This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json) Hash identifier: jvZ/BTqnvrXzUg64ixe1F+c8VUZglbEKXm5pGYpAnPc= Subject key identifier: FA:9D:18:D8:BB:A9:E1:5F:55:CB:2D:AD:FB:9C:33:6E:B6:9B:9C:14 Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1 Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1 Certificate serial: 019B269B5DF8A8B66C24AB0B3290DD8F7EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft Manifest number: 0CAD Signing time: Tue 16 Dec 2025 10:01:14 +0000 Manifest this update: Tue 16 Dec 2025 10:01:14 +0000 Manifest next update: Wed 17 Dec 2025 10:01:14 +0000 Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: TzzL6B+zu69q3bTmatgxDTo2mnlUPPz8sRr3iBf1OIc=) 2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:5d:f8:a8:b6:6c:24:ab:0b:32:90:dd:8f:7e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1 Validity Not Before: Dec 16 10:01:14 2025 GMT Not After : Dec 17 10:01:14 2025 GMT Subject: CN=fa9d18d8bba9e15f55cb2dadfb9c336eb69b9c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:ae:20:11:6a:46:e8:c7:2a:e5:a4:a8:42: 9d:a9:ee:a3:7b:34:73:d3:ff:29:74:a2:64:3b:fc: db:ac:81:3b:d7:09:32:ff:83:9a:a3:58:b0:e3:0b: 92:ba:4d:83:d7:0e:b1:f4:d9:3f:79:6b:2a:47:a4: 7d:fc:ba:65:55:55:9d:fe:ae:2d:7e:60:62:ee:37: 24:a8:e0:f2:f7:ce:ba:88:47:13:20:28:c6:6c:1e: 34:c3:b8:37:b2:b9:29:f5:33:18:09:24:55:91:77: 8c:0d:d6:84:5b:60:30:63:6a:82:b0:0d:a8:c5:f3: c6:c3:40:23:08:d3:48:fd:07:ab:e3:05:86:6e:fe: 4e:ea:3e:54:e1:d2:3f:38:64:a4:85:2b:c0:9b:7a: 60:b2:19:d9:fa:d3:fa:47:5c:41:96:67:9a:20:5c: 7b:ae:f3:1a:fe:4d:2a:ea:bc:e4:6c:cf:47:d3:b4: 14:ec:5f:79:84:e4:23:bf:7c:91:69:ca:0c:59:c9: 7e:f4:b3:a1:6b:4a:94:d4:c9:5b:3e:ad:d5:a4:23: e8:8c:99:d5:9e:1f:29:bf:7a:f6:0c:88:5a:44:ce: d9:fe:39:9e:d7:3a:56:f9:01:83:af:35:40:0d:97: 8b:9c:65:94:4f:28:91:3e:d2:b6:e1:93:53:69:ef: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:18:D8:BB:A9:E1:5F:55:CB:2D:AD:FB:9C:33:6E:B6:9B:9C:14 X509v3 Authority Key Identifier: keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2d:c0:80:00:16:fe:91:78:5b:ac:b1:2b:09:89:e1:e9:4c: 99:14:ea:5d:4a:7d:3e:f1:63:8e:bf:dd:8c:ce:c2:f5:da:35: 71:13:4c:65:10:f7:25:aa:e3:18:98:ef:14:55:1f:d9:97:49: 20:e2:24:97:be:05:b0:c5:0d:ce:00:78:6f:09:58:04:e7:1f: bb:73:4c:71:62:60:42:e1:d2:7e:c1:1e:c2:0b:10:a1:fc:02: 87:17:43:96:37:cd:4b:50:3a:25:2c:97:a7:a2:62:2b:0d:1c: 9e:ff:61:ab:ea:92:b0:90:a1:45:3d:8f:6d:90:03:8e:49:32: 8c:51:de:62:5e:be:2d:ca:cb:0e:d7:24:e7:18:7b:ba:b9:2f: f2:c4:00:de:af:3b:84:6d:f3:7a:fa:6a:13:96:c3:00:8f:c4: 71:a0:6d:31:4d:cf:66:9f:a8:e5:f2:6c:d7:2d:90:46:9f:9e: a5:c0:a0:59:b9:ed:79:18:0a:7e:99:cb:7e:75:55:74:25:38: 54:d3:76:29:60:35:aa:07:f4:09:ca:a4:4e:45:63:0f:38:84: 94:cf:a5:b1:9e:29:5d:00:61:c3:3b:2f:cc:b7:ae:93:cb:34: 40:c4:7d:62:a9:ba:46:be:59:4b:b1:61:9d:a7:73:e3:22:37: 2f:64:4e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm134qLZsJKsLMpDdj37pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw ZTNiZjEwHhcNMjUxMjE2MTAwMTE0WhcNMjUxMjE3MTAwMTE0WjAzMTEwLwYDVQQD EyhmYTlkMThkOGJiYTllMTVmNTVjYjJkYWRmYjljMzM2ZWI2OWI5YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VWuIBFqRujHKuWkqEKdqe6jezRz 0/8pdKJkO/zbrIE71wky/4Oao1iw4wuSuk2D1w6x9Nk/eWsqR6R9/LplVVWd/q4t fmBi7jckqODy9866iEcTICjGbB40w7g3srkp9TMYCSRVkXeMDdaEW2AwY2qCsA2o xfPGw0AjCNNI/Qer4wWGbv5O6j5U4dI/OGSkhSvAm3pgshnZ+tP6R1xBlmeaIFx7 rvMa/k0q6rzkbM9H07QU7F95hOQjv3yRacoMWcl+9LOha0qU1MlbPq3VpCPojJnV nh8pv3r2DIhaRM7Z/jme1zpW+QGDrzVADZeLnGWUTyiRPtK24ZNTae83wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqdGNi7qeFfVcstrfucM262m5wUMB8GA1UdIwQY MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt M2IxZTcyMmE5ZGM4LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQtM2IxZTcyMmE5ZGM4 LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy3AgAAW /pF4W6yxKwmJ4elMmRTqXUp9PvFjjr/djM7C9do1cRNMZRD3JarjGJjvFFUf2ZdJ IOIkl74FsMUNzgB4bwlYBOcfu3NMcWJgQuHSfsEewgsQofwChxdDljfNS1A6JSyX p6JiKw0cnv9hq+qSsJChRT2PbZADjkkyjFHeYl6+LcrLDtck5xh7urkv8sQA3q87 hG3zevpqE5bDAI/EcaBtMU3PZp+o5fJs1y2QRp+epcCgWbnteRgKfpnLfnVVdCU4 VNN2KWA1qgf0CcqkTkVjDziElM+lsZ4pXQBhwzsvzLeuk8s0QMR9Yqm6Rr5ZS7Fh nadz4yI3L2ROAg== -----END CERTIFICATE-----Generated at Tue Dec 16 13:42:01 2025 by rpki-client