This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json) Hash identifier: r5fraF36qYWMbyvqyCuAxh6Acpk/Qw0iSbdnUnLxO64= Subject key identifier: 8C:9A:58:3B:7F:47:0A:B4:37:A4:F8:1A:DB:BF:69:06:47:FB:2E:9D Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f Certificate serial: 019B3532E032B645A6A7AC4B9A45CE410DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 06:01:25 +0000 Manifest this update: Fri 19 Dec 2025 06:01:25 +0000 Manifest next update: Sat 20 Dec 2025 06:01:25 +0000 Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=) 2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: FnDt+7rMIhLfq4SR6XyO8qKdlA9ZMpVuxsFRkpQPLT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e0:32:b6:45:a6:a7:ac:4b:9a:45:ce:41:0d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f Validity Not Before: Dec 19 06:01:25 2025 GMT Not After : Dec 20 06:01:25 2025 GMT Subject: CN=8c9a583b7f470ab437a4f81adbbf690647fb2e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:91:58:1d:24:79:9c:1e:94:6b:83:e3:ba:fc: d6:60:f2:ff:8a:5d:a1:97:b1:88:41:cc:c4:da:0f: 68:d8:77:50:c2:a5:94:5e:26:b8:5b:8e:c6:c7:d9: 74:34:cd:29:a4:4d:24:99:4b:65:fa:8e:0a:81:d2: 10:a9:7c:c3:27:1a:a4:d9:ee:85:d1:85:c1:89:1a: d0:51:1b:4b:b7:ec:d0:1f:57:41:bb:a9:56:3c:92: 4b:a8:f4:11:3f:2d:b3:ea:d7:c8:fb:ed:7b:3f:17: a3:30:52:0f:58:a5:fd:80:30:38:5f:53:8f:01:a9: 59:5b:c5:f0:08:e0:fc:b0:d4:66:8c:e6:00:3c:84: a7:f7:12:54:62:62:53:d7:d9:15:bf:22:a5:6e:b4: 3b:c9:80:f6:88:75:e7:9b:d9:42:78:a4:93:98:8c: d3:19:8a:3d:56:df:06:6f:d0:49:91:c0:1f:8e:6c: ce:34:24:50:42:9c:67:ec:b5:64:eb:a3:9a:7e:fd: 26:c7:63:83:00:4f:0d:38:00:83:72:6c:d3:f1:96: 6e:b7:13:a8:56:d5:29:e8:87:a3:2e:93:8a:89:f2: d8:b6:e4:e1:80:71:37:a5:e6:92:ef:d4:a7:f2:1e: de:2f:30:2c:bf:f4:1b:a0:68:53:3a:07:a5:df:5c: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9A:58:3B:7F:47:0A:B4:37:A4:F8:1A:DB:BF:69:06:47:FB:2E:9D X509v3 Authority Key Identifier: keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a9:ca:e2:b5:c6:28:68:6f:f3:0a:ae:f2:a5:69:b9:bb:81: 7d:2b:35:ef:e1:88:3e:ee:12:c7:18:1a:66:75:30:74:c9:2a: 6c:86:b2:81:3e:96:83:22:ba:6c:9b:99:25:16:1d:a6:99:ba: 13:5c:51:23:9b:66:c2:d9:cf:a9:ce:c5:0a:a3:11:04:c0:58: e0:e1:43:4c:f5:d0:f9:49:c6:73:57:65:bf:1a:49:b3:b9:c2: fe:ec:88:c9:09:78:ce:7d:af:ef:c4:48:4c:ea:9c:a7:1d:04: 18:3b:aa:e3:96:3b:93:a5:fd:df:0a:d3:c0:b7:9a:c2:8e:7c: 67:50:8c:00:d7:1f:e9:df:16:d0:cf:2f:e6:8c:41:6b:15:3b: 75:1c:d4:0f:c8:eb:48:e7:27:97:3a:92:35:ed:d6:b2:99:16: c8:2a:81:b8:5f:e6:c8:6d:fa:01:cb:73:71:7d:d2:51:65:f4: 11:cf:db:20:41:51:e8:79:c3:f2:db:7e:8f:79:30:15:fe:96: 9e:d7:3d:d5:41:52:a3:79:b6:14:bc:fe:ad:92:de:f2:26:91: dd:57:22:cf:9c:34:a1:e9:a2:be:a0:68:fb:45:ce:30:51:9d: 76:d2:33:0d:c7:1a:ed:81:60:25:2e:36:13:21:49:61:c3:3b: 10:63:47:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuAytkWmp6xLmkXOQQ2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2 NGVmNWYwHhcNMjUxMjE5MDYwMTI1WhcNMjUxMjIwMDYwMTI1WjAzMTEwLwYDVQQD Eyg4YzlhNTgzYjdmNDcwYWI0MzdhNGY4MWFkYmJmNjkwNjQ3ZmIyZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZFYHSR5nB6Ua4PjuvzWYPL/il2h l7GIQczE2g9o2HdQwqWUXia4W47Gx9l0NM0ppE0kmUtl+o4KgdIQqXzDJxqk2e6F 0YXBiRrQURtLt+zQH1dBu6lWPJJLqPQRPy2z6tfI++17PxejMFIPWKX9gDA4X1OP AalZW8XwCOD8sNRmjOYAPISn9xJUYmJT19kVvyKlbrQ7yYD2iHXnm9lCeKSTmIzT GYo9Vt8Gb9BJkcAfjmzONCRQQpxn7LVk66Oafv0mx2ODAE8NOACDcmzT8ZZutxOo VtUp6IejLpOKifLYtuThgHE3peaS79Sn8h7eLzAsv/QboGhTOgel31zsNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyaWDt/Rwq0N6T4Gtu/aQZH+y6dMB8GA1UdIwQY MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6nK4rXG KGhv8wqu8qVpubuBfSs17+GIPu4SxxgaZnUwdMkqbIaygT6WgyK6bJuZJRYdppm6 E1xRI5tmwtnPqc7FCqMRBMBY4OFDTPXQ+UnGc1dlvxpJs7nC/uyIyQl4zn2v78RI TOqcpx0EGDuq45Y7k6X93wrTwLeawo58Z1CMANcf6d8W0M8v5oxBaxU7dRzUD8jr SOcnlzqSNe3WspkWyCqBuF/myG36ActzcX3SUWX0Ec/bIEFR6HnD8tt+j3kwFf6W ntc91UFSo3m2FLz+rZLe8iaR3Vciz5w0oemivqBo+0XOMFGddtIzDcca7YFgJS42 EyFJYcM7EGNHMA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:43:25 2025 by rpki-client