This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json) Hash identifier: Fybr7S2GT+B5PFvHDWPATD1BlmKs8SIzIgoOjaQCiYI= Subject key identifier: 64:C6:B2:5D:01:B9:5F:BA:34:28:CE:9A:B5:49:9D:FD:B3:0A:41:64 Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59 Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59 Certificate serial: 019B4BF16F6BEA53EB67816303D9F4C46506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft Manifest number: 04A6 Signing time: Tue 23 Dec 2025 16:01:12 +0000 Manifest this update: Tue 23 Dec 2025 16:01:12 +0000 Manifest next update: Wed 24 Dec 2025 16:01:12 +0000 Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=) 2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: eeBAtw1g9STP7k0mm0yCpekTOS2daXlL0LrZ9mqdfx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:6f:6b:ea:53:eb:67:81:63:03:d9:f4:c4:65:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59 Validity Not Before: Dec 23 16:01:12 2025 GMT Not After : Dec 24 16:01:12 2025 GMT Subject: CN=64c6b25d01b95fba3428ce9ab5499dfdb30a4164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:e7:56:f7:fc:f9:11:10:f5:a0:6d:8e:c0: e3:79:cd:cf:48:fa:52:9a:5a:56:c7:3e:f8:14:df: cd:5e:3e:6c:15:8f:74:8f:ee:00:fe:3d:a9:86:c9: 41:c4:90:01:d4:6f:12:69:fc:c3:48:3d:00:d5:2c: d1:d0:c9:5c:c2:4a:66:ee:f1:e3:46:53:64:dd:e8: c1:95:2a:2d:b4:9d:a5:f4:fb:29:23:ae:33:2b:d8: e0:21:ad:dc:b2:82:f1:d0:1c:28:ad:f5:af:52:5a: a8:fc:bd:78:8c:af:19:18:23:19:74:44:6c:77:c4: 7a:e7:2f:49:f9:d8:fd:5a:95:e2:73:a8:5f:21:3e: e3:04:d3:c7:ad:30:c0:47:3b:18:97:c5:09:44:81: 19:0c:95:55:67:4d:ba:60:5a:f4:2e:72:8a:99:ed: ea:0c:dd:f8:0e:6b:bc:e0:0f:84:36:0d:8c:56:16: 8d:23:f9:1f:8b:50:8e:28:d4:f9:1d:00:d5:18:78: 33:eb:e8:50:d0:bd:a2:81:27:9d:d4:88:d7:ba:06: eb:ae:ac:89:91:a3:96:68:ef:37:c4:6b:6b:eb:95: b7:d9:c5:e9:df:cf:d1:26:10:a8:54:12:84:97:97: 77:bd:8a:f9:a3:72:19:44:d2:17:c0:05:86:f9:ba: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C6:B2:5D:01:B9:5F:BA:34:28:CE:9A:B5:49:9D:FD:B3:0A:41:64 X509v3 Authority Key Identifier: keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a1:9c:a6:6d:0f:3a:8d:28:ca:a7:94:b4:9a:37:53:7a:e0: f8:21:5e:44:8a:63:8e:11:75:c3:d2:6f:20:c0:d0:93:6e:1f: 7f:4d:a6:9b:37:8e:15:d2:31:e4:a3:92:15:56:f7:97:c3:c7: dc:b8:c4:fb:86:09:52:50:a2:73:89:92:b4:b7:52:35:55:80: 59:5f:22:db:5e:c2:b4:26:46:98:fe:7b:7c:f7:08:2a:10:dc: ba:c3:ee:cb:bb:14:3a:d2:62:14:f6:a2:04:6e:4b:74:ad:53: 28:c1:ac:a1:f9:47:28:9f:a5:ee:6f:29:cb:73:e2:1b:fb:3c: 6e:9a:61:2d:50:54:35:43:9a:94:d7:23:8a:12:d8:c2:3a:8c: 6b:89:4e:a4:13:98:64:e5:46:9d:5e:99:d6:4f:6e:2a:95:c1: 83:c8:ff:be:ad:1e:ce:ad:da:ea:b7:8b:f0:d8:cf:0f:3c:f8: 70:77:4d:9c:c2:10:15:76:49:30:cc:33:bd:77:dc:f6:63:3f: 07:99:fc:3c:2a:39:80:61:1b:73:a5:35:63:60:78:dc:59:4d: 71:b3:b7:16:ac:55:87:12:c3:9c:85:fc:16:b0:03:53:2d:b5: 2c:8f:02:53:06:f0:40:97:1f:b7:8a:9b:4b:78:cd:4b:84:00: 1a:4c:55:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8W9r6lPrZ4FjA9n0xGUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTllYWE5ZDcxYjdjNTFjOWI0YmJlYTY4MTliMzdmZjUy OTFkNTkwHhcNMjUxMjIzMTYwMTEyWhcNMjUxMjI0MTYwMTEyWjAzMTEwLwYDVQQD Eyg2NGM2YjI1ZDAxYjk1ZmJhMzQyOGNlOWFiNTQ5OWRmZGIzMGE0MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlnnVvf8+REQ9aBtjsDjec3PSPpS mlpWxz74FN/NXj5sFY90j+4A/j2phslBxJAB1G8SafzDSD0A1SzR0Mlcwkpm7vHj RlNk3ejBlSottJ2l9PspI64zK9jgIa3csoLx0BworfWvUlqo/L14jK8ZGCMZdERs d8R65y9J+dj9WpXic6hfIT7jBNPHrTDARzsYl8UJRIEZDJVVZ026YFr0LnKKme3q DN34Dmu84A+ENg2MVhaNI/kfi1COKNT5HQDVGHgz6+hQ0L2igSed1IjXugbrrqyJ kaOWaO83xGtr65W32cXp38/RJhCoVBKEl5d3vYr5o3IZRNIXwAWG+bpTZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTGsl0BuV+6NCjOmrVJnf2zCkFkMB8GA1UdIwQY MBaAFJSp6qnXG3xRybS76mgZs3/1KR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMt MzkzYWQyNWViMzQwLzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMtMzkzYWQyNWViMzQw LzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKGcpm0P Oo0oyqeUtJo3U3rg+CFeRIpjjhF1w9JvIMDQk24ff02mmzeOFdIx5KOSFVb3l8PH 3LjE+4YJUlCic4mStLdSNVWAWV8i217CtCZGmP57fPcIKhDcusPuy7sUOtJiFPai BG5LdK1TKMGsoflHKJ+l7m8py3PiG/s8bpphLVBUNUOalNcjihLYwjqMa4lOpBOY ZOVGnV6Z1k9uKpXBg8j/vq0ezq3a6reL8NjPDzz4cHdNnMIQFXZJMMwzvXfc9mM/ B5n8PCo5gGEbc6U1Y2B43FlNcbO3FqxVhxLDnIX8FrADUy21LI8CUwbwQJcft4qb S3jNS4QAGkxVKg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:10 2025 by rpki-client