This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json) Hash identifier: RTFpgUuirqZc3X7rR1QGM1gPkTNkbWhe6pYxTlmeeCc= Subject key identifier: 13:88:35:FD:93:D6:A6:9B:8B:B4:7E:2F:4C:5F:FA:18:15:DB:D4:97 Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Certificate serial: 019B3EA312E2C8F4969CFC0BC3A32F78E772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:32 +0000 Manifest this update: Sun 21 Dec 2025 02:00:32 +0000 Manifest next update: Mon 22 Dec 2025 02:00:32 +0000 Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=) 2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=) 3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=) 4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: M10ien19n5DTQckiihZlJ4XRoxM+RFcHlZYzkneQ6iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:12:e2:c8:f4:96:9c:fc:0b:c3:a3:2f:78:e7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Validity Not Before: Dec 21 02:00:32 2025 GMT Not After : Dec 22 02:00:32 2025 GMT Subject: CN=138835fd93d6a69b8bb47e2f4c5ffa1815dbd497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:a2:a8:63:e0:5b:8f:52:e0:1d:2b:91:2a: e9:bd:52:e1:62:40:8d:76:29:82:1b:e7:78:3d:26: c6:2c:f6:95:f6:2d:35:b3:04:7a:0d:63:e5:08:23: fd:8e:8b:33:b7:c7:1a:aa:aa:1d:c7:6d:ed:2d:e6: 2c:4c:3f:e4:f6:44:4f:01:eb:87:b8:fc:bc:4f:f2: 81:6b:fd:7c:25:b3:f2:75:c1:d3:c1:0d:df:e5:b0: 0c:02:a0:b1:a6:b1:11:0e:df:22:98:5b:9d:9e:4e: 5c:82:23:ea:27:a4:28:08:a4:1c:eb:c5:c1:8c:7f: 97:7b:05:0c:4c:7a:d3:1e:c3:00:34:1b:68:c0:0c: 6b:df:90:f4:9f:5d:49:db:09:5c:4c:6f:7b:14:24: 6d:dd:33:22:21:7e:86:c3:0c:a5:7e:0e:ce:df:6f: 98:3e:eb:80:f1:40:a6:98:f2:e6:7a:07:9d:4b:8e: e7:66:85:e4:74:f4:f1:b1:e8:c0:54:91:2a:e0:a7: c1:e0:7a:9f:82:b5:8c:9d:e3:98:ee:d0:94:5c:74: 64:63:4f:a4:0f:fa:85:24:33:75:1b:db:3b:17:e5: 7c:7f:e6:af:de:46:bb:a3:e5:e5:f4:73:a2:67:0c: 03:7d:78:45:8f:7b:91:37:8d:33:96:78:10:ba:bc: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:88:35:FD:93:D6:A6:9B:8B:B4:7E:2F:4C:5F:FA:18:15:DB:D4:97 X509v3 Authority Key Identifier: keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:85:1b:bd:3b:fc:03:4f:68:27:71:17:fe:bf:9c:c7:2c:5b: 14:34:81:f9:f1:5b:33:53:92:11:e1:9a:27:87:76:ba:27:d2: aa:1c:54:61:0d:74:ea:bf:03:bd:7e:3a:9e:5c:ff:3d:58:74: 42:33:81:a3:f3:4c:f5:25:c7:b0:af:14:86:58:59:f5:44:14: 70:64:dc:4e:cc:d5:2b:2b:e9:6e:fd:79:10:fa:d4:e0:94:5c: a6:bb:c2:cc:7e:7e:fc:09:91:af:20:9d:7a:c1:5c:08:64:3a: c9:70:0d:3f:2a:dc:25:df:fb:3e:77:0b:7c:89:bb:9a:ef:be: 6c:c6:be:a9:25:b1:58:9b:16:9d:86:d2:ab:65:a5:0c:1f:9b: 78:6c:08:b4:5d:43:98:2b:89:9f:24:d8:61:10:aa:68:5c:88: 77:61:e9:70:55:b5:90:fd:03:21:a8:38:a0:5e:88:80:ed:d6: b4:1b:db:df:66:54:ad:4e:f2:e7:6f:57:19:73:3b:2b:b0:34: 6e:08:5a:ec:d8:98:7f:4b:2d:25:30:7a:46:1a:11:81:fc:db: 99:81:3a:c0:0e:05:5b:e0:8d:2e:d3:96:d5:6c:48:de:4f:13: 9b:c7:d1:fe:40:18:66:e8:ef:ac:da:b9:bb:0a:9c:ff:b1:80: 7c:6c:dd:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxLiyPSWnPwLw6MveOdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWZjZjkyNzk4YTlkYmIzMGFiZDJiOWZhMjliZmE4ODA0 MjIwZjMwHhcNMjUxMjIxMDIwMDMyWhcNMjUxMjIyMDIwMDMyWjAzMTEwLwYDVQQD EygxMzg4MzVmZDkzZDZhNjliOGJiNDdlMmY0YzVmZmExODE1ZGJkNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tqiqGPgW49S4B0rkSrpvVLhYkCN dimCG+d4PSbGLPaV9i01swR6DWPlCCP9joszt8caqqodx23tLeYsTD/k9kRPAeuH uPy8T/KBa/18JbPydcHTwQ3f5bAMAqCxprERDt8imFudnk5cgiPqJ6QoCKQc68XB jH+XewUMTHrTHsMANBtowAxr35D0n11J2wlcTG97FCRt3TMiIX6Gwwylfg7O32+Y PuuA8UCmmPLmegedS47nZoXkdPTxsejAVJEq4KfB4HqfgrWMneOY7tCUXHRkY0+k D/qFJDN1G9s7F+V8f+av3ka7o+Xl9HOiZwwDfXhFj3uRN40zlngQurxLjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOINf2T1qabi7R+L0xf+hgV29SXMB8GA1UdIwQY MBaAFJVfz5J5ip27MKvSufopv6iAQiDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2Et MDUxODg2ZDBlZDRlLzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2EtMDUxODg2ZDBlZDRl LzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroUbvTv8 A09oJ3EX/r+cxyxbFDSB+fFbM1OSEeGaJ4d2uifSqhxUYQ106r8DvX46nlz/PVh0 QjOBo/NM9SXHsK8UhlhZ9UQUcGTcTszVKyvpbv15EPrU4JRcprvCzH5+/AmRryCd esFcCGQ6yXANPyrcJd/7PncLfIm7mu++bMa+qSWxWJsWnYbSq2WlDB+beGwItF1D mCuJnyTYYRCqaFyId2HpcFW1kP0DIag4oF6IgO3WtBvb32ZUrU7y529XGXM7K7A0 bgha7NiYf0stJTB6RhoRgfzbmYE6wA4FW+CNLtOW1WxI3k8Tm8fR/kAYZujvrNq5 uwqc/7GAfGzd8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:52 2025 by rpki-client