This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json) Hash identifier: +ksXV57Sab0gGlBILOhNze7bvUI0rGvdTg9RO+w5pio= Subject key identifier: 21:80:1C:25:CD:44:2E:72:93:D2:4B:45:9B:84:76:0E:58:ED:2A:7E Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945 Certificate serial: 019AF3C09DE0DF59B7B5190B284BE4ADE392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft Manifest number: 02B2 Signing time: Sat 06 Dec 2025 13:01:18 +0000 Manifest this update: Sat 06 Dec 2025 13:01:18 +0000 Manifest next update: Sun 07 Dec 2025 13:01:18 +0000 Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: 9T/UxWZnG8oS0+on7AnQTNiKgUXJR7aJsa3AMeBGKDs=) 2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:9d:e0:df:59:b7:b5:19:0b:28:4b:e4:ad:e3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945 Validity Not Before: Dec 6 13:01:18 2025 GMT Not After : Dec 7 13:01:18 2025 GMT Subject: CN=21801c25cd442e7293d24b459b84760e58ed2a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:47:1e:4c:d1:0f:ef:13:6a:ce:5d:63:40: e2:ee:76:4c:f6:6d:03:be:9f:b9:0e:da:39:b8:96: 2c:14:d8:d3:15:35:8d:c4:a5:56:c9:6e:68:c3:19: 19:d2:74:2a:47:77:bd:98:1a:97:b9:91:43:9f:f2: 88:af:41:a7:53:54:e6:00:93:54:c4:8f:aa:6a:9e: 6f:33:96:5b:5f:1e:e5:e0:a4:be:1b:91:f1:bf:a4: c0:f7:2d:03:38:5d:07:54:69:b9:1a:75:84:10:33: ee:4e:d9:6d:84:bb:26:47:d8:6f:70:97:cb:8e:eb: 89:a1:b2:d5:6f:72:51:3b:af:1a:42:01:bf:10:13: 95:5c:11:84:03:d0:a1:6f:e0:3b:f8:05:17:45:e8: ab:27:67:db:ca:75:18:a3:e5:00:a3:76:f0:a9:17: 1d:c7:7d:82:9d:8f:e9:39:f6:25:ca:ed:af:fb:03: aa:65:d2:cc:33:3d:3a:11:eb:9b:81:b3:64:51:a3: e1:63:38:da:50:a2:2a:96:25:24:0d:8c:92:ce:52: e5:74:aa:34:97:91:e7:b4:f8:bb:1d:c6:93:ab:5f: e1:f9:d7:25:6e:08:2f:a8:4e:52:f7:aa:29:26:a2: 20:9d:a6:0c:0e:bc:74:ca:42:e1:ef:02:57:30:6c: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:1C:25:CD:44:2E:72:93:D2:4B:45:9B:84:76:0E:58:ED:2A:7E X509v3 Authority Key Identifier: keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:e2:a9:19:fa:9b:38:4f:56:0b:b6:d6:fa:d6:f9:19:89: f1:d6:b3:12:ff:f3:4c:9a:31:59:d2:6f:eb:62:53:f5:0d:cb: f1:2a:0b:42:7c:28:cd:f4:20:ec:f5:92:3b:46:eb:a4:6c:ce: b6:e3:4e:6e:17:81:ba:0a:b9:7e:1d:3f:f0:36:46:70:a7:fd: 80:54:c6:bc:9a:be:6a:b9:02:da:34:94:3c:4e:09:5f:d2:5a: 9e:7b:e6:e7:26:00:a6:b9:83:0d:a1:24:48:74:9f:04:69:e5: cf:6e:87:9c:e5:a1:a5:c0:09:65:d3:f3:dc:6a:d0:b8:10:43: a7:47:d0:1c:d3:c8:c5:3b:9a:0d:19:a9:57:c4:1a:cc:c2:7b: 14:19:2d:47:5b:e0:93:e6:db:4b:f5:4f:ab:e9:62:c7:ec:45: 27:10:cf:37:81:5e:25:a0:2f:d9:5b:c8:c5:25:84:a6:a5:c4: a4:40:3e:8d:10:86:2b:7c:68:f1:e0:53:36:44:c0:21:2c:04: 8d:61:94:3c:d1:de:3b:a0:b6:e1:12:08:98:4a:d0:71:33:c0: 54:91:db:f5:a7:64:18:f9:df:97:4d:fc:b4:b1:b8:2c:3c:94: d8:6f:b8:1b:ce:70:ac:a9:b0:be:59:ed:3f:3a:7f:3a:45:a4: c0:b5:6c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJ3g31m3tRkLKEvkreOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMDRhNTU0MDgyNDI2OWJlNWMxMWYyMDEyOGI4NjQxNGNk NTU5NDUwHhcNMjUxMjA2MTMwMTE4WhcNMjUxMjA3MTMwMTE4WjAzMTEwLwYDVQQD EygyMTgwMWMyNWNkNDQyZTcyOTNkMjRiNDU5Yjg0NzYwZTU4ZWQyYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L5HHkzRD+8Tas5dY0Di7nZM9m0D vp+5Dto5uJYsFNjTFTWNxKVWyW5owxkZ0nQqR3e9mBqXuZFDn/KIr0GnU1TmAJNU xI+qap5vM5ZbXx7l4KS+G5Hxv6TA9y0DOF0HVGm5GnWEEDPuTtlthLsmR9hvcJfL juuJobLVb3JRO68aQgG/EBOVXBGEA9Chb+A7+AUXReirJ2fbynUYo+UAo3bwqRcd x32CnY/pOfYlyu2v+wOqZdLMMz06EeubgbNkUaPhYzjaUKIqliUkDYySzlLldKo0 l5HntPi7HcaTq1/h+dclbggvqE5S96opJqIgnaYMDrx0ykLh7wJXMGwJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGAHCXNRC5yk9JLRZuEdg5Y7Sp+MB8GA1UdIwQY MBaAFC0EpVQIJCab5cEfIBKLhkFM1VlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDct Y2ViMjdiZmNiOTQ3LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDctY2ViMjdiZmNiOTQ3 LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICniqRn6 mzhPVgu21vrW+RmJ8dazEv/zTJoxWdJv62JT9Q3L8SoLQnwozfQg7PWSO0brpGzO tuNObheBugq5fh0/8DZGcKf9gFTGvJq+arkC2jSUPE4JX9Jannvm5yYAprmDDaEk SHSfBGnlz26HnOWhpcAJZdPz3GrQuBBDp0fQHNPIxTuaDRmpV8QazMJ7FBktR1vg k+bbS/VPq+lix+xFJxDPN4FeJaAv2VvIxSWEpqXEpEA+jRCGK3xo8eBTNkTAISwE jWGUPNHeO6C24RIImErQcTPAVJHb9adkGPnfl038tLG4LDyU2G+4G85wrKmwvlnt Pzp/OkWkwLVsiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:04 2025 by rpki-client