This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json) Hash identifier: x7GEKct2UM8Xruj9vGkuw/X198mTC082kbtizP4W6zE= Subject key identifier: 48:C8:6F:FC:B8:35:27:AE:A6:18:CE:92:1E:32:FF:C8:7E:80:9A:C0 Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Certificate serial: 019B68EA5EFF62E08818176E12F034C09ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft Manifest number: 17A7 Signing time: Mon 29 Dec 2025 07:02:28 +0000 Manifest this update: Mon 29 Dec 2025 07:02:28 +0000 Manifest next update: Tue 30 Dec 2025 07:02:28 +0000 Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=) 2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=) 3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: VgDiAs42kFGwCYH2J6FKqb23Hqo4cWLK3YNzOMqDHDU=) 4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=) 5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:ea:5e:ff:62:e0:88:18:17:6e:12:f0:34:c0:9a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Validity Not Before: Dec 29 07:02:28 2025 GMT Not After : Dec 30 07:02:28 2025 GMT Subject: CN=48c86ffcb83527aea618ce921e32ffc87e809ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:d7:94:53:b4:ef:c0:95:d5:6b:e6:95:b5: 71:4b:19:be:e1:36:c9:aa:42:97:d8:03:b0:d5:88: 80:5e:a5:3a:35:42:b5:75:07:66:2f:b7:26:c0:7f: 8d:51:19:50:34:f7:a1:1d:02:81:dd:9f:9a:18:48: db:fc:e2:ba:3d:4c:2d:1a:1c:14:9a:d3:a4:2c:e6: 79:62:12:7f:3d:ab:05:67:48:e7:5a:cd:bc:e0:1b: 98:d4:5e:71:07:35:1f:34:e1:cb:d5:e0:4f:d4:a3: 2e:31:83:cd:60:d3:29:92:29:ab:e5:8f:7b:df:44: c0:83:71:89:e7:24:94:d6:16:f1:2f:7d:50:96:60: 8c:26:93:3a:bc:c7:cd:67:8a:01:ca:cd:d9:10:ea: 2b:05:62:3c:0f:2b:33:3c:b2:e0:2f:53:62:fe:03: f8:e5:ae:7b:1b:4c:d3:01:74:3d:e3:c4:c3:3a:06: 0d:d8:6d:11:99:b0:33:89:85:37:dd:6d:eb:10:b6: 8e:11:32:4d:bf:94:a5:a8:81:c2:6c:d8:9b:61:e2: 6e:fe:57:4a:05:8b:a0:30:0c:03:65:24:68:2d:cb: e6:a5:33:15:03:3f:91:fa:d0:7f:27:dc:79:b5:f1: dd:d3:eb:ff:31:b2:63:1d:78:74:14:6f:40:23:79: 7c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:6F:FC:B8:35:27:AE:A6:18:CE:92:1E:32:FF:C8:7E:80:9A:C0 X509v3 Authority Key Identifier: keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:77:b6:d4:6a:b6:be:f2:04:7d:f6:7e:cf:9d:89:a1:38:73: 81:9b:ae:88:9f:26:b9:ee:13:6f:61:06:8d:7a:09:d7:1d:8d: ae:b1:ff:ee:b9:14:e2:85:de:a8:c1:f9:4f:c8:fc:13:f4:2c: d1:69:e9:70:e5:01:b7:16:35:de:4b:a6:cf:a1:66:59:bd:19: 99:1b:39:f2:4b:a1:fd:4d:1a:d5:1f:f7:9c:07:e2:18:5d:59: 60:21:9d:c1:a9:51:1c:c4:8d:c4:da:c6:83:d6:0f:27:f4:a5: 92:5b:b2:34:50:ab:08:2e:be:38:2a:68:cc:e8:53:05:9d:a0: 19:c9:fa:81:d5:20:eb:b9:98:4d:c1:4f:17:b2:52:0d:26:9e: aa:80:1f:00:55:b9:88:9a:ce:af:a2:30:b4:0a:ba:b6:3b:22: a5:2b:26:2f:f1:db:92:37:c1:d1:b6:a1:1e:b5:cd:3d:8d:23: bb:67:bd:05:2d:be:bc:7d:6f:69:1b:4a:4a:44:2e:81:1f:32: 41:33:be:30:d8:21:56:9c:6e:8b:66:2d:73:b3:29:a0:f3:95: 71:28:52:10:83:fe:e0:f6:11:4d:fa:c8:3f:45:21:89:cf:92: bb:22:70:20:5b:08:b3:95:0c:cf:09:59:07:f4:8b:2a:07:73: fc:18:13:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6l7/YuCIGBduEvA0wJq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk MjYxYzkwHhcNMjUxMjI5MDcwMjI4WhcNMjUxMjMwMDcwMjI4WjAzMTEwLwYDVQQD Eyg0OGM4NmZmY2I4MzUyN2FlYTYxOGNlOTIxZTMyZmZjODdlODA5YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xXXlFO078CV1WvmlbVxSxm+4TbJ qkKX2AOw1YiAXqU6NUK1dQdmL7cmwH+NURlQNPehHQKB3Z+aGEjb/OK6PUwtGhwU mtOkLOZ5YhJ/PasFZ0jnWs284BuY1F5xBzUfNOHL1eBP1KMuMYPNYNMpkimr5Y97 30TAg3GJ5ySU1hbxL31QlmCMJpM6vMfNZ4oBys3ZEOorBWI8DyszPLLgL1Ni/gP4 5a57G0zTAXQ948TDOgYN2G0RmbAziYU33W3rELaOETJNv5SlqIHCbNibYeJu/ldK BYugMAwDZSRoLcvmpTMVAz+R+tB/J9x5tfHd0+v/MbJjHXh0FG9AI3l8HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjIb/y4NSeuphjOkh4y/8h+gJrAMB8GA1UdIwQY MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXe21Gq2 vvIEffZ+z52JoThzgZuuiJ8mue4Tb2EGjXoJ1x2NrrH/7rkU4oXeqMH5T8j8E/Qs 0WnpcOUBtxY13kumz6FmWb0ZmRs58kuh/U0a1R/3nAfiGF1ZYCGdwalRHMSNxNrG g9YPJ/SlkluyNFCrCC6+OCpozOhTBZ2gGcn6gdUg67mYTcFPF7JSDSaeqoAfAFW5 iJrOr6IwtAq6tjsipSsmL/HbkjfB0bahHrXNPY0ju2e9BS2+vH1vaRtKSkQugR8y QTO+MNghVpxui2Ytc7MpoPOVcShSEIP+4PYRTfrIP0Uhic+SuyJwIFsIs5UMzwlZ B/SLKgdz/BgTWA== -----END CERTIFICATE-----Generated at Mon Dec 29 11:07:42 2025 by rpki-client