This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json) Hash identifier: OmFzrvF0dQ6aSz+UhoxAUny99Taq5ILPB5MakdjSeCY= Subject key identifier: 85:6C:F5:70:EA:EB:46:CE:63:E6:8D:20:8A:01:E2:17:0A:D8:60:57 Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Certificate serial: 019B3D9078959909D6B5895532DEEA2907F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft Manifest number: 0284 Signing time: Sat 20 Dec 2025 21:00:36 +0000 Manifest this update: Sat 20 Dec 2025 21:00:36 +0000 Manifest next update: Sun 21 Dec 2025 21:00:36 +0000 Files and hashes: 1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=) 2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=) 3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=) 4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: q+DM7E0PhUwd8C5cQjbZwvPBRTiXEtaNIXYwGHJ29E4=) 5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=) 6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:78:95:99:09:d6:b5:89:55:32:de:ea:29:07:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Validity Not Before: Dec 20 21:00:36 2025 GMT Not After : Dec 21 21:00:36 2025 GMT Subject: CN=856cf570eaeb46ce63e68d208a01e2170ad86057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:b8:92:a9:1f:78:1f:75:7f:29:5f:c7:e6: cd:47:55:28:a3:45:02:6d:3c:22:02:de:1b:8d:e5: 6e:fb:00:fd:86:47:42:2b:d1:19:c6:f9:57:b8:f4: 6f:70:39:b7:32:1c:a4:cb:de:c3:85:60:15:b0:0b: ee:c2:44:f2:38:95:92:02:25:4f:74:34:5f:ad:53: 24:6d:65:24:55:4a:8c:7a:94:b1:d9:d1:93:40:5c: bc:1f:74:12:ba:79:ab:2c:1b:21:92:f1:25:18:d1: 0e:7a:50:65:3b:c0:b5:0f:ba:15:54:d6:ee:04:47: 72:87:ac:e0:4e:22:cb:8a:d0:30:da:8d:10:84:c6: 3d:4b:0d:12:ed:51:62:43:43:03:35:16:0f:73:af: 0d:54:aa:c7:3a:f5:71:95:96:8f:04:31:f2:9d:2b: 8b:3b:6d:af:dd:c8:7f:ec:60:43:65:10:ec:71:df: d3:5d:8f:71:f7:68:6d:0f:d4:40:7a:de:48:db:f3: 36:8f:38:94:f8:75:1f:d2:62:c2:7e:e1:1a:ab:c3: f7:16:2d:7b:72:dd:a6:a3:a5:6d:e5:0b:79:36:85: c4:74:4e:04:6f:b3:02:45:23:8c:79:6d:15:2c:87: cb:59:fa:38:ea:97:32:9b:47:db:44:32:1b:9b:49: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:F5:70:EA:EB:46:CE:63:E6:8D:20:8A:01:E2:17:0A:D8:60:57 X509v3 Authority Key Identifier: keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4b:a1:5b:d4:3c:d7:fc:73:2d:10:8e:04:56:b8:54:73:64: 08:55:c3:f2:d4:3b:6d:8e:2a:3f:4f:a7:f1:ae:3c:11:cf:40: 5f:51:f8:09:28:23:09:05:e2:96:e7:3e:77:24:3e:36:74:d2: a5:a3:b5:b3:d9:06:95:85:2e:1e:d7:f1:78:9d:e0:0d:bf:fc: 6d:2a:d8:a9:bc:1e:84:f6:f3:ed:f5:d6:9a:d0:a4:cf:49:ea: 3a:cd:f2:c2:59:4b:67:39:72:90:24:e3:13:b9:3e:ec:d5:63: 2b:2f:d8:21:39:04:44:b0:01:af:d7:03:3f:70:0b:09:30:ab: fd:10:96:52:a5:aa:8f:54:da:dc:14:99:6a:ad:a8:82:bd:65: 1e:37:af:65:69:34:a8:f8:bb:96:f1:a0:1f:02:32:a2:6e:fc: 69:04:5a:77:f9:24:a9:16:c5:e3:f7:f8:df:60:d3:74:ea:ef: e3:5f:61:54:76:5b:de:00:58:5a:34:40:6f:46:12:26:db:e4: c1:87:6b:ee:33:bc:1b:3f:c7:1d:87:1b:eb:26:57:d4:9f:02: c4:d3:3e:67:de:4c:70:70:86:c5:db:22:fb:69:92:c8:3a:cd: 6b:a0:26:c0:84:4e:9c:b4:e6:6e:13:b1:81:4b:6f:e9:34:32: e1:32:b1:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHiVmQnWtYlVMt7qKQf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk YzYzMjgwHhcNMjUxMjIwMjEwMDM2WhcNMjUxMjIxMjEwMDM2WjAzMTEwLwYDVQQD Eyg4NTZjZjU3MGVhZWI0NmNlNjNlNjhkMjA4YTAxZTIxNzBhZDg2MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26G4kqkfeB91fylfx+bNR1Uoo0UC bTwiAt4bjeVu+wD9hkdCK9EZxvlXuPRvcDm3Mhyky97DhWAVsAvuwkTyOJWSAiVP dDRfrVMkbWUkVUqMepSx2dGTQFy8H3QSunmrLBshkvElGNEOelBlO8C1D7oVVNbu BEdyh6zgTiLLitAw2o0QhMY9Sw0S7VFiQ0MDNRYPc68NVKrHOvVxlZaPBDHynSuL O22v3ch/7GBDZRDscd/TXY9x92htD9RAet5I2/M2jziU+HUf0mLCfuEaq8P3Fi17 ct2mo6Vt5Qt5NoXEdE4Eb7MCRSOMeW0VLIfLWfo46pcym0fbRDIbm0lUzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVs9XDq60bOY+aNIIoB4hcK2GBXMB8GA1UdIwQY MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt OGNhMjVmNDg4ZWJmLzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEuhW9Q8 1/xzLRCOBFa4VHNkCFXD8tQ7bY4qP0+n8a48Ec9AX1H4CSgjCQXiluc+dyQ+NnTS paO1s9kGlYUuHtfxeJ3gDb/8bSrYqbwehPbz7fXWmtCkz0nqOs3ywllLZzlykCTj E7k+7NVjKy/YITkERLABr9cDP3ALCTCr/RCWUqWqj1Ta3BSZaq2ogr1lHjevZWk0 qPi7lvGgHwIyom78aQRad/kkqRbF4/f432DTdOrv419hVHZb3gBYWjRAb0YSJtvk wYdr7jO8Gz/HHYcb6yZX1J8CxNM+Z95McHCGxdsi+2mSyDrNa6AmwIROnLTmbhOx gUtv6TQy4TKxaw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:57:19 2025 by rpki-client