This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json) Hash identifier: 8qeg/ldT1a3TRztLthse2j90CDwnefehXW97Ankt+Fw= Subject key identifier: 0C:C4:36:15:C7:35:A9:5C:63:70:14:77:BC:1F:4B:A4:B0:CB:13:FE Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Certificate serial: 019B544F48E7CD6D74F5F2AA8004FD4D13F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft Manifest number: 06C8 Signing time: Thu 25 Dec 2025 07:00:40 +0000 Manifest this update: Thu 25 Dec 2025 07:00:40 +0000 Manifest next update: Fri 26 Dec 2025 07:00:40 +0000 Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=) 2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: Sc+kdg3XMeZdCQP+U5CzhzO+ABY4zKdzI5TVmmOxTQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:48:e7:cd:6d:74:f5:f2:aa:80:04:fd:4d:13:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Validity Not Before: Dec 25 07:00:40 2025 GMT Not After : Dec 26 07:00:40 2025 GMT Subject: CN=0cc43615c735a95c63701477bc1f4ba4b0cb13fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:3a:d7:aa:03:8e:ae:3f:de:40:e0:cd:16: b7:2f:68:23:a7:a5:38:51:45:bf:0c:02:c5:71:e8: 0e:20:40:1e:d2:f3:3c:29:e0:50:a8:c8:96:7f:e7: 54:c6:27:11:9c:37:59:f6:f3:6d:6b:17:06:80:23: ba:ec:d3:32:f2:e8:c0:13:51:04:aa:03:03:f0:77: 80:59:e3:88:91:fc:d9:3d:5e:49:31:e6:98:ef:72: 5d:58:32:77:25:a9:0d:bd:b7:bc:51:e7:a5:dc:ed: d2:76:dd:77:b2:1f:63:c4:68:6d:ab:c0:2f:99:6b: 6a:31:44:f1:aa:d8:b1:3c:d8:3a:4c:ef:3e:43:66: 1a:26:16:a5:84:70:e8:7f:b3:21:38:5f:9e:c6:bf: a1:ef:a3:81:93:e1:c6:fa:a9:cc:ac:97:8d:a5:17: 56:b7:be:fe:e8:c7:7a:e6:1c:53:4f:a9:43:59:e6: d6:a9:18:24:f3:42:bc:ff:df:fb:a2:16:49:e7:34: cb:04:30:5f:9d:f9:c2:29:13:c8:95:3c:41:05:5b: d6:02:56:58:a7:c6:d7:f0:5b:f8:e8:b7:87:3e:c3: d6:64:ea:c6:37:4d:59:c8:d3:e9:c5:54:5e:46:33: 92:10:c1:b2:13:71:f4:d1:30:62:b8:d4:7f:0e:19: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C4:36:15:C7:35:A9:5C:63:70:14:77:BC:1F:4B:A4:B0:CB:13:FE X509v3 Authority Key Identifier: keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b1:e6:e9:a7:d7:05:41:e6:97:52:44:4e:a9:4b:ef:a8:9c: 19:f7:77:56:dc:ec:31:fa:66:ff:f5:60:c7:91:fe:02:c2:31: c2:14:35:63:c1:94:4f:8b:97:a9:e3:ba:64:a8:b6:63:f1:3c: 13:3d:ca:45:69:82:81:27:42:a2:6f:73:41:3e:9c:be:a2:43: 74:d4:d1:ee:2f:69:0b:fb:c7:6e:ce:45:b9:78:42:08:5c:ba: fd:3e:19:d0:93:94:86:18:fb:62:b4:70:65:9a:12:ca:a2:bb: 33:de:be:ec:92:73:79:70:bb:e9:9e:ad:4a:c2:ba:60:aa:4c: 80:56:b9:b6:06:b3:a6:04:47:8b:6e:a2:35:31:99:fd:50:f5: 51:6f:37:db:80:ee:3a:ad:8b:c1:c4:ed:d9:af:79:5a:3e:a7: 81:03:ed:15:a5:2c:f2:57:89:47:c0:2e:80:b6:86:fa:68:e7: 8f:03:12:a3:cc:87:58:63:e8:47:f3:5f:cf:64:ea:89:fa:e0: f2:39:d5:78:56:33:8d:02:f1:28:b8:a0:44:20:0f:5f:78:54: 16:69:1d:50:7e:10:4a:b2:68:74:88:34:85:2e:cb:7a:44:45: 62:6e:53:c8:02:6d:db:fb:b3:b9:d2:f9:5b:c4:d9:16:3d:c7: a0:3a:b6:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT0jnzW109fKqgAT9TRP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx Y2Y0ZDYwHhcNMjUxMjI1MDcwMDQwWhcNMjUxMjI2MDcwMDQwWjAzMTEwLwYDVQQD EygwY2M0MzYxNWM3MzVhOTVjNjM3MDE0NzdiYzFmNGJhNGIwY2IxM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Y616oDjq4/3kDgzRa3L2gjp6U4 UUW/DALFcegOIEAe0vM8KeBQqMiWf+dUxicRnDdZ9vNtaxcGgCO67NMy8ujAE1EE qgMD8HeAWeOIkfzZPV5JMeaY73JdWDJ3JakNvbe8Ueel3O3Sdt13sh9jxGhtq8Av mWtqMUTxqtixPNg6TO8+Q2YaJhalhHDof7MhOF+exr+h76OBk+HG+qnMrJeNpRdW t77+6Md65hxTT6lDWebWqRgk80K8/9/7ohZJ5zTLBDBfnfnCKRPIlTxBBVvWAlZY p8bX8Fv46LeHPsPWZOrGN01ZyNPpxVReRjOSEMGyE3H00TBiuNR/Dhlf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzENhXHNalcY3AUd7wfS6SwyxP+MB8GA1UdIwQY MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLHm6afX BUHml1JETqlL76icGfd3VtzsMfpm//Vgx5H+AsIxwhQ1Y8GUT4uXqeO6ZKi2Y/E8 Ez3KRWmCgSdCom9zQT6cvqJDdNTR7i9pC/vHbs5FuXhCCFy6/T4Z0JOUhhj7YrRw ZZoSyqK7M96+7JJzeXC76Z6tSsK6YKpMgFa5tgazpgRHi26iNTGZ/VD1UW8324Du Oq2LwcTt2a95Wj6ngQPtFaUs8leJR8AugLaG+mjnjwMSo8yHWGPoR/Nfz2Tqifrg 8jnVeFYzjQLxKLigRCAPX3hUFmkdUH4QSrJodIg0hS7LekRFYm5TyAJt2/uzudL5 W8TZFj3HoDq2LQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:31:19 2025 by rpki-client