This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json) Hash identifier: yiMMQl2Kkbe7563CfzOa1Ug2o/dyiDWMH+Z6mpVtkzQ= Subject key identifier: A5:CC:81:50:FB:8E:87:3B:55:27:4B:6E:BD:7B:3C:9E:39:B3:C1:3F Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Certificate serial: 019B12DD8E13BA99CE65F7D89BCE3B8E585C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft Manifest number: 0764 Signing time: Fri 12 Dec 2025 14:01:08 +0000 Manifest this update: Fri 12 Dec 2025 14:01:08 +0000 Manifest next update: Sat 13 Dec 2025 14:01:08 +0000 Files and hashes: 1: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: fL0kfEwyS3mFn3Ynt25BO4FB6bxPQE9949vRZpUuPy8=) 2: PFluydWOaBTgnh4o2FnGy8AoCI0.roa (hash: dYpglGU9LkXsNL5grxQDMbO9Dj9URsF+c2voMiQoHR0=) 3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:8e:13:ba:99:ce:65:f7:d8:9b:ce:3b:8e:58:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Validity Not Before: Dec 12 14:01:08 2025 GMT Not After : Dec 13 14:01:08 2025 GMT Subject: CN=a5cc8150fb8e873b55274b6ebd7b3c9e39b3c13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e0:fb:93:47:89:07:56:07:f0:8f:13:7d:1a: ac:82:04:f8:84:ec:5b:2a:79:36:a3:90:d7:19:70: b2:31:c8:db:68:28:ed:6c:50:db:30:64:de:36:0d: c5:0a:6d:61:f1:48:1f:fd:e9:c9:34:50:c2:8c:e2: a6:05:42:e3:4e:29:36:3a:da:b6:5e:31:89:83:f9: c5:64:fd:8e:c3:47:89:7d:98:b7:49:9a:7f:35:2f: e8:62:7b:c9:02:d5:cc:9f:b8:3f:bc:6d:cf:a6:aa: 0e:f2:57:f9:dc:02:33:a0:fc:8f:fe:26:ca:48:bb: 0c:b4:ba:f6:79:a1:d5:e0:57:dd:a9:95:9f:29:31: a0:f6:34:cf:cb:66:5d:9c:e6:c4:cd:6c:20:b5:9f: ff:6a:93:c0:2b:f3:1d:e1:39:4f:b1:0a:ae:44:8f: eb:5b:ce:ad:04:e0:c6:9c:c8:e8:82:f3:d8:5d:48: b0:8d:ed:6c:75:3a:33:cf:be:bf:a8:d4:3a:25:0e: b2:ae:61:34:34:60:ca:89:8a:80:ed:38:ae:14:0f: 79:b0:ba:24:02:6f:14:f5:54:0b:fa:94:77:2d:1a: 4a:b2:fc:df:3b:69:59:f0:c8:77:5c:12:3a:67:d2: bf:02:22:5c:2d:1e:2f:a8:76:3a:22:19:00:e4:fc: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CC:81:50:FB:8E:87:3B:55:27:4B:6E:BD:7B:3C:9E:39:B3:C1:3F X509v3 Authority Key Identifier: keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d3:e8:52:83:46:84:42:62:25:16:aa:bd:d2:a6:8c:d5:9e: 8e:da:bc:0f:c8:d9:50:dc:cf:b7:31:e8:bc:d2:2e:93:ee:17: 39:e3:8d:ee:8a:4a:2a:a6:f4:f0:c2:55:25:29:cc:cb:3b:25: c4:bf:57:c6:bb:c5:5e:1c:db:3a:18:ae:3d:29:2c:e8:7d:df: 84:5a:9b:f5:07:ad:16:6b:2f:8e:bf:e6:78:60:0a:ce:64:e6: 65:2b:6a:bd:92:bc:dc:cc:a6:f6:45:6f:89:8b:1a:01:d5:79: 54:5a:bb:c2:b9:08:bf:16:09:45:50:1e:b6:7c:fa:62:f0:a7: eb:67:73:01:cf:be:89:77:fa:eb:7b:29:89:8e:92:d9:68:1e: 04:e7:c3:46:e5:ef:65:17:35:10:4f:23:78:24:e7:9b:d0:7c: 2c:0e:c9:13:79:aa:d3:e8:f1:b3:43:01:59:de:94:ab:e7:d4: 8e:bf:f3:e7:98:5f:0f:43:77:2c:10:46:59:89:8c:8a:ac:bf: ed:18:84:94:f3:6a:93:47:43:22:b2:c3:32:81:d9:fb:fe:b6: 65:fe:68:13:16:f1:ac:0e:c6:d0:f5:79:48:2e:9a:19:d0:d8: d7:2e:06:e4:0a:c7:ab:68:0e:16:93:c7:41:4a:eb:a4:81:3d: 15:8d:dd:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3Y4TupnOZffYm847jlhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0 ODg5ZTAwHhcNMjUxMjEyMTQwMTA4WhcNMjUxMjEzMTQwMTA4WjAzMTEwLwYDVQQD EyhhNWNjODE1MGZiOGU4NzNiNTUyNzRiNmViZDdiM2M5ZTM5YjNjMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eD7k0eJB1YH8I8TfRqsggT4hOxb Knk2o5DXGXCyMcjbaCjtbFDbMGTeNg3FCm1h8Ugf/enJNFDCjOKmBULjTik2Otq2 XjGJg/nFZP2Ow0eJfZi3SZp/NS/oYnvJAtXMn7g/vG3PpqoO8lf53AIzoPyP/ibK SLsMtLr2eaHV4FfdqZWfKTGg9jTPy2ZdnObEzWwgtZ//apPAK/Md4TlPsQquRI/r W86tBODGnMjogvPYXUiwje1sdTozz76/qNQ6JQ6yrmE0NGDKiYqA7TiuFA95sLok Am8U9VQL+pR3LRpKsvzfO2lZ8Mh3XBI6Z9K/AiJcLR4vqHY6IhkA5PxG9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXMgVD7joc7VSdLbr17PJ45s8E/MB8GA1UdIwQY MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtPoUoNG hEJiJRaqvdKmjNWejtq8D8jZUNzPtzHovNIuk+4XOeON7opKKqb08MJVJSnMyzsl xL9XxrvFXhzbOhiuPSks6H3fhFqb9QetFmsvjr/meGAKzmTmZStqvZK83Mym9kVv iYsaAdV5VFq7wrkIvxYJRVAetnz6YvCn62dzAc++iXf663spiY6S2WgeBOfDRuXv ZRc1EE8jeCTnm9B8LA7JE3mq0+jxs0MBWd6Uq+fUjr/z55hfD0N3LBBGWYmMiqy/ 7RiElPNqk0dDIrLDMoHZ+/62Zf5oExbxrA7G0PV5SC6aGdDY1y4G5ArHq2gOFpPH QUrrpIE9FY3dUw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:29:15 2025 by rpki-client