This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json) Hash identifier: QMGEKfkFcmcdGCWzqTqDJAKSZXW+9tZ3BEM5g/wbx8s= Subject key identifier: 3B:DB:00:91:C5:6A:57:35:0E:55:26:BE:D5:18:48:0F:F8:1B:C7:29 Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f Certificate serial: 019B1E05CCCF69C89B82C08C07B145B57019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 18:00:55 +0000 Manifest this update: Sun 14 Dec 2025 18:00:55 +0000 Manifest next update: Mon 15 Dec 2025 18:00:55 +0000 Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=) 2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: zBcYvY4Mk3G0opxl9P4hqCXRUCPnUJbijxLe+ogPhl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:cc:cf:69:c8:9b:82:c0:8c:07:b1:45:b5:70:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f Validity Not Before: Dec 14 18:00:55 2025 GMT Not After : Dec 15 18:00:55 2025 GMT Subject: CN=3bdb0091c56a57350e5526bed518480ff81bc729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:11:56:25:0b:f5:ed:92:cc:86:ad:47:51: d5:10:0d:e8:0d:ef:e6:6f:b6:a3:f5:07:ef:19:c1: a8:57:01:2b:14:20:98:ab:73:ac:71:82:1a:5d:83: 09:62:bc:dd:ee:2e:27:55:a7:d2:ae:c4:5b:b7:26: fd:9a:4d:ee:41:6b:d4:23:18:5a:3f:96:84:44:9b: 07:cc:ba:31:e8:bb:75:d0:e9:45:06:a2:36:b4:59: fa:fa:08:30:4a:fb:37:3b:1d:e1:55:74:fd:6c:03: 1a:d8:75:e1:e7:12:8b:a7:a5:17:db:44:96:0d:bf: da:76:a1:e1:dd:2c:4c:31:b0:b9:6d:75:20:ad:ee: d6:d6:a5:77:db:66:32:1d:fa:94:1e:7f:c5:2b:7b: 78:83:5b:ac:6a:ec:bc:0c:87:92:df:fd:3b:b2:c1: d3:2a:39:e0:ba:14:1b:7b:22:ee:11:b1:7d:32:83: c5:82:55:2c:cc:d0:d8:2e:9f:6b:62:d3:f8:ce:d4: cc:89:24:3f:ac:94:0c:7f:0b:61:4c:96:94:0d:cf: 3b:82:a8:2f:a3:15:a1:10:c1:69:cc:f9:ef:b2:2f: 99:32:2a:a6:06:fd:4e:d6:8f:ec:a1:cd:20:55:c7: 1b:b1:06:12:ed:8f:f1:7b:48:5a:00:4f:c8:ea:76: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DB:00:91:C5:6A:57:35:0E:55:26:BE:D5:18:48:0F:F8:1B:C7:29 X509v3 Authority Key Identifier: keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:41:92:ed:cc:73:ba:50:f2:b9:c2:2b:e6:aa:0f:6e:8a:75: d1:d4:0d:59:ab:b0:7f:a7:4b:cf:3b:5c:7b:03:c6:94:66:f1: 0d:4e:7d:35:14:6f:31:02:d4:2f:28:aa:3c:57:6c:a0:f5:73: 2a:1f:84:71:f9:0b:91:06:8f:6f:7b:bc:62:90:9f:82:35:28: 63:7d:68:15:0a:00:f1:8a:ad:f3:59:b4:10:be:22:81:4b:39: 45:21:e3:81:0a:4a:0c:bd:fd:39:f6:db:2f:ae:50:24:f8:63: d1:22:02:a2:d4:78:09:85:eb:cc:e1:86:06:fc:f4:06:84:2b: 76:a1:21:66:5b:3a:30:0c:ef:23:f6:2d:f1:ea:16:fd:69:67: e8:8d:fb:da:00:bf:25:60:6c:06:aa:8f:52:32:b5:6e:53:6c: fe:75:d8:49:f4:98:c9:e9:a9:ac:ac:09:4c:d6:96:59:78:1d: 9a:4e:6c:c6:75:c1:02:08:88:ee:81:c6:1b:ac:50:57:75:db: c4:45:10:c7:61:e4:c9:2e:2b:ef:a1:2b:b9:28:99:b8:cf:1b: 09:69:e3:f2:73:fa:6a:55:d2:66:a5:6e:20:e7:16:51:e0:0b: ff:b2:17:41:00:da:04:6c:d2:f6:b3:04:80:94:2f:60:35:6c: 48:70:54:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBczPacibgsCMB7FFtXAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2 NGVmNWYwHhcNMjUxMjE0MTgwMDU1WhcNMjUxMjE1MTgwMDU1WjAzMTEwLwYDVQQD EygzYmRiMDA5MWM1NmE1NzM1MGU1NTI2YmVkNTE4NDgwZmY4MWJjNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhYRViUL9e2SzIatR1HVEA3oDe/m b7aj9QfvGcGoVwErFCCYq3OscYIaXYMJYrzd7i4nVafSrsRbtyb9mk3uQWvUIxha P5aERJsHzLox6Lt10OlFBqI2tFn6+ggwSvs3Ox3hVXT9bAMa2HXh5xKLp6UX20SW Db/adqHh3SxMMbC5bXUgre7W1qV322YyHfqUHn/FK3t4g1usauy8DIeS3/07ssHT KjnguhQbeyLuEbF9MoPFglUszNDYLp9rYtP4ztTMiSQ/rJQMfwthTJaUDc87gqgv oxWhEMFpzPnvsi+ZMiqmBv1O1o/soc0gVccbsQYS7Y/xe0haAE/I6nYcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvbAJHFalc1DlUmvtUYSA/4G8cpMB8GA1UdIwQY MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEGS7cxz ulDyucIr5qoPbop10dQNWauwf6dLzztcewPGlGbxDU59NRRvMQLULyiqPFdsoPVz Kh+EcfkLkQaPb3u8YpCfgjUoY31oFQoA8Yqt81m0EL4igUs5RSHjgQpKDL39Ofbb L65QJPhj0SICotR4CYXrzOGGBvz0BoQrdqEhZls6MAzvI/Yt8eoW/Wln6I372gC/ JWBsBqqPUjK1blNs/nXYSfSYyemprKwJTNaWWXgdmk5sxnXBAgiI7oHGG6xQV3Xb xEUQx2HkyS4r76EruSiZuM8bCWnj8nP6alXSZqVuIOcWUeAL/7IXQQDaBGzS9rME gJQvYDVsSHBUag== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:59 2025 by rpki-client