This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json) Hash identifier: qPooYBX835t1Oj5TSzdxJS6GH+/M04dFBpVozA9kGnw= Subject key identifier: 7B:D9:31:67:77:13:D8:AE:48:7F:50:1E:21:A1:1B:1A:BB:06:CE:E8 Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30 Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30 Certificate serial: 019B60C19C6827604B565E9B183D5F8FC6E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft Manifest number: 041E Signing time: Sat 27 Dec 2025 17:00:59 +0000 Manifest this update: Sat 27 Dec 2025 17:00:59 +0000 Manifest next update: Sun 28 Dec 2025 17:00:59 +0000 Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=) 2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: PJdOUWXf9Vxc1d7iwAv1w2IW2nUmLmXBpmLb07OW2mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:c1:9c:68:27:60:4b:56:5e:9b:18:3d:5f:8f:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30 Validity Not Before: Dec 27 17:00:59 2025 GMT Not After : Dec 28 17:00:59 2025 GMT Subject: CN=7bd931677713d8ae487f501e21a11b1abb06cee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:41:42:e1:c8:b5:5b:c2:32:62:3c:c6:d4: 0d:25:50:f3:f8:08:02:e3:a9:a5:fb:81:84:89:b1: 43:a4:dc:22:b3:a3:19:7a:7f:27:5f:af:6d:dc:4c: 74:25:b8:4e:e5:63:c9:9c:b9:93:bc:98:00:8e:34: 86:d0:27:df:86:37:e1:b4:0c:32:f5:6a:80:0e:13: 33:d7:42:d0:7d:ab:d9:63:50:4e:2d:97:2a:84:a9: 47:6d:8a:62:dd:b6:8a:be:e6:72:df:98:19:b0:87: 20:22:c3:c6:4a:e3:d4:8a:83:c8:63:95:12:c2:ff: 65:9f:f9:18:d0:32:d8:57:4c:34:a0:12:ad:85:cf: 28:bc:0d:78:33:0b:10:64:6f:54:7f:93:1c:37:84: 30:86:3e:86:fe:50:0c:13:91:ad:07:09:49:68:68: e3:d9:ea:41:1f:00:55:25:90:fe:77:c8:b2:70:60: 07:a8:d4:8d:c0:0c:e0:4a:94:dc:8d:b7:9e:eb:53: 7a:b2:db:6a:06:e2:ed:cd:80:6b:f9:3b:ab:83:32: 39:cd:31:71:2f:a7:5d:cd:85:c9:af:8a:ee:88:e5: d4:ea:1a:20:74:95:5d:8b:ee:4c:c5:92:6c:ef:44: a3:4c:5a:35:0e:42:c5:eb:cc:fc:e1:e9:ac:98:ca: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:31:67:77:13:D8:AE:48:7F:50:1E:21:A1:1B:1A:BB:06:CE:E8 X509v3 Authority Key Identifier: keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:04:7c:a5:2f:60:36:b5:d8:04:b2:bc:86:32:56:f7:70:d1: be:6b:fd:48:e2:38:ac:1b:03:83:db:12:16:8d:a9:33:78:f0: c3:78:fc:38:2a:b1:7a:c2:e2:06:23:76:5d:4e:c7:7a:57:87: ec:e0:22:7c:73:6c:5a:c9:dd:e6:74:7c:8d:de:b0:b8:6e:37: f4:d1:1f:c7:4c:aa:af:c8:71:2f:63:b2:f6:9a:65:63:1c:56: 30:e8:99:08:c0:a3:e0:9f:2d:8e:3a:d6:be:7e:aa:86:40:0b: de:81:e9:1c:9f:5c:15:ae:40:94:97:6b:1d:6f:e5:91:3c:67: 8a:9a:bc:98:c6:59:d6:dc:0a:8f:fc:82:44:1e:69:82:0b:42: a0:8e:fa:e5:70:6d:d3:31:df:4f:4d:07:46:23:c0:2e:60:dd: 4e:0b:7e:2f:04:e8:f5:8c:0b:30:3f:8c:ed:64:6b:ae:20:41: 1d:48:0d:a4:2d:cf:5d:c4:15:fa:c5:e2:00:d8:d1:28:dd:e0: b3:1c:73:de:6a:d1:20:dd:4a:4d:32:ce:15:c4:99:32:2c:84: 78:fb:db:b8:8b:e6:89:f4:90:96:2c:46:20:93:b0:f0:47:9d: 92:2c:c3:50:d1:82:d8:b4:22:a6:96:3f:7c:7d:72:f0:10:e5: fc:cb:12:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgwZxoJ2BLVl6bGD1fj8bgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMDcxOWViZDlhN2IyNTNlMTRiMjVjZGVjNGNkZDE1NGEx MTFlMzAwHhcNMjUxMjI3MTcwMDU5WhcNMjUxMjI4MTcwMDU5WjAzMTEwLwYDVQQD Eyg3YmQ5MzE2Nzc3MTNkOGFlNDg3ZjUwMWUyMWExMWIxYWJiMDZjZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuFBQuHItVvCMmI8xtQNJVDz+AgC 46ml+4GEibFDpNwis6MZen8nX69t3Ex0JbhO5WPJnLmTvJgAjjSG0CffhjfhtAwy 9WqADhMz10LQfavZY1BOLZcqhKlHbYpi3baKvuZy35gZsIcgIsPGSuPUioPIY5US wv9ln/kY0DLYV0w0oBKthc8ovA14MwsQZG9Uf5McN4Qwhj6G/lAME5GtBwlJaGjj 2epBHwBVJZD+d8iycGAHqNSNwAzgSpTcjbee61N6sttqBuLtzYBr+TurgzI5zTFx L6ddzYXJr4ruiOXU6hogdJVdi+5MxZJs70SjTFo1DkLF68z84emsmMqGAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvZMWd3E9iuSH9QHiGhGxq7Bs7oMB8GA1UdIwQY MBaAFC0HGevZp7JT4UslzexM3RVKER4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAt Mzc3NDkzY2U1ODc3LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAtMzc3NDkzY2U1ODc3 LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQR8pS9g NrXYBLK8hjJW93DRvmv9SOI4rBsDg9sSFo2pM3jww3j8OCqxesLiBiN2XU7HeleH 7OAifHNsWsnd5nR8jd6wuG439NEfx0yqr8hxL2Oy9pplYxxWMOiZCMCj4J8tjjrW vn6qhkAL3oHpHJ9cFa5AlJdrHW/lkTxnipq8mMZZ1twKj/yCRB5pggtCoI765XBt 0zHfT00HRiPALmDdTgt+LwTo9YwLMD+M7WRrriBBHUgNpC3PXcQV+sXiANjRKN3g sxxz3mrRIN1KTTLOFcSZMiyEePvbuIvmifSQlixGIJOw8EedkizDUNGC2LQippY/ fH1y8BDl/MsSPA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:12 2025 by rpki-client