This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json) Hash identifier: dimFT9xlnuIVBflxY9gDyl3pi78OXEueUpYlA15G8yA= Subject key identifier: 1F:9D:80:A1:CE:24:FC:7F:6D:28:15:41:F5:0E:4D:CB:B0:C1:31:EF Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Certificate serial: 019AF3F7E21346F86B2D933C96A0BD81668D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft Manifest number: 0754 Signing time: Sat 06 Dec 2025 14:01:39 +0000 Manifest this update: Sat 06 Dec 2025 14:01:39 +0000 Manifest next update: Sun 07 Dec 2025 14:01:39 +0000 Files and hashes: 1: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: tWDm2fOLNjCvyUpXpuSuZI2mGDgvvN1UESS0B4JXjc0=) 2: PFluydWOaBTgnh4o2FnGy8AoCI0.roa (hash: dYpglGU9LkXsNL5grxQDMbO9Dj9URsF+c2voMiQoHR0=) 3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e2:13:46:f8:6b:2d:93:3c:96:a0:bd:81:66:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Validity Not Before: Dec 6 14:01:39 2025 GMT Not After : Dec 7 14:01:39 2025 GMT Subject: CN=1f9d80a1ce24fc7f6d281541f50e4dcbb0c131ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:f8:eb:0a:fc:a4:46:d9:7c:18:3a:a0:8f: db:37:54:50:38:a6:3b:23:28:93:ed:78:b1:42:5b: 64:5d:60:1f:75:93:fd:77:ef:ae:f9:4b:bf:a2:14: 98:df:57:f6:c6:75:21:be:a4:90:3a:3b:5b:8e:de: 08:b2:e2:54:91:30:67:d0:25:96:7f:25:2d:20:54: 23:1c:af:1f:6d:54:95:16:9c:d3:a6:3c:b5:fc:40: b9:52:9f:0c:a4:ae:d0:e6:5d:25:31:56:d4:d8:75: ce:a6:da:64:c9:b6:44:60:87:f6:af:ac:0c:5b:df: 90:40:42:3a:1c:98:6b:3a:b7:ab:c3:da:b3:f3:e9: b3:77:aa:cb:c7:af:21:d9:42:d6:24:f8:d2:e6:ab: 56:38:c0:b2:bb:2c:9a:a3:2c:12:ed:c3:6f:3e:f7: 32:63:12:f6:59:4c:6b:2a:3b:d4:4c:9e:4e:0f:63: 03:a9:a5:cf:f7:0d:1d:1f:b9:68:85:b3:0d:d0:0e: 9c:df:8e:07:9c:a5:05:a4:12:e0:8c:a8:b9:1e:b8: 24:62:7b:3c:4b:c7:64:30:b3:7e:56:5c:b7:5b:28: 9a:a4:28:c8:8d:b9:87:d7:b8:cf:73:47:2e:a5:94: cd:8f:86:ad:59:d5:99:05:ed:d1:cb:e6:1a:ec:44: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:80:A1:CE:24:FC:7F:6D:28:15:41:F5:0E:4D:CB:B0:C1:31:EF X509v3 Authority Key Identifier: keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:db:43:70:d8:92:28:1f:a7:08:93:07:69:e5:bb:5d:bd:17: 8f:73:dd:14:60:7c:6c:71:a3:a8:b7:a4:c6:96:ab:95:52:f3: bf:50:c7:c6:c8:8c:5f:95:37:52:5d:95:0b:b8:c2:70:aa:cc: 1a:3b:10:06:18:b4:b4:81:b1:00:c5:db:67:a5:d6:cf:b2:4a: a0:93:c3:02:1a:9f:2d:3a:93:fd:28:88:18:78:69:2b:00:ce: e3:df:3a:8a:79:bd:1a:3f:3d:93:69:bb:d7:af:62:66:41:05: 8e:35:6e:f3:6d:72:7c:78:2c:f9:f8:52:09:7b:26:a4:15:15: 79:04:22:1c:5b:ae:96:f7:19:5c:f2:46:d0:a3:dc:28:2f:a0: e6:6f:17:1d:5b:e8:c9:3a:a6:02:d9:e5:38:4d:6b:c9:dd:e4: e1:38:03:72:81:69:1c:be:f2:57:75:25:17:c3:da:44:2c:15: d1:e1:ec:f1:ab:8d:87:75:1d:f3:a9:d3:b0:68:64:b6:42:d1: e8:20:36:d7:41:2b:46:4d:6a:25:fc:36:98:97:4d:ad:0e:7b: 12:cc:44:18:3d:d1:a9:d7:b4:0e:e4:a2:17:e8:be:f0:09:68: e6:41:4e:20:6d:2e:24:8e:81:63:46:ed:1e:15:85:c5:d6:c4: 8f:42:ce:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+ITRvhrLZM8lqC9gWaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0 ODg5ZTAwHhcNMjUxMjA2MTQwMTM5WhcNMjUxMjA3MTQwMTM5WjAzMTEwLwYDVQQD EygxZjlkODBhMWNlMjRmYzdmNmQyODE1NDFmNTBlNGRjYmIwYzEzMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6f46wr8pEbZfBg6oI/bN1RQOKY7 IyiT7XixQltkXWAfdZP9d++u+Uu/ohSY31f2xnUhvqSQOjtbjt4IsuJUkTBn0CWW fyUtIFQjHK8fbVSVFpzTpjy1/EC5Up8MpK7Q5l0lMVbU2HXOptpkybZEYIf2r6wM W9+QQEI6HJhrOrerw9qz8+mzd6rLx68h2ULWJPjS5qtWOMCyuyyaoywS7cNvPvcy YxL2WUxrKjvUTJ5OD2MDqaXP9w0dH7lohbMN0A6c344HnKUFpBLgjKi5HrgkYns8 S8dkMLN+Vly3WyiapCjIjbmH17jPc0cupZTNj4atWdWZBe3Ry+Ya7ESwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+dgKHOJPx/bSgVQfUOTcuwwTHvMB8GA1UdIwQY MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUttDcNiS KB+nCJMHaeW7Xb0Xj3PdFGB8bHGjqLekxparlVLzv1DHxsiMX5U3Ul2VC7jCcKrM GjsQBhi0tIGxAMXbZ6XWz7JKoJPDAhqfLTqT/SiIGHhpKwDO4986inm9Gj89k2m7 169iZkEFjjVu821yfHgs+fhSCXsmpBUVeQQiHFuulvcZXPJG0KPcKC+g5m8XHVvo yTqmAtnlOE1ryd3k4TgDcoFpHL7yV3UlF8PaRCwV0eHs8auNh3Ud86nTsGhktkLR 6CA210ErRk1qJfw2mJdNrQ57EsxEGD3Rqde0DuSiF+i+8Alo5kFOIG0uJI6BY0bt HhWFxdbEj0LObQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:14:53 2025 by rpki-client