This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json) Hash identifier: zG+2dCK/1B8cwPRE6IasXiCZTh1pxkxdY+/98q9PvHg= Subject key identifier: 17:33:18:7D:3D:2C:C0:07:D0:3F:D2:BF:98:C4:94:2D:90:76:66:02 Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945 Certificate serial: 019B4E84A7B6389E41788FD1C2DE4A94C4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft Manifest number: 02E1 Signing time: Wed 24 Dec 2025 04:01:15 +0000 Manifest this update: Wed 24 Dec 2025 04:01:15 +0000 Manifest next update: Thu 25 Dec 2025 04:01:15 +0000 Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: /L0pdxPLKdP6ZwFAIutYvXylRUD6RF1527cFsDVztV0=) 2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:a7:b6:38:9e:41:78:8f:d1:c2:de:4a:94:c4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945 Validity Not Before: Dec 24 04:01:15 2025 GMT Not After : Dec 25 04:01:15 2025 GMT Subject: CN=1733187d3d2cc007d03fd2bf98c4942d90766602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:56:3c:18:03:30:5b:b2:59:38:dd:75:46: 52:68:19:ef:68:26:d8:8c:47:b0:4f:f7:ef:94:ec: 44:2b:bd:09:b9:be:b2:96:50:64:99:9e:83:cd:94: a9:bf:5c:f5:60:1c:26:d1:c8:5e:1e:1e:1f:2b:59: db:72:9c:3f:38:8a:e7:6d:ea:6f:d4:2b:57:41:08: 12:62:38:75:1e:57:54:a6:49:64:08:5c:f0:94:49: 28:13:d7:e6:2a:14:2b:8b:d9:a8:0a:d8:2b:cb:4b: 20:8b:f8:80:5d:05:d1:8d:8c:2c:15:6a:91:15:d8: 8a:ee:df:3d:65:ec:50:02:7e:4c:07:7e:21:aa:7e: 48:6b:80:5b:b2:e8:64:fa:03:4c:e2:00:af:97:e5: 0b:d0:ff:64:d4:91:77:19:38:67:e1:54:67:2c:8f: 2f:50:0c:0b:98:4c:7c:b1:81:86:0c:36:52:73:81: ec:ea:09:49:66:48:8e:40:9a:e4:f1:01:57:a8:26: cf:8c:8e:5e:05:ff:92:08:63:51:18:33:d9:34:b6: 60:9c:b9:01:cb:7b:6e:8d:b6:ae:69:67:17:d4:78: 38:6b:30:bd:ad:1d:0a:05:67:05:99:56:22:23:cd: 96:3c:84:5e:c3:d9:0f:82:f5:6a:d7:1c:16:f6:d4: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:18:7D:3D:2C:C0:07:D0:3F:D2:BF:98:C4:94:2D:90:76:66:02 X509v3 Authority Key Identifier: keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:00:bc:ac:42:e4:b2:11:0b:6a:79:51:2d:f0:5f:13:ab:cd: 93:2b:c9:ad:4a:f2:3d:df:94:93:4b:2a:ab:13:55:7e:26:6b: b8:89:a3:36:59:1d:6f:90:55:be:b4:4e:f3:af:2a:11:65:c9: ac:73:a2:e4:08:65:28:bd:c0:de:b3:cb:e2:11:6d:58:c7:ba: 75:b5:e0:bc:bc:06:1e:23:71:ae:92:57:fa:0e:61:29:0b:f3: f5:22:ac:9a:2d:ca:41:26:b8:0a:82:12:6f:c3:0d:95:ad:23: 73:b3:21:7d:79:52:23:9a:d3:c0:e2:90:5d:e4:6e:29:51:00: f5:ba:5e:a5:c0:62:ea:03:87:62:b8:82:76:bb:55:e6:2b:1d: 9d:74:da:05:eb:a8:9d:a4:09:f6:db:3c:be:87:77:95:26:c5: 10:4e:a8:f5:91:7d:37:78:88:ed:b2:83:73:eb:07:91:23:a3: 64:fb:13:14:f8:6b:67:aa:c6:60:03:37:97:5b:39:02:70:95: b0:43:72:ab:dd:27:95:35:58:cd:35:1e:97:e5:72:35:5f:34: 10:bb:7c:2f:e4:8f:f4:dd:52:e0:7b:04:9c:52:13:43:82:e3: 13:ce:72:39:26:e8:40:2c:fe:93:d6:3c:aa:01:d3:d1:38:58: e0:1b:53:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhKe2OJ5BeI/Rwt5KlMSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMDRhNTU0MDgyNDI2OWJlNWMxMWYyMDEyOGI4NjQxNGNk NTU5NDUwHhcNMjUxMjI0MDQwMTE1WhcNMjUxMjI1MDQwMTE1WjAzMTEwLwYDVQQD EygxNzMzMTg3ZDNkMmNjMDA3ZDAzZmQyYmY5OGM0OTQyZDkwNzY2NjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBlWPBgDMFuyWTjddUZSaBnvaCbY jEewT/fvlOxEK70Jub6yllBkmZ6DzZSpv1z1YBwm0cheHh4fK1nbcpw/OIrnbepv 1CtXQQgSYjh1HldUpklkCFzwlEkoE9fmKhQri9moCtgry0sgi/iAXQXRjYwsFWqR FdiK7t89ZexQAn5MB34hqn5Ia4Bbsuhk+gNM4gCvl+UL0P9k1JF3GThn4VRnLI8v UAwLmEx8sYGGDDZSc4Hs6glJZkiOQJrk8QFXqCbPjI5eBf+SCGNRGDPZNLZgnLkB y3tujbauaWcX1Hg4azC9rR0KBWcFmVYiI82WPIRew9kPgvVq1xwW9tQvbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBczGH09LMAH0D/Sv5jElC2QdmYCMB8GA1UdIwQY MBaAFC0EpVQIJCab5cEfIBKLhkFM1VlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDct Y2ViMjdiZmNiOTQ3LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDctY2ViMjdiZmNiOTQ3 LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAC8rELk shELanlRLfBfE6vNkyvJrUryPd+Uk0sqqxNVfiZruImjNlkdb5BVvrRO868qEWXJ rHOi5AhlKL3A3rPL4hFtWMe6dbXgvLwGHiNxrpJX+g5hKQvz9SKsmi3KQSa4CoIS b8MNla0jc7MhfXlSI5rTwOKQXeRuKVEA9bpepcBi6gOHYriCdrtV5isdnXTaBeuo naQJ9ts8vod3lSbFEE6o9ZF9N3iI7bKDc+sHkSOjZPsTFPhrZ6rGYAM3l1s5AnCV sENyq90nlTVYzTUel+VyNV80ELt8L+SP9N1S4HsEnFITQ4LjE85yOSboQCz+k9Y8 qgHT0ThY4BtTLw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:41 2025 by rpki-client