This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json) Hash identifier: 65RPBpUTw/7CKq3DGT3RXt1+Z295BKBhcy1aT+4tH4w= Subject key identifier: 04:59:46:10:6F:AF:80:7D:02:F1:2F:BF:C8:3B:E1:B9:00:A1:45:CB Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47 Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247 Certificate serial: 019B42EE6340D712A7539AC19B3627F28320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft Manifest number: 0736 Signing time: Sun 21 Dec 2025 22:01:17 +0000 Manifest this update: Sun 21 Dec 2025 22:01:17 +0000 Manifest next update: Mon 22 Dec 2025 22:01:17 +0000 Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: IrLsYcitG5D0GXlLA3S0Id2ph51okj73MnRuuH/Ku4g=) 2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:63:40:d7:12:a7:53:9a:c1:9b:36:27:f2:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247 Validity Not Before: Dec 21 22:01:17 2025 GMT Not After : Dec 22 22:01:17 2025 GMT Subject: CN=045946106faf807d02f12fbfc83be1b900a145cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:cf:aa:bd:54:08:78:44:15:78:a8:4a:4a: dd:66:c5:11:a6:8e:ce:f4:d7:f3:4e:13:92:e1:9d: cb:6c:27:6b:60:3c:5b:f0:25:53:06:46:33:e4:c9: 2a:e7:4e:c6:56:f3:dd:fa:0a:45:3d:74:b7:6a:7c: 9b:22:96:85:45:d2:6a:14:62:62:2e:98:48:85:db: 57:4a:2d:fc:48:23:84:5f:00:44:3b:f7:1c:4e:0d: 79:fb:3b:ee:0a:09:6e:0d:3f:bb:cb:47:c0:80:a6: 91:cf:aa:a4:8d:5e:d7:65:17:d7:27:43:4a:62:1d: ff:0b:cf:ab:a7:b1:9a:d1:4a:40:b2:61:56:8e:49: 11:4c:16:bb:2b:a3:2a:81:47:e2:d5:cf:33:1b:53: 70:3c:6e:dc:a7:3b:80:bd:d5:d2:36:e7:9d:73:3e: af:59:1d:7a:60:4c:68:e2:ff:40:27:ad:24:d4:7a: 86:34:eb:03:70:36:5c:1c:7b:5d:c1:36:0c:00:1c: 87:89:fc:f3:80:d4:d3:50:19:05:e2:f9:49:03:9f: 7c:d6:63:05:c5:f2:bc:d9:bf:cd:58:1e:e9:6e:11: fe:8a:50:e3:85:b3:75:dd:0c:94:3e:65:9b:28:21: d6:31:6a:b5:45:40:cd:09:0d:f3:b8:70:2f:bc:b2: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:59:46:10:6F:AF:80:7D:02:F1:2F:BF:C8:3B:E1:B9:00:A1:45:CB X509v3 Authority Key Identifier: keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4a:8a:58:d7:86:26:fd:39:28:78:97:e7:4f:c1:f2:7a:c8: b3:cd:96:87:a7:aa:ee:65:af:69:15:a1:fb:a1:bf:eb:82:55: e6:82:3e:6e:4b:c7:cf:b1:72:74:5a:cd:7f:a1:35:71:06:04: c4:43:13:9b:eb:6b:ed:02:c4:b0:0b:a0:8c:de:a0:e5:d0:1d: 10:d2:e0:2a:36:5c:01:38:ef:62:b3:cf:54:92:5b:54:ab:ec: f7:b4:ea:83:05:58:88:0a:2b:8a:b8:04:ff:74:24:f7:a9:e0: 4c:bc:6c:19:2d:30:f8:60:46:8d:f4:70:62:b8:23:7a:d5:17: dd:9a:0b:e9:d7:97:f9:a4:1e:8e:ba:c4:ad:b5:ad:9d:7a:13: e1:12:78:5f:f4:bf:f9:73:42:6a:87:b4:31:ef:8a:5e:f0:1d: 6a:f2:88:d8:d1:8d:7f:4b:6f:9c:95:24:a7:4c:27:39:5d:0c: 4e:02:ea:d3:65:55:f9:c4:32:d6:6d:1d:b0:df:d8:75:32:d0: f2:fe:c7:ec:e9:0a:0d:06:0a:08:61:bf:3b:00:e5:36:b9:73: 73:a0:99:14:a2:25:3c:1b:2f:b5:1f:78:e6:54:20:ca:6b:73: 4f:3b:5e:76:fb:48:62:e6:fb:28:54:f6:6b:ac:2c:32:3a:08: f8:f5:06:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7mNA1xKnU5rBmzYn8oMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDA3ZWI3NjRlMDgzODU1YTI1ODEzMDhmMzQxZDViYTdk OGIyNDcwHhcNMjUxMjIxMjIwMTE3WhcNMjUxMjIyMjIwMTE3WjAzMTEwLwYDVQQD EygwNDU5NDYxMDZmYWY4MDdkMDJmMTJmYmZjODNiZTFiOTAwYTE0NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ7Pqr1UCHhEFXioSkrdZsURpo7O 9NfzThOS4Z3LbCdrYDxb8CVTBkYz5Mkq507GVvPd+gpFPXS3anybIpaFRdJqFGJi LphIhdtXSi38SCOEXwBEO/ccTg15+zvuCgluDT+7y0fAgKaRz6qkjV7XZRfXJ0NK Yh3/C8+rp7Ga0UpAsmFWjkkRTBa7K6MqgUfi1c8zG1NwPG7cpzuAvdXSNuedcz6v WR16YExo4v9AJ60k1HqGNOsDcDZcHHtdwTYMAByHifzzgNTTUBkF4vlJA5981mMF xfK82b/NWB7pbhH+ilDjhbN13QyUPmWbKCHWMWq1RUDNCQ3zuHAvvLKnuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARZRhBvr4B9AvEvv8g74bkAoUXLMB8GA1UdIwQY MBaAFC5Afrdk4IOFWiWBMI80HVun2LJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zM2JlYzUtNmFkNS00ZTgwLWJmNTgt NTJjYTJhOWQ1MTRiLzEvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zM2JlYzUtNmFkNS00ZTgwLWJmNTgtNTJjYTJhOWQ1MTRi LzEvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0qKWNeG Jv05KHiX50/B8nrIs82Wh6eq7mWvaRWh+6G/64JV5oI+bkvHz7FydFrNf6E1cQYE xEMTm+tr7QLEsAugjN6g5dAdENLgKjZcATjvYrPPVJJbVKvs97TqgwVYiAorirgE /3Qk96ngTLxsGS0w+GBGjfRwYrgjetUX3ZoL6deX+aQejrrErbWtnXoT4RJ4X/S/ +XNCaoe0Me+KXvAdavKI2NGNf0tvnJUkp0wnOV0MTgLq02VV+cQy1m0dsN/YdTLQ 8v7H7OkKDQYKCGG/OwDlNrlzc6CZFKIlPBsvtR945lQgymtzTztedvtIYub7KFT2 a6wsMjoI+PUGUA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:56:48 2025 by rpki-client