This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json) Hash identifier: tqXyExSJI0Yt4+llh2sehZbe4nK8AT1h8/1f/z2GGms= Subject key identifier: D7:E9:50:F4:CD:12:39:D7:8C:A5:D8:F9:08:7D:DD:9F:EF:88:CA:49 Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab Certificate serial: 019AF12E63206B195DAB89414B70FA4A083D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: t7wczD9wsye4OeObFNqfXmrKxGVohEDRup13jp6QD0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:63:20:6b:19:5d:ab:89:41:4b:70:fa:4a:08:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=d7e950f4cd1239d78ca5d8f9087ddd9fef88ca49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:ba:11:84:48:d1:3b:22:6e:3b:59:33:f1: 17:b2:85:6f:64:cb:81:d8:aa:fb:6c:a8:c6:7a:77: 3a:4b:43:f1:67:a1:99:83:d1:66:fd:2f:10:b7:cd: 86:9c:75:65:b3:07:bc:45:3f:7c:f7:43:4c:f3:0c: 61:99:fe:7c:eb:cd:1a:41:1d:a0:d4:97:9d:51:40: 2a:2d:ac:72:a4:d5:1d:fe:3e:0c:17:a6:57:66:1f: f9:5a:be:db:85:35:ff:b6:4c:7f:e4:f1:e5:5d:21: f3:bb:ab:fe:53:45:3b:1b:89:f3:1b:ce:26:cc:c6: 45:a4:ad:cb:cc:85:00:28:49:0b:1a:11:a3:0b:c0: 14:3f:d8:9c:af:cc:33:9a:24:8b:35:f7:eb:52:c4: 00:22:2e:c6:6a:47:f2:d2:89:a1:2c:a3:34:33:d9: 22:2c:41:10:55:c8:58:f1:b4:8d:94:f0:99:78:5f: c6:27:4d:35:89:19:ba:de:61:dc:f9:38:e9:df:da: ac:df:56:ee:01:2a:17:a2:83:e0:e8:97:27:99:eb: fd:29:3c:73:79:83:5c:b6:e4:93:99:aa:d0:10:0f: 99:6e:f9:37:dc:31:a3:4d:7a:6a:6c:54:a7:c1:d9: 96:3f:27:7f:d8:c5:0e:5b:5e:c1:d1:b6:03:6c:43: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E9:50:F4:CD:12:39:D7:8C:A5:D8:F9:08:7D:DD:9F:EF:88:CA:49 X509v3 Authority Key Identifier: keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0d:57:c8:a9:64:4d:b1:1c:6c:c7:ee:08:fe:d7:26:50:46: 29:93:c1:ac:46:ca:84:15:ca:ff:5f:2c:f9:20:ce:3c:2f:17: 4f:ba:ba:99:f6:5c:51:bb:9a:72:5e:a5:ed:12:db:8e:fe:b1: 7e:13:94:c4:c7:24:7a:d8:eb:f4:18:5f:fa:e0:14:67:8c:80: 82:30:23:ec:e3:88:6d:df:37:da:e1:60:8c:87:ea:47:6e:56: c9:c9:ec:fc:05:53:fe:5c:ed:92:b3:08:9d:be:20:d5:de:9e: f4:45:f3:3e:fc:21:79:21:7d:46:d6:99:87:93:e8:f1:4e:75: c8:f6:36:41:3e:6b:53:09:74:f3:17:49:40:b9:fd:f2:be:2d: 75:21:0b:6f:da:42:db:7e:db:54:9b:80:6f:6d:a8:b3:13:0d: 34:2c:b5:ed:92:2f:3b:33:62:26:d6:ff:6f:45:4e:30:5d:55: 26:78:70:09:bd:dc:f8:24:a8:db:b9:c3:00:27:2a:31:94:24: 6b:49:d9:79:13:2e:b3:92:fc:47:09:ea:70:c3:ee:d2:9b:15: 2c:ab:40:45:09:89:d3:52:03:4d:1a:87:8a:fe:cf:d1:66:d0: e3:b6:d7:63:5e:c8:d4:92:99:53:75:e1:b8:b1:4e:5b:ae:03: a2:e6:16:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmMgaxldq4lBS3D6Sgg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWIxMGU4YWZkZjAzZTRiMWRhODU3ZmFjMDUxOWY0OTQz ZGJjYWIwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD EyhkN2U5NTBmNGNkMTIzOWQ3OGNhNWQ4ZjkwODdkZGQ5ZmVmODhjYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgq6EYRI0TsibjtZM/EXsoVvZMuB 2Kr7bKjGenc6S0PxZ6GZg9Fm/S8Qt82GnHVlswe8RT9890NM8wxhmf58680aQR2g 1JedUUAqLaxypNUd/j4MF6ZXZh/5Wr7bhTX/tkx/5PHlXSHzu6v+U0U7G4nzG84m zMZFpK3LzIUAKEkLGhGjC8AUP9icr8wzmiSLNffrUsQAIi7Gakfy0omhLKM0M9ki LEEQVchY8bSNlPCZeF/GJ001iRm63mHc+Tjp39qs31buASoXooPg6Jcnmev9KTxz eYNctuSTmarQEA+Zbvk33DGjTXpqbFSnwdmWPyd/2MUOW17B0bYDbEMOGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfpUPTNEjnXjKXY+Qh93Z/viMpJMB8GA1UdIwQY MBaAFCyrEOiv3wPksdqFf6wFGfSUPbyrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAt MGQ1MDk0NGYyMzllLzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAtMGQ1MDk0NGYyMzll LzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA1XyKlk TbEcbMfuCP7XJlBGKZPBrEbKhBXK/18s+SDOPC8XT7q6mfZcUbuacl6l7RLbjv6x fhOUxMcketjr9Bhf+uAUZ4yAgjAj7OOIbd832uFgjIfqR25Wycns/AVT/lztkrMI nb4g1d6e9EXzPvwheSF9RtaZh5Po8U51yPY2QT5rUwl08xdJQLn98r4tdSELb9pC 237bVJuAb22osxMNNCy17ZIvOzNiJtb/b0VOMF1VJnhwCb3c+CSo27nDACcqMZQk a0nZeRMus5L8RwnqcMPu0psVLKtARQmJ01IDTRqHiv7P0WbQ47bXY17I1JKZU3Xh uLFOW64DouYWQw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:58 2025 by rpki-client