This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json) Hash identifier: aKmLU/74GVnvtwwaYFRKil0ooUQ9J+i+S9EjFk3DhG0= Subject key identifier: 02:AF:F6:27:3C:8D:D8:25:2C:57:88:83:09:0F:2B:27:C2:CD:BE:29 Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba Certificate serial: 019B3D910DCFDCCDBE5BDD77DC6C46530B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:01:15 +0000 Manifest this update: Sat 20 Dec 2025 21:01:15 +0000 Manifest next update: Sun 21 Dec 2025 21:01:15 +0000 Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=) 2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: 78QaTx7ia6jvUZMiNvhRbFYOBsH01TH8A2tvK0S9Ofo=) 3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:0d:cf:dc:cd:be:5b:dd:77:dc:6c:46:53:0b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba Validity Not Before: Dec 20 21:01:15 2025 GMT Not After : Dec 21 21:01:15 2025 GMT Subject: CN=02aff6273c8dd8252c578883090f2b27c2cdbe29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:28:4b:7a:2e:90:4a:73:56:d9:f9:d4:5b:39: 3d:ac:0d:ae:be:fe:d4:a2:6d:30:70:39:69:d6:a3: f3:51:c5:f0:4c:55:69:9a:51:ea:44:4a:37:f8:8e: 30:30:41:04:90:48:72:ee:63:32:b1:ea:a6:dd:47: 03:f4:bb:da:f4:e4:91:0e:e5:36:13:ef:f2:53:28: 9d:bd:8f:f2:f4:42:5c:5c:10:f2:0e:a0:43:6c:03: 44:f9:c6:a9:67:d5:6d:ba:fb:65:47:c9:56:48:f1: f6:3f:d1:30:3b:2c:fb:ea:02:53:a2:4c:1c:a2:17: 36:f7:0b:72:cc:22:48:b6:09:fc:c6:d9:35:05:ac: dc:a5:69:e3:0e:1a:b2:81:87:e1:5f:ee:2b:40:b6: 4a:5e:9f:8c:dc:26:96:a9:7c:e8:09:28:2e:76:cd: e4:62:aa:f8:14:8f:8e:d0:de:7e:c4:93:aa:8e:c3: bb:7e:71:f5:c5:9b:1b:c0:0b:99:dc:12:17:b2:90: 18:e0:e8:f7:28:12:7f:7b:9e:e0:22:9c:f7:ee:d2: e1:d8:8c:05:43:26:9f:17:59:2f:1a:75:de:cd:c1: 3b:5b:05:33:00:38:9e:96:27:6d:d5:8c:ec:d7:08: 87:31:25:f1:fa:93:12:1a:1b:a9:b2:35:bf:77:52: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:F6:27:3C:8D:D8:25:2C:57:88:83:09:0F:2B:27:C2:CD:BE:29 X509v3 Authority Key Identifier: keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f6:00:95:bf:2b:28:13:8d:8f:17:a2:0d:4f:fc:39:13:73: 98:e8:6a:18:f4:33:af:46:cb:ed:62:fc:bc:fc:a8:84:8f:8f: 47:61:d2:eb:d6:3e:27:12:df:c2:5a:4a:62:90:0f:06:8a:b5: 32:1e:dd:90:0d:83:4d:65:3f:0b:21:2f:d4:8d:37:59:93:98: 64:e5:6c:9f:cd:81:ea:cb:e9:8b:cd:b2:98:e8:7e:a7:7d:26: 24:f6:5c:58:5c:f0:b8:39:8b:81:99:1f:e2:9e:52:5a:79:0f: a8:32:e7:4f:ff:c2:ac:9c:6f:87:20:a8:6f:00:99:ee:53:9a: 47:f9:c8:52:a2:2a:5a:3a:44:d4:31:af:cb:58:be:6d:89:55: d4:07:57:d6:f1:82:d2:68:81:ce:23:5f:b1:00:0c:e4:f1:81: e5:9a:03:79:ab:42:38:8b:12:27:31:37:e3:55:0d:58:59:bc: 5e:9e:73:1a:94:fb:ef:f7:21:32:6b:20:63:1a:5c:86:23:7f: 96:bf:98:36:bb:53:9a:73:78:90:32:e3:cc:69:b2:84:67:bc: 00:43:72:05:3f:d9:7a:e0:68:be:fc:09:26:d4:3a:00:15:6d: 2a:12:ed:40:36:00:cc:78:cc:ad:91:c4:a1:f4:43:4d:c4:44: 3b:44:a7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQ3P3M2+W9133GxGUws1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTMyZTQ0NWMyNGRlZDliODUyMTJkNDc5Yjg4MDA4MTY1 ZWJkYmEwHhcNMjUxMjIwMjEwMTE1WhcNMjUxMjIxMjEwMTE1WjAzMTEwLwYDVQQD EygwMmFmZjYyNzNjOGRkODI1MmM1Nzg4ODMwOTBmMmIyN2MyY2RiZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ihLei6QSnNW2fnUWzk9rA2uvv7U om0wcDlp1qPzUcXwTFVpmlHqREo3+I4wMEEEkEhy7mMyseqm3UcD9Lva9OSRDuU2 E+/yUyidvY/y9EJcXBDyDqBDbANE+capZ9VtuvtlR8lWSPH2P9EwOyz76gJTokwc ohc29wtyzCJItgn8xtk1BazcpWnjDhqygYfhX+4rQLZKXp+M3CaWqXzoCSguds3k Yqr4FI+O0N5+xJOqjsO7fnH1xZsbwAuZ3BIXspAY4Oj3KBJ/e57gIpz37tLh2IwF QyafF1kvGnXezcE7WwUzADielidt1Yzs1wiHMSXx+pMSGhupsjW/d1LMXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKv9ic8jdglLFeIgwkPKyfCzb4pMB8GA1UdIwQY MBaAFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODIt ZTE0ODdhNTRjMWU1LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODItZTE0ODdhNTRjMWU1 LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPYAlb8r KBONjxeiDU/8ORNzmOhqGPQzr0bL7WL8vPyohI+PR2HS69Y+JxLfwlpKYpAPBoq1 Mh7dkA2DTWU/CyEv1I03WZOYZOVsn82B6svpi82ymOh+p30mJPZcWFzwuDmLgZkf 4p5SWnkPqDLnT//CrJxvhyCobwCZ7lOaR/nIUqIqWjpE1DGvy1i+bYlV1AdX1vGC 0miBziNfsQAM5PGB5ZoDeatCOIsSJzE341UNWFm8Xp5zGpT77/chMmsgYxpchiN/ lr+YNrtTmnN4kDLjzGmyhGe8AENyBT/ZeuBovvwJJtQ6ABVtKhLtQDYAzHjMrZHE ofRDTcREO0SnHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:58 2025 by rpki-client