This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json) Hash identifier: uUlQOjgkjqS7Jsqxxq1m61fzWKTChT6YtYBfnP2GrAk= Subject key identifier: 2B:60:B5:52:AC:02:CA:F5:AE:86:93:FE:72:05:B6:76:16:92:0E:1B Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Certificate serial: 019B34C5A95ADAAC78CF103A37516E801CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft Manifest number: 114C Signing time: Fri 19 Dec 2025 04:02:07 +0000 Manifest this update: Fri 19 Dec 2025 04:02:07 +0000 Manifest next update: Sat 20 Dec 2025 04:02:07 +0000 Files and hashes: 1: JDbsNRiv_WMTlViBQXQ3g59gK5M.roa (hash: 5BHapuXzcbpJhpfOa/evo44J0f0F6BTnvXfMcpPhdEU=) 2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: tgStoYcCnx537aaunwpZNr9kNZfAoxd21BHqBSPU90c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:a9:5a:da:ac:78:cf:10:3a:37:51:6e:80:1c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Validity Not Before: Dec 19 04:02:07 2025 GMT Not After : Dec 20 04:02:07 2025 GMT Subject: CN=2b60b552ac02caf5ae8693fe7205b67616920e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:a8:e4:8e:db:7c:2f:60:6d:3f:99:81:d6: a7:1f:2d:77:de:02:7b:0e:c0:d0:a3:ab:02:71:d4: 43:9b:25:3a:e0:8e:c3:d8:b4:f0:04:b7:f4:82:34: 43:ca:56:56:5d:07:eb:1a:bf:82:f2:bf:14:94:01: b3:08:71:99:37:93:bd:c1:23:3e:c0:a1:12:8a:e2: 58:e9:26:c2:29:4c:ab:3d:d4:6c:a2:31:30:fd:1f: 2b:d8:33:bc:a7:10:1b:9a:9c:15:65:9b:62:41:48: f8:42:70:1c:04:bc:3c:ff:d5:47:7b:94:bf:96:68: ff:49:ce:ca:9c:75:ff:26:f1:52:fe:20:4a:34:7c: cf:c1:56:62:4a:3d:89:f5:9b:e8:21:f2:c6:e6:a8: 3a:55:28:b8:e8:59:ec:46:d2:b8:d3:d8:6d:5d:09: a5:52:fb:22:84:d9:19:0e:ae:dd:cf:b5:34:43:a3: 43:fd:ad:3c:15:56:df:36:32:e5:78:14:06:47:18: aa:bb:2f:b8:38:ba:96:c7:42:f9:23:03:01:e0:32: 78:7e:85:af:de:11:71:92:7d:b2:71:b3:79:f8:b3: 53:a5:1f:ad:2a:c8:08:df:89:c0:a3:36:d1:da:d9: 97:c7:17:e9:1f:fe:37:9b:fb:e1:b0:a3:83:0b:0e: 5f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:60:B5:52:AC:02:CA:F5:AE:86:93:FE:72:05:B6:76:16:92:0E:1B X509v3 Authority Key Identifier: keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:09:5a:0c:30:f3:3c:79:2d:15:f6:95:56:0b:80:33:9d: 35:0d:51:a7:ef:d6:0f:89:2c:0d:d1:2f:a1:ef:91:39:d7:80: 24:81:08:ef:e8:28:9f:bd:08:58:ad:57:ae:bd:48:34:d1:cc: 5a:c1:7c:07:a6:7e:25:00:77:09:c9:77:b0:11:e8:22:01:f9: 24:76:17:dd:36:f2:4a:77:19:80:a0:1f:78:42:ce:23:7a:69: 5e:89:91:fc:70:fa:ef:2a:6d:a1:7f:32:d8:99:e9:07:c4:8c: 0e:e5:d3:87:96:4f:b8:72:89:c1:36:9a:32:ed:60:4e:e5:ba: 68:10:95:1b:ac:83:e5:b8:d8:44:91:7e:99:b0:c3:a9:0e:f1: 3b:1d:f0:62:b6:e5:14:12:1d:6f:57:a5:45:fe:c4:94:a1:6e: 68:f2:76:f1:f6:b1:b8:b8:2b:f6:83:2e:fe:2a:49:de:d7:77: 21:85:c5:b9:d4:fb:d7:c6:94:5a:bf:93:38:f0:a0:cc:05:5a: 30:21:0e:30:8f:54:90:92:c3:19:12:04:f9:63:17:c8:ed:e9: 96:8b:83:20:af:48:00:66:7b:52:e5:ab:c0:02:e9:38:d1:30: fb:aa:a1:6f:c9:58:12:da:5a:d8:64:b1:c7:68:47:2b:79:fa: 1a:ac:db:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xala2qx4zxA6N1FugBy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YWE0MThhZTc3MGJkYThlZjA1MTZiMWQxYzYzM2E2N2U5 MWYzOGIwHhcNMjUxMjE5MDQwMjA3WhcNMjUxMjIwMDQwMjA3WjAzMTEwLwYDVQQD EygyYjYwYjU1MmFjMDJjYWY1YWU4NjkzZmU3MjA1YjY3NjE2OTIwZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9So5I7bfC9gbT+ZgdanHy133gJ7 DsDQo6sCcdRDmyU64I7D2LTwBLf0gjRDylZWXQfrGr+C8r8UlAGzCHGZN5O9wSM+ wKESiuJY6SbCKUyrPdRsojEw/R8r2DO8pxAbmpwVZZtiQUj4QnAcBLw8/9VHe5S/ lmj/Sc7KnHX/JvFS/iBKNHzPwVZiSj2J9ZvoIfLG5qg6VSi46FnsRtK409htXQml UvsihNkZDq7dz7U0Q6ND/a08FVbfNjLleBQGRxiquy+4OLqWx0L5IwMB4DJ4foWv 3hFxkn2ycbN5+LNTpR+tKsgI34nAozbR2tmXxxfpH/43m/vhsKODCw5fLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtgtVKsAsr1roaT/nIFtnYWkg4bMB8GA1UdIwQY MBaAFJSqQYrncL2o7wUWsdHGM6Z+kfOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUt YzM5NjIwMGZlMGJmLzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUtYzM5NjIwMGZlMGJm LzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt0JWgww 8zx5LRX2lVYLgDOdNQ1Rp+/WD4ksDdEvoe+ROdeAJIEI7+gon70IWK1Xrr1INNHM WsF8B6Z+JQB3Ccl3sBHoIgH5JHYX3TbySncZgKAfeELOI3ppXomR/HD67yptoX8y 2JnpB8SMDuXTh5ZPuHKJwTaaMu1gTuW6aBCVG6yD5bjYRJF+mbDDqQ7xOx3wYrbl FBIdb1elRf7ElKFuaPJ28faxuLgr9oMu/ipJ3td3IYXFudT718aUWr+TOPCgzAVa MCEOMI9UkJLDGRIE+WMXyO3plouDIK9IAGZ7UuWrwALpONEw+6qhb8lYEtpa2GSx x2hHK3n6Gqzb2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:05 2025 by rpki-client