This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json) Hash identifier: V9ueZHuC8rQEYDtCmA4TlJXvyOv7SeSXLYhjvlAe84I= Subject key identifier: A5:64:5E:31:5E:3C:0C:77:98:25:A8:69:74:8B:49:93:4C:D1:C7:E3 Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Certificate serial: 019B3569660BDAC7267C49D1FD4B9E35BDF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft Manifest number: 06B8 Signing time: Fri 19 Dec 2025 07:00:58 +0000 Manifest this update: Fri 19 Dec 2025 07:00:58 +0000 Manifest next update: Sat 20 Dec 2025 07:00:58 +0000 Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=) 2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: r1ssbmTlONEWdGTiRlLHcMFryvLNji16y2K3gQXgwBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:66:0b:da:c7:26:7c:49:d1:fd:4b:9e:35:bd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Validity Not Before: Dec 19 07:00:58 2025 GMT Not After : Dec 20 07:00:58 2025 GMT Subject: CN=a5645e315e3c0c779825a869748b49934cd1c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:f7:36:78:f0:93:75:4d:c8:29:fb:e1:12: 75:2b:90:20:16:ad:3e:2a:67:45:65:e7:b6:df:a9: c0:db:b8:72:72:9a:c7:11:cb:1b:a6:5f:82:b5:f6: 1b:d4:0e:3b:3b:1d:18:b7:b6:be:21:be:15:e1:67: 9a:88:8a:d7:aa:11:c1:e4:81:a6:15:bf:7d:b1:53: f8:83:4e:a4:1c:5b:c8:b7:d5:a2:16:72:ed:b1:ed: 4d:67:a5:ff:c4:93:d7:3d:a0:44:20:3c:5f:20:9d: e9:b5:21:76:a2:83:f2:ec:a5:2f:a0:35:d0:41:7c: a3:75:f7:47:12:3c:2b:1f:b0:f0:7f:0f:4d:e2:b8: 27:c1:35:a3:8c:1b:f7:92:d9:c4:6f:41:eb:a3:d4: dc:8e:14:e5:89:9f:8e:3a:b8:7d:bb:3a:c5:e1:6e: bb:d2:65:1c:71:41:8d:8e:db:62:54:74:58:77:1c: 0b:51:26:f8:25:26:2a:8f:79:92:e5:fb:76:10:3d: a6:9b:af:19:76:34:db:44:18:7f:80:6e:ef:11:6c: 3d:10:e6:d2:d4:5e:1b:4d:43:1a:ef:5c:93:ef:e9: fa:cf:ca:6d:7d:ce:f6:45:4d:2c:72:3d:61:5a:74: 95:39:77:2a:16:f8:a0:3c:76:5d:2c:72:0a:dd:c4: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:5E:31:5E:3C:0C:77:98:25:A8:69:74:8B:49:93:4C:D1:C7:E3 X509v3 Authority Key Identifier: keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:08:96:f7:c5:d7:e2:f8:e4:08:fc:50:bc:cc:df:21:5b: d2:d1:f2:42:24:fb:82:c0:c7:7b:a0:3f:95:70:c1:53:1a:89: 4a:3f:d4:a7:e6:b1:5c:99:6f:84:bc:c4:83:d8:9a:ab:d2:32: fc:28:83:9a:45:aa:1b:72:78:39:37:56:fc:2b:4a:f6:3a:a1: 30:a0:c9:b9:e6:50:e1:aa:6c:6e:2b:c5:a1:05:f4:4a:ad:ea: 54:9d:98:1b:10:bb:75:bb:f6:e9:2b:ad:81:6e:bb:f6:bc:15: 10:58:9f:78:39:83:bc:30:f8:fa:5e:3b:a5:34:b2:34:c5:01: b3:23:78:90:ab:a1:65:7c:f3:f7:37:26:57:e1:8b:80:97:2b: 9b:06:14:05:8d:86:e2:9a:83:ea:b1:9d:03:7a:31:fa:cb:5b: ff:04:1b:03:ff:71:7a:77:52:c8:1b:33:41:fd:a8:bb:a7:a6: 8e:53:82:3b:aa:d4:94:dc:d0:ab:81:4a:be:ed:38:51:1c:c8: f5:34:e4:50:06:80:be:1a:86:15:b7:e6:22:97:8d:b1:15:3c: de:be:11:56:a8:b7:38:fc:00:2f:0b:37:84:f7:54:f8:b3:8a: 8d:d3:d2:2a:bc:16:7c:b1:ac:90:9b:c8:f9:50:b6:2c:2a:fe: 5a:b9:03:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aWYL2scmfEnR/UueNb31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx Y2Y0ZDYwHhcNMjUxMjE5MDcwMDU4WhcNMjUxMjIwMDcwMDU4WjAzMTEwLwYDVQQD EyhhNTY0NWUzMTVlM2MwYzc3OTgyNWE4Njk3NDhiNDk5MzRjZDFjN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaf3Nnjwk3VNyCn74RJ1K5AgFq0+ KmdFZee236nA27hycprHEcsbpl+CtfYb1A47Ox0Yt7a+Ib4V4WeaiIrXqhHB5IGm Fb99sVP4g06kHFvIt9WiFnLtse1NZ6X/xJPXPaBEIDxfIJ3ptSF2ooPy7KUvoDXQ QXyjdfdHEjwrH7Dwfw9N4rgnwTWjjBv3ktnEb0Hro9TcjhTliZ+OOrh9uzrF4W67 0mUccUGNjttiVHRYdxwLUSb4JSYqj3mS5ft2ED2mm68ZdjTbRBh/gG7vEWw9EObS 1F4bTUMa71yT7+n6z8ptfc72RU0scj1hWnSVOXcqFvigPHZdLHIK3cTKjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVkXjFePAx3mCWoaXSLSZNM0cfjMB8GA1UdIwQY MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvUIlvfF 1+L45Aj8ULzM3yFb0tHyQiT7gsDHe6A/lXDBUxqJSj/Up+axXJlvhLzEg9iaq9Iy /CiDmkWqG3J4OTdW/CtK9jqhMKDJueZQ4apsbivFoQX0Sq3qVJ2YGxC7dbv26Sut gW679rwVEFifeDmDvDD4+l47pTSyNMUBsyN4kKuhZXzz9zcmV+GLgJcrmwYUBY2G 4pqD6rGdA3ox+stb/wQbA/9xendSyBszQf2ou6emjlOCO6rUlNzQq4FKvu04URzI 9TTkUAaAvhqGFbfmIpeNsRU83r4RVqi3OPwALws3hPdU+LOKjdPSKrwWfLGskJvI +VC2LCr+WrkDRA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:25 2025 by rpki-client