This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json) Hash identifier: mpU2PY/KzTNDF8zaPzmhs8tobQXqFIpNqqJtm9x9X2E= Subject key identifier: 61:53:24:CA:8B:59:EF:BA:AE:67:60:AB:39:1D:3A:DE:17:F8:40:F2 Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Certificate serial: 019B3B34D8BB92382008509C0F9DCA766884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft Manifest number: 171D Signing time: Sat 20 Dec 2025 10:01:17 +0000 Manifest this update: Sat 20 Dec 2025 10:01:17 +0000 Manifest next update: Sun 21 Dec 2025 10:01:17 +0000 Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: dxG97HqIWAnDgjr4VONeC3aQ4w+0LfPUWnuJ/BjRasI=) 2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:d8:bb:92:38:20:08:50:9c:0f:9d:ca:76:68:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Validity Not Before: Dec 20 10:01:17 2025 GMT Not After : Dec 21 10:01:17 2025 GMT Subject: CN=615324ca8b59efbaae6760ab391d3ade17f840f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:8f:39:aa:eb:12:d7:08:40:06:d4:1e:b7: 62:c0:67:17:e6:3a:1d:de:cf:a4:3a:4f:42:c1:cd: 6d:97:da:30:c7:d0:96:00:b2:e0:94:74:18:fd:23: a6:25:5d:48:80:45:fd:3b:48:5e:53:b8:bd:d0:2f: 51:87:e0:49:e5:ff:03:54:ea:0d:29:e9:9d:e6:ba: e2:f2:1b:e9:28:ba:7c:44:69:74:f7:49:08:6c:5c: de:f8:8d:90:f1:ae:b3:18:84:b8:38:2d:5c:6e:54: 65:57:0c:d3:0d:3c:ab:b0:99:43:63:10:4f:88:52: ba:87:11:ed:d8:f7:cc:0b:23:d8:ab:e4:8d:0d:eb: 21:0b:11:f4:7c:8a:cf:b4:3a:21:95:8d:42:05:80: ff:bf:5c:0c:ba:20:d5:9a:2b:fc:c2:9a:7a:83:03: 88:fc:6b:56:e7:cb:ba:87:86:e1:33:ce:6b:b2:ef: 52:3d:36:e3:5a:b3:28:8d:bb:0f:85:c7:f8:08:45: 1a:0a:75:cd:6a:91:2c:92:a3:26:b0:4c:4b:7f:a9: 49:8b:6c:c1:aa:87:63:ed:d3:40:7a:bb:9d:94:39: 7a:1b:58:ad:18:d5:35:22:f3:cc:12:ea:81:e2:1f: 5b:a6:cd:64:50:eb:a5:40:29:4f:de:30:c8:5c:a4: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:53:24:CA:8B:59:EF:BA:AE:67:60:AB:39:1D:3A:DE:17:F8:40:F2 X509v3 Authority Key Identifier: keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8a:c6:dc:fd:1e:1f:a8:f5:be:b5:d3:62:67:0c:b3:9a:99: 81:85:5b:44:87:6c:9e:94:70:83:9a:04:d4:62:55:e3:8b:86: 99:63:a6:7d:1f:dc:31:92:7e:eb:5d:b4:92:dc:22:e3:06:02: 57:31:70:be:1f:86:2d:bd:62:75:fd:cb:14:19:72:dc:71:31: d5:2e:d0:91:61:a6:07:be:a6:8e:1b:2c:c2:2a:ce:32:2f:9f: 7b:e6:4e:07:ab:7b:15:33:e1:cd:08:68:04:53:8f:95:35:05: 33:56:02:4f:d7:f6:cd:4f:91:cd:cc:4b:84:a9:60:68:2c:8c: 77:66:d9:c3:dc:9a:df:48:23:fa:14:2e:04:c2:30:e5:51:79: 85:bd:ca:9b:b1:cd:b1:7c:6f:7d:f5:1b:9a:92:75:cd:74:40: 53:9a:95:df:75:f1:b8:db:78:3b:06:74:67:e7:fc:7d:c8:9d: 94:8f:be:a4:e7:99:da:fb:2d:90:d3:79:0e:18:42:d9:c2:17: 73:48:f0:fc:d4:d1:36:71:f0:36:3a:7c:b4:fa:eb:b8:42:11: e6:0f:06:78:89:ee:84:79:9d:b6:78:63:71:99:bb:7e:8f:6b: 26:1f:c5:fb:cf:a9:cf:a2:a5:ca:5e:f4:80:31:5d:e7:c4:a3: 63:ae:e5:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NNi7kjggCFCcD53KdmiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0 ZDZlZWQwHhcNMjUxMjIwMTAwMTE3WhcNMjUxMjIxMTAwMTE3WjAzMTEwLwYDVQQD Eyg2MTUzMjRjYThiNTllZmJhYWU2NzYwYWIzOTFkM2FkZTE3Zjg0MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzriPOarrEtcIQAbUHrdiwGcX5jod 3s+kOk9Cwc1tl9owx9CWALLglHQY/SOmJV1IgEX9O0heU7i90C9Rh+BJ5f8DVOoN Kemd5rri8hvpKLp8RGl090kIbFze+I2Q8a6zGIS4OC1cblRlVwzTDTyrsJlDYxBP iFK6hxHt2PfMCyPYq+SNDeshCxH0fIrPtDohlY1CBYD/v1wMuiDVmiv8wpp6gwOI /GtW58u6h4bhM85rsu9SPTbjWrMojbsPhcf4CEUaCnXNapEskqMmsExLf6lJi2zB qodj7dNAerudlDl6G1itGNU1IvPMEuqB4h9bps1kUOulQClP3jDIXKSPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFTJMqLWe+6rmdgqzkdOt4X+EDyMB8GA1UdIwQY MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4rG3P0e H6j1vrXTYmcMs5qZgYVbRIdsnpRwg5oE1GJV44uGmWOmfR/cMZJ+6120ktwi4wYC VzFwvh+GLb1idf3LFBly3HEx1S7QkWGmB76mjhsswirOMi+fe+ZOB6t7FTPhzQho BFOPlTUFM1YCT9f2zU+RzcxLhKlgaCyMd2bZw9ya30gj+hQuBMIw5VF5hb3Km7HN sXxvffUbmpJ1zXRAU5qV33XxuNt4OwZ0Z+f8fcidlI++pOeZ2vstkNN5DhhC2cIX c0jw/NTRNnHwNjp8tPrruEIR5g8GeInuhHmdtnhjcZm7fo9rJh/F+8+pz6Klyl70 gDFd58SjY67lRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:32:46 2025 by rpki-client