This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json) Hash identifier: 8KT55Q/+JpQhQ8XJPTWi/3vM1dSv5zg0+EY2oeEDUXc= Subject key identifier: 78:54:92:F9:03:D4:E1:01:65:6E:C8:EF:74:8E:01:A3:6B:B8:6B:AD Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1 Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1 Certificate serial: 019B5CAE40897FE7E9FA52C1D238D1B89886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft Manifest number: 0CC9 Signing time: Fri 26 Dec 2025 22:01:22 +0000 Manifest this update: Fri 26 Dec 2025 22:01:22 +0000 Manifest next update: Sat 27 Dec 2025 22:01:22 +0000 Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: 8nnXGq0MV4w7pbutGm4biwTNGUcJP3Mno0g7BEIQVuY=) 2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:40:89:7f:e7:e9:fa:52:c1:d2:38:d1:b8:98:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1 Validity Not Before: Dec 26 22:01:22 2025 GMT Not After : Dec 27 22:01:22 2025 GMT Subject: CN=785492f903d4e101656ec8ef748e01a36bb86bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:26:8b:c7:c8:83:5e:59:a0:5a:92:37:f6: 75:7f:fb:6c:0b:59:c0:28:64:33:2f:37:d6:16:18: 07:7a:32:ef:ad:9f:5a:e6:81:3a:c4:7a:f1:f7:8e: b1:6d:cb:68:91:06:2b:52:7a:25:28:e3:07:3f:a1: 03:d5:86:79:a1:11:87:17:3c:aa:ce:e6:6d:8c:79: 00:9b:9d:f2:88:40:a4:b8:fe:a8:a3:36:4e:c1:5f: cf:81:0c:06:32:e5:c3:d9:37:dc:7f:21:be:22:51: 77:ed:12:90:56:03:5e:7c:82:d0:b4:5d:7b:b1:f0: 8c:db:a0:aa:54:73:ea:09:2a:0e:c9:e1:6a:5c:2f: f4:c2:9f:a9:22:bc:38:52:9e:65:15:27:52:a2:48: 54:c3:6b:34:d2:18:04:4f:36:8a:f0:c8:71:f3:1d: f7:43:b3:e8:3e:70:eb:f0:2f:a9:37:44:68:b9:e4: c2:40:7d:1b:88:ec:5b:e6:b4:78:51:2a:f7:3d:32: 1a:47:8b:7e:63:eb:3c:b5:9d:bd:a0:04:5b:8b:17: 05:d9:7b:67:50:cc:d6:b2:66:01:6f:b5:82:11:5c: 13:2a:74:60:88:1d:32:33:9d:86:87:57:a8:1c:ff: d7:68:c4:32:4f:2d:49:cb:3f:a5:7a:ce:f1:98:82: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:54:92:F9:03:D4:E1:01:65:6E:C8:EF:74:8E:01:A3:6B:B8:6B:AD X509v3 Authority Key Identifier: keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cf:a9:8f:8b:d7:d7:db:ce:7d:d1:5f:a4:c4:34:f8:9c:4d: e1:67:5b:ae:7b:34:6b:e2:f8:a6:70:ce:0f:37:a6:86:b9:af: 8b:e8:58:da:84:18:d4:be:f0:4f:ee:1f:ce:d7:85:3f:f3:90: eb:7e:9c:49:b4:52:0f:c7:d9:b1:d0:d8:d0:8c:9f:5d:66:3b: 33:25:7e:a8:41:a9:ac:05:4e:4b:be:17:5f:f6:92:64:72:af: a5:39:69:a1:2c:fe:d6:d3:5b:76:e4:b8:f6:e6:ec:c0:43:43: ab:46:ac:16:01:ec:c7:4b:f9:91:ff:4c:eb:c2:eb:e7:7f:84: 54:c3:18:87:87:59:c4:7b:30:ef:69:50:c2:af:0f:ed:5e:c4: 4d:b9:eb:09:30:2b:4a:2e:f0:34:1c:ed:0f:3a:7a:9a:e4:bf: 11:40:36:bc:44:3f:2c:b1:ea:04:c6:5f:d6:a0:ad:5e:76:49: 9f:6a:a7:d1:88:2a:26:8b:a2:34:7b:18:b4:82:40:62:e6:2d: 0a:2d:2a:e3:12:d2:a6:f7:22:9f:27:41:fd:98:b1:b7:93:4f: f6:8b:ed:00:be:00:6f:a0:d0:a1:29:a6:d8:65:a0:0a:de:e2: 2a:49:f3:b2:61:b4:27:f7:78:76:98:90:90:51:ea:07:16:50: c6:8e:a6:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrkCJf+fp+lLB0jjRuJiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw ZTNiZjEwHhcNMjUxMjI2MjIwMTIyWhcNMjUxMjI3MjIwMTIyWjAzMTEwLwYDVQQD Eyg3ODU0OTJmOTAzZDRlMTAxNjU2ZWM4ZWY3NDhlMDFhMzZiYjg2YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuywmi8fIg15ZoFqSN/Z1f/tsC1nA KGQzLzfWFhgHejLvrZ9a5oE6xHrx946xbctokQYrUnolKOMHP6ED1YZ5oRGHFzyq zuZtjHkAm53yiECkuP6oozZOwV/PgQwGMuXD2TfcfyG+IlF37RKQVgNefILQtF17 sfCM26CqVHPqCSoOyeFqXC/0wp+pIrw4Up5lFSdSokhUw2s00hgETzaK8Mhx8x33 Q7PoPnDr8C+pN0RoueTCQH0biOxb5rR4USr3PTIaR4t+Y+s8tZ29oARbixcF2Xtn UMzWsmYBb7WCEVwTKnRgiB0yM52Gh1eoHP/XaMQyTy1Jyz+les7xmIJO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhUkvkD1OEBZW7I73SOAaNruGutMB8GA1UdIwQY MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt M2IxZTcyMmE5ZGM4LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQtM2IxZTcyMmE5ZGM4 LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM+pj4vX 19vOfdFfpMQ0+JxN4Wdbrns0a+L4pnDODzemhrmvi+hY2oQY1L7wT+4fzteFP/OQ 636cSbRSD8fZsdDY0IyfXWY7MyV+qEGprAVOS74XX/aSZHKvpTlpoSz+1tNbduS4 9ubswENDq0asFgHsx0v5kf9M68Lr53+EVMMYh4dZxHsw72lQwq8P7V7ETbnrCTAr Si7wNBztDzp6muS/EUA2vEQ/LLHqBMZf1qCtXnZJn2qn0YgqJouiNHsYtIJAYuYt Ci0q4xLSpvcinydB/Zixt5NP9ovtAL4Ab6DQoSmm2GWgCt7iKknzsmG0J/d4dpiQ kFHqBxZQxo6mjA== -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:54 2025 by rpki-client