This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json) Hash identifier: rNntp47DlT/+X2HwWx3Lx3/rM13C138zjuzWBOCrp9M= Subject key identifier: B5:9E:E0:76:64:8C:1C:0A:10:24:9A:52:83:84:79:92:B5:82:63:1F Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Certificate serial: 019AF2ADC650533C86914623AA0980658BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: +MGVLJT86vbOBfEnlv5hP+Z3wjrL1ZRbQJ+ayCsyUh8=) 2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c6:50:53:3c:86:91:46:23:aa:09:80:65:8b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=b59ee076648c1c0a10249a5283847992b582631f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:fe:05:40:c0:f6:db:a8:28:f9:bc:d5:88: 3f:9d:e6:c2:aa:79:b1:57:c9:d1:bf:d6:32:1c:3c: e1:72:d9:09:c8:a1:1a:92:e0:4e:a6:de:69:f3:1a: 19:b0:fd:88:e8:42:35:1e:38:3c:ec:14:7b:87:27: be:c4:84:2c:71:fe:bd:a0:ee:19:1c:44:7a:d0:d4: 34:9f:64:fa:0c:68:72:09:ef:52:54:bd:80:38:ea: 31:3d:0b:44:96:f9:6a:9e:ae:50:f3:dd:82:d1:4e: e5:a8:b4:f5:07:7c:72:1d:75:bb:05:7a:07:3f:f9: a4:2f:e6:ca:01:a4:74:24:8c:7c:50:54:dc:01:e1: f8:08:f6:2c:37:48:83:42:ac:93:fc:1e:e6:34:98: 85:af:47:29:f6:bb:74:f7:55:fe:da:4b:af:7e:66: 42:81:71:f3:69:86:a3:ea:1a:3d:59:67:97:89:6e: 34:78:e8:27:f2:cd:bf:0b:7c:ed:50:62:86:fa:de: db:44:af:69:23:68:d6:36:70:e9:38:b6:f7:af:b5: e0:1e:f1:5d:ae:69:b9:d4:d1:08:6d:12:98:0d:61: 79:ac:53:c6:a0:aa:b4:26:af:14:76:8a:26:17:09: 65:50:2e:18:3e:43:a8:72:4b:94:55:b6:85:0b:4a: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9E:E0:76:64:8C:1C:0A:10:24:9A:52:83:84:79:92:B5:82:63:1F X509v3 Authority Key Identifier: keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f2:88:f4:e9:3a:20:c2:f1:d1:ae:92:6b:e8:fd:6f:6e:d7: e0:15:e0:92:15:44:35:89:02:7d:4a:8d:75:39:b1:4b:63:9b: e1:b4:9a:b6:7c:8a:5a:a3:99:6b:97:56:e9:90:ab:2e:ef:a7: 17:eb:ac:d9:ce:a1:f0:94:8d:25:ca:73:c1:65:6a:35:6e:27: a9:c6:2d:b5:bd:9a:21:4b:b6:33:55:11:e4:e5:40:0e:3c:c6: fc:0e:99:a7:96:a0:5b:55:21:2d:14:c2:19:19:d6:2f:fe:2b: 2d:c4:bb:de:1f:57:bf:74:08:6b:a7:fa:2d:d7:8c:82:42:75: ff:26:e2:66:b5:77:72:0c:b6:2d:86:f5:7f:2e:c0:91:d2:69: 39:b4:0b:9f:98:53:2b:24:e9:e8:b3:bc:32:42:71:9b:26:fd: c4:2e:39:94:1a:b5:14:48:4a:fa:2f:bb:87:fd:f4:d5:e1:3a: 86:64:b1:81:52:67:75:a9:e7:cd:b2:b0:a6:dd:76:c2:b2:ca: 80:78:7a:d1:b0:10:d4:15:bd:42:9b:a6:17:dc:20:6b:d6:eb: 80:ab:4a:c4:ee:84:04:57:35:c5:4a:34:2b:5f:3d:90:64:48: f7:77:a6:c0:b0:40:64:49:9c:1e:67:61:77:d0:02:90:fb:59: 40:79:18:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcZQUzyGkUYjqgmAZYvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4 ZTNlYjkwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD EyhiNTllZTA3NjY0OGMxYzBhMTAyNDlhNTI4Mzg0Nzk5MmI1ODI2MzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH3+BUDA9tuoKPm81Yg/nebCqnmx V8nRv9YyHDzhctkJyKEakuBOpt5p8xoZsP2I6EI1Hjg87BR7hye+xIQscf69oO4Z HER60NQ0n2T6DGhyCe9SVL2AOOoxPQtElvlqnq5Q892C0U7lqLT1B3xyHXW7BXoH P/mkL+bKAaR0JIx8UFTcAeH4CPYsN0iDQqyT/B7mNJiFr0cp9rt091X+2kuvfmZC gXHzaYaj6ho9WWeXiW40eOgn8s2/C3ztUGKG+t7bRK9pI2jWNnDpOLb3r7XgHvFd rmm51NEIbRKYDWF5rFPGoKq0Jq8UdoomFwllUC4YPkOockuUVbaFC0pfawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWe4HZkjBwKECSaUoOEeZK1gmMfMB8GA1UdIwQY MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/KI9Ok6 IMLx0a6Sa+j9b27X4BXgkhVENYkCfUqNdTmxS2Ob4bSatnyKWqOZa5dW6ZCrLu+n F+us2c6h8JSNJcpzwWVqNW4nqcYttb2aIUu2M1UR5OVADjzG/A6Zp5agW1UhLRTC GRnWL/4rLcS73h9Xv3QIa6f6LdeMgkJ1/ybiZrV3cgy2LYb1fy7AkdJpObQLn5hT KyTp6LO8MkJxmyb9xC45lBq1FEhK+i+7h/301eE6hmSxgVJndannzbKwpt12wrLK gHh60bAQ1BW9QpumF9wga9brgKtKxO6EBFc1xUo0K189kGRI93emwLBAZEmcHmdh d9ACkPtZQHkYSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:16 2025 by rpki-client