This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json) Hash identifier: 2T3biYBKaLlrtu9Poa5CwKbE1b/c0wtXlvy+trCPObU= Subject key identifier: 24:EF:1B:9D:9A:C0:70:76:69:2C:BD:CC:06:2E:6D:6E:D5:D6:90:A1 Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e Certificate serial: 019AF19B23139222C976133D1E8DF6AA915F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft Manifest number: 15A9 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=) 2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=) 3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: LpT/3SzvCKYSy16vDOFtdmK8E+vbWW0VzUXUdbupHLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:23:13:92:22:c9:76:13:3d:1e:8d:f6:aa:91:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=24ef1b9d9ac07076692cbdcc062e6d6ed5d690a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:bc:e6:36:44:10:3d:48:aa:7b:bf:19:71: b7:d6:6f:e6:6a:3e:6c:d7:d0:cb:76:36:3d:75:ae: fb:f8:ad:7b:d6:e5:bb:02:f7:62:7e:af:51:03:ac: f6:99:02:8c:58:90:63:22:e2:5f:3f:1c:ef:27:ac: 49:04:44:6e:bf:8f:15:75:fb:a6:bb:90:6a:b1:ce: 56:1d:f2:12:c1:e3:0c:4f:b4:f2:b5:15:74:6d:c4: 68:74:cb:39:b9:4d:0c:25:f1:76:6a:1a:6a:8e:46: b0:48:e9:68:c4:f3:8c:9f:58:b0:5f:35:42:38:55: 1b:eb:0a:9d:0b:95:af:99:29:a1:f3:bb:00:53:58: 91:97:c1:32:1d:a5:e9:82:2e:b1:9c:f7:af:1c:ce: 26:53:b9:c9:29:cd:92:6b:bc:76:2c:10:d7:81:03: fa:1c:57:41:08:1c:b8:60:0f:50:21:fd:51:3a:e6: 34:6f:00:c7:91:c2:7a:1c:3a:e4:ee:5b:0b:bf:95: b7:b0:65:7c:74:fd:29:3f:41:37:90:1f:5a:86:6b: f9:2a:a5:f5:91:ed:83:fd:b5:bb:72:a8:a3:3e:35: 94:8c:98:4e:a0:c1:c3:dd:8b:bf:87:22:c6:7d:e2: 21:f2:2e:9c:ff:5b:79:cd:08:b5:4a:3f:d2:88:82: 66:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:1B:9D:9A:C0:70:76:69:2C:BD:CC:06:2E:6D:6E:D5:D6:90:A1 X509v3 Authority Key Identifier: keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e9:c2:fc:9a:d6:3a:72:ea:01:f0:a1:a6:ce:17:49:ce:a2: e1:44:18:86:7e:1d:0f:26:85:4d:fc:cf:b9:af:c7:1e:42:4c: 48:1f:08:66:a3:16:6d:31:10:fa:c7:65:8a:38:69:a6:31:84: c3:62:d8:c8:ae:19:57:28:a3:4e:c6:d5:ba:d5:50:e7:1b:e0: 2c:07:5e:d0:70:b6:33:71:ef:0b:36:28:b8:98:49:90:63:02: 11:4f:19:64:c6:78:00:62:ba:95:39:69:c9:dc:2b:fa:2f:78: 3d:d1:e5:bb:e2:32:de:99:2e:01:9d:24:13:27:0d:71:4a:49: e1:e1:ea:9a:99:66:1f:c4:2d:a5:b7:4e:73:fa:10:08:45:3a: 45:8c:d9:3a:e0:a2:16:3f:21:86:2d:c6:28:99:3c:08:43:79: 4b:c8:cf:69:c1:2a:d9:83:36:f3:bc:bf:0c:10:8f:1a:63:73: 07:02:94:c7:d1:33:c4:1b:3a:9f:2a:d7:91:f3:ce:f4:c2:32: 13:c9:58:96:33:99:6c:14:74:83:8b:d7:c3:82:65:25:02:87: 79:de:68:8d:d9:f9:bc:97:0f:87:0c:e5:e2:b0:40:05:c0:7e: 9d:83:43:ef:1e:ae:03:3e:c5:7c:c4:6b:c6:ab:0c:c6:79:98: d5:4d:ad:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyMTkiLJdhM9Ho32qpFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0 MTM3MWUwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygyNGVmMWI5ZDlhYzA3MDc2NjkyY2JkY2MwNjJlNmQ2ZWQ1ZDY5MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxG85jZEED1Iqnu/GXG31m/maj5s 19DLdjY9da77+K171uW7Avdifq9RA6z2mQKMWJBjIuJfPxzvJ6xJBERuv48Vdfum u5Bqsc5WHfISweMMT7TytRV0bcRodMs5uU0MJfF2ahpqjkawSOloxPOMn1iwXzVC OFUb6wqdC5WvmSmh87sAU1iRl8EyHaXpgi6xnPevHM4mU7nJKc2Sa7x2LBDXgQP6 HFdBCBy4YA9QIf1ROuY0bwDHkcJ6HDrk7lsLv5W3sGV8dP0pP0E3kB9ahmv5KqX1 ke2D/bW7cqijPjWUjJhOoMHD3Yu/hyLGfeIh8i6c/1t5zQi1Sj/SiIJmnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTvG52awHB2aSy9zAYubW7V1pChMB8GA1UdIwQY MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEenC/JrW OnLqAfChps4XSc6i4UQYhn4dDyaFTfzPua/HHkJMSB8IZqMWbTEQ+sdlijhppjGE w2LYyK4ZVyijTsbVutVQ5xvgLAde0HC2M3HvCzYouJhJkGMCEU8ZZMZ4AGK6lTlp ydwr+i94PdHlu+Iy3pkuAZ0kEycNcUpJ4eHqmplmH8QtpbdOc/oQCEU6RYzZOuCi Fj8hhi3GKJk8CEN5S8jPacEq2YM287y/DBCPGmNzBwKUx9EzxBs6nyrXkfPO9MIy E8lYljOZbBR0g4vXw4JlJQKHed5ojdn5vJcPhwzl4rBABcB+nYND7x6uAz7FfMRr xqsMxnmY1U2t5g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:23 2025 by rpki-client