This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json) Hash identifier: 2Id8vNj6FyxAdysyj9xXnoq0tGj8rTVkwfOhneEVSRQ= Subject key identifier: A0:96:FF:D7:CD:64:7F:49:1B:71:92:60:7A:90:4B:51:83:C9:AE:C8 Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945 Certificate serial: 019B7146E4896C577BBD6F28B6AB193C3162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft Manifest number: 02F3 Signing time: Tue 30 Dec 2025 22:00:29 +0000 Manifest this update: Tue 30 Dec 2025 22:00:29 +0000 Manifest next update: Wed 31 Dec 2025 22:00:29 +0000 Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: Eeltxgorv0EsC73TAuZIuW0dO/FjUgEsJ14Uq3kTBTA=) 2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:46:e4:89:6c:57:7b:bd:6f:28:b6:ab:19:3c:31:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945 Validity Not Before: Dec 30 22:00:29 2025 GMT Not After : Dec 31 22:00:29 2025 GMT Subject: CN=a096ffd7cd647f491b7192607a904b5183c9aec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:4d:50:27:7f:ec:f6:9f:7b:4c:12:ff:d5: e7:ff:6d:46:e0:ed:9a:03:12:b7:2f:99:32:2d:dd: bd:73:ce:6b:95:71:50:d8:d4:6f:29:ce:35:93:77: bd:cc:0f:f8:a9:5b:98:d7:7b:fa:63:ab:43:79:f0: 44:f6:f0:18:65:6d:d2:cf:4f:24:8a:79:63:01:f7: 03:50:67:4a:27:e1:bb:1b:71:62:b4:fc:6f:a2:3b: 16:0a:0c:34:d4:0c:54:7d:78:f7:e2:de:0d:b5:00: 94:27:17:69:d0:64:64:be:b8:50:6f:0a:06:bc:05: 2c:a5:f3:00:35:4c:68:36:e5:7b:46:fb:f6:ef:93: b7:74:85:55:92:dd:e0:31:78:ea:19:13:5d:d1:04: 88:e6:0b:4b:6f:5c:b3:9d:26:50:2b:03:5b:59:92: 2b:d2:dd:24:ed:d5:0a:78:c2:dc:38:aa:33:42:b1: a9:89:d7:c5:5b:8e:2f:52:62:51:be:44:f4:6f:b8: 29:30:52:1c:a7:9f:7f:25:d5:45:a6:b0:0c:d2:97: ad:a7:58:62:2a:5c:bd:8f:c3:50:7f:58:4b:8c:34: 9c:d6:a5:c6:2c:d5:c3:5e:ec:fe:f0:1d:b1:4c:e1: 58:c2:f8:14:1d:44:ed:ac:9c:87:36:f4:04:72:20: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:FF:D7:CD:64:7F:49:1B:71:92:60:7A:90:4B:51:83:C9:AE:C8 X509v3 Authority Key Identifier: keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8f:85:76:be:b9:35:7d:b5:a7:26:3f:2f:7a:56:a1:0d:4b: 26:ed:a8:2e:d6:99:06:b2:99:e6:60:5e:3f:e4:ba:4a:24:a4: 51:97:58:04:c6:9f:85:b2:a6:42:7d:d5:44:f4:9c:d3:1d:60: ca:15:56:9a:28:54:5d:98:38:cf:30:73:f8:7a:09:64:34:65: f2:b4:ed:c7:76:b4:91:f0:6f:88:86:69:dc:d4:11:4e:51:e5: 85:ca:78:57:60:d5:fc:e7:9d:f5:14:af:1d:b5:98:ee:d0:e8: 90:46:70:2b:d0:64:f7:0f:9a:8d:49:99:82:6c:df:4f:f7:9f: 80:e3:0a:c0:23:c2:21:af:1e:50:03:49:b9:df:7c:d4:2b:59: 53:bc:f3:f6:da:04:0b:69:b4:35:30:81:60:a0:30:96:34:a4: b9:ec:67:83:50:aa:b7:62:41:8d:08:3a:3f:9e:13:34:d1:c9: 5a:a2:e0:32:65:90:5a:9c:6d:da:20:8f:96:55:96:3e:44:53: 92:36:d4:6e:8e:d7:42:82:5b:51:b2:bb:8d:62:75:eb:23:cc: 3b:65:72:1b:7c:5e:f0:03:7a:94:dc:9d:ee:98:f0:7c:85:55: 54:51:ae:d5:b6:69:6e:79:05:a4:8d:0b:13:2e:78:5c:8a:50: d7:5b:c7:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRuSJbFd7vW8otqsZPDFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMDRhNTU0MDgyNDI2OWJlNWMxMWYyMDEyOGI4NjQxNGNk NTU5NDUwHhcNMjUxMjMwMjIwMDI5WhcNMjUxMjMxMjIwMDI5WjAzMTEwLwYDVQQD EyhhMDk2ZmZkN2NkNjQ3ZjQ5MWI3MTkyNjA3YTkwNGI1MTgzYzlhZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPtNUCd/7Pafe0wS/9Xn/21G4O2a AxK3L5kyLd29c85rlXFQ2NRvKc41k3e9zA/4qVuY13v6Y6tDefBE9vAYZW3Sz08k inljAfcDUGdKJ+G7G3FitPxvojsWCgw01AxUfXj34t4NtQCUJxdp0GRkvrhQbwoG vAUspfMANUxoNuV7Rvv275O3dIVVkt3gMXjqGRNd0QSI5gtLb1yznSZQKwNbWZIr 0t0k7dUKeMLcOKozQrGpidfFW44vUmJRvkT0b7gpMFIcp59/JdVFprAM0petp1hi Kly9j8NQf1hLjDSc1qXGLNXDXuz+8B2xTOFYwvgUHUTtrJyHNvQEciCH2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCW/9fNZH9JG3GSYHqQS1GDya7IMB8GA1UdIwQY MBaAFC0EpVQIJCab5cEfIBKLhkFM1VlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDct Y2ViMjdiZmNiOTQ3LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDctY2ViMjdiZmNiOTQ3 LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo+Fdr65 NX21pyY/L3pWoQ1LJu2oLtaZBrKZ5mBeP+S6SiSkUZdYBMafhbKmQn3VRPSc0x1g yhVWmihUXZg4zzBz+HoJZDRl8rTtx3a0kfBviIZp3NQRTlHlhcp4V2DV/Oed9RSv HbWY7tDokEZwK9Bk9w+ajUmZgmzfT/efgOMKwCPCIa8eUANJud981CtZU7zz9toE C2m0NTCBYKAwljSkuexng1Cqt2JBjQg6P54TNNHJWqLgMmWQWpxt2iCPllWWPkRT kjbUbo7XQoJbUbK7jWJ16yPMO2VyG3xe8AN6lNyd7pjwfIVVVFGu1bZpbnkFpI0L Ey54XIpQ11vH4w== -----END CERTIFICATE-----Generated at Wed Dec 31 01:50:17 2025 by rpki-client