This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json) Hash identifier: J8PdOpJjrHYnnFhkPn7/hYwl8Z8BIqRZmI9lDSaqnPU= Subject key identifier: 8D:ED:8A:A0:5E:83:5C:EA:47:EB:B0:2D:2C:AF:41:9E:43:62:5B:DE Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Certificate serial: 019B202B192D03FDFEE626A06E5153851B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft Manifest number: 06AD Signing time: Mon 15 Dec 2025 04:00:53 +0000 Manifest this update: Mon 15 Dec 2025 04:00:53 +0000 Manifest next update: Tue 16 Dec 2025 04:00:53 +0000 Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=) 2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: sdWesJVnMe0LdEFDFF3+7HwT3VnVm6OptFoSPWzf/rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:19:2d:03:fd:fe:e6:26:a0:6e:51:53:85:1b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Validity Not Before: Dec 15 04:00:53 2025 GMT Not After : Dec 16 04:00:53 2025 GMT Subject: CN=8ded8aa05e835cea47ebb02d2caf419e43625bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:32:c9:dd:89:d9:67:96:43:cc:ec:63:0b: a6:89:22:87:1b:6d:84:a0:00:7b:46:47:10:0f:61: 81:68:5e:81:60:f1:c1:bb:ec:92:55:bb:1d:51:a8: 9e:2d:17:7a:ef:29:ad:38:f2:96:a2:8c:68:7d:e7: 77:80:6f:63:fc:b4:ec:ca:a9:1c:9f:f8:b2:b8:5d: a9:c3:14:7f:ea:50:4c:15:7f:e1:f1:4d:83:39:77: 24:7e:eb:b6:9a:9d:c3:dc:ea:18:18:7a:0b:31:2f: 22:17:a3:99:fd:83:da:8c:23:43:87:9f:ec:b4:47: 48:47:c7:db:5b:8a:44:b0:ad:2f:3f:fd:f8:99:81: 92:1f:54:a1:bd:b2:1f:98:65:cc:7d:d2:04:f8:88: c3:8b:a1:22:48:2c:95:96:ea:83:d6:b2:e6:d9:9c: 58:70:c1:a1:f3:06:bc:68:1c:34:c5:40:5e:69:bd: 0b:8d:07:d8:77:27:cc:19:bb:1d:62:e9:74:a8:77: 32:1b:0b:23:5c:d7:7a:57:76:5e:e5:e9:f6:65:3a: e2:83:74:f7:b0:7b:09:e7:08:17:97:f7:14:f7:4b: 20:87:a9:54:04:ca:8c:f7:73:bd:e8:b2:92:47:df: 65:0e:22:41:dc:4e:3e:eb:ee:29:4f:74:4e:22:bb: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:ED:8A:A0:5E:83:5C:EA:47:EB:B0:2D:2C:AF:41:9E:43:62:5B:DE X509v3 Authority Key Identifier: keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:04:5d:a9:57:28:e7:ad:5d:90:0a:79:2d:13:e5:58:14: 69:a4:39:97:e5:b3:8b:17:0f:5e:97:03:9f:97:26:8d:b2:b5: eb:40:00:f5:cc:22:f6:d2:b8:cd:64:b7:70:9f:2b:35:29:4e: 64:63:30:3d:e6:09:25:35:57:50:07:14:08:c0:f4:92:a5:a1: e0:a7:b4:8c:c4:ae:aa:d2:34:ae:b9:63:23:8b:32:ab:70:bb: 8e:a2:f3:6f:ce:e7:11:5a:42:73:e1:7b:ea:8a:76:51:32:32: 69:9e:72:05:1c:5c:23:d4:4d:b4:6f:ab:a8:d6:d6:e1:8f:e5: ca:da:1a:01:d0:fb:d9:67:67:70:71:ad:d5:91:c7:d4:cd:05: 7b:38:e4:d2:7b:bf:4a:cc:c5:8c:b9:06:00:74:eb:23:2c:56: 7d:c7:c4:13:5e:3b:7c:ac:7f:97:79:f2:61:8c:64:ab:1b:6f: 37:2c:37:5e:3b:9d:89:77:79:a4:2e:38:f4:95:d9:1e:b4:7a: 16:51:87:01:93:46:e0:12:0a:02:84:81:ea:5e:75:30:ac:3e: 58:b0:25:d2:4d:81:8a:d4:4f:a1:c1:e8:06:4e:2a:04:30:48: 96:ee:6f:51:07:d2:c7:ae:9f:36:36:71:27:b8:3d:a3:1c:d1: 93:89:92:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKxktA/3+5iagblFThRt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx Y2Y0ZDYwHhcNMjUxMjE1MDQwMDUzWhcNMjUxMjE2MDQwMDUzWjAzMTEwLwYDVQQD Eyg4ZGVkOGFhMDVlODM1Y2VhNDdlYmIwMmQyY2FmNDE5ZTQzNjI1YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMyyd2J2WeWQ8zsYwumiSKHG22E oAB7RkcQD2GBaF6BYPHBu+ySVbsdUaieLRd67ymtOPKWooxofed3gG9j/LTsyqkc n/iyuF2pwxR/6lBMFX/h8U2DOXckfuu2mp3D3OoYGHoLMS8iF6OZ/YPajCNDh5/s tEdIR8fbW4pEsK0vP/34mYGSH1ShvbIfmGXMfdIE+IjDi6EiSCyVluqD1rLm2ZxY cMGh8wa8aBw0xUBeab0LjQfYdyfMGbsdYul0qHcyGwsjXNd6V3Ze5en2ZTrig3T3 sHsJ5wgXl/cU90sgh6lUBMqM93O96LKSR99lDiJB3E4+6+4pT3ROIrsfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3tiqBeg1zqR+uwLSyvQZ5DYlveMB8GA1UdIwQY MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVToEXalX KOetXZAKeS0T5VgUaaQ5l+WzixcPXpcDn5cmjbK160AA9cwi9tK4zWS3cJ8rNSlO ZGMwPeYJJTVXUAcUCMD0kqWh4Ke0jMSuqtI0rrljI4syq3C7jqLzb87nEVpCc+F7 6op2UTIyaZ5yBRxcI9RNtG+rqNbW4Y/lytoaAdD72WdncHGt1ZHH1M0Fezjk0nu/ SszFjLkGAHTrIyxWfcfEE147fKx/l3nyYYxkqxtvNyw3XjudiXd5pC449JXZHrR6 FlGHAZNG4BIKAoSB6l51MKw+WLAl0k2BitRPocHoBk4qBDBIlu5vUQfSx66fNjZx J7g9oxzRk4mSnA== -----END CERTIFICATE-----Generated at Mon Dec 15 09:00:46 2025 by rpki-client