This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json) Hash identifier: dVYybHP50zZ6cZPZLl/k2ullY9GV0BYa0vaAr2Wl3lk= Subject key identifier: 80:CE:29:BF:9E:C6:E0:E3:67:F9:10:8D:FB:9F:82:FE:D5:DD:7B:7B Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Certificate serial: 019AF1D2003ACC58F48093321AE016C91D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: sraBu56RGEMCpf7DLtg+8mlxH9z+WX1Fmczznr91c2Y=) 2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:00:3a:cc:58:f4:80:93:32:1a:e0:16:c9:1d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=80ce29bf9ec6e0e367f9108dfb9f82fed5dd7b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:8f:3e:d4:a7:62:9a:08:c4:bc:1c:cd:63: 50:c4:4a:62:86:1e:a8:77:a8:05:70:27:a7:45:cd: 03:c3:90:08:37:7c:da:2a:5a:bf:e5:1b:38:65:2b: f1:01:06:f7:0a:53:73:d4:e3:fe:8c:f8:19:92:7d: 47:b0:02:d6:af:10:07:f1:4f:a4:ff:f4:12:c5:8e: 25:a3:ff:80:57:73:95:c4:db:22:bc:f6:76:c7:1e: 91:cd:6f:94:39:3d:02:08:7a:ee:32:fa:36:04:c7: 13:63:3f:d9:0f:b0:0b:f9:14:1a:c4:6e:e9:d8:29: 07:f7:a4:6b:06:1b:e4:34:48:75:ed:af:cc:da:68: 40:44:0b:ec:e8:4f:32:79:d1:db:d6:18:37:69:57: 04:00:7b:ce:bb:74:52:39:7d:5b:26:7b:0e:85:e0: 36:87:47:56:17:a2:8a:32:51:e7:cf:60:af:64:3a: 15:48:66:06:46:9f:76:ab:1f:75:cb:8b:9e:d5:e5: ed:4e:f3:33:11:b6:57:17:31:28:14:cb:29:d4:fd: db:5e:e2:4a:97:17:8d:52:b0:c9:ef:ce:62:f9:63: fd:b8:bf:1c:e8:17:b6:ec:7f:10:2a:ee:c0:11:51: bc:24:5e:35:21:5f:28:e2:b5:21:0f:36:cf:3b:de: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CE:29:BF:9E:C6:E0:E3:67:F9:10:8D:FB:9F:82:FE:D5:DD:7B:7B X509v3 Authority Key Identifier: keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:25:28:1f:cd:1c:78:55:39:05:de:ae:59:40:38:44:7d:4a: 41:77:4a:16:7a:61:5b:d4:bf:47:ce:de:45:f6:f8:14:57:25: 25:f6:68:77:22:b5:e8:f4:57:c9:5a:b5:2a:f5:c0:7a:89:6d: 40:e2:fe:dd:bd:cc:44:21:f8:fd:65:79:f9:90:4c:00:02:a2: 0b:06:be:39:9a:61:c3:20:16:4f:0e:9f:41:78:01:06:b8:3f: 1c:5c:33:b6:ef:dc:f5:a4:09:1a:c7:53:0d:30:a7:f1:81:93: 28:45:e9:5f:35:55:17:09:f3:6d:8b:81:54:e0:0f:76:f9:b0: ea:cf:ee:ba:52:ce:b1:e6:7b:63:8b:05:28:ed:54:7e:2f:2d: 2c:be:cc:68:41:dd:bb:29:91:54:1e:b8:50:cb:4a:cf:fc:e7: c9:5a:af:4b:16:2d:01:59:f9:a4:6a:e2:66:a7:27:06:1d:5b: 35:c2:da:08:27:2b:43:60:4a:5e:21:42:ca:53:97:4c:4d:d1: d3:c1:ba:4d:60:c5:8f:2c:06:c6:86:04:14:d2:75:c0:16:75: 73:e4:c0:8e:29:e5:c3:2d:ba:3a:e7:8d:3b:e3:f4:04:14:67: 7b:21:e2:f5:02:73:de:89:10:1e:f5:78:9c:98:de:5d:87:58: a0:a0:0f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gA6zFj0gJMyGuAWyR0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0 ZDZlZWQwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD Eyg4MGNlMjliZjllYzZlMGUzNjdmOTEwOGRmYjlmODJmZWQ1ZGQ3YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYKPPtSnYpoIxLwczWNQxEpihh6o d6gFcCenRc0Dw5AIN3zaKlq/5Rs4ZSvxAQb3ClNz1OP+jPgZkn1HsALWrxAH8U+k //QSxY4lo/+AV3OVxNsivPZ2xx6RzW+UOT0CCHruMvo2BMcTYz/ZD7AL+RQaxG7p 2CkH96RrBhvkNEh17a/M2mhARAvs6E8yedHb1hg3aVcEAHvOu3RSOX1bJnsOheA2 h0dWF6KKMlHnz2CvZDoVSGYGRp92qx91y4ue1eXtTvMzEbZXFzEoFMsp1P3bXuJK lxeNUrDJ785i+WP9uL8c6Be27H8QKu7AEVG8JF41IV8o4rUhDzbPO95VmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDOKb+exuDjZ/kQjfufgv7V3Xt7MB8GA1UdIwQY MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxiUoH80c eFU5Bd6uWUA4RH1KQXdKFnphW9S/R87eRfb4FFclJfZodyK16PRXyVq1KvXAeolt QOL+3b3MRCH4/WV5+ZBMAAKiCwa+OZphwyAWTw6fQXgBBrg/HFwztu/c9aQJGsdT DTCn8YGTKEXpXzVVFwnzbYuBVOAPdvmw6s/uulLOseZ7Y4sFKO1Ufi8tLL7MaEHd uymRVB64UMtKz/znyVqvSxYtAVn5pGriZqcnBh1bNcLaCCcrQ2BKXiFCylOXTE3R 08G6TWDFjywGxoYEFNJ1wBZ1c+TAjinlwy26OueNO+P0BBRneyHi9QJz3okQHvV4 nJjeXYdYoKAPoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:03 2025 by rpki-client