This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json) Hash identifier: ivg413ldxz+peW7RUaQAd84T+9K4s/zz+I0OL2hjdKo= Subject key identifier: ED:0D:56:91:EA:14:7E:D4:8A:61:B5:4D:E1:60:03:A9:B0:90:7D:6F Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5 Certificate serial: 019B70D93ADFA90613BB736AB952624FD860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft Manifest number: 179F Signing time: Tue 30 Dec 2025 20:00:43 +0000 Manifest this update: Tue 30 Dec 2025 20:00:43 +0000 Manifest next update: Wed 31 Dec 2025 20:00:43 +0000 Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: QeNj3iYo4cUjCDdRYxYw7OFV+/sKCbn8/m+pEqfD7d0=) 2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:3a:df:a9:06:13:bb:73:6a:b9:52:62:4f:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5 Validity Not Before: Dec 30 20:00:43 2025 GMT Not After : Dec 31 20:00:43 2025 GMT Subject: CN=ed0d5691ea147ed48a61b54de16003a9b0907d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:0e:79:4d:4d:3c:62:6d:89:5a:44:30:45: 3b:b5:0f:6c:7a:f7:9d:24:90:85:12:72:fb:08:3e: 85:3c:ba:11:e8:21:08:92:cc:e5:29:dc:98:6b:11: 26:7d:7e:2d:e9:59:46:50:a8:1a:d4:fe:ac:ae:42: f1:b9:67:d9:de:7d:ae:ed:6e:a3:0a:c2:2c:e6:86: dc:b0:d0:77:65:96:da:55:1a:92:ce:e2:79:0f:d6: 06:a4:bc:06:9f:eb:da:65:88:aa:81:b1:db:df:1a: e2:dd:b2:44:a4:1c:14:66:55:1f:d0:b4:f1:e2:74: 25:d5:ef:54:f9:62:14:60:11:bf:49:1f:1b:1a:1a: 0f:99:cc:53:01:93:9a:af:81:e7:24:61:2a:2d:4d: ee:6d:ac:85:e9:e9:df:c0:67:ce:85:ce:a6:11:b3: 11:38:35:ee:6b:ac:c6:ec:63:3f:87:12:4d:fd:b0: bb:a8:a8:4d:36:6e:e3:29:af:0f:4b:92:04:57:c8: cd:89:e5:bb:60:7a:7b:f7:cd:54:2b:48:67:20:58: 85:74:d5:e7:01:9a:4a:fd:ad:c9:b5:82:27:d1:30: c7:e5:61:4a:b3:5b:f8:59:04:10:2d:37:32:7f:99: bf:1c:e5:2a:16:b4:30:ac:47:51:bf:a6:1a:ac:19: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0D:56:91:EA:14:7E:D4:8A:61:B5:4D:E1:60:03:A9:B0:90:7D:6F X509v3 Authority Key Identifier: keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:37:d1:da:d2:4e:fd:1d:07:b9:06:f8:03:b2:1d:4b:c0: 8b:ff:0b:42:13:9f:ec:2f:4a:3a:01:67:60:01:99:b3:f6:4a: 4a:d8:05:f0:19:6c:d7:e8:f9:11:7e:09:4c:68:7d:f1:51:5b: e8:82:a0:b8:b7:3c:8a:ca:83:a9:02:a1:e6:52:7e:33:5d:0c: 04:25:5c:cf:f8:3a:f9:d3:81:26:2c:8b:46:6d:74:dc:11:01: 3c:5f:8f:69:b2:8e:cd:17:96:9e:1b:e6:d5:04:ea:26:31:23: d1:a1:ae:3f:14:65:56:4d:79:af:7f:9d:3f:d9:2e:0c:e9:46: f4:dc:9f:e3:47:cd:9a:40:b0:fa:3f:42:31:db:66:61:80:be: 54:ac:8a:87:ad:7b:3f:bd:72:e4:b4:bd:d2:11:3c:44:04:ec: 17:de:0a:f6:48:fa:da:ed:55:e1:c6:3b:33:a7:90:c2:bb:a1: 50:94:5a:5b:d7:46:c4:5f:d2:0a:12:7f:df:23:91:a4:8a:ed: 75:31:b8:a8:64:61:e6:5f:26:ce:50:04:96:95:f1:9b:99:7e: 71:ff:65:d4:7e:e3:db:a7:a3:09:3d:22:c1:9b:2c:b9:55:03: 4f:da:f8:c0:de:62:fd:38:1f:d8:97:f8:7f:d7:d6:a6:17:57: 2d:26:68:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2TrfqQYTu3NquVJiT9hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi MDVmZTUwHhcNMjUxMjMwMjAwMDQzWhcNMjUxMjMxMjAwMDQzWjAzMTEwLwYDVQQD EyhlZDBkNTY5MWVhMTQ3ZWQ0OGE2MWI1NGRlMTYwMDNhOWIwOTA3ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+wOeU1NPGJtiVpEMEU7tQ9seved JJCFEnL7CD6FPLoR6CEIkszlKdyYaxEmfX4t6VlGUKga1P6srkLxuWfZ3n2u7W6j CsIs5obcsNB3ZZbaVRqSzuJ5D9YGpLwGn+vaZYiqgbHb3xri3bJEpBwUZlUf0LTx 4nQl1e9U+WIUYBG/SR8bGhoPmcxTAZOar4HnJGEqLU3ubayF6enfwGfOhc6mEbMR ODXua6zG7GM/hxJN/bC7qKhNNm7jKa8PS5IEV8jNieW7YHp7981UK0hnIFiFdNXn AZpK/a3JtYIn0TDH5WFKs1v4WQQQLTcyf5m/HOUqFrQwrEdRv6YarBmdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0NVpHqFH7UimG1TeFgA6mwkH1vMB8GA1UdIwQY MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1 LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANF430drS Tv0dB7kG+AOyHUvAi/8LQhOf7C9KOgFnYAGZs/ZKStgF8Bls1+j5EX4JTGh98VFb 6IKguLc8isqDqQKh5lJ+M10MBCVcz/g6+dOBJiyLRm103BEBPF+PabKOzReWnhvm 1QTqJjEj0aGuPxRlVk15r3+dP9kuDOlG9Nyf40fNmkCw+j9CMdtmYYC+VKyKh617 P71y5LS90hE8RATsF94K9kj62u1V4cY7M6eQwruhUJRaW9dGxF/SChJ/3yORpIrt dTG4qGRh5l8mzlAElpXxm5l+cf9l1H7j26ejCT0iwZssuVUDT9r4wN5i/Tgf2Jf4 f9fWphdXLSZoOQ== -----END CERTIFICATE-----Generated at Wed Dec 31 00:10:25 2025 by rpki-client