This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json) Hash identifier: L/2IKQhBWYYqN+o3Or1OwWduS7IHTMXhPLkyjNOHkbY= Subject key identifier: DB:F4:67:2C:21:F2:2F:F9:51:8A:F1:C9:9F:46:CA:CA:14:F4:E7:00 Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee Certificate serial: 019B3CEBF6887C10E50CC52A32CB0DBDF66E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft Manifest number: 0804 Signing time: Sat 20 Dec 2025 18:00:55 +0000 Manifest this update: Sat 20 Dec 2025 18:00:55 +0000 Manifest next update: Sun 21 Dec 2025 18:00:55 +0000 Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=) 2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: Q9GweOxModl3NMnbCz8DTnSX1b5aaIRAIbWADjizBTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f6:88:7c:10:e5:0c:c5:2a:32:cb:0d:bd:f6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee Validity Not Before: Dec 20 18:00:55 2025 GMT Not After : Dec 21 18:00:55 2025 GMT Subject: CN=dbf4672c21f22ff9518af1c99f46caca14f4e700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:68:43:4e:70:f5:59:af:cb:43:f0:57:77: ab:fe:d7:e0:7a:47:63:72:22:20:14:04:59:af:f2: f6:25:a4:74:6e:5d:43:b5:7a:e9:3a:be:32:ed:f8: e1:1a:b9:13:6d:91:fd:ae:be:4d:10:8b:d6:b7:d0: 42:1d:5b:fa:a8:f6:38:7f:4a:e0:aa:c9:f1:a2:f0: 1e:b6:0c:dd:6d:01:05:09:74:04:91:51:ba:b0:c5: 04:84:6e:15:69:1b:eb:f4:c2:1b:e8:5f:74:03:b7: 25:8f:dd:85:41:c1:d3:b4:76:e8:df:65:6e:0c:99: 92:46:cb:23:78:7c:88:73:d2:d5:84:9b:d5:57:23: 6e:20:c1:73:d6:cf:94:73:31:b6:ee:9b:98:70:18: 9c:05:b0:b3:2c:53:72:23:b5:52:7d:f1:99:ac:d6: ef:f9:e0:2b:db:34:33:99:a4:f6:c1:e0:6c:d0:72: 22:e9:98:8c:c0:7c:0f:82:f3:60:14:fc:00:1f:b5: 42:cf:e6:9b:2a:0d:e1:01:5f:a2:c8:28:c8:67:d5: a6:38:b3:bf:84:39:fe:5a:e0:4d:ad:7a:13:13:a0: a1:67:48:c1:1b:01:e9:bd:ad:a0:e6:80:2c:ae:dc: 51:81:6b:b0:ba:db:1e:b0:29:f0:b3:1d:7e:b9:d2: d2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:67:2C:21:F2:2F:F9:51:8A:F1:C9:9F:46:CA:CA:14:F4:E7:00 X509v3 Authority Key Identifier: keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ab:a0:a2:94:a3:9e:a9:df:50:30:a2:c2:8a:d4:cf:d6:f9: df:0b:d1:b6:59:a8:e5:fd:17:08:67:0f:cd:99:c8:5a:a0:cd: 84:33:52:f2:18:08:d2:db:86:ef:35:3d:a0:04:46:d6:64:be: d7:2c:99:6c:fd:9c:05:8c:2b:7c:12:c1:e3:99:c8:06:25:14: 54:a8:11:ed:51:99:a5:20:81:48:cd:5a:22:d4:31:83:ad:98: c6:4d:a9:aa:9c:a4:df:89:9d:dc:e5:a8:2e:aa:54:d9:f4:87: 02:7c:e1:5f:51:3c:80:74:e1:83:d2:7d:0d:33:63:c8:bf:8c: 6b:ba:72:b9:6d:05:10:01:ba:f8:2d:08:e1:cb:98:31:d4:60: 0a:30:67:33:79:f7:6c:c6:a7:03:ae:f9:06:ee:ec:d0:02:29: 56:21:99:db:be:39:da:6e:0f:fe:2e:c4:5b:9a:ef:b0:4f:8c: f2:7f:52:22:e0:56:3b:cd:ea:64:5e:20:3d:1d:d1:be:57:16: 8e:31:c1:6c:cc:53:c8:54:ba:eb:0b:f6:13:07:d0:3e:3a:16: 04:af:b5:b3:dd:f9:0f:1f:46:76:df:aa:89:2d:a0:44:26:33: 7d:3f:ae:34:3a:2c:36:ad:f5:c0:bb:a0:f8:db:b1:ac:3d:1d: 99:27:2b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/aIfBDlDMUqMssNvfZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw OTU0ZWUwHhcNMjUxMjIwMTgwMDU1WhcNMjUxMjIxMTgwMDU1WjAzMTEwLwYDVQQD EyhkYmY0NjcyYzIxZjIyZmY5NTE4YWYxYzk5ZjQ2Y2FjYTE0ZjRlNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN5oQ05w9Vmvy0PwV3er/tfgekdj ciIgFARZr/L2JaR0bl1DtXrpOr4y7fjhGrkTbZH9rr5NEIvWt9BCHVv6qPY4f0rg qsnxovAetgzdbQEFCXQEkVG6sMUEhG4VaRvr9MIb6F90A7clj92FQcHTtHbo32Vu DJmSRssjeHyIc9LVhJvVVyNuIMFz1s+UczG27puYcBicBbCzLFNyI7VSffGZrNbv +eAr2zQzmaT2weBs0HIi6ZiMwHwPgvNgFPwAH7VCz+abKg3hAV+iyCjIZ9WmOLO/ hDn+WuBNrXoTE6ChZ0jBGwHpva2g5oAsrtxRgWuwutsesCnwsx1+udLS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv0Zywh8i/5UYrxyZ9GysoU9OcAMB8GA1UdIwQY MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct NjUxYjcxN2Y4YTlhLzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqugopSj nqnfUDCiworUz9b53wvRtlmo5f0XCGcPzZnIWqDNhDNS8hgI0tuG7zU9oARG1mS+ 1yyZbP2cBYwrfBLB45nIBiUUVKgR7VGZpSCBSM1aItQxg62Yxk2pqpyk34md3OWo LqpU2fSHAnzhX1E8gHThg9J9DTNjyL+Ma7pyuW0FEAG6+C0I4cuYMdRgCjBnM3n3 bManA675Bu7s0AIpViGZ27452m4P/i7EW5rvsE+M8n9SIuBWO83qZF4gPR3RvlcW jjHBbMxTyFS66wv2EwfQPjoWBK+1s935Dx9Gdt+qiS2gRCYzfT+uNDosNq31wLug +NuxrD0dmScryg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:30 2025 by rpki-client