This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json) Hash identifier: ugnUhzXZywzTUKx/G80HyhaqF/gs8zuVD1hWIh8Gjtk= Subject key identifier: 4D:06:A3:60:8A:6B:B2:04:68:E9:FD:F4:70:F4:E0:F0:21:8A:9D:DC Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Certificate serial: 019B1A295D9086A2629F77204FDA4AB5820C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft Manifest number: 09B6 Signing time: Sun 14 Dec 2025 00:01:16 +0000 Manifest this update: Sun 14 Dec 2025 00:01:16 +0000 Manifest next update: Mon 15 Dec 2025 00:01:16 +0000 Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=) 2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=) 3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: XZDcEz+un8Cwgab9U40KqJ9cQjrmuwdYp8NzMGuvgbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:5d:90:86:a2:62:9f:77:20:4f:da:4a:b5:82:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Validity Not Before: Dec 14 00:01:16 2025 GMT Not After : Dec 15 00:01:16 2025 GMT Subject: CN=4d06a3608a6bb20468e9fdf470f4e0f0218a9ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:f0:80:be:35:65:34:65:8b:c3:5f:d8:7d: de:e0:f6:98:d7:0a:72:e5:5c:f2:4a:63:62:bb:fd: 1c:70:e5:14:b9:77:44:e0:e2:1a:57:68:25:30:7b: dc:71:b8:65:f7:ae:99:01:4a:f1:67:84:d6:ff:7e: 0c:76:bb:cf:4a:3c:63:37:78:52:a8:12:0f:77:27: 56:75:ee:1d:36:5a:0e:7c:48:3a:1a:bc:54:4a:4c: cb:ae:e7:be:e8:52:27:83:52:0b:8a:e2:53:26:3b: 1c:e9:28:61:66:09:24:ac:17:e5:dc:bb:cb:4b:0e: 09:e9:ed:32:16:39:f3:31:3e:9f:f6:53:92:e8:11: 6c:27:51:98:a8:68:15:4a:b0:59:4e:eb:1a:a5:14: 78:36:a5:d3:67:30:a5:48:4c:73:3e:76:f8:de:a4: 81:0f:e7:f5:be:12:dc:a3:c6:65:9e:76:52:2c:a2: 5e:9b:b4:8d:80:c7:a1:c4:8a:c1:82:8c:ed:c4:4a: f0:90:5f:07:bb:ec:ae:2e:e2:9c:26:2c:1f:21:bf: fd:2b:d1:86:8b:1f:b7:d7:05:6b:cc:5f:f5:4d:eb: e4:f1:8b:de:05:58:dd:ba:98:ef:79:9b:14:fb:99: fc:56:d9:52:fa:fb:a9:e5:d1:e5:e7:d6:80:a6:46: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:06:A3:60:8A:6B:B2:04:68:E9:FD:F4:70:F4:E0:F0:21:8A:9D:DC X509v3 Authority Key Identifier: keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d1:a5:36:5e:b6:d8:b4:e1:65:ee:77:b1:73:43:c7:3b:b7: 21:51:a6:f1:a1:08:41:12:c3:fa:71:f7:1d:d7:58:1c:e5:34: 49:6c:3f:96:1d:25:50:82:0c:c2:f7:77:92:e9:23:88:f2:de: 79:3d:1b:d6:47:bf:b7:82:05:a3:b1:7d:55:00:aa:16:60:6b: 13:1d:b1:04:27:d8:14:3c:0b:88:c6:69:45:de:3e:6e:5f:54: ae:13:aa:d4:ed:a8:ac:7a:2f:d8:16:83:0c:ac:3b:b1:a4:2a: 47:e6:24:6a:8a:9c:9b:e2:c5:8e:4f:1c:74:e1:c9:1f:6e:d3: 18:29:41:cf:29:1f:ac:32:54:6a:59:98:ad:af:3a:8e:d0:e6: cc:96:e5:5c:1b:9f:31:19:a7:97:aa:5f:13:ea:48:11:f2:1e: c1:13:0c:73:b3:0e:9e:d1:30:2c:c6:9c:d3:c9:fd:9f:14:3b: 38:85:2a:3e:f8:c2:50:39:85:a6:bc:2b:9d:8f:ce:cf:39:84: 8c:f6:0e:e6:7f:13:45:71:69:4d:62:38:e1:9e:bc:63:70:04: 4d:8a:2e:cf:4c:cf:d9:0c:37:77:d6:59:36:ec:35:c4:13:c8: 6d:cb:8f:81:82:64:18:68:4a:9e:be:67:01:ca:06:77:bb:96: e3:b2:04:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKV2QhqJin3cgT9pKtYIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0 ZGNkMjkwHhcNMjUxMjE0MDAwMTE2WhcNMjUxMjE1MDAwMTE2WjAzMTEwLwYDVQQD Eyg0ZDA2YTM2MDhhNmJiMjA0NjhlOWZkZjQ3MGY0ZTBmMDIxOGE5ZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4jwgL41ZTRli8Nf2H3e4PaY1wpy 5VzySmNiu/0ccOUUuXdE4OIaV2glMHvccbhl966ZAUrxZ4TW/34MdrvPSjxjN3hS qBIPdydWde4dNloOfEg6GrxUSkzLrue+6FIng1ILiuJTJjsc6ShhZgkkrBfl3LvL Sw4J6e0yFjnzMT6f9lOS6BFsJ1GYqGgVSrBZTusapRR4NqXTZzClSExzPnb43qSB D+f1vhLco8ZlnnZSLKJem7SNgMehxIrBgoztxErwkF8Hu+yuLuKcJiwfIb/9K9GG ix+31wVrzF/1Tevk8YveBVjdupjveZsU+5n8VtlS+vup5dHl59aApkY/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0Go2CKa7IEaOn99HD04PAhip3cMB8GA1UdIwQY MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt YzY5YTdmMDNlMThmLzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttGlNl62 2LThZe53sXNDxzu3IVGm8aEIQRLD+nH3HddYHOU0SWw/lh0lUIIMwvd3kukjiPLe eT0b1ke/t4IFo7F9VQCqFmBrEx2xBCfYFDwLiMZpRd4+bl9UrhOq1O2orHov2BaD DKw7saQqR+Ykaoqcm+LFjk8cdOHJH27TGClBzykfrDJUalmYra86jtDmzJblXBuf MRmnl6pfE+pIEfIewRMMc7MOntEwLMac08n9nxQ7OIUqPvjCUDmFprwrnY/OzzmE jPYO5n8TRXFpTWI44Z68Y3AETYouz0zP2Qw3d9ZZNuw1xBPIbcuPgYJkGGhKnr5n AcoGd7uW47IEcg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:51 2025 by rpki-client