This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json) Hash identifier: 9YZeifYj0WM9Yki7rpxuzgFY8+3yLxBWc+aFwmbvNHo= Subject key identifier: E4:60:85:02:DB:E8:7D:11:2C:69:4D:FA:68:56:AE:82:AB:97:C7:12 Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Certificate serial: 019AF46546C277DFD2AF61BECE468AFFBB10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft Manifest number: 12F0 Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=) 2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: pGlrvy+MMHd7gPvLe8ETdQ69E1UV48Z4MhyYuosQ/Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:46:c2:77:df:d2:af:61:be:ce:46:8a:ff:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=e4608502dbe87d112c694dfa6856ae82ab97c712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:a4:81:51:77:91:07:b5:b3:cf:97:b0:c2: e2:3b:6c:c7:bf:8b:dd:06:f4:20:a6:79:7b:4c:07: 0b:86:79:89:c5:6a:47:d4:8f:fd:f0:8b:cf:ea:0c: a9:37:b2:8a:83:a2:bb:e7:d1:92:71:5c:88:65:a3: 89:09:d9:32:d3:67:12:58:4d:91:a1:ea:3e:a9:3e: 2d:73:ce:57:b9:83:25:8e:28:54:80:6c:86:b6:eb: dd:95:de:77:b7:f5:1a:b3:8b:50:e3:d1:7a:e6:fd: 1a:cf:e2:7e:92:30:f4:b9:c8:cd:f7:57:f4:4e:fd: 24:04:61:82:e0:92:3c:e1:b4:67:3a:49:de:6c:6f: 01:d9:f7:65:eb:50:e5:41:04:29:49:2e:13:61:ba: 29:8e:63:0d:43:97:0a:5c:13:b6:16:2b:66:90:59: 4e:28:2d:62:af:1b:25:b6:52:48:1f:06:4a:4d:79: f2:fa:f7:3d:0a:cf:db:77:77:2a:ef:51:c6:be:0a: 64:10:95:b7:ff:5f:10:28:db:bb:21:f2:1b:27:39: f1:eb:5c:6b:9d:7f:e3:95:e4:98:5c:6f:f8:c2:4e: 9b:ab:c0:97:25:fa:d9:1e:d1:a4:16:e7:58:56:d2: f7:9b:88:53:28:79:f5:02:f6:e4:23:64:07:e9:36: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:60:85:02:DB:E8:7D:11:2C:69:4D:FA:68:56:AE:82:AB:97:C7:12 X509v3 Authority Key Identifier: keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a0:f2:e3:7a:9f:1c:0e:29:9a:41:3c:fa:e0:44:e2:4e:bc: 7f:f1:f8:b9:e5:91:70:50:9d:30:18:cd:5c:e9:54:54:2c:10: 40:50:88:6c:91:04:6f:29:b5:cc:97:e7:47:fa:35:01:2a:35: 5e:f6:3c:91:19:ac:10:8b:b6:76:ef:89:6c:14:c4:15:f9:57: 90:72:ba:28:b9:60:f3:2e:cc:88:63:79:3b:62:c2:44:cf:a4: 2f:52:94:dc:ec:f1:82:e1:b0:95:98:78:36:28:92:98:3c:47: d1:c7:e3:86:46:19:17:00:cf:e0:52:e2:c1:94:ff:5e:7a:b7: eb:f6:49:03:0d:ea:8c:04:42:dd:fb:10:6c:c1:5b:66:77:34: ad:1e:1d:e8:9c:ca:05:86:da:c8:73:9e:32:7f:4e:a4:db:7b: 9e:cb:95:4b:cf:1f:0c:7a:86:d8:68:88:60:2d:71:2a:bb:98: 58:7c:5a:5b:3a:a7:a1:77:a1:87:5f:0b:66:6a:a4:05:86:68: f8:70:f6:01:39:c9:1c:92:af:65:88:72:d6:72:6c:4d:aa:3e: 4d:fb:82:84:98:1c:31:32:a8:0f:e7:17:14:9d:10:b5:fc:40: 0b:3f:b4:f2:74:e4:f7:2b:f5:34:23:2c:57:37:cc:7f:dc:33: 23:ad:a2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUbCd9/Sr2G+zkaK/7sQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODkwMTkzNzQzYmRmMjRkZDIyYzNlZDZmMjhiMzAzMWEy ZWM4MDYwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD EyhlNDYwODUwMmRiZTg3ZDExMmM2OTRkZmE2ODU2YWU4MmFiOTdjNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoekgVF3kQe1s8+XsMLiO2zHv4vd BvQgpnl7TAcLhnmJxWpH1I/98IvP6gypN7KKg6K759GScVyIZaOJCdky02cSWE2R oeo+qT4tc85XuYMljihUgGyGtuvdld53t/Uas4tQ49F65v0az+J+kjD0ucjN91f0 Tv0kBGGC4JI84bRnOknebG8B2fdl61DlQQQpSS4TYbopjmMNQ5cKXBO2FitmkFlO KC1irxsltlJIHwZKTXny+vc9Cs/bd3cq71HGvgpkEJW3/18QKNu7IfIbJznx61xr nX/jleSYXG/4wk6bq8CXJfrZHtGkFudYVtL3m4hTKHn1AvbkI2QH6TZW8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORghQLb6H0RLGlN+mhWroKrl8cSMB8GA1UdIwQY MBaAFC6JAZN0O98k3SLD7W8oswMaLsgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMt ZjhiZTQ5NTI1MmIwLzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMtZjhiZTQ5NTI1MmIw LzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaDy43qf HA4pmkE8+uBE4k68f/H4ueWRcFCdMBjNXOlUVCwQQFCIbJEEbym1zJfnR/o1ASo1 XvY8kRmsEIu2du+JbBTEFflXkHK6KLlg8y7MiGN5O2LCRM+kL1KU3OzxguGwlZh4 NiiSmDxH0cfjhkYZFwDP4FLiwZT/Xnq36/ZJAw3qjARC3fsQbMFbZnc0rR4d6JzK BYbayHOeMn9OpNt7nsuVS88fDHqG2GiIYC1xKruYWHxaWzqnoXehh18LZmqkBYZo +HD2ATnJHJKvZYhy1nJsTao+TfuChJgcMTKoD+cXFJ0QtfxACz+08nTk9yv1NCMs VzfMf9wzI62iUw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:06 2025 by rpki-client