This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json) Hash identifier: rCRYg1JatVjSKMKka8Lf6jgax6TmyGYiaISp17dg3dE= Subject key identifier: 7A:7A:AF:F0:09:F7:8A:35:25:D2:58:D3:11:36:3C:60:29:0B:28:E2 Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5 Certificate serial: 019AF540C3090D8865FF5361FD892C680744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 20:00:53 +0000 Manifest this update: Sat 06 Dec 2025 20:00:53 +0000 Manifest next update: Sun 07 Dec 2025 20:00:53 +0000 Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: F/z6Y9CbjG5ZTFGD+bH3aNMxtJBDmVoj6haH1z5Ek90=) 2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c3:09:0d:88:65:ff:53:61:fd:89:2c:68:07:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5 Validity Not Before: Dec 6 20:00:53 2025 GMT Not After : Dec 7 20:00:53 2025 GMT Subject: CN=7a7aaff009f78a3525d258d311363c60290b28e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1d:19:95:fa:31:f6:a5:a2:78:65:0b:6c:c6: 82:74:4e:3f:48:75:d7:27:6e:a6:54:0e:9a:e8:05: 1a:41:11:bc:2b:74:74:1b:ff:b2:09:1d:be:fa:df: 6b:e4:81:82:e3:2e:65:85:db:69:5a:b2:fa:17:16: 37:5c:72:56:24:1d:a4:a1:fe:36:09:31:9e:34:5a: 45:7a:8c:af:15:08:a4:7b:47:4c:16:7c:00:9b:6b: 46:a4:63:af:61:d6:cc:f0:dd:61:25:2f:e9:38:c8: 6f:61:11:de:f0:ea:4a:b9:77:e3:e1:cd:84:c8:24: 55:93:05:b2:2a:cc:a8:c0:7c:57:b2:1c:6a:ca:8a: e8:df:a7:09:55:fc:ec:33:42:37:e8:1d:bd:46:30: b0:1c:d2:2d:a9:bb:b4:8d:dc:04:7f:7c:c1:6a:24: 40:8b:1a:bd:1d:5a:9d:72:1b:4d:5a:f2:68:01:56: 89:dc:26:0c:fd:3f:47:66:99:48:3d:37:1a:d0:5b: ba:9a:47:85:55:87:79:ec:f5:7f:ae:1d:ec:02:65: f1:26:1e:85:64:41:af:a7:78:db:bc:f0:a6:9e:c3: 14:3b:6f:3a:de:9e:3f:1b:e0:07:fd:43:e6:05:2a: cb:dc:f3:8c:12:74:9c:73:7d:db:31:e7:9b:f9:f8: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:AF:F0:09:F7:8A:35:25:D2:58:D3:11:36:3C:60:29:0B:28:E2 X509v3 Authority Key Identifier: keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:28:ab:d5:09:09:44:c2:1f:2c:56:b8:99:e1:f2:8d:02:ac: 46:a2:83:2d:99:71:e8:bf:0d:53:b6:dd:de:86:0e:f8:b0:ba: 72:d2:bd:31:97:d1:de:97:e5:96:d0:47:c4:a2:97:27:ca:45: ff:bb:c3:a3:44:2d:3b:6b:b1:5c:71:77:af:43:3f:bf:25:a3: f5:47:36:e6:b7:6d:50:24:26:d9:c1:54:8f:82:4d:d0:53:95: b3:50:8c:32:de:57:84:ea:87:6f:02:bb:e8:ac:10:d1:41:93: c9:53:8f:e0:f8:0f:6a:4d:10:47:e7:38:4e:24:fe:e3:0a:ac: 97:35:9a:eb:6f:98:9c:27:7f:8d:0c:1a:0d:2c:9b:52:dc:9c: 6c:7b:7b:07:03:c9:27:fc:b8:cb:d1:c4:3e:25:02:a5:ac:eb: 6a:a7:83:95:43:cb:ce:4f:45:e2:a0:68:a7:3f:8f:41:ea:8e: 25:e2:b6:bb:51:6b:67:bf:1d:4b:b4:8d:1d:60:62:93:8f:92: d5:ac:77:b6:70:3b:b0:e6:f6:23:e6:2f:a8:7a:c3:da:07:54: 58:c2:e6:a8:e4:94:9c:cd:de:47:cd:b3:25:86:49:df:31:51: 51:22:28:63:f9:9c:2d:a3:3e:fa:d5:d2:5c:af:da:0a:4c:50: 84:7f:ad:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMMJDYhl/1Nh/YksaAdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi MDVmZTUwHhcNMjUxMjA2MjAwMDUzWhcNMjUxMjA3MjAwMDUzWjAzMTEwLwYDVQQD Eyg3YTdhYWZmMDA5Zjc4YTM1MjVkMjU4ZDMxMTM2M2M2MDI5MGIyOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx0Zlfox9qWieGULbMaCdE4/SHXX J26mVA6a6AUaQRG8K3R0G/+yCR2++t9r5IGC4y5lhdtpWrL6FxY3XHJWJB2kof42 CTGeNFpFeoyvFQike0dMFnwAm2tGpGOvYdbM8N1hJS/pOMhvYRHe8OpKuXfj4c2E yCRVkwWyKsyowHxXshxqyoro36cJVfzsM0I36B29RjCwHNItqbu0jdwEf3zBaiRA ixq9HVqdchtNWvJoAVaJ3CYM/T9HZplIPTca0Fu6mkeFVYd57PV/rh3sAmXxJh6F ZEGvp3jbvPCmnsMUO2863p4/G+AH/UPmBSrL3POMEnScc33bMeeb+figOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp6r/AJ94o1JdJY0xE2PGApCyjiMB8GA1UdIwQY MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1 LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByir1QkJ RMIfLFa4meHyjQKsRqKDLZlx6L8NU7bd3oYO+LC6ctK9MZfR3pflltBHxKKXJ8pF /7vDo0QtO2uxXHF3r0M/vyWj9Uc25rdtUCQm2cFUj4JN0FOVs1CMMt5XhOqHbwK7 6KwQ0UGTyVOP4PgPak0QR+c4TiT+4wqslzWa62+YnCd/jQwaDSybUtycbHt7BwPJ J/y4y9HEPiUCpazraqeDlUPLzk9F4qBopz+PQeqOJeK2u1FrZ78dS7SNHWBik4+S 1ax3tnA7sOb2I+YvqHrD2gdUWMLmqOSUnM3eR82zJYZJ3zFRUSIoY/mcLaM++tXS XK/aCkxQhH+tzg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:27 2025 by rpki-client