: keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5d:03:2f:31:a8:de:05:0f:7a:0f:82:dc:4b:1c:30:6a:3d: f0:2e:fd:84:01:39:8d:55:2a:95:01:d3:06:5c:42:55:96:0a: 50:d1:de:95:97:b6:22:a9:dc:aa:34:d0:a1:f3:f7:6b:1b:4b: d4:18:4a:de:fa:a1:6b:9e:1c:b3:4f:98:43:09:bc:ff:56:14: 63:ca:78:e4:29:e5:85:11:5d:07:b1:d5:ab:97:23:16:74:9e: 3b:92:3d:5a:e3:ed:a1:54:46:07:67:79:90:4f:c1:9a:b5:29: d5:8e:c1:5f:b4:18:14:68:05:6d:04:98:b8:dc:d2:d0:57:49: ec:88:18:da:c9:57:f9:be:55:fa:1c:da:5a:c2:8f:cf:77:ee: 07:ce:e7:7f:cb:c4:47:41:d5:2a:d8:65:33:e2:aa:c7:35:7c: ef:19:38:de:9e:14:a2:80:32:46:17:fc:20:c4:9b:7e:a4:0d: e8:7a:28:ec:75:06:ba:af:48:c8:95:0d:ea:df:e2:aa:00:84: 09:a9:25:7a:15:89:2c:1a:4d:cf:08:24:04:75:9b:f9:d6:71: 77:6e:0d:a7:ee:de:16:bd:54:80:2b:53:24:46:1b:32:5e:d0: 0c:6c:91:ac:63:cb:42:5b:4c:cd:1b:98:a7:10:ae:8e:66:ff: 93:5d:86:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxxCdus1reQYHbJajVxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2 NGVmNWYwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD EyhhZGY3MmZlYTEzYWIwOTY2YTZiYjVhNTJhY2UwYzQ1ZmZjZDM2ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBwNBwiV0yUnTK0/94+FYER+q59E DifslTJd97p9E7EpippviWkquMMamBeNOYXxbwye0mgcUecOSy93BJethz5h+pBA swmkI5A+ClAKtKBV2ueBW4THVkjU1rR7mZNAVhhfbMxgGB6dYvOQsOX8U6o2dxzv dcfVSDaSgdVL4+UvxvBR0f6Qc1HMUQhnbJxCZG5ssB2JreiUQz0+5qWZJMbX5mYW EYSEobY2tdaE8Qz8wt9D8NGD9MpNyD0xBy3nTpKZaBiekvV05lJeFjWM9WGvtbN7 ic/Wja7x0WkAd5+gJwBIjXZzb9u0UMDFsVoF16fnnQucPMOIllzt3ofA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK33L+oTqwlmprtaUqzgxF/802hYMB8GA1UdIwQY MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAql0DLzGo 3gUPeg+C3EscMGo98C79hAE5jVUqlQHTBlxCVZYKUNHelZe2IqncqjTQofP3axtL 1BhK3vqha54cs0+YQwm8/1YUY8p45CnlhRFdB7HVq5cjFnSeO5I9WuPtoVRGB2d5 kE/BmrUp1Y7BX7QYFGgFbQSYuNzS0FdJ7IgY2slX+b5V+hzaWsKPz3fuB87nf8vE R0HVKthlM+KqxzV87xk43p4UooAyRhf8IMSbfqQN6Hoo7HUGuq9IyJUN6t/iqgCE CaklehWJLBpNzwgkBHWb+dZxd24Np+7eFr1UgCtTJEYbMl7QDGyRrGPLQltMzRuY pxCujmb/k12G/g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:49 2025 by rpki-client