This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json) Hash identifier: Bm0LxcYaHyqvFloClO4mOxlDEckAMi17fbosoaTm26U= Subject key identifier: 1A:7F:42:DC:71:2D:25:74:2E:04:EC:FE:AD:B2:42:53:5B:6B:D8:F3 Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59 Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59 Certificate serial: 019B6CC5650DC5EE6B88EC56DA983C966054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft Manifest number: 04B7 Signing time: Tue 30 Dec 2025 01:00:34 +0000 Manifest this update: Tue 30 Dec 2025 01:00:34 +0000 Manifest next update: Wed 31 Dec 2025 01:00:34 +0000 Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=) 2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: onr9e1SRrMMBKjuddAkg9ZzQJ+2HUoFtV1mCh8aI5gQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:65:0d:c5:ee:6b:88:ec:56:da:98:3c:96:60:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59 Validity Not Before: Dec 30 01:00:34 2025 GMT Not After : Dec 31 01:00:34 2025 GMT Subject: CN=1a7f42dc712d25742e04ecfeadb242535b6bd8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:16:1e:d1:92:72:76:4b:c0:ce:0d:8f:26: 75:6c:38:b7:54:6d:e3:6d:71:9e:eb:f0:48:a1:67: a5:7b:bd:3f:37:91:ff:5d:3e:52:73:dd:00:19:1b: 89:5d:ff:71:b2:41:90:88:08:c1:dd:78:dd:cd:63: 42:1a:f9:74:30:8d:cb:36:2f:a5:9b:7b:db:cc:93: f8:35:40:7e:21:d6:ab:c5:7a:3f:f8:7c:49:d1:5e: 65:22:c4:84:00:a8:03:23:3f:ca:0d:8e:17:7a:2b: 2c:47:e9:93:0c:89:8e:17:65:ba:72:39:5b:33:2b: d2:f2:65:b3:e8:93:e2:f1:3c:e7:ee:02:2c:02:c4: a4:72:b3:24:d2:20:79:c1:1c:8c:58:a4:fd:8e:45: 17:2f:d4:e3:3d:0e:6a:5c:b7:f5:42:e9:00:c0:07: 87:45:6d:0e:9a:ca:69:90:ba:43:ef:7d:76:79:de: b4:34:44:0b:65:33:63:18:c3:1e:96:76:b3:a7:ec: 75:d1:6b:a2:fc:85:8d:9a:49:b4:bc:90:42:aa:5b: bc:31:d1:f3:91:32:75:84:f2:10:c1:d9:d7:a2:14: 30:d8:0c:e3:1a:d1:23:37:bc:b1:e5:6c:9e:39:2a: 78:f0:df:f9:ab:1c:2d:25:7c:3b:4c:46:bd:1f:bf: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:42:DC:71:2D:25:74:2E:04:EC:FE:AD:B2:42:53:5B:6B:D8:F3 X509v3 Authority Key Identifier: keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:09:d5:9c:0e:c1:89:77:d1:80:0d:aa:87:09:c4:1a:47: 6a:40:e0:3a:de:e2:5a:fa:b3:12:24:8b:0b:0d:7c:b2:4d:fa: 51:07:3b:12:b1:ee:64:80:04:ca:f9:85:12:09:20:3e:96:ac: f5:29:2d:e3:d7:42:b9:b5:3d:23:13:4d:93:f1:e3:06:bd:63: 09:2f:51:dd:51:e0:59:dc:c0:49:fc:86:3f:29:22:82:8d:12: d2:b3:ac:ed:1f:70:1c:bb:f3:30:51:7a:a1:f7:64:8d:5e:52: 29:9a:17:ef:cf:dd:01:d5:eb:18:d8:7a:06:05:1e:d1:26:47: 08:01:94:2f:92:d6:11:e4:65:a9:fc:e5:dc:d9:eb:aa:3d:d4: a4:4d:98:3f:51:ea:4d:cb:d7:53:b8:ae:f4:c8:20:40:0e:8d: 78:43:85:b0:45:90:95:ad:43:dd:c4:ac:35:d2:bd:ac:d7:22: 93:31:37:73:d7:6d:bc:15:20:d0:c0:13:13:e2:bf:10:ca:56: 5a:d7:1d:b3:43:a2:c4:fc:57:3b:3d:5b:85:ee:f5:7a:95:bf: eb:02:22:09:d3:1a:ab:f0:37:df:89:b5:fb:24:08:2f:2e:1d: 37:27:55:b1:bf:b0:65:4b:86:24:0e:45:35:e7:30:13:85:c8: af:7e:fc:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxWUNxe5riOxW2pg8lmBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTllYWE5ZDcxYjdjNTFjOWI0YmJlYTY4MTliMzdmZjUy OTFkNTkwHhcNMjUxMjMwMDEwMDM0WhcNMjUxMjMxMDEwMDM0WjAzMTEwLwYDVQQD EygxYTdmNDJkYzcxMmQyNTc0MmUwNGVjZmVhZGIyNDI1MzViNmJkOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb0WHtGScnZLwM4NjyZ1bDi3VG3j bXGe6/BIoWele70/N5H/XT5Sc90AGRuJXf9xskGQiAjB3XjdzWNCGvl0MI3LNi+l m3vbzJP4NUB+IdarxXo/+HxJ0V5lIsSEAKgDIz/KDY4XeissR+mTDImOF2W6cjlb MyvS8mWz6JPi8Tzn7gIsAsSkcrMk0iB5wRyMWKT9jkUXL9TjPQ5qXLf1QukAwAeH RW0OmsppkLpD7312ed60NEQLZTNjGMMelnazp+x10Wui/IWNmkm0vJBCqlu8MdHz kTJ1hPIQwdnXohQw2AzjGtEjN7yx5WyeOSp48N/5qxwtJXw7TEa9H7/QVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp/QtxxLSV0LgTs/q2yQlNba9jzMB8GA1UdIwQY MBaAFJSp6qnXG3xRybS76mgZs3/1KR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMt MzkzYWQyNWViMzQwLzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMtMzkzYWQyNWViMzQw LzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9EJ1ZwO wYl30YANqocJxBpHakDgOt7iWvqzEiSLCw18sk36UQc7ErHuZIAEyvmFEgkgPpas 9Skt49dCubU9IxNNk/HjBr1jCS9R3VHgWdzASfyGPykigo0S0rOs7R9wHLvzMFF6 ofdkjV5SKZoX78/dAdXrGNh6BgUe0SZHCAGUL5LWEeRlqfzl3Nnrqj3UpE2YP1Hq TcvXU7iu9MggQA6NeEOFsEWQla1D3cSsNdK9rNcikzE3c9dtvBUg0MATE+K/EMpW Wtcds0OixPxXOz1bhe71epW/6wIiCdMaq/A334m1+yQILy4dNydVsb+wZUuGJA5F NecwE4XIr378LQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:21:04 2025 by rpki-client