This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json) Hash identifier: fICfqemuy7kWbhfiScqs+q3b/cb0Qzkb4Aq8eW8Cpz0= Subject key identifier: A6:89:AC:14:EF:04:84:C2:F7:DB:05:60:13:F5:1B:C3:36:C1:54:EA Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Certificate serial: 019B4AA836FF02D4897DA247AC4D93362543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft Manifest number: 1725 Signing time: Tue 23 Dec 2025 10:01:36 +0000 Manifest this update: Tue 23 Dec 2025 10:01:36 +0000 Manifest next update: Wed 24 Dec 2025 10:01:36 +0000 Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: 3B18eH0GQex926uwbwWFFGC1dcQeGZhMV2VMI5+Fb/c=) 2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:36:ff:02:d4:89:7d:a2:47:ac:4d:93:36:25:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed Validity Not Before: Dec 23 10:01:36 2025 GMT Not After : Dec 24 10:01:36 2025 GMT Subject: CN=a689ac14ef0484c2f7db056013f51bc336c154ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:ae:a8:28:cf:6a:27:e1:4c:af:cd:43:32: 0c:42:8c:dd:8f:bb:ba:c2:c3:fa:a2:13:68:e2:38: eb:c1:54:da:cb:a7:de:14:15:bb:b4:c5:8e:3f:86: e3:d1:5c:e8:66:d2:4b:51:04:06:63:1d:0a:55:54: 95:b5:c6:c5:5d:ed:1e:bd:74:57:3f:22:42:84:f9: 45:6a:69:c0:cf:b6:87:9a:d6:13:05:a8:1b:0f:c3: e3:d4:f7:d8:bf:c6:41:29:40:52:7d:ce:26:77:67: a5:1d:6e:86:4c:18:ec:39:17:35:2b:70:58:12:71: 3c:20:75:1d:50:31:8e:0f:8e:cb:ac:5a:0f:c0:4e: ae:7b:65:6a:e4:3d:62:95:b6:89:11:a0:14:e4:ba: 41:0c:43:70:c7:33:eb:29:0b:16:2b:19:b5:93:f7: 1d:ee:70:d2:d1:73:91:a0:c8:b7:ae:91:4b:48:d1: d4:04:ef:66:6e:63:ba:98:be:e6:c2:5a:59:c6:56: 46:0f:2a:aa:ec:b5:2f:11:1f:b7:a7:86:1e:8a:7c: 59:07:80:dc:34:ce:47:38:34:79:1b:61:63:a9:50: 0c:d8:85:16:9b:97:73:09:7a:92:77:ad:a0:ae:7e: 73:b6:c7:9e:4d:6c:d3:2f:65:f8:b6:9e:c8:9f:a9: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:AC:14:EF:04:84:C2:F7:DB:05:60:13:F5:1B:C3:36:C1:54:EA X509v3 Authority Key Identifier: keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ad:83:61:49:ca:41:eb:84:a5:56:d8:95:44:f0:92:5f:dc: fd:4d:5a:b3:06:a2:ea:06:70:5c:e9:f8:fd:ef:78:73:8b:01: 1c:9b:f8:bb:25:4f:57:2e:38:12:8e:25:66:a6:f8:32:61:44: 3c:e4:fd:7c:21:c8:30:db:86:db:f2:5d:55:69:79:95:2f:d1: 60:0a:5f:04:e0:ff:60:3c:a0:ac:3d:33:92:da:6a:10:24:9f: 96:1e:2b:cc:df:fa:b1:e7:fa:89:cc:04:16:f5:5b:b8:fe:fa: 2e:0a:38:f9:4f:fc:0d:62:89:6a:60:9a:2c:52:08:56:fa:ea: 38:55:61:e8:0f:37:fa:77:29:39:dd:63:4d:99:fc:64:67:cd: 28:d7:56:5e:3c:ad:34:e6:a9:60:ba:9f:5a:a4:54:eb:75:6f: c3:1d:b3:3e:ea:2c:1b:0e:07:94:db:6d:d7:74:10:aa:90:43: 4f:63:ab:3c:b4:b1:83:8b:30:20:c2:df:f9:0f:31:bf:cc:86: e5:94:00:da:a3:b8:19:79:3c:61:e7:d0:b4:be:fb:17:2f:6d: 66:92:07:58:1c:1d:ea:36:93:c3:d6:d3:f8:af:3a:53:20:69: 9f:fd:02:b7:73:63:35:60:01:82:ac:67:1d:a9:3a:80:d3:6a: e7:f8:f1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqDb/AtSJfaJHrE2TNiVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0 ZDZlZWQwHhcNMjUxMjIzMTAwMTM2WhcNMjUxMjI0MTAwMTM2WjAzMTEwLwYDVQQD EyhhNjg5YWMxNGVmMDQ4NGMyZjdkYjA1NjAxM2Y1MWJjMzM2YzE1NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0quqCjPaifhTK/NQzIMQozdj7u6 wsP6ohNo4jjrwVTay6feFBW7tMWOP4bj0VzoZtJLUQQGYx0KVVSVtcbFXe0evXRX PyJChPlFamnAz7aHmtYTBagbD8Pj1PfYv8ZBKUBSfc4md2elHW6GTBjsORc1K3BY EnE8IHUdUDGOD47LrFoPwE6ue2Vq5D1ilbaJEaAU5LpBDENwxzPrKQsWKxm1k/cd 7nDS0XORoMi3rpFLSNHUBO9mbmO6mL7mwlpZxlZGDyqq7LUvER+3p4YeinxZB4Dc NM5HODR5G2FjqVAM2IUWm5dzCXqSd62grn5ztseeTWzTL2X4tp7In6m1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaJrBTvBITC99sFYBP1G8M2wVTqMB8GA1UdIwQY MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyK2DYUnK QeuEpVbYlUTwkl/c/U1aswai6gZwXOn4/e94c4sBHJv4uyVPVy44Eo4lZqb4MmFE POT9fCHIMNuG2/JdVWl5lS/RYApfBOD/YDygrD0zktpqECSflh4rzN/6sef6icwE FvVbuP76Lgo4+U/8DWKJamCaLFIIVvrqOFVh6A83+ncpOd1jTZn8ZGfNKNdWXjyt NOapYLqfWqRU63Vvwx2zPuosGw4HlNtt13QQqpBDT2OrPLSxg4swIMLf+Q8xv8yG 5ZQA2qO4GXk8YefQtL77Fy9tZpIHWBwd6jaTw9bT+K86UyBpn/0Ct3NjNWABgqxn Hak6gNNq5/jxmQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:26:29 2025 by rpki-client