This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json) Hash identifier: P9iI+vspvbjoL1dsbGVN1/V2aXy5O6zTivC3g6+4Drs= Subject key identifier: 92:36:A8:8D:46:4B:E8:AC:9F:46:64:3B:5C:CB:54:E3:59:86:E9:5F Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Certificate serial: 019B3C7F337B4EBEEE76576AFDEF7F339B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:02:07 +0000 Manifest this update: Sat 20 Dec 2025 16:02:07 +0000 Manifest next update: Sun 21 Dec 2025 16:02:07 +0000 Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: 9iZtbDtlMCtzJi06KyMyzFfoNiOjT3Quto9mRshtzsc=) 2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:33:7b:4e:be:ee:76:57:6a:fd:ef:7f:33:9b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Validity Not Before: Dec 20 16:02:07 2025 GMT Not After : Dec 21 16:02:07 2025 GMT Subject: CN=9236a88d464be8ac9f46643b5ccb54e35986e95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:7a:70:2e:08:c9:ff:6d:37:6c:32:55:a0: 65:4f:d7:34:3a:16:ce:d1:fe:50:d2:f8:33:4f:97: 17:6a:05:0e:37:ac:94:c0:b7:50:d2:e9:20:c1:b7: d2:7c:49:d8:8a:cc:19:2a:bf:83:db:0a:4e:d0:8b: 9b:30:9d:6f:84:9a:0d:97:b4:03:7a:b9:ec:c7:c3: 03:b4:bc:99:08:c7:de:94:17:7b:78:18:da:26:bd: 5c:bf:aa:a3:43:b6:a3:b5:5b:bc:21:03:e2:c8:ad: dc:cd:88:43:6b:8e:71:98:97:05:56:ff:53:a4:c2: 7c:97:1e:4f:08:2a:39:74:02:d4:e3:09:3b:42:9e: 2b:37:1d:a0:56:ce:0b:2d:b9:7f:3f:cb:0e:9f:b2: 94:dd:e9:24:97:14:ad:ff:31:e9:bf:c0:66:4f:fc: 42:6b:6f:6a:8b:06:0b:a7:39:7b:f3:28:31:3b:20: 4e:31:2c:e2:bb:b9:41:54:3d:c7:eb:94:b3:d4:4c: 7f:b6:0d:4d:0e:7d:c3:9b:33:f7:c1:35:a3:9e:d0: 97:25:ac:17:01:fa:b0:cf:2e:a2:68:64:cc:47:ff: 3f:f8:5b:61:d8:20:30:f6:78:61:fc:05:d8:df:6b: 58:a7:64:74:18:63:57:42:9a:2e:43:f5:6f:69:9e: 23:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:A8:8D:46:4B:E8:AC:9F:46:64:3B:5C:CB:54:E3:59:86:E9:5F X509v3 Authority Key Identifier: keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:af:e0:ff:9d:57:c5:b9:ff:e4:ca:9a:e6:32:bb:d9:2c: f1:97:2a:08:17:91:bb:74:38:e4:69:4f:5f:bb:87:f4:f2:29: 4e:19:3d:f8:5f:31:76:5a:b0:2e:3b:fb:a6:79:c7:29:ff:10: a9:6c:ee:a4:8b:99:95:c7:64:02:d0:c3:dc:56:84:7f:5c:96: a0:77:fe:18:db:53:08:5e:3f:62:53:73:b7:c9:fc:df:3e:a8: 4a:4a:25:7d:af:8d:8e:38:81:e9:6e:af:b9:be:6b:3a:23:f8: a3:8d:78:ad:60:e9:3c:7b:3b:e3:af:f2:7c:f9:3e:e4:f2:0b: b7:25:0d:65:33:0e:99:5e:ac:45:90:fe:54:e7:94:24:9a:87: 9b:42:b7:82:d0:cc:a3:52:da:64:e9:94:91:48:c3:39:b2:21: 25:d9:5f:65:7b:44:bc:12:3e:1a:e5:9a:03:7e:68:9a:7a:c5: fe:c0:7c:55:73:b7:16:f1:d4:7c:1c:3f:8b:60:9e:f3:39:aa: c9:7d:64:88:70:33:ba:9f:c7:66:d5:bb:93:3f:58:5f:c6:39: 70:ca:ac:ef:51:65:0b:48:0b:aa:0c:18:5d:b0:0c:d8:88:de: 0a:82:02:b9:8b:25:7e:cb:c7:0b:6d:7b:ea:1f:46:33:4d:97: 2a:d4:80:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fzN7Tr7udldq/e9/M5tVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm Mjk2NDgwHhcNMjUxMjIwMTYwMjA3WhcNMjUxMjIxMTYwMjA3WjAzMTEwLwYDVQQD Eyg5MjM2YTg4ZDQ2NGJlOGFjOWY0NjY0M2I1Y2NiNTRlMzU5ODZlOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJl6cC4Iyf9tN2wyVaBlT9c0OhbO 0f5Q0vgzT5cXagUON6yUwLdQ0ukgwbfSfEnYiswZKr+D2wpO0IubMJ1vhJoNl7QD ernsx8MDtLyZCMfelBd7eBjaJr1cv6qjQ7ajtVu8IQPiyK3czYhDa45xmJcFVv9T pMJ8lx5PCCo5dALU4wk7Qp4rNx2gVs4LLbl/P8sOn7KU3ekklxSt/zHpv8BmT/xC a29qiwYLpzl78ygxOyBOMSziu7lBVD3H65Sz1Ex/tg1NDn3DmzP3wTWjntCXJawX Afqwzy6iaGTMR/8/+Fth2CAw9nhh/AXY32tYp2R0GGNXQpouQ/VvaZ4jUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI2qI1GS+isn0ZkO1zLVONZhulfMB8GA1UdIwQY MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+qv4P+d V8W5/+TKmuYyu9ks8ZcqCBeRu3Q45GlPX7uH9PIpThk9+F8xdlqwLjv7pnnHKf8Q qWzupIuZlcdkAtDD3FaEf1yWoHf+GNtTCF4/YlNzt8n83z6oSkolfa+NjjiB6W6v ub5rOiP4o414rWDpPHs746/yfPk+5PILtyUNZTMOmV6sRZD+VOeUJJqHm0K3gtDM o1LaZOmUkUjDObIhJdlfZXtEvBI+GuWaA35omnrF/sB8VXO3FvHUfBw/i2Ce8zmq yX1kiHAzup/HZtW7kz9YX8Y5cMqs71FlC0gLqgwYXbAM2IjeCoICuYslfsvHC217 6h9GM02XKtSASQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:34:19 2025 by rpki-client