This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json) Hash identifier: BSs59ZjvJb9/0Gzhes2qj95y+Nm2Nvcd0F7fGD5sr5M= Subject key identifier: 3B:98:A8:4F:CB:77:81:37:BA:15:37:6A:5C:6F:CA:69:8A:99:C4:F2 Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Certificate serial: 019AF31C3CAC41F9F954F8D3DAD1D15065A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=) 2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=) 3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: VWi27cU5ZihsBH1GFobdetpQBY8YUEeWtB+pu3yGDBk=) 4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=) 5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3c:ac:41:f9:f9:54:f8:d3:da:d1:d1:50:65:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=3b98a84fcb778137ba15376a5c6fca698a99c4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:00:be:48:ab:2e:7c:10:11:f6:46:bf:01:a1: c7:58:d1:8f:7b:34:6e:00:73:a1:c0:a6:27:17:6f: 0d:b8:81:a0:22:18:d4:35:3b:82:ca:3b:33:29:9a: d1:23:e4:77:35:2d:10:89:b4:d4:b6:a7:99:5b:00: 35:26:a8:9c:e4:7a:ac:c9:70:47:35:ba:5f:7d:62: 85:be:41:f5:d8:81:c0:c6:9c:3c:fa:dc:95:01:b5: 15:9a:aa:c9:7f:e3:46:93:fd:69:28:f5:c6:32:93: d4:f0:0a:35:73:2b:b6:9d:18:96:3f:33:96:08:36: 70:11:cb:d9:28:50:a4:f1:5d:a0:ab:9b:68:6e:42: 48:ca:4a:bd:2e:86:63:7c:0d:95:0a:33:43:78:82: bb:31:e7:67:e4:7a:7c:d9:5d:e3:84:86:35:86:26: 70:60:da:84:d9:17:52:7e:30:ea:06:4e:f6:65:e2: 48:80:7d:b4:38:72:b1:71:98:31:61:bd:66:da:d1: f5:6b:6e:25:dc:7b:cc:ef:6a:35:87:30:22:27:27: 25:95:94:df:04:cc:b9:48:e6:f6:d8:d7:db:b8:a9: ff:0f:63:d5:13:2e:0d:8a:c4:bd:24:f7:97:28:c0: db:a2:14:db:70:aa:5c:0d:ff:3f:87:dc:cf:cc:ed: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:A8:4F:CB:77:81:37:BA:15:37:6A:5C:6F:CA:69:8A:99:C4:F2 X509v3 Authority Key Identifier: keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ce:e4:e0:e3:d0:b5:54:d9:35:fe:80:e9:f4:78:08:03:2d: 93:de:aa:dc:61:7d:2f:90:92:dc:66:7a:19:5f:d1:50:89:10: 8c:30:d3:cd:c3:76:6e:81:9a:ac:08:ab:08:80:45:14:52:d3: 47:f8:58:cd:68:10:ba:a1:db:6d:e0:8d:b4:11:cc:30:c8:f2: 93:cd:25:d5:77:db:7c:75:0b:4e:60:1d:59:94:cd:99:ea:ea: 1e:8c:57:cb:8b:cf:a0:69:92:3c:bb:5d:80:67:06:c4:16:01: f4:eb:8e:37:0a:4a:f0:7b:c5:d3:b2:cd:74:cb:57:b9:83:fd: 42:58:35:37:d3:54:36:be:a3:8f:34:a3:c3:01:35:82:11:17: 29:15:3b:58:ad:1a:d0:87:ad:05:21:90:11:4d:f4:b2:50:09: 2b:25:18:f3:8d:a4:b9:e8:6c:e0:a1:4f:f8:fe:c0:9d:a4:29: fa:a7:13:f0:62:b1:a8:6c:ff:57:28:c2:d1:e6:f8:ac:ca:33: 61:36:e6:94:61:fa:61:1b:0f:ba:bc:33:72:03:59:e4:37:48: 01:02:ef:7d:da:36:c7:cb:7e:b6:f0:f7:30:24:d4:0b:f4:18: 61:c1:2a:d1:8d:aa:b7:42:06:ac:37:b3:32:9c:45:32:9f:d2: 15:8e:2b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDysQfn5VPjT2tHRUGWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk MjYxYzkwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EygzYjk4YTg0ZmNiNzc4MTM3YmExNTM3NmE1YzZmY2E2OThhOTljNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AC+SKsufBAR9ka/AaHHWNGPezRu AHOhwKYnF28NuIGgIhjUNTuCyjszKZrRI+R3NS0QibTUtqeZWwA1Jqic5HqsyXBH NbpffWKFvkH12IHAxpw8+tyVAbUVmqrJf+NGk/1pKPXGMpPU8Ao1cyu2nRiWPzOW CDZwEcvZKFCk8V2gq5tobkJIykq9LoZjfA2VCjNDeIK7Medn5Hp82V3jhIY1hiZw YNqE2RdSfjDqBk72ZeJIgH20OHKxcZgxYb1m2tH1a24l3HvM72o1hzAiJycllZTf BMy5SOb22NfbuKn/D2PVEy4NisS9JPeXKMDbohTbcKpcDf8/h9zPzO3j1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuYqE/Ld4E3uhU3alxvymmKmcTyMB8GA1UdIwQY MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM7k4OPQ tVTZNf6A6fR4CAMtk96q3GF9L5CS3GZ6GV/RUIkQjDDTzcN2boGarAirCIBFFFLT R/hYzWgQuqHbbeCNtBHMMMjyk80l1XfbfHULTmAdWZTNmerqHoxXy4vPoGmSPLtd gGcGxBYB9OuONwpK8HvF07LNdMtXuYP9Qlg1N9NUNr6jjzSjwwE1ghEXKRU7WK0a 0IetBSGQEU30slAJKyUY842kuehs4KFP+P7AnaQp+qcT8GKxqGz/VyjC0eb4rMoz YTbmlGH6YRsPurwzcgNZ5DdIAQLvfdo2x8t+tvD3MCTUC/QYYcEq0Y2qt0IGrDez MpxFMp/SFY4rkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:12 2025 by rpki-client