This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json) Hash identifier: xM8/+BafjmFJVNecYYhukcptSBO5QgQZkiu8CD8LDbI= Subject key identifier: DF:18:76:AF:52:77:C1:5B:51:71:3C:A4:4E:DC:78:8B:25:65:43:2F Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Certificate serial: 019AF5AF21F8AE06B66BD0EC033E025C79F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 22:01:26 +0000 Manifest this update: Sat 06 Dec 2025 22:01:26 +0000 Manifest next update: Sun 07 Dec 2025 22:01:26 +0000 Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=) 2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: kQsRrWBwgMUN0vhzxXZeZUNvJ3Vnc4sRLfoVZ/0muJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:21:f8:ae:06:b6:6b:d0:ec:03:3e:02:5c:79:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Validity Not Before: Dec 6 22:01:26 2025 GMT Not After : Dec 7 22:01:26 2025 GMT Subject: CN=df1876af5277c15b51713ca44edc788b2565432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:e1:49:e6:cf:a7:20:bc:62:c6:7b:4d:5f: 0e:88:37:cd:51:51:f2:8f:8c:ae:d1:30:e4:d9:ec: 73:ab:ab:ab:cc:d0:74:98:29:e4:44:44:59:0c:69: 54:cf:fc:ca:dd:df:57:34:c2:62:b8:1b:3f:7f:84: 8b:30:38:e8:67:4a:d6:10:a8:f6:89:6d:d7:05:37: e1:26:da:49:1f:b5:19:bb:ff:e7:66:fe:d0:4f:36: cc:0a:d9:18:e9:76:73:76:7d:2b:02:db:49:94:22: fe:11:5a:67:bd:66:e1:31:a2:58:7a:88:4c:9c:ae: 5b:e1:d7:1a:44:94:81:d2:f1:19:23:d1:06:60:03: 0f:5b:4d:05:b1:5b:68:27:37:71:cd:e6:b3:ac:26: 66:77:cc:67:fc:c2:ba:91:e7:5b:e8:ff:0f:ab:c3: f8:41:77:f7:0c:2e:2c:f1:f3:03:50:6c:24:a8:50: 86:f8:a7:23:e2:05:35:66:97:6e:3f:a8:2d:0d:ad: 28:c5:8c:2b:46:92:ad:99:a7:20:93:9d:73:fd:e9: b1:05:9f:d1:b4:f7:19:a2:9f:e9:9b:33:b7:0a:73: b7:af:12:77:52:60:3e:1d:f7:df:9d:a6:de:57:af: 27:aa:b6:08:0d:c7:9e:09:39:d2:73:78:68:b5:1b: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:76:AF:52:77:C1:5B:51:71:3C:A4:4E:DC:78:8B:25:65:43:2F X509v3 Authority Key Identifier: keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bc:be:e3:b4:24:f2:27:62:e0:5b:96:c6:68:4c:65:17:8e: d5:59:21:77:17:11:cd:56:6d:96:49:8d:93:66:90:f3:f5:78: 17:18:cf:bf:33:22:ac:11:c5:43:b4:0a:e7:e4:7c:a4:80:25: a9:3b:b5:f1:0d:16:05:34:bc:1a:48:63:38:4b:62:8a:6b:2f: ed:fc:03:f9:6a:f1:a6:a2:6f:d8:a2:0a:86:b9:3e:b2:08:55: 3e:aa:f3:ae:d5:5d:bd:c8:ad:51:55:97:23:b1:60:77:0b:7d: 86:3e:65:05:fa:80:b9:ea:a8:89:38:f6:65:b8:7b:8f:e9:e5: 87:3c:f2:b9:62:77:a8:19:eb:b6:44:7d:fd:03:0f:95:6a:66: e4:d6:2e:cf:27:dc:2e:1d:a6:a2:76:6f:ec:ce:db:61:19:66: f2:ca:bc:59:aa:f3:3c:c2:5d:ad:ec:2e:52:fc:3e:b4:08:c9: eb:f6:af:be:22:ef:58:2e:25:ec:4b:f1:d2:0c:e0:26:61:d9: 43:f3:7f:98:dc:88:5c:12:af:fd:f7:50:4a:d7:dc:c1:55:5c: 8e:45:d4:b2:9a:06:2f:a3:9c:56:07:05:89:10:a5:6d:f0:49: 07:ac:ba:d6:e0:94:83:13:59:39:33:4b:7c:f9:de:e8:c3:4c: c6:bb:29:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryH4rga2a9DsAz4CXHn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx Y2Y0ZDYwHhcNMjUxMjA2MjIwMTI2WhcNMjUxMjA3MjIwMTI2WjAzMTEwLwYDVQQD EyhkZjE4NzZhZjUyNzdjMTViNTE3MTNjYTQ0ZWRjNzg4YjI1NjU0MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH/hSebPpyC8YsZ7TV8OiDfNUVHy j4yu0TDk2exzq6urzNB0mCnkRERZDGlUz/zK3d9XNMJiuBs/f4SLMDjoZ0rWEKj2 iW3XBTfhJtpJH7UZu//nZv7QTzbMCtkY6XZzdn0rAttJlCL+EVpnvWbhMaJYeohM nK5b4dcaRJSB0vEZI9EGYAMPW00FsVtoJzdxzeazrCZmd8xn/MK6kedb6P8Pq8P4 QXf3DC4s8fMDUGwkqFCG+Kcj4gU1ZpduP6gtDa0oxYwrRpKtmacgk51z/emxBZ/R tPcZop/pmzO3CnO3rxJ3UmA+HfffnabeV68nqrYIDceeCTnSc3hotRsU6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8Ydq9Sd8FbUXE8pE7ceIslZUMvMB8GA1UdIwQY MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLy+47Qk 8idi4FuWxmhMZReO1VkhdxcRzVZtlkmNk2aQ8/V4FxjPvzMirBHFQ7QK5+R8pIAl qTu18Q0WBTS8GkhjOEtiimsv7fwD+WrxpqJv2KIKhrk+sghVPqrzrtVdvcitUVWX I7Fgdwt9hj5lBfqAueqoiTj2Zbh7j+nlhzzyuWJ3qBnrtkR9/QMPlWpm5NYuzyfc Lh2monZv7M7bYRlm8sq8WarzPMJdrewuUvw+tAjJ6/avviLvWC4l7Evx0gzgJmHZ Q/N/mNyIXBKv/fdQStfcwVVcjkXUspoGL6OcVgcFiRClbfBJB6y61uCUgxNZOTNL fPne6MNMxrsp0Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:34 2025 by rpki-client