This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json) Hash identifier: GqLMWEWbOWlGZ/7TsfluebrEXbwrY8zdsntf+VK4WVQ= Subject key identifier: C3:1E:49:CF:1C:9C:CC:F3:C4:8E:71:57:97:F3:CD:D4:60:D6:53:42 Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf Certificate serial: 019AF6F9282D25D5818CDA0600E14F61E2FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft Manifest number: 1098 Signing time: Sun 07 Dec 2025 04:01:55 +0000 Manifest this update: Sun 07 Dec 2025 04:01:55 +0000 Manifest next update: Mon 08 Dec 2025 04:01:55 +0000 Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: x2zdJi1jGV4mYW50qVHub6T8QBDq6cz9Mboz5f7SXhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:28:2d:25:d5:81:8c:da:06:00:e1:4f:61:e2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf Validity Not Before: Dec 7 04:01:55 2025 GMT Not After : Dec 8 04:01:55 2025 GMT Subject: CN=c31e49cf1c9cccf3c48e715797f3cdd460d65342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e0:99:e3:52:53:8d:d2:64:7c:fc:8f:e5:53: 8c:fe:4a:18:2a:96:1c:e0:b0:51:3d:f7:00:3c:77: 49:ea:a2:50:f9:fc:d5:e0:d8:6a:ae:70:ad:8b:5d: b0:53:01:ef:99:52:36:35:bd:db:e6:7f:da:d9:73: 35:5c:f2:91:d3:7f:23:bb:0c:63:34:47:93:14:0f: f0:80:fe:1d:26:f3:3e:fe:c1:ef:f9:0d:1a:45:20: 62:12:f6:55:97:ae:e5:c1:9c:7b:0a:08:0b:6c:c1: b2:b2:54:10:7a:19:ee:94:73:57:50:7b:b6:7d:f3: 4d:4d:5b:03:07:f3:c2:e4:90:64:bc:9c:27:02:c2: 8d:36:df:a2:f0:a6:ce:43:9a:55:0b:71:9d:46:e4: 98:61:27:fd:cc:b4:c6:89:d3:64:14:35:8b:a5:91: f3:2d:b5:e6:05:70:f6:00:89:46:a4:7d:73:8b:cc: fe:93:bb:af:30:a2:ea:3f:31:02:08:f2:09:75:06: f7:00:3b:b1:64:0e:e7:fc:6c:94:eb:0d:d2:a7:49: 7b:c2:8e:9e:ae:43:77:51:45:13:21:c9:e6:93:1b: 48:1e:92:2b:2b:04:d6:da:c4:ef:1f:cf:d4:fd:d0: e0:b5:5b:28:4a:0f:88:09:c7:24:fc:d7:fe:f9:7d: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1E:49:CF:1C:9C:CC:F3:C4:8E:71:57:97:F3:CD:D4:60:D6:53:42 X509v3 Authority Key Identifier: keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f7:37:25:58:70:14:ef:cd:fb:82:14:75:db:53:c3:8d:e1: 74:6f:1a:19:19:f6:17:2b:b3:b3:47:c0:48:29:e9:83:40:ff: 6f:06:84:ad:cf:9b:73:fa:7e:4d:ca:12:f2:33:eb:df:4b:b1: 25:0e:b5:ab:2b:61:63:81:9a:aa:9e:41:4c:59:42:fa:f8:04: 82:fc:56:78:49:5c:83:2c:6f:cc:58:f1:9c:7d:e0:25:30:f4: d0:d9:b6:cf:d3:9b:af:46:67:d3:11:e3:f2:1c:fb:a0:18:af: cc:fd:4a:e3:29:f5:6c:f4:f4:08:86:84:2f:d0:6c:ba:00:71: 42:8f:42:39:2e:3a:45:20:50:6e:1f:b7:e9:cb:c3:dd:89:18: d0:81:60:79:b8:84:a0:9a:e3:f0:3e:95:b4:9e:f7:e6:3a:94: 10:a3:2c:e7:b0:1a:6c:22:12:68:cc:52:2b:f7:16:c1:8b:77: 40:b4:0b:93:a9:93:a2:3d:df:25:5e:de:d9:e5:39:c6:3d:bb: 2d:4e:16:15:2f:60:56:19:67:2f:f0:ae:3a:04:ec:56:66:a2: 3b:69:69:ab:f1:b5:2c:73:33:f5:9b:c4:f7:2c:b2:a4:85:31: 94:23:cb:74:af:70:65:7b:08:e9:80:15:ae:48:67:42:1b:90: 2c:e0:bd:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+SgtJdWBjNoGAOFPYeL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWJmNTc1NGZmZTFhMWNmYjg5YjRmMmIwYmYxMDY1ODIz YjEyY2YwHhcNMjUxMjA3MDQwMTU1WhcNMjUxMjA4MDQwMTU1WjAzMTEwLwYDVQQD EyhjMzFlNDljZjFjOWNjY2YzYzQ4ZTcxNTc5N2YzY2RkNDYwZDY1MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OCZ41JTjdJkfPyP5VOM/koYKpYc 4LBRPfcAPHdJ6qJQ+fzV4NhqrnCti12wUwHvmVI2Nb3b5n/a2XM1XPKR038juwxj NEeTFA/wgP4dJvM+/sHv+Q0aRSBiEvZVl67lwZx7CggLbMGyslQQehnulHNXUHu2 ffNNTVsDB/PC5JBkvJwnAsKNNt+i8KbOQ5pVC3GdRuSYYSf9zLTGidNkFDWLpZHz LbXmBXD2AIlGpH1zi8z+k7uvMKLqPzECCPIJdQb3ADuxZA7n/GyU6w3Sp0l7wo6e rkN3UUUTIcnmkxtIHpIrKwTW2sTvH8/U/dDgtVsoSg+ICcck/Nf++X1U3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMeSc8cnMzzxI5xV5fzzdRg1lNCMB8GA1UdIwQY MBaAFCyr9XVP/hoc+4m08rC/EGWCOxLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNGI3ODktM2MwZi00YTNiLTgxNWYt MDY5NzhmMThjNzM0LzEvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lNGI3ODktM2MwZi00YTNiLTgxNWYtMDY5NzhmMThjNzM0 LzEvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/c3JVhw FO/N+4IUddtTw43hdG8aGRn2Fyuzs0fASCnpg0D/bwaErc+bc/p+TcoS8jPr30ux JQ61qythY4Gaqp5BTFlC+vgEgvxWeElcgyxvzFjxnH3gJTD00Nm2z9Obr0Zn0xHj 8hz7oBivzP1K4yn1bPT0CIaEL9BsugBxQo9COS46RSBQbh+36cvD3YkY0IFgebiE oJrj8D6VtJ735jqUEKMs57AabCISaMxSK/cWwYt3QLQLk6mToj3fJV7e2eU5xj27 LU4WFS9gVhlnL/CuOgTsVmaiO2lpq/G1LHMz9ZvE9yyypIUxlCPLdK9wZXsI6YAV rkhnQhuQLOC9GA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:23 2025 by rpki-client