This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json) Hash identifier: b92h5/W2LDDOGECVEfXzZTexarKq+SFKP5C9chJUOWg= Subject key identifier: 41:F9:44:1E:02:01:61:50:DE:B0:4D:70:91:DB:CE:47:12:47:53:80 Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Certificate serial: 019B337B5D86CA7FD9CB8FAAB845726DE684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft Manifest number: 06B7 Signing time: Thu 18 Dec 2025 22:01:21 +0000 Manifest this update: Thu 18 Dec 2025 22:01:21 +0000 Manifest next update: Fri 19 Dec 2025 22:01:21 +0000 Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=) 2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: uaYMSIL45JNcAD8oHwrEwohu4+aCFy8I3g2OBgn6zdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:5d:86:ca:7f:d9:cb:8f:aa:b8:45:72:6d:e6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6 Validity Not Before: Dec 18 22:01:21 2025 GMT Not After : Dec 19 22:01:21 2025 GMT Subject: CN=41f9441e02016150deb04d7091dbce4712475380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:5b:e0:07:61:5c:f8:35:87:c0:ea:4e:eb: 89:b6:2f:fc:29:4a:02:cf:b7:01:85:4a:df:a3:e1: 5e:51:b7:2a:0a:07:86:a6:8d:9d:a5:ba:28:d5:06: 02:69:20:07:e9:5b:54:b9:46:a0:bb:40:da:22:59: d7:1b:54:d2:c3:3e:d4:03:8c:c7:61:21:c2:ea:ba: 96:02:a7:89:56:da:5a:43:fa:78:92:52:71:38:94: ea:67:68:b0:13:c2:99:00:36:03:62:a8:ae:ea:fb: fa:8a:03:a2:a7:53:20:75:87:97:da:99:a3:d2:a3: e7:74:0d:f2:f8:a2:ea:96:0f:9c:5a:c5:5d:76:71: 35:e9:e4:5f:d1:bb:a5:be:1f:3f:41:7e:a9:e1:ec: fa:93:f2:e2:f1:9a:15:2f:c9:93:fd:36:4e:81:67: b6:63:3f:c7:eb:34:ab:22:b2:e5:47:5b:12:dd:ef: 19:38:50:37:3e:89:22:dc:3b:35:46:fe:13:7c:4e: fd:f4:56:07:19:e5:c8:27:01:9b:cb:3b:2d:a3:cb: f0:0a:66:67:a9:be:62:eb:f7:b9:c7:59:66:5b:b8: 7b:b4:3f:36:d6:92:15:27:9c:7a:bb:dc:c4:70:bc: 75:fb:0f:9e:60:ff:f3:fa:67:c7:df:80:e2:f4:ad: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:44:1E:02:01:61:50:DE:B0:4D:70:91:DB:CE:47:12:47:53:80 X509v3 Authority Key Identifier: keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:21:dd:6e:d9:7b:fe:d5:80:a9:40:e6:ff:2f:0f:79:ee:ab: b6:be:5a:20:2a:ee:0a:a7:c3:2f:41:0e:d9:a1:40:52:d1:c5: 66:d3:eb:4a:5e:a8:d2:fc:04:ed:4d:69:4f:51:2b:ff:2a:8b: 81:45:e2:36:41:f6:2f:db:e9:70:97:f4:0e:a4:fc:a5:8c:11: 7b:c5:af:24:5f:d9:31:c5:09:bd:36:0e:ba:83:ed:32:28:96: b4:ec:a1:4a:03:ce:bb:87:12:2a:81:86:04:e7:28:f2:3a:e6: f2:20:ce:02:cc:1e:84:2e:bf:4e:7c:05:24:d3:2f:25:85:c0: 51:84:64:0b:b1:d8:d2:95:58:a1:55:cb:71:88:5b:31:e9:96: 81:c6:1f:95:4f:80:44:46:5b:17:ac:ab:13:44:bb:cc:ee:71: 45:2c:d4:b5:e7:ff:e2:e1:e2:50:1c:fc:2a:0f:da:48:c6:4b: 85:5a:a1:f5:7c:0c:55:8d:8f:6e:c4:94:8f:d4:19:fc:94:55: 70:e4:cd:90:44:26:c0:d6:bd:69:27:aa:1e:d6:30:d4:f6:6d: 66:c8:f2:a8:ad:46:5e:eb:65:48:50:93:61:d9:bc:0f:66:68: 22:3d:dc:4e:57:2f:38:38:eb:68:f1:54:98:6b:0c:97:42:71: f8:27:f6:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze12Gyn/Zy4+quEVybeaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx Y2Y0ZDYwHhcNMjUxMjE4MjIwMTIxWhcNMjUxMjE5MjIwMTIxWjAzMTEwLwYDVQQD Eyg0MWY5NDQxZTAyMDE2MTUwZGViMDRkNzA5MWRiY2U0NzEyNDc1MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Fb4AdhXPg1h8DqTuuJti/8KUoC z7cBhUrfo+FeUbcqCgeGpo2dpboo1QYCaSAH6VtUuUagu0DaIlnXG1TSwz7UA4zH YSHC6rqWAqeJVtpaQ/p4klJxOJTqZ2iwE8KZADYDYqiu6vv6igOip1MgdYeX2pmj 0qPndA3y+KLqlg+cWsVddnE16eRf0bulvh8/QX6p4ez6k/Li8ZoVL8mT/TZOgWe2 Yz/H6zSrIrLlR1sS3e8ZOFA3Poki3Ds1Rv4TfE799FYHGeXIJwGbyzsto8vwCmZn qb5i6/e5x1lmW7h7tD821pIVJ5x6u9zEcLx1+w+eYP/z+mfH34Di9K0wOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH5RB4CAWFQ3rBNcJHbzkcSR1OAMB8GA1UdIwQY MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCHdbtl7 /tWAqUDm/y8Pee6rtr5aICruCqfDL0EO2aFAUtHFZtPrSl6o0vwE7U1pT1Er/yqL gUXiNkH2L9vpcJf0DqT8pYwRe8WvJF/ZMcUJvTYOuoPtMiiWtOyhSgPOu4cSKoGG BOco8jrm8iDOAswehC6/TnwFJNMvJYXAUYRkC7HY0pVYoVXLcYhbMemWgcYflU+A REZbF6yrE0S7zO5xRSzUtef/4uHiUBz8Kg/aSMZLhVqh9XwMVY2PbsSUj9QZ/JRV cOTNkEQmwNa9aSeqHtYw1PZtZsjyqK1GXutlSFCTYdm8D2ZoIj3cTlcvODjraPFU mGsMl0Jx+Cf22g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:44 2025 by rpki-client