This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft File: LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json) Hash identifier: IZbsVFybRRkgjrPPCJO5wkM8S8T8hgZRpEjlA4vB9Is= Subject key identifier: 92:79:A6:7E:09:35:B5:DC:B2:7B:8F:50:AC:25:7B:83:8F:8D:1A:DE Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31 Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031 Certificate serial: 019B3BD92FB022C90213E429CA9E62741C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft Manifest number: 1434 Signing time: Sat 20 Dec 2025 13:00:47 +0000 Manifest this update: Sat 20 Dec 2025 13:00:47 +0000 Manifest next update: Sun 21 Dec 2025 13:00:47 +0000 Files and hashes: 1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=) 2: G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa (hash: asZN9tI3ws8BcQXeW3lamrTpn0W8Ef30eRexdJjOvPw=) 3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: LeRtzvAxjbFledw7wnDLWzYb/8bf6fF47OJgkEJLijw=) 4: tVeA1QW6o2_4cAAoeOMN60OC09M.roa (hash: K+ciN3DFQxqGOLGpRd4/ZhXkYH4OU+8ws5sujZeJtPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:2f:b0:22:c9:02:13:e4:29:ca:9e:62:74:1c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031 Validity Not Before: Dec 20 13:00:47 2025 GMT Not After : Dec 21 13:00:47 2025 GMT Subject: CN=9279a67e0935b5dcb27b8f50ac257b838f8d1ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:e8:bb:49:df:b7:d2:cb:cb:79:11:4b:7a: 91:33:47:b4:32:10:10:12:38:1d:6b:82:17:b7:e9: 6d:5d:6d:d3:72:25:72:d9:29:a6:0f:ef:fb:59:a0: 4c:b9:40:10:66:48:5a:41:a5:53:30:e1:d6:41:3d: 33:9b:c1:c0:14:55:fc:c8:89:bf:14:6f:02:22:7b: f1:7c:2a:5c:28:5c:ee:36:7d:98:b5:ae:72:90:de: 8d:4a:de:86:3d:a1:b9:09:03:e8:c5:f5:a8:3e:1a: 5c:df:66:5e:7c:90:b9:cf:32:76:72:83:db:de:04: 2c:b4:d3:2a:29:e5:cb:e9:63:ee:9f:db:79:9a:c6: b6:c1:b3:ab:53:0d:54:a7:cd:e4:35:05:3b:ad:3c: 9b:d6:08:f8:a2:90:80:7e:4a:c5:13:14:9f:7d:7f: ce:71:dd:01:66:9b:8a:90:cd:18:34:33:00:a9:c0: a1:72:b1:5f:1b:1b:24:6e:d7:c4:5d:9c:f9:09:28: 63:12:71:0f:22:b8:2c:6e:d4:25:b3:f0:ac:3c:ae: 9e:0a:6d:2c:9b:8e:9a:e6:a6:49:d4:1b:ba:e1:26: 30:a5:19:97:ea:eb:1c:b4:27:c4:ad:fa:9d:fc:03: 3b:c6:70:68:e7:1b:a3:90:7d:cf:ad:0d:40:8e:71: 4b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:79:A6:7E:09:35:B5:DC:B2:7B:8F:50:AC:25:7B:83:8F:8D:1A:DE X509v3 Authority Key Identifier: keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:39:a6:fc:7e:78:ec:ab:00:c1:c9:88:e7:97:30:23:5b:59: ee:99:a8:26:b9:d0:c2:b0:2f:f2:ec:50:14:e1:cf:cd:56:b7: cd:81:49:90:65:c6:cc:08:6f:78:d5:ed:8e:f1:5c:43:86:59: f8:cf:73:16:7d:1f:dd:37:b1:36:6a:40:b9:3f:2c:56:57:05: 74:e2:7d:92:47:01:c0:1f:88:94:ce:d9:18:b1:df:cf:0a:45: 1f:c6:d7:4e:85:4c:62:92:e0:4b:c0:7d:1a:62:7b:9f:92:ac: 98:ce:23:00:e5:f9:b1:d3:ef:8b:7b:b0:d8:11:65:ff:49:0a: 3c:42:24:d1:61:a8:ce:54:a5:ac:50:a3:8b:54:5c:3d:74:01: 43:0a:ad:53:35:41:c8:d2:22:46:f2:a2:ac:18:22:6f:7b:bc: 66:54:1b:f3:82:c7:d6:5b:b6:69:d3:a3:de:b3:49:1c:d7:0f: 88:b7:43:a4:69:98:ca:80:c2:42:96:d3:de:19:76:d1:47:d5: 0f:6c:e2:1b:3b:7d:21:52:dc:8e:43:99:ae:81:4b:9b:a4:5d: c9:19:fb:4e:46:e4:d0:62:df:a9:ab:ef:cf:63:a1:e6:66:df: 73:1b:a4:40:07:53:ed:ad:a7:39:7c:e7:87:40:c1:6c:8a:5a: b7:fd:5c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72S+wIskCE+Qpyp5idByPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDNkYWM4ZWE1NTY5MzQzOWRkMWI4YjQ4MTJiYTcxODM0 ZjEwMzEwHhcNMjUxMjIwMTMwMDQ3WhcNMjUxMjIxMTMwMDQ3WjAzMTEwLwYDVQQD Eyg5Mjc5YTY3ZTA5MzViNWRjYjI3YjhmNTBhYzI1N2I4MzhmOGQxYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk97ou0nft9LLy3kRS3qRM0e0MhAQ Ejgda4IXt+ltXW3TciVy2SmmD+/7WaBMuUAQZkhaQaVTMOHWQT0zm8HAFFX8yIm/ FG8CInvxfCpcKFzuNn2Yta5ykN6NSt6GPaG5CQPoxfWoPhpc32ZefJC5zzJ2coPb 3gQstNMqKeXL6WPun9t5msa2wbOrUw1Up83kNQU7rTyb1gj4opCAfkrFExSffX/O cd0BZpuKkM0YNDMAqcChcrFfGxskbtfEXZz5CShjEnEPIrgsbtQls/CsPK6eCm0s m46a5qZJ1Bu64SYwpRmX6usctCfErfqd/AM7xnBo5xujkH3PrQ1AjnFLNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ5pn4JNbXcsnuPUKwle4OPjRreMB8GA1UdIwQY MBaAFC5D2sjqVWk0Od0bi0gSunGDTxAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQt MjZjN2M5NjNhNzY5LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQtMjZjN2M5NjNhNzY5 LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjmm/H54 7KsAwcmI55cwI1tZ7pmoJrnQwrAv8uxQFOHPzVa3zYFJkGXGzAhveNXtjvFcQ4ZZ +M9zFn0f3TexNmpAuT8sVlcFdOJ9kkcBwB+IlM7ZGLHfzwpFH8bXToVMYpLgS8B9 GmJ7n5KsmM4jAOX5sdPvi3uw2BFl/0kKPEIk0WGozlSlrFCji1RcPXQBQwqtUzVB yNIiRvKirBgib3u8ZlQb84LH1lu2adOj3rNJHNcPiLdDpGmYyoDCQpbT3hl20UfV D2ziGzt9IVLcjkOZroFLm6RdyRn7Tkbk0GLfqavvz2Oh5mbfcxukQAdT7a2nOXzn h0DBbIpat/1c2A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:02:47 2025 by rpki-client