This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json) Hash identifier: nbLn5D2M1aicyo42FKthUlYCUwtoUUZSmEU7Cj0n+oM= Subject key identifier: 7C:60:FA:40:28:AB:07:1C:32:C7:58:DD:F1:4E:7E:73:08:DA:41:A0 Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39 Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39 Certificate serial: 019B2DB0051467E7E26B0840D0B241C29C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft Manifest number: 127E Signing time: Wed 17 Dec 2025 19:01:08 +0000 Manifest this update: Wed 17 Dec 2025 19:01:08 +0000 Manifest next update: Thu 18 Dec 2025 19:01:08 +0000 Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=) 2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: WTy/lOFTluEiZsfK09T6XD+u7HBQ0BPGetqPtOzzLqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:05:14:67:e7:e2:6b:08:40:d0:b2:41:c2:9c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39 Validity Not Before: Dec 17 19:01:08 2025 GMT Not After : Dec 18 19:01:08 2025 GMT Subject: CN=7c60fa4028ab071c32c758ddf14e7e7308da41a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:fd:17:d0:36:15:63:40:ca:d3:2d:0d:55: b9:73:47:fb:0a:75:1f:72:60:4e:41:31:2d:2e:ef: b2:63:45:71:90:ee:e2:d9:2c:30:64:3a:0e:e8:fd: 13:40:b9:a4:b0:5c:05:da:b8:c7:5f:03:d2:eb:87: 24:12:0d:3a:ff:9c:b0:d8:8b:63:92:9a:be:00:79: b9:10:b5:7f:85:be:cd:ee:ab:05:ea:60:0d:87:fc: d7:23:ed:9d:70:ff:e6:c7:3e:07:ff:5e:c6:a2:5e: 1d:83:be:33:27:b1:c3:c2:08:c4:df:28:7e:a6:2d: 02:c0:bf:2b:15:5a:34:c0:53:0c:33:7e:fe:b9:62: f0:ed:41:33:f6:71:9e:86:3c:23:3a:82:12:dc:8e: 9b:b3:b8:a0:7e:f5:95:e5:f3:66:60:64:d3:03:1c: 91:f0:d0:31:19:b5:eb:87:72:76:7e:73:f7:fb:3e: d5:96:9f:af:bc:57:45:d4:6a:02:12:e8:4e:10:0b: fc:bf:d1:d8:c3:ee:03:08:b9:05:e1:c2:3c:a1:c7: 83:1c:3e:0c:c8:6a:aa:34:a9:3d:0a:d2:8c:f1:26: 86:b1:82:34:28:25:9b:13:f5:67:c5:cc:46:e8:6d: 8b:ec:3f:18:09:4a:9c:18:75:11:af:eb:c3:a4:4d: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:60:FA:40:28:AB:07:1C:32:C7:58:DD:F1:4E:7E:73:08:DA:41:A0 X509v3 Authority Key Identifier: keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:52:c7:b5:86:c1:c1:7b:80:2a:91:8e:a7:f6:22:16:19:c0: 13:6e:00:8a:88:cd:18:b6:66:d0:c4:14:3f:53:91:97:fb:83: df:e7:5e:2d:6b:a5:88:3f:5d:71:54:b2:39:8d:b0:71:6c:26: 2d:6d:1a:f5:19:11:10:d8:82:fe:ec:99:3b:ce:46:71:1b:7a: b3:6d:df:0c:ab:63:a9:6c:62:d9:52:99:22:15:fb:22:e5:0b: a3:9a:5e:4e:09:65:68:2b:c2:11:12:8c:a9:48:82:c1:97:c5: 5f:5d:64:30:f4:cd:90:f4:f2:3e:78:27:b0:4c:97:a2:0c:db: a7:57:63:02:43:69:cd:55:ee:b0:d4:31:c8:e7:e5:6c:d6:bb: 85:c8:3f:28:13:87:a6:6c:35:4f:a6:a0:a1:70:ee:9e:24:c9: 2a:b3:64:0b:8d:64:9f:11:3e:98:09:b3:75:f0:29:be:9f:a2: 52:09:52:4b:bb:cc:01:2f:2b:59:e4:d6:9b:a8:f0:62:c7:60: 7b:45:a5:6c:93:04:cb:3a:4c:00:64:4c:fe:19:31:cd:24:63: 7d:b0:da:90:b4:e7:bb:90:73:cd:8d:1b:08:ba:e0:7d:7a:c9: f0:57:cc:cd:8c:42:2c:85:2d:1e:c2:f0:fb:e8:ae:34:79:42: 82:6e:23:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsAUUZ+fiawhA0LJBwpycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZmFhMjJiZDY1Y2FjODI4NThlYTA5MTY4NmQ1YjNiNGJl M2JkMzkwHhcNMjUxMjE3MTkwMTA4WhcNMjUxMjE4MTkwMTA4WjAzMTEwLwYDVQQD Eyg3YzYwZmE0MDI4YWIwNzFjMzJjNzU4ZGRmMTRlN2U3MzA4ZGE0MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fn9F9A2FWNAytMtDVW5c0f7CnUf cmBOQTEtLu+yY0VxkO7i2SwwZDoO6P0TQLmksFwF2rjHXwPS64ckEg06/5yw2Itj kpq+AHm5ELV/hb7N7qsF6mANh/zXI+2dcP/mxz4H/17Gol4dg74zJ7HDwgjE3yh+ pi0CwL8rFVo0wFMMM37+uWLw7UEz9nGehjwjOoIS3I6bs7igfvWV5fNmYGTTAxyR 8NAxGbXrh3J2fnP3+z7Vlp+vvFdF1GoCEuhOEAv8v9HYw+4DCLkF4cI8oceDHD4M yGqqNKk9CtKM8SaGsYI0KCWbE/VnxcxG6G2L7D8YCUqcGHURr+vDpE2KNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxg+kAoqwccMsdY3fFOfnMI2kGgMB8GA1UdIwQY MBaAFCz6oivWXKyChY6gkWhtWztL4705MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTct YjQ2ODgzOGM3ZmRmLzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTctYjQ2ODgzOGM3ZmRm LzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFLHtYbB wXuAKpGOp/YiFhnAE24AiojNGLZm0MQUP1ORl/uD3+deLWuliD9dcVSyOY2wcWwm LW0a9RkRENiC/uyZO85GcRt6s23fDKtjqWxi2VKZIhX7IuULo5peTgllaCvCERKM qUiCwZfFX11kMPTNkPTyPngnsEyXogzbp1djAkNpzVXusNQxyOflbNa7hcg/KBOH pmw1T6agoXDuniTJKrNkC41knxE+mAmzdfApvp+iUglSS7vMAS8rWeTWm6jwYsdg e0WlbJMEyzpMAGRM/hkxzSRjfbDakLTnu5BzzY0bCLrgfXrJ8FfMzYxCLIUtHsLw ++iuNHlCgm4jEg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:38 2025 by rpki-client