This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json) Hash identifier: lA3s3OG773mbZs7LrPotKWiVpbBZkU85d9va0fTMfzA= Subject key identifier: 17:55:93:5C:FE:93:8E:98:D7:36:DF:46:F3:78:E5:7B:00:15:F4:79 Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e Certificate serial: 019B40C8E3EE495212E855B712C956A18B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft Manifest number: 15D2 Signing time: Sun 21 Dec 2025 12:01:05 +0000 Manifest this update: Sun 21 Dec 2025 12:01:05 +0000 Manifest next update: Mon 22 Dec 2025 12:01:05 +0000 Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=) 2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=) 3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: Jj4PiBtkBr6zXY7RZ4yc9/Wi8kp3F80EhgVArkzXxAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:e3:ee:49:52:12:e8:55:b7:12:c9:56:a1:8b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e Validity Not Before: Dec 21 12:01:05 2025 GMT Not After : Dec 22 12:01:05 2025 GMT Subject: CN=1755935cfe938e98d736df46f378e57b0015f479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:c2:2c:26:72:fc:51:eb:43:f5:d2:91:aa: 4b:64:e3:ef:66:52:0a:9c:c2:4e:f9:44:32:11:d6: 18:9e:d7:64:a1:52:b3:63:07:03:14:cd:d7:b9:1a: 89:26:e4:26:24:59:4d:e4:ff:c4:ed:ba:42:e6:7c: b4:a0:94:2b:e7:48:8c:dd:69:b6:e9:b5:dc:86:58: 77:eb:d1:21:ea:ae:7d:82:1a:48:33:08:4b:3d:f1: a0:1f:2f:4b:3c:00:59:87:82:7e:60:36:d1:f2:72: b8:59:4b:cb:c8:97:c5:1b:ea:b5:96:c1:da:19:32: e2:00:86:ec:7f:e3:f4:18:3d:3a:db:13:80:99:d7: 26:06:b9:6f:a9:fe:cc:5a:2d:1f:ea:55:c4:a9:37: 9d:39:be:6d:20:8a:02:6f:b8:65:f5:ad:71:d0:4e: 7e:ef:fe:b4:4f:2d:d9:29:bb:11:33:1e:5a:db:cf: c4:98:9e:43:82:d3:04:36:6a:1b:26:e2:91:13:6b: 2a:ef:d6:d6:4a:67:51:e3:7d:89:10:12:9e:ed:1e: f0:68:50:c9:cc:0e:f8:cb:c7:29:c8:fc:22:63:b0: 1b:39:e3:d4:39:83:ff:f6:68:19:ae:b2:ce:8c:de: 09:5c:14:57:c1:9e:e0:56:3b:a2:76:59:23:13:3a: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:55:93:5C:FE:93:8E:98:D7:36:DF:46:F3:78:E5:7B:00:15:F4:79 X509v3 Authority Key Identifier: keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1e:c2:89:18:a5:72:d1:26:6b:4b:35:c8:b7:84:a7:a9:a6: a1:98:ab:ea:c1:e9:07:4f:a8:53:35:24:61:7a:75:65:46:66: f1:0e:61:4f:51:01:dc:de:45:59:09:28:49:b4:e1:29:62:9c: 4c:22:3f:37:71:32:02:65:be:66:44:35:1a:4a:50:4c:6b:12: b9:ab:85:ac:21:b7:2f:d8:1c:9e:84:80:85:15:a4:e5:09:c9: 2c:c8:3f:73:e0:e1:4d:d9:6a:90:c5:b6:25:69:bd:e8:c8:c3: d4:ec:38:5a:a4:9c:96:6e:44:c1:f1:24:89:b0:cc:89:fd:8f: 5b:66:c7:9f:75:ee:6c:7d:02:14:e7:6d:4f:7d:30:11:1e:ed: ca:97:60:3a:6f:e7:9b:e0:72:d8:9c:80:75:d9:1c:9d:4a:b0: 0b:21:d3:83:ae:50:c2:93:12:15:58:45:a0:70:71:25:af:ac: 79:14:99:ce:91:9c:f5:ca:52:df:72:ac:d9:1d:0e:fd:78:35: 89:c6:c1:51:70:db:58:5e:a2:cc:9a:d3:f7:27:d6:92:07:7f: 6b:d7:7e:e4:44:e9:95:e7:f0:88:9b:1f:fe:7c:24:80:d5:31: 81:92:d0:70:7b:93:28:4d:3a:c8:4f:7f:cb:b4:82:48:5b:23: 92:8b:29:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOPuSVIS6FW3EslWoYuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0 MTM3MWUwHhcNMjUxMjIxMTIwMTA1WhcNMjUxMjIyMTIwMTA1WjAzMTEwLwYDVQQD EygxNzU1OTM1Y2ZlOTM4ZTk4ZDczNmRmNDZmMzc4ZTU3YjAwMTVmNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/LCLCZy/FHrQ/XSkapLZOPvZlIK nMJO+UQyEdYYntdkoVKzYwcDFM3XuRqJJuQmJFlN5P/E7bpC5ny0oJQr50iM3Wm2 6bXchlh369Eh6q59ghpIMwhLPfGgHy9LPABZh4J+YDbR8nK4WUvLyJfFG+q1lsHa GTLiAIbsf+P0GD062xOAmdcmBrlvqf7MWi0f6lXEqTedOb5tIIoCb7hl9a1x0E5+ 7/60Ty3ZKbsRMx5a28/EmJ5DgtMENmobJuKRE2sq79bWSmdR432JEBKe7R7waFDJ zA74y8cpyPwiY7AbOePUOYP/9mgZrrLOjN4JXBRXwZ7gVjuidlkjEzqWpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdVk1z+k46Y1zbfRvN45XsAFfR5MB8GA1UdIwQY MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoR7CiRil ctEma0s1yLeEp6mmoZir6sHpB0+oUzUkYXp1ZUZm8Q5hT1EB3N5FWQkoSbThKWKc TCI/N3EyAmW+ZkQ1GkpQTGsSuauFrCG3L9gcnoSAhRWk5QnJLMg/c+DhTdlqkMW2 JWm96MjD1Ow4WqSclm5EwfEkibDMif2PW2bHn3XubH0CFOdtT30wER7typdgOm/n m+By2JyAddkcnUqwCyHTg65QwpMSFVhFoHBxJa+seRSZzpGc9cpS33Ks2R0O/Xg1 icbBUXDbWF6izJrT9yfWkgd/a9d+5ETplefwiJsf/nwkgNUxgZLQcHuTKE06yE9/ y7SCSFsjkosp/A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:40:15 2025 by rpki-client