This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json) Hash identifier: NYu4um0vBJqTxslvDBMmLqg3ka64SZNXMSbdkNx71rw= Subject key identifier: FE:FE:41:79:A1:0B:37:C9:FF:4B:34:CF:94:16:7A:BA:81:41:C6:86 Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Certificate serial: 019AF23F60DEEF34F0AFC6A4F5EDF9DFB14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft Manifest number: 025D Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=) 2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=) 3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=) 4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: LHBlEcpa5lQ0IB2Rl3cvV6rxsaXinzbg5fmlsrqovUU=) 5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=) 6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:60:de:ef:34:f0:af:c6:a4:f5:ed:f9:df:b1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=fefe4179a10b37c9ff4b34cf94167aba8141c686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:11:f7:04:dc:f0:46:31:36:6c:48:06:40: 71:f0:ae:95:be:46:53:cd:22:a6:2a:6d:7e:07:e1: ef:f1:69:7b:d2:6a:01:d2:fe:df:67:e7:9b:9f:b7: ec:51:e1:04:1a:b7:46:71:a3:4d:63:b4:65:cf:90: f5:6e:ab:04:e2:12:e1:b5:77:c7:ea:02:46:0e:7e: 6f:87:ee:00:91:7e:74:9b:f8:22:2c:65:68:ab:ff: 93:50:03:1e:0a:ce:e7:13:6b:e1:f5:61:4a:bf:38: 77:9f:c0:80:9d:c6:bc:cc:87:16:8a:3b:b3:b1:24: 6e:1f:74:8d:cd:81:40:c2:d5:7c:7e:31:cb:8f:23: b4:37:48:2f:37:36:e8:4f:d3:9d:f0:10:b5:c4:24: d6:8f:13:4d:9c:61:43:3b:a3:f2:a3:38:45:c9:3c: 69:2a:7e:f7:9c:05:49:a0:b0:ee:8f:32:3d:90:3f: 30:44:c2:ff:d5:47:f9:08:8f:62:f6:1f:5c:64:2a: 89:ad:c4:27:50:a8:2c:1c:b8:61:9e:34:5e:16:3f: e7:1d:0b:6c:3a:b2:1d:c6:ad:48:38:8f:b2:c0:d3: 57:8e:1c:6f:d5:29:5c:10:9f:bb:6d:f1:63:64:c4: a3:56:57:db:a1:1a:97:a1:d2:24:78:c1:05:8d:6a: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FE:41:79:A1:0B:37:C9:FF:4B:34:CF:94:16:7A:BA:81:41:C6:86 X509v3 Authority Key Identifier: keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:da:4e:4f:a1:ea:b7:85:2b:c7:f0:54:b2:50:42:b2:c1:54: ca:ea:f2:0c:6e:a9:4f:13:fe:9b:38:63:57:5d:bf:1c:2b:ec: ac:b8:1f:d7:ca:81:d2:f7:e0:fb:24:e1:a1:11:8a:32:3e:d0: 08:9c:bf:02:47:f9:9f:01:6d:26:86:96:b5:ac:eb:74:f4:00: f8:9b:f0:14:9d:48:03:e1:ce:cd:9d:59:54:2b:93:ca:a7:e1: 0d:c0:59:61:ac:35:63:0c:0f:2f:4c:eb:59:48:f1:56:c8:e6: 8b:2e:c6:72:e4:69:cf:09:11:6b:fa:a1:7b:4b:dd:f1:4a:67: b1:ec:7e:86:b7:dc:8b:3f:f4:02:54:09:d1:24:57:1f:10:c6: 29:06:5e:48:d4:53:f7:8b:d7:79:14:0a:fc:25:96:a7:d0:61: c9:cd:59:1d:fc:82:e5:52:05:a8:81:f7:ee:16:a6:73:91:fe: d6:33:75:a0:b5:3b:e0:53:f7:08:f9:46:13:f0:c9:a1:32:a7: b5:21:07:18:17:e6:9d:d8:4a:75:56:b7:e0:a8:34:18:a9:68: e3:a7:c3:59:5e:99:f2:53:96:10:8c:61:19:42:19:78:ac:1e: f6:d6:69:0d:8e:f7:29:99:f5:0b:4f:a1:bc:43:77:90:ab:c6: 53:26:27:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2De7zTwr8ak9e3537FPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk YzYzMjgwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD EyhmZWZlNDE3OWExMGIzN2M5ZmY0YjM0Y2Y5NDE2N2FiYTgxNDFjNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E8R9wTc8EYxNmxIBkBx8K6VvkZT zSKmKm1+B+Hv8Wl70moB0v7fZ+ebn7fsUeEEGrdGcaNNY7Rlz5D1bqsE4hLhtXfH 6gJGDn5vh+4AkX50m/giLGVoq/+TUAMeCs7nE2vh9WFKvzh3n8CAnca8zIcWijuz sSRuH3SNzYFAwtV8fjHLjyO0N0gvNzboT9Od8BC1xCTWjxNNnGFDO6PyozhFyTxp Kn73nAVJoLDujzI9kD8wRML/1Uf5CI9i9h9cZCqJrcQnUKgsHLhhnjReFj/nHQts OrIdxq1IOI+ywNNXjhxv1SlcEJ+7bfFjZMSjVlfboRqXodIkeMEFjWrA5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7+QXmhCzfJ/0s0z5QWerqBQcaGMB8GA1UdIwQY MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt OGNhMjVmNDg4ZWJmLzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdpOT6Hq t4Urx/BUslBCssFUyuryDG6pTxP+mzhjV12/HCvsrLgf18qB0vfg+yThoRGKMj7Q CJy/Akf5nwFtJoaWtazrdPQA+JvwFJ1IA+HOzZ1ZVCuTyqfhDcBZYaw1YwwPL0zr WUjxVsjmiy7GcuRpzwkRa/qhe0vd8Upnsex+hrfciz/0AlQJ0SRXHxDGKQZeSNRT 94vXeRQK/CWWp9Bhyc1ZHfyC5VIFqIH37hamc5H+1jN1oLU74FP3CPlGE/DJoTKn tSEHGBfmndhKdVa34Kg0GKlo46fDWV6Z8lOWEIxhGUIZeKwe9tZpDY73KZn1C0+h vEN3kKvGUyYn3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:43 2025 by rpki-client