This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json) Hash identifier: saX6SYQimltKUhkqzVQdWh5xM+lgBDjWEtT7CykljVY= Subject key identifier: 27:8D:E9:73:B8:BE:05:C3:32:91:11:39:19:13:11:6F:CB:90:E6:4D Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba Certificate serial: 019B5A88D0CD3929712CE53EC77FE600A855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 12:01:14 +0000 Manifest this update: Fri 26 Dec 2025 12:01:14 +0000 Manifest next update: Sat 27 Dec 2025 12:01:14 +0000 Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=) 2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: p9g9BPX8hfY9+wJvcCqeDmiH2/aPOiLsfDY+u+/sCDE=) 3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d0:cd:39:29:71:2c:e5:3e:c7:7f:e6:00:a8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba Validity Not Before: Dec 26 12:01:14 2025 GMT Not After : Dec 27 12:01:14 2025 GMT Subject: CN=278de973b8be05c3329111391913116fcb90e64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:9a:ef:65:b7:52:e2:f0:18:56:3e:32:d5: e8:65:5e:9e:58:2c:ae:98:fa:03:9a:44:f0:54:c8: 1a:eb:24:89:7e:89:e6:3a:cb:ca:e9:62:c9:a7:6c: c1:3b:9a:1b:c4:d8:e6:05:a1:5d:14:c9:47:c8:6e: 37:c4:a5:5f:38:3c:c3:04:8d:0e:d2:81:f2:64:fc: 46:dc:22:ea:29:51:d0:d0:91:f2:61:a6:ad:71:1d: 38:d3:9d:97:5e:54:17:9d:fc:72:9f:80:d4:51:a6: 1e:51:20:6d:d0:71:74:7e:8a:b6:15:90:3e:17:e2: e0:d9:fc:c9:7b:00:38:d5:bc:d9:35:ac:18:c7:18: 45:89:41:18:e5:5b:a7:91:ad:85:ad:9a:4c:3b:e8: 11:79:d4:4a:ee:b0:79:e6:ff:d4:1a:92:87:f5:12: eb:ce:01:78:9f:d0:2c:21:74:88:3e:44:1a:28:d6: d9:57:b4:40:e8:f0:ec:5e:14:9f:84:72:a1:d3:3a: 0a:9e:23:73:cf:9b:17:49:f5:23:fd:c2:14:6e:52: 27:16:9e:b6:06:bf:18:55:00:dd:1f:bf:f5:a5:4a: 0b:b1:6c:e1:c2:4c:70:e7:4f:15:c7:4a:63:c8:44: 3c:86:41:1b:e1:cb:86:cb:bc:fb:ff:c1:a3:64:1b: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:E9:73:B8:BE:05:C3:32:91:11:39:19:13:11:6F:CB:90:E6:4D X509v3 Authority Key Identifier: keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9d:b0:73:ca:28:0c:aa:72:7f:65:c7:00:bc:66:84:7e:71: 69:cf:f5:06:7d:bd:ce:4f:59:9e:53:2b:4a:7c:2e:da:90:01: dc:cb:c3:00:6b:ec:8b:8d:4e:2d:f9:bf:5a:f3:f4:e2:35:cd: ee:c5:db:79:bc:66:01:19:e7:c8:73:9e:d3:bf:5c:6c:02:25: 64:07:95:cf:47:c5:ac:19:a8:7e:d3:d1:14:87:04:c4:23:bc: eb:44:12:d2:3a:cc:3a:e4:a0:2c:51:92:9e:40:2d:56:36:21: b6:db:64:cd:06:ac:1c:a8:cc:f7:8e:b5:a7:5a:9d:4d:d5:31: 80:57:91:02:15:0b:b6:4b:e8:c0:97:8f:b2:56:d1:c2:d8:0c: 44:55:0f:3b:e6:16:aa:10:f9:78:7d:e1:2c:dd:ed:e5:cb:ae: 4b:a9:e5:e1:ae:9b:96:95:b5:b8:da:3f:cc:cc:1e:f5:92:54: 5d:55:45:b1:e5:ae:68:4f:c8:8a:e8:0a:87:4e:08:ca:a6:b1: 5b:38:52:01:4d:fd:31:98:4c:b2:de:53:3c:24:b3:2d:31:83: 98:0a:28:5f:e6:51:ee:27:36:28:97:97:18:01:3e:32:ab:75: 16:1a:e6:0c:bf:e6:7d:cc:d1:e2:86:7b:af:40:35:68:63:ad: 72:71:2c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNDNOSlxLOU+x3/mAKhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTMyZTQ0NWMyNGRlZDliODUyMTJkNDc5Yjg4MDA4MTY1 ZWJkYmEwHhcNMjUxMjI2MTIwMTE0WhcNMjUxMjI3MTIwMTE0WjAzMTEwLwYDVQQD EygyNzhkZTk3M2I4YmUwNWMzMzI5MTExMzkxOTEzMTE2ZmNiOTBlNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FKa72W3UuLwGFY+MtXoZV6eWCyu mPoDmkTwVMga6ySJfonmOsvK6WLJp2zBO5obxNjmBaFdFMlHyG43xKVfODzDBI0O 0oHyZPxG3CLqKVHQ0JHyYaatcR04052XXlQXnfxyn4DUUaYeUSBt0HF0foq2FZA+ F+Lg2fzJewA41bzZNawYxxhFiUEY5Vunka2FrZpMO+gRedRK7rB55v/UGpKH9RLr zgF4n9AsIXSIPkQaKNbZV7RA6PDsXhSfhHKh0zoKniNzz5sXSfUj/cIUblInFp62 Br8YVQDdH7/1pUoLsWzhwkxw508Vx0pjyEQ8hkEb4cuGy7z7/8GjZBtmiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeN6XO4vgXDMpERORkTEW/LkOZNMB8GA1UdIwQY MBaAFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODIt ZTE0ODdhNTRjMWU1LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODItZTE0ODdhNTRjMWU1 LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP52wc8oo DKpyf2XHALxmhH5xac/1Bn29zk9ZnlMrSnwu2pAB3MvDAGvsi41OLfm/WvP04jXN 7sXbebxmARnnyHOe079cbAIlZAeVz0fFrBmoftPRFIcExCO860QS0jrMOuSgLFGS nkAtVjYhtttkzQasHKjM9461p1qdTdUxgFeRAhULtkvowJePslbRwtgMRFUPO+YW qhD5eH3hLN3t5cuuS6nl4a6blpW1uNo/zMwe9ZJUXVVFseWuaE/IiugKh04Iyqax WzhSAU39MZhMst5TPCSzLTGDmAooX+ZR7ic2KJeXGAE+Mqt1FhrmDL/mfczR4oZ7 r0A1aGOtcnEskw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:04 2025 by rpki-client