This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json) Hash identifier: 95KExlrEuh8v6IQV2h8ZObpPeMyfemhsGBUP/hMOlM0= Subject key identifier: D4:A0:96:89:0B:DA:82:EE:AC:48:92:52:BD:4B:68:95:94:1F:82:D0 Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47 Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247 Certificate serial: 019B4E847C14DDE0705F23378D94FA284B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft Manifest number: 073C Signing time: Wed 24 Dec 2025 04:01:03 +0000 Manifest this update: Wed 24 Dec 2025 04:01:03 +0000 Manifest next update: Thu 25 Dec 2025 04:01:03 +0000 Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: lXrRjlh7dYCveq/I+TrmM99NcQa5Gam9a8lg+q9/Em0=) 2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:7c:14:dd:e0:70:5f:23:37:8d:94:fa:28:4b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247 Validity Not Before: Dec 24 04:01:03 2025 GMT Not After : Dec 25 04:01:03 2025 GMT Subject: CN=d4a096890bda82eeac489252bd4b6895941f82d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:27:a1:29:77:db:13:9a:89:b5:3f:b1:7e: 17:ba:4c:a0:70:63:ec:69:03:86:27:73:c6:79:42: 53:db:b1:4c:c3:fc:ad:9a:91:46:e3:9b:99:3e:b1: 17:72:be:49:3e:7e:57:fe:80:9a:9e:f3:19:78:7c: c6:8a:09:fc:e0:67:b2:31:b1:3f:4f:35:ab:87:87: a0:34:3d:42:7f:b8:8a:2e:e6:38:d5:ec:75:3c:4b: e5:af:14:9b:5e:59:84:19:f4:2e:be:6b:71:ac:d6: ff:8f:08:68:f8:28:06:75:6c:af:74:e2:99:78:c9: e3:f7:db:8b:86:a0:f9:df:ae:39:e1:d1:97:8c:3f: 0e:4a:01:84:31:cb:71:fa:94:86:9a:6c:11:3b:44: 87:43:14:ba:1e:21:8c:7f:0a:7f:e7:2c:f6:6a:70: 95:05:27:df:3e:58:d3:a6:88:55:71:53:4b:e4:53: b7:f7:74:60:f2:fd:86:f4:95:fe:ae:5c:e9:8c:fe: 5c:6b:dc:88:46:70:86:43:d9:17:ad:32:86:62:49: 26:56:40:e5:e8:25:ff:aa:37:9b:56:d0:1a:66:1e: 9d:88:a2:e7:0d:92:dc:21:f3:2a:c4:e9:9d:a6:d2: 66:2f:ea:aa:23:f3:08:e7:c1:14:a7:99:02:83:ae: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A0:96:89:0B:DA:82:EE:AC:48:92:52:BD:4B:68:95:94:1F:82:D0 X509v3 Authority Key Identifier: keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2d:ef:d5:b4:23:28:06:c9:7a:0a:01:c3:9d:44:00:a8:36: 44:b0:26:05:4a:bf:b3:3c:08:b9:e1:b7:00:c4:24:f9:7b:8b: 8e:12:3c:c8:dd:d8:bd:3e:f9:c8:e2:5e:3c:fd:92:8c:fe:b4: 85:a2:03:14:63:48:f0:fa:b6:34:09:65:39:aa:03:78:2b:38: 01:29:3e:09:a2:c0:aa:7f:7a:f8:58:3b:f1:ff:47:cb:3d:35: 21:66:2f:08:e1:ce:1c:7b:b3:39:3b:b8:f6:e6:a4:21:56:cd: cd:3f:1f:fd:97:82:c8:fe:25:83:63:dd:0f:0e:6a:81:f5:72: da:15:0e:ac:de:a0:5f:1a:f2:3a:81:41:99:68:4b:d7:a0:b2: c7:62:5f:d2:a7:6f:4a:47:c2:9b:59:3f:14:14:b0:b1:23:12: f8:78:9b:d0:3b:6b:4a:6d:57:c7:f4:c4:a6:14:e1:e6:b5:d1: 3e:28:ba:d1:a5:11:3f:a5:ef:ac:5d:bf:e5:8b:07:68:98:58: 8f:b7:5f:a5:8e:65:8e:35:4d:85:d0:b4:f3:89:a1:eb:c5:8e: 50:fd:d7:36:30:66:68:39:79:45:46:6a:7c:fa:5f:89:c0:fd: 89:ec:1d:0e:ea:0b:c0:9d:ad:bb:2c:29:17:27:a9:db:15:06: 66:54:cb:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhHwU3eBwXyM3jZT6KEtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDA3ZWI3NjRlMDgzODU1YTI1ODEzMDhmMzQxZDViYTdk OGIyNDcwHhcNMjUxMjI0MDQwMTAzWhcNMjUxMjI1MDQwMTAzWjAzMTEwLwYDVQQD EyhkNGEwOTY4OTBiZGE4MmVlYWM0ODkyNTJiZDRiNjg5NTk0MWY4MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFYnoSl32xOaibU/sX4XukygcGPs aQOGJ3PGeUJT27FMw/ytmpFG45uZPrEXcr5JPn5X/oCanvMZeHzGign84GeyMbE/ TzWrh4egND1Cf7iKLuY41ex1PEvlrxSbXlmEGfQuvmtxrNb/jwho+CgGdWyvdOKZ eMnj99uLhqD536454dGXjD8OSgGEMctx+pSGmmwRO0SHQxS6HiGMfwp/5yz2anCV BSffPljTpohVcVNL5FO393Rg8v2G9JX+rlzpjP5ca9yIRnCGQ9kXrTKGYkkmVkDl 6CX/qjebVtAaZh6diKLnDZLcIfMqxOmdptJmL+qqI/MI58EUp5kCg66XBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSglokL2oLurEiSUr1LaJWUH4LQMB8GA1UdIwQY MBaAFC5Afrdk4IOFWiWBMI80HVun2LJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zM2JlYzUtNmFkNS00ZTgwLWJmNTgt NTJjYTJhOWQ1MTRiLzEvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zM2JlYzUtNmFkNS00ZTgwLWJmNTgtNTJjYTJhOWQ1MTRi LzEvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPy3v1bQj KAbJegoBw51EAKg2RLAmBUq/szwIueG3AMQk+XuLjhI8yN3YvT75yOJePP2SjP60 haIDFGNI8Pq2NAllOaoDeCs4ASk+CaLAqn96+Fg78f9Hyz01IWYvCOHOHHuzOTu4 9uakIVbNzT8f/ZeCyP4lg2PdDw5qgfVy2hUOrN6gXxryOoFBmWhL16Cyx2Jf0qdv SkfCm1k/FBSwsSMS+Hib0DtrSm1Xx/TEphTh5rXRPii60aURP6XvrF2/5YsHaJhY j7dfpY5ljjVNhdC084mh68WOUP3XNjBmaDl5RUZqfPpficD9iewdDuoLwJ2tuywp Fyep2xUGZlTL6A== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:25 2025 by rpki-client