This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json) Hash identifier: L4AKvyNaLbb1IufevbV4Jl346ZE9ngv4AqzUK2K8RdA= Subject key identifier: 3A:C9:09:9C:48:6C:3C:47:B7:D6:A7:32:CB:22:C0:54:55:06:E6:F2 Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2 Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2 Certificate serial: 019AF12D1E72E7A73BBAB838FD9C185FA50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft Manifest number: 0E78 Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: YX+wvB/PtybsI0JVe7XSMl2ZViYeKYdvXAkNPHpHp8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1e:72:e7:a7:3b:ba:b8:38:fd:9c:18:5f:a5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2 Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=3ac9099c486c3c47b7d6a732cb22c0545506e6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:40:5b:67:79:83:81:6a:d8:48:4a:89:16: 8a:90:30:3c:d4:91:9a:cf:c8:90:cd:ca:e6:aa:05: d9:ad:c9:41:74:3a:8f:00:ce:f1:f8:92:c9:e2:4a: 8f:36:59:60:85:18:87:5b:a3:71:f7:0b:29:c9:83: a7:29:55:c2:15:1c:2c:c3:d6:6c:35:20:b7:12:ae: b7:09:b7:4c:ca:a9:1c:bc:eb:0e:77:b9:59:21:68: 9a:b2:06:a4:ae:0c:46:bf:0c:18:84:e3:da:82:10: 3c:92:80:b2:92:7a:22:91:2c:a7:e8:5c:02:c1:0e: 9b:6f:a7:6e:db:8c:9c:4e:a5:da:c0:bb:16:cf:4f: de:3f:c9:e6:e5:9b:16:c3:1c:e0:e7:6d:7c:06:4e: 57:bc:4a:a9:88:8a:80:66:14:2f:fb:5c:f8:48:3d: e5:bc:d8:50:dd:51:7d:82:90:f7:ba:3c:3c:f8:48: 2a:35:fc:49:c9:68:49:7b:d9:bc:43:4c:12:96:cc: 1e:1d:ab:ef:48:98:ea:c8:71:6a:16:27:1c:e3:07: 1a:4b:00:25:fc:62:8f:2c:9a:aa:bb:be:c5:3b:c0: 15:52:f2:29:23:0f:29:7b:60:c4:f9:e7:30:eb:a2: 37:40:e3:b8:db:c5:33:33:be:15:46:ac:21:6f:19: 29:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C9:09:9C:48:6C:3C:47:B7:D6:A7:32:CB:22:C0:54:55:06:E6:F2 X509v3 Authority Key Identifier: keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:19:b5:ff:a6:a0:32:43:74:48:07:b9:1c:83:e5:35:77:d6: da:b9:7c:c0:5e:3f:54:11:61:07:99:e1:77:b0:57:66:d8:51: 4c:02:9e:25:f9:b0:d2:cd:73:cf:67:02:a2:f8:63:31:1e:7e: 4b:92:2c:60:df:18:1d:96:ce:77:19:d9:55:26:f6:4f:7a:1e: 46:dd:03:35:ff:44:74:d7:51:00:3f:ea:b8:7f:e1:f0:36:55: 2c:8c:2d:22:fc:a2:fc:b2:b2:ba:0e:39:f1:00:31:d7:2c:ae: b1:c8:3b:4b:f1:0d:f9:08:4c:2d:50:fd:ce:7f:be:4a:e5:98: 62:dd:1d:7a:d0:d6:cc:7a:6c:ed:1a:5f:45:32:4c:d7:17:b2: c2:ca:0b:ec:65:a9:f2:37:21:9c:28:68:22:0b:88:5a:b6:22: e2:dc:91:4e:bc:0b:0c:2a:20:95:a2:5e:d1:47:1b:63:f7:1c: 51:50:b9:55:b3:bc:1b:47:46:69:b9:81:10:f2:a6:70:dc:29: 72:23:ba:21:c9:0c:70:85:b8:a3:96:c3:1b:d5:d3:ae:63:17: 72:eb:a4:0c:c2:0b:c2:5a:4b:8d:9a:9a:c9:63:f9:4c:e5:3f: 13:50:41:86:1a:e2:43:43:4a:ab:22:ce:f9:cc:05:01:80:a6: e1:8a:62:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR5y56c7urg4/ZwYX6UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWNjODVjOTlhOGUxZGI3ZDFjNTIyNjdjMmRkYmQzYzM5 ZTE4YjIwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EygzYWM5MDk5YzQ4NmMzYzQ3YjdkNmE3MzJjYjIyYzA1NDU1MDZlNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPtAW2d5g4Fq2EhKiRaKkDA81JGa z8iQzcrmqgXZrclBdDqPAM7x+JLJ4kqPNllghRiHW6Nx9wspyYOnKVXCFRwsw9Zs NSC3Eq63CbdMyqkcvOsOd7lZIWiasgakrgxGvwwYhOPaghA8koCyknoikSyn6FwC wQ6bb6du24ycTqXawLsWz0/eP8nm5ZsWwxzg5218Bk5XvEqpiIqAZhQv+1z4SD3l vNhQ3VF9gpD3ujw8+EgqNfxJyWhJe9m8Q0wSlsweHavvSJjqyHFqFicc4wcaSwAl /GKPLJqqu77FO8AVUvIpIw8pe2DE+ecw66I3QOO428UzM74VRqwhbxkpmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrJCZxIbDxHt9anMssiwFRVBubyMB8GA1UdIwQY MBaAFCysyFyZqOHbfRxSJnwt29PDnhiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYWRkN2MtYTI4Yy00YWU4LTg4ODUt MDFjZTA2ZDMxNWNkLzEvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wYWRkN2MtYTI4Yy00YWU4LTg4ODUtMDFjZTA2ZDMxNWNk LzEvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxm1/6ag MkN0SAe5HIPlNXfW2rl8wF4/VBFhB5nhd7BXZthRTAKeJfmw0s1zz2cCovhjMR5+ S5IsYN8YHZbOdxnZVSb2T3oeRt0DNf9EdNdRAD/quH/h8DZVLIwtIvyi/LKyug45 8QAx1yyuscg7S/EN+QhMLVD9zn++SuWYYt0detDWzHps7RpfRTJM1xeywsoL7GWp 8jchnChoIguIWrYi4tyRTrwLDCoglaJe0UcbY/ccUVC5VbO8G0dGabmBEPKmcNwp ciO6IckMcIW4o5bDG9XTrmMXcuukDMILwlpLjZqayWP5TOU/E1BBhhriQ0NKqyLO +cwFAYCm4YpicA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:48 2025 by rpki-client