This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json) Hash identifier: WlySwaqpwWwCMN2PHjN7rb6HXn2367k67B5SZtj63pc= Subject key identifier: F8:BB:F8:46:BD:2A:65:6D:91:C4:03:CE:50:6A:06:F6:BA:82:70:64 Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78 Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278 Certificate serial: 019AF31BF1C292294C1AB3718A81243279DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 10:01:26 +0000 Manifest this update: Sat 06 Dec 2025 10:01:26 +0000 Manifest next update: Sun 07 Dec 2025 10:01:26 +0000 Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: fivsm/jiBfmPVlCatHR7fF3REmaKOfsSh+m/advvYDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f1:c2:92:29:4c:1a:b3:71:8a:81:24:32:79:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278 Validity Not Before: Dec 6 10:01:26 2025 GMT Not After : Dec 7 10:01:26 2025 GMT Subject: CN=f8bbf846bd2a656d91c403ce506a06f6ba827064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:2a:3a:07:2b:46:c1:14:ef:08:91:c8:d7: cf:a8:c3:3c:57:c9:16:94:96:dd:3f:ae:9c:17:44: e7:14:cc:1b:96:b4:2a:38:09:34:bd:92:23:e5:83: 14:92:8d:eb:f7:ba:f0:f0:29:37:ed:01:bd:ec:8e: 08:12:c4:5b:cd:77:94:ab:b0:8a:b6:55:e0:24:1b: e2:c9:ea:e2:fb:8e:36:6d:01:4f:5c:86:4e:9a:17: 89:d5:5f:27:8e:d6:c1:35:8e:43:b3:8a:ca:a6:0b: 46:ea:40:ea:7b:55:c8:cb:56:18:6f:82:a3:4b:91: 16:c7:cb:a5:d3:cc:a1:43:a0:d8:d1:51:c4:6d:d2: 2e:e6:c9:e3:44:60:b2:dd:5f:52:32:46:fa:0f:90: c2:ab:98:7b:6f:76:58:07:48:24:1d:52:f9:59:88: 22:e7:77:8b:c0:fc:b7:11:3a:ad:24:45:4d:b4:a1: 9d:ac:15:15:65:6d:3f:da:7f:2e:01:5e:3a:22:97: 6a:27:c7:7d:af:da:88:4c:9d:26:c2:bc:e9:ef:98: 16:ca:d6:63:5c:99:10:78:83:b1:03:f7:3f:ed:c7: a6:24:d1:32:8e:fb:db:73:5f:4e:dd:ce:fb:bb:6b: f0:3f:2a:e5:ff:a8:6d:7e:87:1d:71:5f:bb:44:5c: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:F8:46:BD:2A:65:6D:91:C4:03:CE:50:6A:06:F6:BA:82:70:64 X509v3 Authority Key Identifier: keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:cc:ac:cf:c1:26:3b:92:25:d3:56:2e:84:84:64:b3:41: 10:2b:ea:7c:30:38:2d:7a:cc:b1:17:4f:5c:1f:ee:3f:8d:b9: 27:8f:c0:24:64:be:c7:d3:41:fd:ef:af:3b:6a:7f:d7:b5:d6: 44:c7:03:76:43:57:2f:1b:c3:84:78:5f:bc:0c:8b:86:76:e4: 92:a2:b8:a7:87:78:36:75:04:c0:68:28:1e:81:ca:b8:73:b1: a6:54:a0:1a:74:2f:06:0f:04:f8:e5:ce:c3:3d:bd:dd:29:0d: 34:5d:d7:3c:8e:d0:29:de:18:fa:dc:41:c9:93:5a:7a:b9:5f: de:70:c5:ad:bc:30:b3:1b:59:8a:75:89:be:f7:e9:e3:37:ef: 74:82:fe:8c:b6:58:27:65:f6:70:aa:d1:39:53:70:63:c4:67: f6:1f:f4:21:b9:fc:d1:76:85:35:32:3c:02:0d:19:c9:e5:1d: 9a:4e:9d:29:38:bd:a5:08:7a:8c:22:87:dc:a3:20:41:d7:bf: cb:d8:cc:4d:7f:e8:61:89:29:1b:f9:80:b9:df:71:fb:ad:09: f4:f2:5d:d1:19:98:d8:84:ad:19:d6:b4:58:d7:6e:4f:0f:03: f7:e2:e4:62:55:e5:95:8e:3b:f9:f4:7d:34:ee:f5:0a:9c:83: 2c:7e:06:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/HCkilMGrNxioEkMnnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDU5MDU5MjMyYTRiYjkzMmY2M2ZiMGRmYjY1NDkzZWI5 YzgyNzgwHhcNMjUxMjA2MTAwMTI2WhcNMjUxMjA3MTAwMTI2WjAzMTEwLwYDVQQD EyhmOGJiZjg0NmJkMmE2NTZkOTFjNDAzY2U1MDZhMDZmNmJhODI3MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaUqOgcrRsEU7wiRyNfPqMM8V8kW lJbdP66cF0TnFMwblrQqOAk0vZIj5YMUko3r97rw8Ck37QG97I4IEsRbzXeUq7CK tlXgJBviyeri+442bQFPXIZOmheJ1V8njtbBNY5Ds4rKpgtG6kDqe1XIy1YYb4Kj S5EWx8ul08yhQ6DY0VHEbdIu5snjRGCy3V9SMkb6D5DCq5h7b3ZYB0gkHVL5WYgi 53eLwPy3ETqtJEVNtKGdrBUVZW0/2n8uAV46IpdqJ8d9r9qITJ0mwrzp75gWytZj XJkQeIOxA/c/7cemJNEyjvvbc19O3c77u2vwPyrl/6htfocdcV+7RFzlVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi7+Ea9KmVtkcQDzlBqBva6gnBkMB8GA1UdIwQY MBaAFC5FkFkjKku5MvY/sN+2VJPrnIJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQt NDg1ZWRhMzQ5OThmLzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQtNDg1ZWRhMzQ5OThm LzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoTMrM/B JjuSJdNWLoSEZLNBECvqfDA4LXrMsRdPXB/uP425J4/AJGS+x9NB/e+vO2p/17XW RMcDdkNXLxvDhHhfvAyLhnbkkqK4p4d4NnUEwGgoHoHKuHOxplSgGnQvBg8E+OXO wz293SkNNF3XPI7QKd4Y+txByZNaerlf3nDFrbwwsxtZinWJvvfp4zfvdIL+jLZY J2X2cKrROVNwY8Rn9h/0Ibn80XaFNTI8Ag0ZyeUdmk6dKTi9pQh6jCKH3KMgQde/ y9jMTX/oYYkpG/mAud9x+60J9PJd0RmY2IStGda0WNduTw8D9+LkYlXllY47+fR9 NO71CpyDLH4G6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:26 2025 by rpki-client