This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json) Hash identifier: qbfrPRQffeyDfwu3MG8OqlQ7e9zyLgaHdlejIE6pxcc= Subject key identifier: DA:22:38:D8:31:A7:76:1F:AF:24:88:1F:4A:40:CA:FB:64:7D:F6:35 Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Certificate serial: 019B4F6045D30F193D2FEF7356D09005B923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft Manifest number: 1723 Signing time: Wed 24 Dec 2025 08:01:07 +0000 Manifest this update: Wed 24 Dec 2025 08:01:07 +0000 Manifest next update: Thu 25 Dec 2025 08:01:07 +0000 Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: 1bek8j8AM7MNAH4nu13D64AU+k9ZDrrOKA5+Una7uKM=) 2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:45:d3:0f:19:3d:2f:ef:73:56:d0:90:05:b9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Validity Not Before: Dec 24 08:01:07 2025 GMT Not After : Dec 25 08:01:07 2025 GMT Subject: CN=da2238d831a7761faf24881f4a40cafb647df635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:81:5e:aa:ce:6a:80:d5:6c:e0:f7:e6:d6: 9c:b1:85:c3:4a:df:ad:81:6e:a2:5b:95:f8:38:54: 7e:f3:c3:8e:9a:df:80:24:8b:8b:ad:31:0c:95:fa: ab:2b:99:f1:34:5a:c8:c5:c7:7f:44:52:24:7f:96: 51:7b:5b:21:5a:d2:46:f3:20:28:ba:b1:22:73:d9: 05:15:b7:2e:a0:55:7d:90:6a:d3:89:3a:20:29:c8: c4:ae:72:64:7d:ad:4a:be:22:42:38:1c:c9:ef:85: 82:3f:12:e2:39:dc:fc:a3:c2:1e:28:94:32:e9:87: 7a:10:88:64:6e:05:6d:ad:6d:8a:e5:c5:d5:3d:83: 5e:c4:df:e5:ca:d6:0d:7d:23:c9:b6:de:e8:1d:56: b1:3b:fc:bd:2f:72:39:f3:98:0e:b4:fd:1b:8a:b5: a1:3b:05:fb:81:1e:a3:cf:15:2a:5d:d5:a1:7c:34: 99:9b:e7:dd:30:fd:fb:02:76:70:e1:08:bf:69:ce: 58:0b:25:03:02:38:ee:04:7b:a3:54:63:8d:16:05: 87:1e:6d:17:ad:e1:bd:b6:67:30:50:b9:d5:29:53: 63:51:97:17:5c:68:2a:8b:6f:38:dd:b0:a5:5c:90: aa:72:d9:54:d7:dc:eb:06:be:2f:72:20:d5:24:84: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:22:38:D8:31:A7:76:1F:AF:24:88:1F:4A:40:CA:FB:64:7D:F6:35 X509v3 Authority Key Identifier: keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f3:2f:43:fb:81:8f:c1:28:02:f1:3a:33:b5:ca:5c:c2:57: 08:fc:e2:ed:c3:34:e0:b1:44:3e:19:67:45:0f:5b:45:6a:d3: 4e:f2:67:ae:49:73:fd:dc:5a:fa:8d:47:29:a1:28:88:98:f1: d8:c3:9f:9c:29:44:44:47:3a:8e:eb:41:d0:3c:c3:a1:39:26: 20:d6:3b:11:55:b8:0b:fd:d7:15:6e:a1:5b:87:87:98:b8:39: b0:66:c6:35:08:d7:f3:71:bd:3d:90:0a:ed:8f:b8:5b:83:32: f7:01:28:48:7a:f5:6e:75:7e:54:1b:e5:01:08:a9:60:3a:c6: a7:fc:2a:a5:01:75:8b:73:96:03:36:45:3e:68:a0:69:44:bf: 14:b3:23:9d:f1:7c:81:6a:9d:87:86:e1:48:b3:c7:0e:83:23: 24:38:2f:15:51:f2:25:4b:57:fa:cc:2a:cb:84:96:65:7c:7f: 04:0e:6e:85:d6:e6:aa:13:fa:c8:a7:42:80:d7:99:46:b3:5c: 81:54:00:e7:e6:c1:a0:60:1b:61:ac:a8:ab:b8:c9:e4:f2:6d: cf:cc:5d:62:c6:89:4d:cb:6b:05:75:96:53:63:37:d9:24:3e: 27:80:49:d4:c5:65:03:fe:5a:1a:ba:b7:c2:4c:3d:c0:2e:8c: 22:52:f2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYEXTDxk9L+9zVtCQBbkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4 ZTNlYjkwHhcNMjUxMjI0MDgwMTA3WhcNMjUxMjI1MDgwMTA3WjAzMTEwLwYDVQQD EyhkYTIyMzhkODMxYTc3NjFmYWYyNDg4MWY0YTQwY2FmYjY0N2RmNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZKBXqrOaoDVbOD35tacsYXDSt+t gW6iW5X4OFR+88OOmt+AJIuLrTEMlfqrK5nxNFrIxcd/RFIkf5ZRe1shWtJG8yAo urEic9kFFbcuoFV9kGrTiTogKcjErnJkfa1KviJCOBzJ74WCPxLiOdz8o8IeKJQy 6Yd6EIhkbgVtrW2K5cXVPYNexN/lytYNfSPJtt7oHVaxO/y9L3I585gOtP0birWh OwX7gR6jzxUqXdWhfDSZm+fdMP37AnZw4Qi/ac5YCyUDAjjuBHujVGONFgWHHm0X reG9tmcwULnVKVNjUZcXXGgqi2843bClXJCqctlU19zrBr4vciDVJIQBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoiONgxp3YfrySIH0pAyvtkffY1MB8GA1UdIwQY MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPMvQ/uB j8EoAvE6M7XKXMJXCPzi7cM04LFEPhlnRQ9bRWrTTvJnrklz/dxa+o1HKaEoiJjx 2MOfnClEREc6jutB0DzDoTkmINY7EVW4C/3XFW6hW4eHmLg5sGbGNQjX83G9PZAK 7Y+4W4My9wEoSHr1bnV+VBvlAQipYDrGp/wqpQF1i3OWAzZFPmigaUS/FLMjnfF8 gWqdh4bhSLPHDoMjJDgvFVHyJUtX+swqy4SWZXx/BA5uhdbmqhP6yKdCgNeZRrNc gVQA5+bBoGAbYayoq7jJ5PJtz8xdYsaJTctrBXWWU2M32SQ+J4BJ1MVlA/5aGrq3 wkw9wC6MIlLyOg== -----END CERTIFICATE-----Generated at Wed Dec 24 09:16:42 2025 by rpki-client