This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft File: lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json) Hash identifier: 1mhi3we8rW3MeHOnR2c7OzLUPMQvhNZD5+Js5OWYaMs= Subject key identifier: 46:44:D7:71:57:06:22:B4:51:29:17:5E:1A:1F:0A:6A:6A:84:9F:F3 Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED Certificate issuer: /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed Certificate serial: 019B34C452519E42D856C7FE5453217A6588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft Manifest number: 0850 Signing time: Fri 19 Dec 2025 04:00:39 +0000 Manifest this update: Fri 19 Dec 2025 04:00:39 +0000 Manifest next update: Sat 20 Dec 2025 04:00:39 +0000 Files and hashes: 1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: z+Mntr2XFhLyatn0vnLlPpVYCjyxIqLvIIfRP5J9CrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:52:51:9e:42:d8:56:c7:fe:54:53:21:7a:65:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed Validity Not Before: Dec 19 04:00:39 2025 GMT Not After : Dec 20 04:00:39 2025 GMT Subject: CN=4644d771570622b45129175e1a1f0a6a6a849ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:8f:d3:64:d1:f4:e6:7b:28:40:bf:0c:e7: d0:c1:57:57:d2:a3:79:e7:25:00:ca:eb:88:27:dc: 2f:f7:f2:30:a4:d3:68:cb:99:be:ca:42:e4:82:de: 50:a1:00:3a:b4:5a:10:54:92:91:0a:47:2e:3c:db: db:eb:0a:d2:ef:ea:91:39:16:3c:41:28:a7:7c:fb: d3:39:dd:bc:32:1c:f2:aa:bf:f4:ee:af:68:05:65: b0:6d:1e:47:5c:a9:c7:8b:cb:41:07:3e:50:94:14: a6:57:30:2c:70:6c:a2:b3:2a:4b:56:66:72:e0:b0: 46:89:70:5f:df:53:ea:44:61:c7:95:57:d1:de:86: 24:0d:e7:33:f9:39:41:4a:9c:56:b2:bf:bd:f2:0a: 51:3d:42:9d:8a:6c:04:0e:af:0f:6d:3f:db:37:6a: fd:ac:0a:20:9c:25:f1:99:5b:da:c7:a3:22:dd:fe: 37:af:ea:f0:11:82:bb:70:ea:e1:62:ba:6b:26:cf: 47:6b:26:cf:f5:75:3b:08:a7:5f:d1:2b:44:d3:61: cc:f4:73:0b:e2:02:d1:61:07:11:52:60:ab:91:40: 60:eb:9a:ae:fe:10:64:1e:ce:c2:b8:68:25:11:09: 0f:c5:79:38:de:d9:24:00:bb:50:5c:f0:81:b1:df: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:44:D7:71:57:06:22:B4:51:29:17:5E:1A:1F:0A:6A:6A:84:9F:F3 X509v3 Authority Key Identifier: keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c8:08:36:ec:78:7b:b7:d2:e9:d2:e3:f6:91:78:d6:05:1d: 20:e6:94:16:12:a1:8d:29:6e:18:f9:f7:9e:70:5d:67:c3:3c: 28:04:53:ec:e9:e9:a8:1f:8b:64:b4:78:55:64:0b:1c:df:e2: 86:4e:42:cd:8e:05:dc:5b:4c:98:43:aa:7a:78:9b:65:7b:5b: e3:23:52:c1:01:70:bb:01:ad:69:b7:3d:d6:4b:19:0f:f0:8b: 3e:87:e6:6d:9a:05:2c:f7:cb:21:00:d9:18:fb:1c:f6:b5:48: 60:77:96:c5:40:91:45:4e:a8:af:86:4a:75:ee:da:17:b9:57: b1:d2:ff:cf:cf:d7:c7:68:08:6d:58:80:64:1a:e8:2b:ff:33: 85:42:82:36:d3:6c:04:6f:1f:5d:70:58:66:53:6e:e6:d1:ed: 59:56:e9:17:90:dc:71:e9:aa:f3:b2:c6:35:a4:94:b3:d3:b0: 33:5e:4f:9b:c2:3b:01:7a:a5:b1:58:ac:28:56:e8:25:14:50: 56:8f:cd:d8:61:c2:ec:fa:b3:a8:10:8a:0a:b7:3b:a5:3d:19: f5:21:ae:4d:92:c9:4c:f0:26:de:1c:43:c0:b7:8f:68:59:26: d6:83:7a:95:6f:3c:cf:81:fe:39:5e:72:4b:d9:3e:4e:1c:47: 08:cb:52:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xFJRnkLYVsf+VFMhemWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NGE2ZDFlYTQ2YmM0MGJhYTMxYWJjNGY0MWM5MDY2N2Vm ZTM2ZWQwHhcNMjUxMjE5MDQwMDM5WhcNMjUxMjIwMDQwMDM5WjAzMTEwLwYDVQQD Eyg0NjQ0ZDc3MTU3MDYyMmI0NTEyOTE3NWUxYTFmMGE2YTZhODQ5ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIqP02TR9OZ7KEC/DOfQwVdX0qN5 5yUAyuuIJ9wv9/IwpNNoy5m+ykLkgt5QoQA6tFoQVJKRCkcuPNvb6wrS7+qRORY8 QSinfPvTOd28Mhzyqr/07q9oBWWwbR5HXKnHi8tBBz5QlBSmVzAscGyisypLVmZy 4LBGiXBf31PqRGHHlVfR3oYkDecz+TlBSpxWsr+98gpRPUKdimwEDq8PbT/bN2r9 rAognCXxmVvax6Mi3f43r+rwEYK7cOrhYrprJs9HaybP9XU7CKdf0StE02HM9HML 4gLRYQcRUmCrkUBg65qu/hBkHs7CuGglEQkPxXk43tkkALtQXPCBsd+wkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZE13FXBiK0USkXXhofCmpqhJ/zMB8GA1UdIwQY MBaAFJZKbR6ka8QLqjGrxPQckGZ+/jbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZGM0MWUtMzUyZS00MTJiLTlhZTYt YTA5NTFlZjdkZmNkLzEvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lZGM0MWUtMzUyZS00MTJiLTlhZTYtYTA5NTFlZjdkZmNk LzEvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8gINux4 e7fS6dLj9pF41gUdIOaUFhKhjSluGPn3nnBdZ8M8KART7OnpqB+LZLR4VWQLHN/i hk5CzY4F3FtMmEOqenibZXtb4yNSwQFwuwGtabc91ksZD/CLPofmbZoFLPfLIQDZ GPsc9rVIYHeWxUCRRU6or4ZKde7aF7lXsdL/z8/Xx2gIbViAZBroK/8zhUKCNtNs BG8fXXBYZlNu5tHtWVbpF5Dccemq87LGNaSUs9OwM15Pm8I7AXqlsVisKFboJRRQ Vo/N2GHC7PqzqBCKCrc7pT0Z9SGuTZLJTPAm3hxDwLePaFkm1oN6lW88z4H+OV5y S9k+ThxHCMtS9w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:39:30 2025 by rpki-client