This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json) Hash identifier: 8qtuSHnHkogOMY8EIlAvxMOwQVQT0um1XnvWA0ZM5iA= Subject key identifier: 77:E0:2E:CF:D7:1A:E2:88:AF:80:13:1D:B5:50:FD:04:8D:96:EC:14 Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5 Certificate serial: 019B4A39E0CBC40F2FF1058716BFC69CADA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft Manifest number: 178B Signing time: Tue 23 Dec 2025 08:01:05 +0000 Manifest this update: Tue 23 Dec 2025 08:01:05 +0000 Manifest next update: Wed 24 Dec 2025 08:01:05 +0000 Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: 5EPJoXRTeWtAanYqCXgNE+Zd2CShfL4KMgpWknR4Xc4=) 2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:e0:cb:c4:0f:2f:f1:05:87:16:bf:c6:9c:ad:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5 Validity Not Before: Dec 23 08:01:05 2025 GMT Not After : Dec 24 08:01:05 2025 GMT Subject: CN=77e02ecfd71ae288af80131db550fd048d96ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:94:33:7d:15:c1:7e:20:92:9f:77:59:18: 89:b4:3a:4a:c2:7b:39:df:58:5e:91:03:80:72:c9: 81:a7:b8:63:85:63:f0:b4:1c:76:4a:f0:a0:ca:b0: 34:61:7c:65:77:ce:93:f8:4d:e8:19:c6:dc:66:a9: 0c:5e:3e:ba:70:73:94:a9:c4:f9:20:ae:35:6f:90: f8:39:5a:5a:8d:4b:76:12:f9:c5:b8:4c:af:03:f6: a1:91:fa:4d:9c:33:af:9f:7c:fd:c0:3c:4f:58:da: ec:aa:60:63:37:6c:78:38:9b:83:b4:3a:29:d3:50: 05:38:3d:bf:0a:82:fe:df:49:11:e6:ae:18:e2:2a: eb:04:88:d7:15:99:3c:91:57:c3:5b:c5:36:27:ec: 54:0d:d2:66:c8:b8:eb:01:20:61:62:70:8a:4f:a4: c1:ee:e8:ad:e0:29:20:4a:4d:a0:e3:15:dd:05:e5: 4c:41:79:ab:2e:33:e4:f9:43:bd:25:4a:c0:fe:cf: 16:cb:3d:d9:5f:e1:63:95:c1:f0:f2:b8:d8:2b:85: 24:fc:bf:d1:84:6c:3b:6c:ad:0d:4c:3e:dc:2d:40: 4d:01:45:09:32:5a:f3:26:be:44:fc:7b:8e:a2:2d: 32:73:48:2b:28:0d:df:d7:ce:7d:9e:cf:00:f0:b9: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E0:2E:CF:D7:1A:E2:88:AF:80:13:1D:B5:50:FD:04:8D:96:EC:14 X509v3 Authority Key Identifier: keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ad:c8:86:38:ac:43:fb:f0:fe:ff:ce:36:13:8a:be:9b:e7: 29:86:3a:5e:a0:b4:59:a1:9d:4b:36:3e:98:78:fb:5c:d1:ed: 18:20:41:f8:28:a3:3c:b1:d4:2c:a7:93:d3:f9:91:33:64:cd: 61:c7:6a:69:79:75:36:cc:26:40:bc:02:5a:cc:87:4e:9b:18: 27:be:9d:47:3a:5e:34:1c:c7:f2:9a:f0:7c:06:20:2d:e6:2c: 06:25:a1:ad:b9:cd:f1:87:56:45:83:93:c8:08:6a:18:3b:db: 2c:de:2b:ff:8d:c2:8b:8d:11:eb:63:f3:7f:a6:0a:a9:71:44: 07:fb:ea:ad:18:18:51:28:99:26:e5:8d:c1:3e:7f:b1:b6:6d: 34:45:c1:36:49:8a:98:56:63:68:d6:01:92:13:a0:61:46:10: d9:f1:39:89:c5:05:60:d4:a7:19:ea:a4:7f:a2:c3:4f:07:d1: 58:22:7f:5c:4a:95:1a:dd:aa:8e:80:45:cc:b5:5b:c0:29:97: 1d:77:56:8b:3a:a5:1e:8e:10:31:8c:30:7c:57:3d:b4:4d:ce: 9e:cd:48:b5:d8:a9:5d:95:66:be:6d:59:10:8c:dc:9e:ad:f9: a8:a1:5a:ac:ae:b4:86:17:65:e4:d4:e2:2c:c9:c4:17:8e:da: a3:27:6e:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOeDLxA8v8QWHFr/GnK2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi MDVmZTUwHhcNMjUxMjIzMDgwMTA1WhcNMjUxMjI0MDgwMTA1WjAzMTEwLwYDVQQD Eyg3N2UwMmVjZmQ3MWFlMjg4YWY4MDEzMWRiNTUwZmQwNDhkOTZlYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJmUM30VwX4gkp93WRiJtDpKwns5 31hekQOAcsmBp7hjhWPwtBx2SvCgyrA0YXxld86T+E3oGcbcZqkMXj66cHOUqcT5 IK41b5D4OVpajUt2EvnFuEyvA/ahkfpNnDOvn3z9wDxPWNrsqmBjN2x4OJuDtDop 01AFOD2/CoL+30kR5q4Y4irrBIjXFZk8kVfDW8U2J+xUDdJmyLjrASBhYnCKT6TB 7uit4CkgSk2g4xXdBeVMQXmrLjPk+UO9JUrA/s8Wyz3ZX+FjlcHw8rjYK4Uk/L/R hGw7bK0NTD7cLUBNAUUJMlrzJr5E/HuOoi0yc0grKA3f1859ns8A8LmBQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfgLs/XGuKIr4ATHbVQ/QSNluwUMB8GA1UdIwQY MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1 LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq3Ihjis Q/vw/v/ONhOKvpvnKYY6XqC0WaGdSzY+mHj7XNHtGCBB+CijPLHULKeT0/mRM2TN YcdqaXl1NswmQLwCWsyHTpsYJ76dRzpeNBzH8prwfAYgLeYsBiWhrbnN8YdWRYOT yAhqGDvbLN4r/43Ci40R62Pzf6YKqXFEB/vqrRgYUSiZJuWNwT5/sbZtNEXBNkmK mFZjaNYBkhOgYUYQ2fE5icUFYNSnGeqkf6LDTwfRWCJ/XEqVGt2qjoBFzLVbwCmX HXdWizqlHo4QMYwwfFc9tE3Ons1ItdipXZVmvm1ZEIzcnq35qKFarK60hhdl5NTi LMnEF47aoyduDg== -----END CERTIFICATE-----Generated at Tue Dec 23 14:50:32 2025 by rpki-client