This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json) Hash identifier: /e2w98t9UWx4J2e6qt/dzt2bPI8WxAzKYbKr1cgLsRY= Subject key identifier: 09:33:72:B2:2B:20:52:FC:55:47:3C:71:24:AF:45:FE:0D:66:12:77 Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Certificate serial: 019AF12E0993DC6349B316A888A293D5FCD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: 4XnH/lnRIq/2w+jpRWkq6LrQt/jWCzaA+n63IcMuJEc=) 2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:09:93:dc:63:49:b3:16:a8:88:a2:93:d5:fc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=093372b22b2052fc55473c7124af45fe0d661277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:4e:fc:00:4e:b6:ae:4a:4c:52:4d:eb:1c: 3c:eb:36:26:9a:dd:e1:c9:59:d8:1e:d4:f5:ee:b6: d2:fa:fd:a1:67:f0:42:06:5c:32:4b:3b:aa:9f:9a: 48:8a:05:5d:98:28:13:03:e7:d6:a3:b2:d9:17:9b: 1f:d1:8d:8f:17:ae:11:3c:d4:40:a8:c2:50:cc:a0: 69:1e:65:8f:89:a8:94:64:d2:15:be:c8:d9:37:66: 5c:3a:28:9c:cc:cf:11:47:32:b9:1a:3e:eb:f8:00: 7b:95:22:84:77:72:ef:78:1f:da:eb:23:06:54:f6: 8f:48:99:36:cf:0d:d8:ba:d8:ad:75:67:c1:38:4c: 0c:2d:27:93:d8:a4:92:7a:0d:90:63:73:af:f9:fa: 8b:7e:87:66:41:2f:ec:fd:d3:47:42:d4:1e:48:63: 78:82:41:c1:43:0b:ad:8a:40:e6:68:a9:91:a6:44: d6:91:a6:c3:d0:cb:e2:1a:1f:ba:bb:05:d9:ca:6b: 3f:59:a9:29:7b:06:3b:d2:2a:5c:a2:7c:d3:9b:1a: f4:b3:3f:a3:7b:5a:d3:0c:4a:5d:fd:ad:e3:76:96: a8:95:23:3f:f8:4d:87:74:ba:2f:d7:5f:c9:80:2b: 59:2a:c3:f7:65:48:52:70:a4:c3:1f:3d:33:db:11: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:72:B2:2B:20:52:FC:55:47:3C:71:24:AF:45:FE:0D:66:12:77 X509v3 Authority Key Identifier: keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b8:67:5d:9a:28:1d:d9:ea:ec:74:11:34:53:6a:55:a1:e0: 6d:52:b8:89:46:73:08:81:91:1e:dc:23:10:1b:72:e4:05:fc: 8e:ad:7f:81:d0:2c:db:09:fa:c2:d4:40:3b:33:8f:c6:e7:18: 1c:6a:fb:15:1f:43:3a:69:60:41:00:4a:29:b7:0b:47:f7:88: 4c:b1:2d:9d:5e:d2:4a:49:e3:36:bc:e9:40:ef:8d:ae:e8:0c: 43:c4:88:59:d1:e7:26:a3:31:3d:27:76:9a:a1:0d:9b:05:ce: 9b:ee:3d:5f:5a:81:df:df:ed:2d:d6:6b:62:d0:7d:77:de:98: 8f:86:07:8b:c0:4a:e2:3c:ee:43:4b:6b:33:cf:4d:c4:62:ca: ed:df:fc:79:92:dd:5a:12:5a:3f:8a:86:36:c3:83:a5:ab:a0: 2c:4d:c7:13:bc:b1:9d:13:c3:3d:6a:98:a5:77:8b:a2:be:f7: 9f:53:57:b2:72:13:42:3b:2f:ac:12:70:bd:1e:d2:09:3f:83: 43:43:00:7f:59:4f:c8:91:98:26:39:bf:cc:9d:c1:a0:54:d3: fb:40:0f:f0:b7:e2:b6:d7:bd:c9:b1:a1:55:00:10:5c:9c:4b: b3:0f:76:49:e2:68:f9:af:48:cf:2e:ca:34:89:0c:51:41:56: 09:fa:09:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgmT3GNJsxaoiKKT1fzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm Mjk2NDgwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EygwOTMzNzJiMjJiMjA1MmZjNTU0NzNjNzEyNGFmNDVmZTBkNjYxMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlZO/ABOtq5KTFJN6xw86zYmmt3h yVnYHtT17rbS+v2hZ/BCBlwySzuqn5pIigVdmCgTA+fWo7LZF5sf0Y2PF64RPNRA qMJQzKBpHmWPiaiUZNIVvsjZN2ZcOiiczM8RRzK5Gj7r+AB7lSKEd3LveB/a6yMG VPaPSJk2zw3YutitdWfBOEwMLSeT2KSSeg2QY3Ov+fqLfodmQS/s/dNHQtQeSGN4 gkHBQwutikDmaKmRpkTWkabD0MviGh+6uwXZyms/WakpewY70ipconzTmxr0sz+j e1rTDEpd/a3jdpaolSM/+E2HdLov11/JgCtZKsP3ZUhScKTDHz0z2xHKmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkzcrIrIFL8VUc8cSSvRf4NZhJ3MB8GA1UdIwQY MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbhnXZoo Hdnq7HQRNFNqVaHgbVK4iUZzCIGRHtwjEBty5AX8jq1/gdAs2wn6wtRAOzOPxucY HGr7FR9DOmlgQQBKKbcLR/eITLEtnV7SSknjNrzpQO+NrugMQ8SIWdHnJqMxPSd2 mqENmwXOm+49X1qB39/tLdZrYtB9d96Yj4YHi8BK4jzuQ0trM89NxGLK7d/8eZLd WhJaP4qGNsODpaugLE3HE7yxnRPDPWqYpXeLor73n1NXsnITQjsvrBJwvR7SCT+D Q0MAf1lPyJGYJjm/zJ3BoFTT+0AP8Lfitte9ybGhVQAQXJxLsw92SeJo+a9Izy7K NIkMUUFWCfoJIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:07 2025 by rpki-client