This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json) Hash identifier: FphRjb6QdN6rZEKF1ABBTsyPjz3JLAaBr+BFlj+hmb0= Subject key identifier: 86:39:A9:81:4D:F6:9B:29:D1:6D:B8:C4:37:B5:42:36:44:84:55:77 Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71 Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171 Certificate serial: 019B5976897106812352E76A7224EB60D607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft Manifest number: 0F56 Signing time: Fri 26 Dec 2025 07:01:39 +0000 Manifest this update: Fri 26 Dec 2025 07:01:39 +0000 Manifest next update: Sat 27 Dec 2025 07:01:39 +0000 Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: UF6KD02AB1xTzY800EV0o5SRhfODxfFzaAdNVCx/mKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:89:71:06:81:23:52:e7:6a:72:24:eb:60:d6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171 Validity Not Before: Dec 26 07:01:39 2025 GMT Not After : Dec 27 07:01:39 2025 GMT Subject: CN=8639a9814df69b29d16db8c437b5423644845577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:8b:51:72:b2:6d:94:10:e3:07:e1:1d:7b: 12:e7:ea:b8:bf:fd:a0:da:a9:04:88:e9:88:9c:10: a6:14:84:ef:61:31:a9:1b:05:d8:70:a2:5f:18:36: 7f:21:63:35:2f:1c:ca:5f:d6:97:f4:a7:47:07:11: 0b:60:65:0b:3d:a3:71:c0:40:c0:dd:e3:ab:fa:fd: ea:89:39:c5:f4:2d:3d:dd:c9:de:60:19:21:03:c8: 62:1f:6a:6a:60:c3:02:a1:16:0f:42:79:6d:6a:20: 64:14:7d:c3:37:de:6f:56:2d:8f:f5:6e:be:53:d9: 09:ca:7a:26:f9:a6:60:c8:b1:ad:6a:15:09:ab:17: cf:e5:1e:ad:07:ae:f1:b2:7e:f1:ac:ec:b9:6b:07: 8a:2b:6d:1f:31:fa:aa:ac:fb:46:59:35:d0:2b:0a: 2b:28:bb:97:79:02:88:30:e4:ec:b9:b6:f4:9e:1c: e5:09:f0:52:22:0a:a3:01:09:c9:6c:7a:1e:61:e8: d6:dd:df:2c:ae:6d:6f:02:1f:53:10:23:e1:7b:aa: 5b:e6:ad:2f:60:b3:19:96:66:94:78:96:64:64:b1: 64:93:31:bf:14:1e:25:21:9f:d4:70:a2:1e:2c:1c: e5:ce:74:99:53:4f:cf:9c:c0:0b:20:38:1d:6a:51: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:39:A9:81:4D:F6:9B:29:D1:6D:B8:C4:37:B5:42:36:44:84:55:77 X509v3 Authority Key Identifier: keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:06:a1:6b:dd:bc:10:af:f0:c1:00:46:34:39:3b:f3:a9:2a: 4b:16:b1:b5:a4:7b:ff:60:44:67:89:32:30:bc:d5:ae:1b:4c: 89:33:48:ca:9f:72:3d:a4:95:d8:8c:f8:3a:d3:76:e6:5b:6d: a6:b8:ac:ec:dd:13:4d:51:12:f2:36:74:b4:3c:e3:a9:bc:46: 1a:48:bc:c7:1e:40:e8:18:59:f0:f5:ed:e5:2b:65:03:40:4d: 88:8d:b1:ca:5d:dd:aa:38:b3:6e:cd:27:d8:cf:63:da:25:d3: 8e:c0:e4:fb:8b:5f:ad:00:fb:7b:8a:c5:e6:94:d3:f1:3f:6c: 35:07:62:6f:3a:2f:d5:31:a3:f5:05:a7:7c:63:29:a0:46:38: 87:11:6b:66:b7:e6:cf:29:55:60:9b:f3:08:e0:5d:a6:2d:6a: b8:3e:1a:e5:bd:1a:d4:55:93:98:35:b7:bc:a6:e1:fb:1a:5e: d4:6b:6d:14:bf:15:b3:3b:54:e5:8c:99:a3:3e:f1:2f:58:86: 67:c8:43:0d:e7:92:2d:b8:b3:4a:b1:e5:b1:78:bc:68:77:52: 39:41:3b:95:8e:fc:51:19:8f:3c:0a:78:ee:ff:bd:a5:35:40: 10:9e:53:61:fd:1e:90:0b:ac:c0:be:0c:43:d5:56:38:9d:0f: d8:d0:0b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdolxBoEjUudqciTrYNYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTRlMmZjOWVlYWNkY2Y1YjBmNTBhYjkzMjg0Y2QzYjA5 NDIxNzEwHhcNMjUxMjI2MDcwMTM5WhcNMjUxMjI3MDcwMTM5WjAzMTEwLwYDVQQD Eyg4NjM5YTk4MTRkZjY5YjI5ZDE2ZGI4YzQzN2I1NDIzNjQ0ODQ1NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT6LUXKybZQQ4wfhHXsS5+q4v/2g 2qkEiOmInBCmFITvYTGpGwXYcKJfGDZ/IWM1LxzKX9aX9KdHBxELYGULPaNxwEDA 3eOr+v3qiTnF9C093cneYBkhA8hiH2pqYMMCoRYPQnltaiBkFH3DN95vVi2P9W6+ U9kJynom+aZgyLGtahUJqxfP5R6tB67xsn7xrOy5aweKK20fMfqqrPtGWTXQKwor KLuXeQKIMOTsubb0nhzlCfBSIgqjAQnJbHoeYejW3d8srm1vAh9TECPhe6pb5q0v YLMZlmaUeJZkZLFkkzG/FB4lIZ/UcKIeLBzlznSZU0/PnMALIDgdalE2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY5qYFN9psp0W24xDe1QjZEhFV3MB8GA1UdIwQY MBaAFJSk4vye6s3PWw9Qq5MoTNOwlCFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2It MDI0OGQ2YWZkNjNmLzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2ItMDI0OGQ2YWZkNjNm LzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwaha928 EK/wwQBGNDk786kqSxaxtaR7/2BEZ4kyMLzVrhtMiTNIyp9yPaSV2Iz4OtN25ltt pris7N0TTVES8jZ0tDzjqbxGGki8xx5A6BhZ8PXt5StlA0BNiI2xyl3dqjizbs0n 2M9j2iXTjsDk+4tfrQD7e4rF5pTT8T9sNQdibzov1TGj9QWnfGMpoEY4hxFrZrfm zylVYJvzCOBdpi1quD4a5b0a1FWTmDW3vKbh+xpe1GttFL8VsztU5YyZoz7xL1iG Z8hDDeeSLbizSrHlsXi8aHdSOUE7lY78URmPPAp47v+9pTVAEJ5TYf0ekAuswL4M Q9VWOJ0P2NALgQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:20 2025 by rpki-client