This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json) Hash identifier: s13qKrSDpcpMo8FuAfK2s/ht/tWnrypy/2nAiEQYvGA= Subject key identifier: 39:8B:48:DE:AF:7C:EF:C6:F7:E9:14:EA:F0:74:D6:42:F5:A2:15:9A Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05 Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705 Certificate serial: 019AF208CAE60D5AC34B5FD7078B83234762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft Manifest number: 1251 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: IIYCM1yWGTs0UpAJituKDvYxMcIqL4WkTku8Oh7uQbY=) 2: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (hash: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=) 3: oLrn4a9qOdl-vVdDDDEfOdcaw0M.roa (hash: C5BMAgY6fq8D0n/15WajsEVkkZ7GAkrzRmDZ7QTRZfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ca:e6:0d:5a:c3:4b:5f:d7:07:8b:83:23:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=398b48deaf7cefc6f7e914eaf074d642f5a2159a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:7a:da:7d:5c:e3:ea:35:0e:bd:57:9c:2d: 9c:18:db:c9:f7:09:25:fb:1c:9e:63:ab:07:9d:72: 4b:65:64:fb:29:3f:9f:ec:22:95:10:70:a6:a3:37: c7:63:cf:8a:c9:ff:52:6b:d5:dc:c7:da:8c:ed:d9: 0f:0f:1f:7b:1a:29:88:e4:86:d8:14:ae:0e:78:97: 8c:5e:f4:71:d5:2a:3c:60:d5:ad:70:b2:5c:59:c9: cd:c3:c1:dd:5c:e4:b1:87:81:4d:3c:1a:36:3e:49: 19:87:d3:51:a3:3f:ea:64:b9:fd:ac:f5:0c:cb:d2: 8e:e7:d6:01:74:d5:a7:27:cb:89:3d:05:22:c1:14: 4b:a2:79:96:b2:2d:3a:a4:0c:05:ee:8d:1a:6c:4a: 2a:34:3d:0b:ed:8c:e3:70:f4:a0:b5:c1:59:37:03: 79:37:e6:bc:00:d4:fd:96:db:20:b3:dd:0d:19:1e: a0:6c:f2:dd:08:ce:ca:d5:08:dd:1f:39:6f:a8:c7: 1a:ca:ba:ba:77:e4:b1:bb:30:3a:cf:a1:b1:89:71: 79:e7:36:3c:05:50:98:65:b4:aa:d9:61:56:8a:26: 7e:73:6d:94:c7:df:97:c3:51:e7:69:cc:e4:d1:5d: b4:52:00:6d:19:07:35:5b:4a:e0:a1:6b:12:04:d1: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:48:DE:AF:7C:EF:C6:F7:E9:14:EA:F0:74:D6:42:F5:A2:15:9A X509v3 Authority Key Identifier: keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:02:56:6d:dd:e5:39:de:e3:fd:a2:d5:0c:05:fe:06:d2:d1: 81:11:c2:2a:89:55:8f:ab:76:6f:41:2d:4a:fb:00:57:01:a6: e7:d5:f0:56:32:fe:a4:40:58:40:67:66:b7:36:db:b6:89:03: 1a:fd:28:e9:b6:d7:ce:4c:f8:b4:3f:7b:60:0f:2a:f8:80:6d: 79:46:15:0e:aa:c0:28:07:da:2e:f3:c2:2d:a0:41:0e:41:9b: 68:ea:11:21:a9:15:db:2d:a4:b2:45:89:ff:e6:11:a2:e2:75: 10:92:3a:34:71:bb:e4:fe:57:ae:17:8c:27:9c:9c:e8:76:29: 97:1e:b4:39:37:55:9e:85:9c:12:5f:65:4e:66:0a:ea:1d:5f: bd:83:4e:fc:ba:53:f2:02:4d:61:bb:3f:3e:7b:ca:95:c0:43: f2:89:44:dc:56:d4:35:d1:83:51:76:7f:38:22:6c:fe:83:52: 22:a5:b6:58:2f:0a:68:41:5e:27:e8:b0:e5:1e:4a:9b:09:cf: f5:17:39:fe:1a:f9:08:ec:c2:8e:1e:c8:29:3e:0c:51:e6:74: fb:e5:e5:b3:f3:a3:59:26:3b:a0:8b:88:69:53:2e:d8:b4:bc: e5:e1:fd:01:12:ff:47:36:79:6f:a5:7b:73:9a:93:9c:16:f9: 90:c3:91:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMrmDVrDS1/XB4uDI0diMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzI5MWI4ZGI2Y2ZkZGY2ZGQyYTFkNTViMjI2ZDQ5NDky YTI3MDUwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EygzOThiNDhkZWFmN2NlZmM2ZjdlOTE0ZWFmMDc0ZDY0MmY1YTIxNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtat62n1c4+o1Dr1XnC2cGNvJ9wkl +xyeY6sHnXJLZWT7KT+f7CKVEHCmozfHY8+Kyf9Sa9Xcx9qM7dkPDx97GimI5IbY FK4OeJeMXvRx1So8YNWtcLJcWcnNw8HdXOSxh4FNPBo2PkkZh9NRoz/qZLn9rPUM y9KO59YBdNWnJ8uJPQUiwRRLonmWsi06pAwF7o0abEoqND0L7YzjcPSgtcFZNwN5 N+a8ANT9ltsgs90NGR6gbPLdCM7K1QjdHzlvqMcayrq6d+SxuzA6z6GxiXF55zY8 BVCYZbSq2WFWiiZ+c22Ux9+Xw1Hnaczk0V20UgBtGQc1W0rgoWsSBNFROwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmLSN6vfO/G9+kU6vB01kL1ohWaMB8GA1UdIwQY MBaAFC3CkbjbbP3fbdKh1VsibUlJKicFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjIt MmIxNzBlOTVjMmI3LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjItMmIxNzBlOTVjMmI3 LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQJWbd3l Od7j/aLVDAX+BtLRgRHCKolVj6t2b0EtSvsAVwGm59XwVjL+pEBYQGdmtzbbtokD Gv0o6bbXzkz4tD97YA8q+IBteUYVDqrAKAfaLvPCLaBBDkGbaOoRIakV2y2kskWJ /+YRouJ1EJI6NHG75P5XrheMJ5yc6HYplx60OTdVnoWcEl9lTmYK6h1fvYNO/LpT 8gJNYbs/PnvKlcBD8olE3FbUNdGDUXZ/OCJs/oNSIqW2WC8KaEFeJ+iw5R5KmwnP 9Rc5/hr5COzCjh7IKT4MUeZ0++Xls/OjWSY7oIuIaVMu2LS85eH9ARL/RzZ5b6V7 c5qTnBb5kMORqg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:12 2025 by rpki-client