This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json) Hash identifier: 98ymrOjshgqA11Jk8uIsRJQPX7qNGYp6BHI64aO6EcY= Subject key identifier: D9:26:43:15:54:DD:98:2E:51:E0:02:88:64:F6:82:35:E0:D4:D5:B2 Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf Certificate serial: 019B766DD08B539ED8478287BDCB642CE2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft Manifest number: 0D1D Signing time: Wed 31 Dec 2025 22:01:06 +0000 Manifest this update: Wed 31 Dec 2025 22:01:06 +0000 Manifest next update: Thu 01 Jan 2026 22:01:06 +0000 Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=) 2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: u1pZa/rfBpChkScqbCdyfK02XBdcGaSlPjJ9j4pr07Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:d0:8b:53:9e:d8:47:82:87:bd:cb:64:2c:e2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf Validity Not Before: Dec 31 22:01:06 2025 GMT Not After : Jan 1 22:01:06 2026 GMT Subject: CN=d926431554dd982e51e0028864f68235e0d4d5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:94:26:a7:df:0e:44:4b:1d:96:16:2a:46: 33:3c:53:f5:c2:67:5b:69:3c:f5:65:86:9f:66:21: c7:ba:94:46:ef:67:91:62:de:6f:87:c3:4e:f6:29: c0:cf:88:c2:d4:91:fc:f7:2b:c1:33:48:b8:1d:e9: c8:07:47:e1:a9:3c:b9:ba:1a:25:5d:db:04:1d:21: 0d:d9:63:2d:30:1f:7e:6b:c8:54:28:f6:7c:d2:48: c3:fc:c1:ec:93:2b:36:62:63:0f:50:39:b1:3b:10: 62:66:e2:2d:06:df:09:09:5d:46:f0:52:33:27:bc: e6:04:96:70:52:1a:d9:0c:52:68:bd:c2:26:3e:9b: 05:6a:08:eb:b1:2a:30:e4:92:78:d3:c6:b9:f6:fc: aa:f0:a7:c3:03:be:4a:26:8e:38:ab:f1:6b:d9:cc: 37:13:5d:8e:a6:6d:22:85:9c:5f:43:fe:d8:d6:b9: 59:b1:73:06:da:66:41:39:03:5f:60:fe:34:97:e6: 2d:f1:d3:09:0c:5c:96:63:73:f1:43:33:b5:fd:c6: f6:3a:6f:ea:fa:02:ba:7c:14:8b:d6:f9:2d:a8:74: d3:61:0a:d7:25:c6:fd:6e:9c:3b:a1:69:64:8a:5b: 63:51:98:2e:30:ef:dc:3c:23:4a:fd:18:c6:11:ae: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:26:43:15:54:DD:98:2E:51:E0:02:88:64:F6:82:35:E0:D4:D5:B2 X509v3 Authority Key Identifier: keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d2:a6:e5:b2:12:ce:b2:fa:fd:cb:24:84:d9:f2:3c:7f:27: fc:8c:fe:e4:a3:3c:78:2a:e6:ef:86:95:b1:40:2b:c6:53:9d: bc:44:82:ac:43:55:38:65:c6:41:20:49:1d:8d:d3:31:59:43: 62:d6:53:03:ec:1b:7d:07:1a:a0:13:64:f3:e1:ce:be:eb:ec: 67:c5:c1:ea:96:d9:77:b6:53:36:c0:18:a2:e1:2a:6f:2d:a5: 34:a3:bf:63:df:68:42:56:a4:62:3a:66:b6:2f:6a:9c:30:5e: b8:1a:16:e6:28:98:c1:ab:8e:9d:1b:ef:f0:ff:5c:8d:bf:12: 3c:bd:8e:5c:86:d6:c5:14:94:0e:bd:f7:8f:06:e0:0c:f9:37: fa:ba:f0:84:e4:f3:51:29:b6:7b:16:9f:7b:81:fe:53:33:55: 21:ab:dc:7b:b0:4c:0e:04:b3:9c:ab:3b:f7:f0:a9:dd:69:c5: 22:e8:18:c8:af:84:b9:b2:12:98:db:12:53:ef:8f:9d:b7:64: ad:7c:60:a8:03:5c:b7:9e:9b:6b:d0:4e:92:c4:82:b2:7d:77: fc:40:94:13:da:96:d7:27:d9:66:41:ae:95:dc:dc:74:2a:54: d8:5b:a4:54:92:28:4b:c8:d0:3e:0b:ec:c3:69:87:44:13:e8: ff:5a:7d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bdCLU57YR4KHvctkLOLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTkwNGFjNjA5M2UxZTIyOWEwNzRjNTA1MDZmZmVjZGEw MTBjY2YwHhcNMjUxMjMxMjIwMTA2WhcNMjYwMTAxMjIwMTA2WjAzMTEwLwYDVQQD EyhkOTI2NDMxNTU0ZGQ5ODJlNTFlMDAyODg2NGY2ODIzNWUwZDRkNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtniUJqffDkRLHZYWKkYzPFP1wmdb aTz1ZYafZiHHupRG72eRYt5vh8NO9inAz4jC1JH89yvBM0i4HenIB0fhqTy5uhol XdsEHSEN2WMtMB9+a8hUKPZ80kjD/MHskys2YmMPUDmxOxBiZuItBt8JCV1G8FIz J7zmBJZwUhrZDFJovcImPpsFagjrsSow5JJ408a59vyq8KfDA75KJo44q/Fr2cw3 E12Opm0ihZxfQ/7Y1rlZsXMG2mZBOQNfYP40l+Yt8dMJDFyWY3PxQzO1/cb2Om/q +gK6fBSL1vktqHTTYQrXJcb9bpw7oWlkiltjUZguMO/cPCNK/RjGEa4eqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkmQxVU3ZguUeACiGT2gjXg1NWyMB8GA1UdIwQY MBaAFJWpBKxgk+HiKaB0xQUG/+zaAQzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFrRXJHQ1Q0ZUlwb0hURkJRYl83Tm9CRE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80OGY5OWUtMWExMC00NWMzLWFhMzQt NGNkMTVjYmM1MDFiLzEvbGFrRXJHQ1Q0ZUlwb0hURkJRYl83Tm9CRE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80OGY5OWUtMWExMC00NWMzLWFhMzQtNGNkMTVjYmM1MDFi LzEvbGFrRXJHQ1Q0ZUlwb0hURkJRYl83Tm9CRE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdKm5bIS zrL6/cskhNnyPH8n/Iz+5KM8eCrm74aVsUArxlOdvESCrENVOGXGQSBJHY3TMVlD YtZTA+wbfQcaoBNk8+HOvuvsZ8XB6pbZd7ZTNsAYouEqby2lNKO/Y99oQlakYjpm ti9qnDBeuBoW5iiYwauOnRvv8P9cjb8SPL2OXIbWxRSUDr33jwbgDPk3+rrwhOTz USm2exafe4H+UzNVIavce7BMDgSznKs79/Cp3WnFIugYyK+EubISmNsSU++Pnbdk rXxgqANct56ba9BOksSCsn13/ECUE9qW1yfZZkGuldzcdCpU2FukVJIoS8jQPgvs w2mHRBPo/1p9RQ== -----END CERTIFICATE-----Generated at Thu Jan 1 06:21:25 2026 by rpki-client