This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json) Hash identifier: vWQkHfdIwv1h3fPMb7PaXYuG+BkOQfuWtKoIB0JK/gk= Subject key identifier: 7F:2D:D4:D8:73:D6:B0:7E:9D:BA:37:26:07:B9:E1:74:3B:8A:7A:23 Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Certificate serial: 019AF352CE999D9BA3C4C42E4EE976654B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft Manifest number: 0EA7 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=) 2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: a6e6HbRCZ3Lrub7GkMxemYC03RemCkX0OUGco8V7BLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:ce:99:9d:9b:a3:c4:c4:2e:4e:e9:76:65:4b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=7f2dd4d873d6b07e9dba372607b9e1743b8a7a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:eb:bd:c7:e8:73:d4:97:0f:b0:00:0e:b7: 15:01:13:87:af:97:19:f0:1c:23:2f:45:6e:be:65: 94:a6:b1:25:63:d9:15:36:97:7e:74:24:36:0e:76: c8:89:ae:70:bb:13:28:11:ad:9a:1e:7d:a3:e1:e6: 34:83:b1:48:a2:c1:e8:56:a4:13:88:75:b5:69:5f: e0:3c:b5:5b:3c:ab:a2:86:ce:e3:7c:7d:ff:53:d8: 9f:8c:4c:d4:9b:90:2f:b6:c5:a2:ae:70:94:fb:4a: 7e:02:cb:32:1f:d0:d0:c5:49:04:34:46:a0:3e:14: 6f:75:40:dc:52:10:1b:96:f7:fb:49:5a:44:61:a0: 18:42:08:55:5d:d6:66:cc:d3:f5:56:b5:6a:25:3d: 18:61:c6:0c:35:89:32:3a:59:50:64:c2:b6:b9:a6: 35:3e:fd:7c:76:0e:1d:9e:88:3a:60:58:a3:f6:a4: e4:b0:02:0d:e3:0b:c1:03:1e:9f:ba:fd:ef:7e:a8: b4:af:c2:7a:0f:f4:f9:4b:d5:64:f3:38:f8:aa:c9: 5b:02:4f:42:59:1d:7c:f9:4c:08:15:bc:94:44:bb: 7f:a9:d1:4e:27:a3:c3:8a:bb:5c:ce:22:59:5e:67: f8:b0:f4:2e:86:fc:f8:41:a1:aa:d7:5b:67:ce:2f: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:D4:D8:73:D6:B0:7E:9D:BA:37:26:07:B9:E1:74:3B:8A:7A:23 X509v3 Authority Key Identifier: keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:8e:fa:f0:70:58:35:2d:a5:b3:ad:23:38:7f:34:06:6c:3d: ba:fa:9d:91:6e:28:a0:59:c4:b4:1a:ef:0e:3e:1f:c5:59:4c: 18:92:57:c6:6a:9a:cf:b7:02:95:fa:82:aa:52:aa:a6:9d:64: ba:0c:ce:e3:6c:22:5d:27:a5:98:aa:6d:5d:95:a6:87:02:ba: 0b:e3:72:2c:bb:c0:dd:eb:af:94:09:9f:c1:01:1b:7c:13:2e: e2:07:09:27:58:a4:27:e6:9d:c2:c9:28:a3:b9:7f:4c:f1:0d: 3b:34:49:df:f0:c2:56:22:17:1e:0d:88:31:a7:8c:c1:00:4f: 52:0e:31:85:cf:63:2d:2e:12:bf:4b:f3:08:cb:21:38:da:15: e8:88:65:2d:47:1b:bc:39:e2:ae:bb:26:b9:ef:bf:36:db:f3: 6e:fe:62:f8:35:c1:86:23:4e:11:5f:10:8c:83:b4:ce:05:be: c8:54:9e:87:bf:ee:d6:ad:44:42:de:98:38:39:07:bc:08:17: 46:13:79:89:9d:88:89:38:04:72:81:bd:9c:e5:f3:40:0b:8f: 2a:3d:b6:30:10:74:b4:8b:ac:01:55:13:ef:ab:07:c1:95:a6: 00:41:ba:c6:55:8b:f8:7d:16:bd:77:fb:e7:57:b7:85:4a:c8: 3c:b5:9e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUs6ZnZujxMQuTul2ZUsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi MWU5ZGEwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD Eyg3ZjJkZDRkODczZDZiMDdlOWRiYTM3MjYwN2I5ZTE3NDNiOGE3YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/jrvcfoc9SXD7AADrcVAROHr5cZ 8BwjL0VuvmWUprElY9kVNpd+dCQ2DnbIia5wuxMoEa2aHn2j4eY0g7FIosHoVqQT iHW1aV/gPLVbPKuihs7jfH3/U9ifjEzUm5AvtsWirnCU+0p+AssyH9DQxUkENEag PhRvdUDcUhAblvf7SVpEYaAYQghVXdZmzNP1VrVqJT0YYcYMNYkyOllQZMK2uaY1 Pv18dg4dnog6YFij9qTksAIN4wvBAx6fuv3vfqi0r8J6D/T5S9Vk8zj4qslbAk9C WR18+UwIFbyURLt/qdFOJ6PDirtcziJZXmf4sPQuhvz4QaGq11tnzi8X6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8t1Nhz1rB+nbo3Jge54XQ7inojMB8GA1UdIwQY MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzo768HBY NS2ls60jOH80Bmw9uvqdkW4ooFnEtBrvDj4fxVlMGJJXxmqaz7cClfqCqlKqpp1k ugzO42wiXSelmKptXZWmhwK6C+NyLLvA3euvlAmfwQEbfBMu4gcJJ1ikJ+adwsko o7l/TPENOzRJ3/DCViIXHg2IMaeMwQBPUg4xhc9jLS4Sv0vzCMshONoV6IhlLUcb vDnirrsmue+/Ntvzbv5i+DXBhiNOEV8QjIO0zgW+yFSeh7/u1q1EQt6YODkHvAgX RhN5iZ2IiTgEcoG9nOXzQAuPKj22MBB0tIusAVUT76sHwZWmAEG6xlWL+H0WvXf7 51e3hUrIPLWeTA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:00 2025 by rpki-client