This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json) Hash identifier: +XSn34LasuzsYHD+p/9WQrOLSC5Zqsri/LHlfPCwaS4= Subject key identifier: 1E:38:6B:42:3F:82:7A:C0:CA:02:33:5C:11:19:D0:05:FE:96:90:20 Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Certificate serial: 019B38A2C2E1FF5276F3053D227CBD7A92A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 22:02:29 +0000 Manifest this update: Fri 19 Dec 2025 22:02:29 +0000 Manifest next update: Sat 20 Dec 2025 22:02:29 +0000 Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=) 2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=) 3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: Zz0olF+LxGqkf9U/+RR4g/1mJL9gvcqZTCKOr+7KEe4=) 4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=) 5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:c2:e1:ff:52:76:f3:05:3d:22:7c:bd:7a:92:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Validity Not Before: Dec 19 22:02:29 2025 GMT Not After : Dec 20 22:02:29 2025 GMT Subject: CN=1e386b423f827ac0ca02335c1119d005fe969020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:c8:27:07:a5:8b:f8:d9:e0:ce:ec:8e:d4: 8e:10:79:64:b5:8e:f2:22:53:de:dd:0a:98:cf:22: b8:81:7a:4b:02:6d:de:b4:9b:11:51:08:e7:62:6b: bd:bd:f9:da:4a:20:ed:7e:95:0d:92:94:f3:ef:1c: f7:51:62:45:05:e0:66:83:74:1a:db:b3:2d:ff:b9: 49:35:b9:0c:c8:f3:b4:a9:75:e3:a8:71:19:60:46: bb:50:61:84:e6:c5:43:b3:45:46:4b:5b:99:89:2b: 4c:04:5f:89:0e:97:4a:02:b3:b9:49:db:6e:f5:40: 82:15:3d:c8:f0:01:44:bd:94:cb:74:64:f6:f1:b5: ad:94:15:84:c5:8b:53:17:e0:3b:dc:76:1b:a7:7c: 5e:4e:ab:d0:56:c0:ba:74:13:3b:f5:b8:4b:83:23: 68:1d:7b:20:24:f2:57:d3:8e:fc:b3:f4:3c:b8:7a: eb:ce:a4:51:05:19:90:4a:e4:c1:d7:8e:4f:d8:24: 49:65:74:75:48:5d:e6:98:37:57:78:27:9c:c8:20: 2a:29:4f:4c:98:e4:43:8f:21:89:f9:3f:cd:e5:7b: fa:60:c0:f1:d0:09:72:2d:a4:1f:78:3f:9d:ec:fb: 4d:ba:3c:6d:32:1b:60:da:9b:f6:ce:9e:9f:2f:5c: cf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:6B:42:3F:82:7A:C0:CA:02:33:5C:11:19:D0:05:FE:96:90:20 X509v3 Authority Key Identifier: keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d5:76:e0:a3:c9:09:1b:3d:43:23:a6:25:82:ed:98:01:58: 8d:dd:46:3e:d1:2f:44:c5:d5:54:46:42:a5:ab:e1:fe:f8:9d: 10:a9:09:a2:f0:0a:ab:bc:1e:5a:1f:cf:b4:ff:68:71:70:3b: b5:ae:3a:89:d8:99:fa:1e:73:00:f1:84:01:d1:5e:f0:9e:ad: 15:33:c6:cd:2c:07:f8:c3:34:15:8d:d3:0b:8c:a1:53:b0:58: 3f:2c:e9:18:d4:04:e7:72:a5:60:33:80:41:05:ca:24:ea:1e: 47:ec:41:3e:09:e8:45:3b:11:2b:5e:d7:84:76:80:f9:bb:1a: 8f:1b:6d:a8:78:27:11:12:6d:60:e9:33:43:ec:5c:29:db:bb: 4b:de:f3:0e:fe:09:b5:86:d9:bd:65:4f:7f:fe:5d:79:eb:63: 8e:65:88:ef:f9:83:24:2e:cb:8b:a7:8a:9f:ad:99:d6:7a:f8: 9f:d6:65:45:37:be:8b:b5:31:03:88:5f:f9:15:90:3b:dc:90: 20:3a:ec:2d:ce:4b:f7:c3:82:eb:33:5e:85:3d:b3:dd:df:41: 9f:63:56:cd:44:45:c8:13:27:bd:08:a4:5e:5e:dc:27:75:4e: ad:48:02:30:e7:a3:2a:00:11:80:e3:89:c7:29:a5:a7:0e:ef: 55:8f:5b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4osLh/1J28wU9Iny9epKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk MjYxYzkwHhcNMjUxMjE5MjIwMjI5WhcNMjUxMjIwMjIwMjI5WjAzMTEwLwYDVQQD EygxZTM4NmI0MjNmODI3YWMwY2EwMjMzNWMxMTE5ZDAwNWZlOTY5MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGLIJweli/jZ4M7sjtSOEHlktY7y IlPe3QqYzyK4gXpLAm3etJsRUQjnYmu9vfnaSiDtfpUNkpTz7xz3UWJFBeBmg3Qa 27Mt/7lJNbkMyPO0qXXjqHEZYEa7UGGE5sVDs0VGS1uZiStMBF+JDpdKArO5Sdtu 9UCCFT3I8AFEvZTLdGT28bWtlBWExYtTF+A73HYbp3xeTqvQVsC6dBM79bhLgyNo HXsgJPJX0478s/Q8uHrrzqRRBRmQSuTB145P2CRJZXR1SF3mmDdXeCecyCAqKU9M mORDjyGJ+T/N5Xv6YMDx0AlyLaQfeD+d7PtNujxtMhtg2pv2zp6fL1zPxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB44a0I/gnrAygIzXBEZ0AX+lpAgMB8GA1UdIwQY MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9V24KPJ CRs9QyOmJYLtmAFYjd1GPtEvRMXVVEZCpavh/vidEKkJovAKq7weWh/PtP9ocXA7 ta46idiZ+h5zAPGEAdFe8J6tFTPGzSwH+MM0FY3TC4yhU7BYPyzpGNQE53KlYDOA QQXKJOoeR+xBPgnoRTsRK17XhHaA+bsajxttqHgnERJtYOkzQ+xcKdu7S97zDv4J tYbZvWVPf/5deetjjmWI7/mDJC7Li6eKn62Z1nr4n9ZlRTe+i7UxA4hf+RWQO9yQ IDrsLc5L98OC6zNehT2z3d9Bn2NWzURFyBMnvQikXl7cJ3VOrUgCMOejKgARgOOJ xymlpw7vVY9bFA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:40 2025 by rpki-client