This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json) Hash identifier: tYsaYgXWS0ig7+Ch3827Bu6rzPV9xfptDyuKKG0ein0= Subject key identifier: 3C:86:C6:B8:60:A4:0A:24:76:FE:42:2D:FE:16:49:DE:E8:E4:0B:6D Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab Certificate serial: 019B3A9139B9A08B49D4916DDEF315FF801C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft Manifest number: 1782 Signing time: Sat 20 Dec 2025 07:02:34 +0000 Manifest this update: Sat 20 Dec 2025 07:02:34 +0000 Manifest next update: Sun 21 Dec 2025 07:02:34 +0000 Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: kniOW/YbhMEAGHC4oQcx0/HSbanXT/5nqtLmuz7zzRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:39:b9:a0:8b:49:d4:91:6d:de:f3:15:ff:80:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab Validity Not Before: Dec 20 07:02:34 2025 GMT Not After : Dec 21 07:02:34 2025 GMT Subject: CN=3c86c6b860a40a2476fe422dfe1649dee8e40b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:9a:21:f9:e9:2e:0e:0e:cf:0c:20:f6:7c: cb:26:82:95:32:7d:0f:8c:dd:f5:23:ee:9a:98:9b: 0c:25:ea:a2:56:8e:50:02:c2:17:0b:eb:20:8e:94: b5:4e:13:4a:30:ce:98:51:02:82:aa:99:99:a4:68: 2c:4b:1e:2f:99:6b:16:a7:68:95:04:b1:77:7f:a5: e1:99:97:98:88:3f:95:8b:26:ea:ec:eb:11:f0:37: a7:6b:4c:fb:9f:46:08:c6:39:04:37:64:65:2b:6b: 48:cc:52:a8:76:3c:4d:c5:6e:c9:44:e9:fa:21:b7: 65:92:18:d2:8c:14:e1:16:08:18:c8:a7:fc:59:a7: e2:e0:7f:9a:08:3a:14:59:97:ec:b2:d5:3d:e1:f6: 66:fa:4b:ef:8e:da:c2:6a:1b:55:b8:6e:83:60:1b: 15:c4:d5:ad:de:85:d1:fa:61:20:03:63:45:37:8a: 02:27:d1:55:cc:97:39:2c:c1:8e:cc:33:dd:10:fa: f7:b0:4f:0f:36:cc:be:d2:ff:db:be:46:ed:7d:c9: 19:2d:5e:93:bd:5f:96:c3:22:1e:fd:e3:96:67:b2: ab:18:ea:4f:a3:23:80:41:3b:a2:7c:6d:3d:97:9d: 56:14:27:93:d3:11:b1:aa:c8:ed:2e:df:fa:e6:63: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:C6:B8:60:A4:0A:24:76:FE:42:2D:FE:16:49:DE:E8:E4:0B:6D X509v3 Authority Key Identifier: keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:34:e3:2c:30:ce:2b:8b:87:53:2a:58:a8:fd:4d:c6:a3:e1: bc:d7:ef:64:b1:58:9f:bb:54:a1:7c:7c:fc:e0:59:c8:e7:ef: d1:09:fb:d9:85:b5:40:3b:2f:a7:6b:8a:9e:b3:75:21:d5:ca: 64:66:3f:30:83:f1:03:89:2e:a0:92:60:68:d1:b7:b5:5f:10: 4d:45:fa:9e:cb:40:fa:ac:b5:0b:26:0d:36:ed:61:9c:e3:0c: 6a:37:8f:bd:ae:92:a6:b1:03:5b:83:53:57:ee:c2:e1:d1:4e: e5:95:82:c3:5f:9c:92:29:29:2a:bb:b8:c6:6b:6f:87:fb:7a: 0f:be:6e:4a:72:7c:51:82:06:5d:f9:fe:5c:f1:1a:af:d7:7c: d7:00:36:b2:2c:01:54:28:26:e3:f7:ae:61:6f:2f:86:80:4c: 74:29:4d:fd:13:7c:40:ec:3e:3b:60:02:04:27:7d:49:4f:c8: c1:0a:34:76:32:a7:88:c9:bb:10:14:22:72:8b:23:66:07:67: 23:ff:5a:f4:72:63:2d:03:32:a6:2e:e2:15:9e:8c:f2:a9:b1: 2b:d4:b2:11:e8:1e:53:d6:e7:a7:2e:b1:24:6d:44:e7:fb:33: 5e:d2:e8:2b:e3:1a:a3:bc:3d:85:99:fe:72:f5:8f:18:9b:13: 00:92:25:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kTm5oItJ1JFt3vMV/4AcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWIxMGU4YWZkZjAzZTRiMWRhODU3ZmFjMDUxOWY0OTQz ZGJjYWIwHhcNMjUxMjIwMDcwMjM0WhcNMjUxMjIxMDcwMjM0WjAzMTEwLwYDVQQD EygzYzg2YzZiODYwYTQwYTI0NzZmZTQyMmRmZTE2NDlkZWU4ZTQwYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvmaIfnpLg4Ozwwg9nzLJoKVMn0P jN31I+6amJsMJeqiVo5QAsIXC+sgjpS1ThNKMM6YUQKCqpmZpGgsSx4vmWsWp2iV BLF3f6XhmZeYiD+Viybq7OsR8Dena0z7n0YIxjkEN2RlK2tIzFKodjxNxW7JROn6 IbdlkhjSjBThFggYyKf8Wafi4H+aCDoUWZfsstU94fZm+kvvjtrCahtVuG6DYBsV xNWt3oXR+mEgA2NFN4oCJ9FVzJc5LMGOzDPdEPr3sE8PNsy+0v/bvkbtfckZLV6T vV+WwyIe/eOWZ7KrGOpPoyOAQTuifG09l51WFCeT0xGxqsjtLt/65mPWFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyGxrhgpAokdv5CLf4WSd7o5AttMB8GA1UdIwQY MBaAFCyrEOiv3wPksdqFf6wFGfSUPbyrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAt MGQ1MDk0NGYyMzllLzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAtMGQ1MDk0NGYyMzll LzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDTjLDDO K4uHUypYqP1NxqPhvNfvZLFYn7tUoXx8/OBZyOfv0Qn72YW1QDsvp2uKnrN1IdXK ZGY/MIPxA4kuoJJgaNG3tV8QTUX6nstA+qy1CyYNNu1hnOMMajePva6SprEDW4NT V+7C4dFO5ZWCw1+ckikpKru4xmtvh/t6D75uSnJ8UYIGXfn+XPEar9d81wA2siwB VCgm4/euYW8vhoBMdClN/RN8QOw+O2ACBCd9SU/IwQo0djKniMm7EBQicosjZgdn I/9a9HJjLQMypi7iFZ6M8qmxK9SyEegeU9bnpy6xJG1E5/szXtLoK+Mao7w9hZn+ cvWPGJsTAJIlxw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:08:37 2025 by rpki-client