This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json) Hash identifier: KhKYikrbRyd1LoW8/G7wMVMZ6UCFYkTHaIEbUDwfnbQ= Subject key identifier: EF:21:8F:28:F5:1B:B8:B5:4D:8A:12:09:6B:14:B7:0F:E6:2A:0E:C6 Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513 Certificate serial: 019B31FAED35DA6CC4BA6E36AC2A24A40C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 15:01:26 +0000 Manifest this update: Thu 18 Dec 2025 15:01:26 +0000 Manifest next update: Fri 19 Dec 2025 15:01:26 +0000 Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: d8aM/BY5wCjU8BGoVpiPzmYph4/iXZp3V1gfO0ACFEA=) 2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=) 3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=) 4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:ed:35:da:6c:c4:ba:6e:36:ac:2a:24:a4:0c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513 Validity Not Before: Dec 18 15:01:26 2025 GMT Not After : Dec 19 15:01:26 2025 GMT Subject: CN=ef218f28f51bb8b54d8a12096b14b70fe62a0ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:22:47:ee:6f:ca:c6:87:99:df:10:ef:65: 83:56:90:f0:18:58:aa:f2:ea:85:be:e6:91:71:5c: 44:62:6f:8c:4d:f2:63:b4:c7:e8:24:22:e9:de:ff: 05:c6:ed:71:5e:62:8f:67:2b:cd:7b:6b:b6:da:f6: c3:85:b6:e3:a9:63:44:b3:df:f4:11:ce:af:4e:1f: a0:a9:cc:b3:3e:02:d2:1b:cc:9b:57:c0:6d:e6:c0: 4d:8c:a6:a5:bd:b6:4d:d7:73:5e:c2:df:8b:bc:94: ea:f7:30:13:fb:d2:cd:07:29:e9:22:ec:af:5a:2f: 82:ac:62:e3:a0:9f:a4:74:ba:eb:3b:03:d9:c2:86: 29:dd:7f:3d:02:46:12:b5:8a:a5:77:aa:cc:13:b9: 19:59:ad:bb:80:94:85:41:76:d7:f1:df:0a:4a:9b: 5d:77:00:a9:52:7a:05:7f:93:b4:1d:85:d1:a4:2b: 46:8e:89:1d:04:ac:5a:bc:a1:55:a0:c1:ac:66:96: 28:12:9d:b8:33:f7:5a:7a:40:93:3f:77:3f:31:d1: b7:74:d1:07:e3:83:9d:16:44:ea:1d:1a:d6:60:74: 72:bc:5a:25:2b:f1:9e:7b:03:91:39:c7:ba:36:0e: ab:03:4c:34:6e:b5:c4:2f:11:59:ca:e8:d0:c4:fe: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:8F:28:F5:1B:B8:B5:4D:8A:12:09:6B:14:B7:0F:E6:2A:0E:C6 X509v3 Authority Key Identifier: keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:23:ff:b6:56:17:14:11:4a:40:3a:a1:6b:dc:b1:67:e7:1d: 06:3a:81:48:1d:bc:20:fc:8d:a0:aa:55:81:2b:9c:df:64:d2: 65:c3:a0:d5:4f:83:ab:47:24:89:9c:75:e4:4b:4d:fa:f5:59: 58:93:25:e3:f0:e9:8a:d7:03:99:48:36:fd:60:f4:a6:91:c5: 11:d0:65:2c:4c:f8:9f:1e:0c:0e:47:1b:8a:0f:9f:c3:45:e6: dc:8d:2b:dd:c9:17:c3:77:1f:66:7b:1e:e5:81:f1:50:62:cf: d4:ea:dc:8c:56:15:e0:6c:2c:59:e2:87:6c:42:30:90:a7:9b: 18:12:7e:b7:c6:4e:12:bb:7b:a7:54:24:49:53:4c:e5:f3:5e: f4:fa:77:be:f8:5e:73:7e:95:8c:53:08:38:02:d3:1f:b0:b4: cd:68:b4:6c:4c:a2:23:c5:7d:03:81:97:0e:76:54:5a:8f:2d: 42:cd:9f:ec:c3:66:9d:4c:04:89:d5:d9:de:7c:f7:e5:47:ee: fe:12:23:38:67:f5:8d:9f:bb:df:a8:b9:d3:f9:ab:d6:97:18: 76:5e:25:60:04:5d:dc:3e:5d:56:b7:79:93:7d:cd:f2:59:ed: fe:f2:e6:00:80:be:ab:46:8b:ee:f0:27:c5:18:44:8b:12:dc: 91:e6:12:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+u012mzEum42rCokpAwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5 MTk1MTMwHhcNMjUxMjE4MTUwMTI2WhcNMjUxMjE5MTUwMTI2WjAzMTEwLwYDVQQD EyhlZjIxOGYyOGY1MWJiOGI1NGQ4YTEyMDk2YjE0YjcwZmU2MmEwZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqMiR+5vysaHmd8Q72WDVpDwGFiq 8uqFvuaRcVxEYm+MTfJjtMfoJCLp3v8Fxu1xXmKPZyvNe2u22vbDhbbjqWNEs9/0 Ec6vTh+gqcyzPgLSG8ybV8Bt5sBNjKalvbZN13Newt+LvJTq9zAT+9LNBynpIuyv Wi+CrGLjoJ+kdLrrOwPZwoYp3X89AkYStYqld6rME7kZWa27gJSFQXbX8d8KSptd dwCpUnoFf5O0HYXRpCtGjokdBKxavKFVoMGsZpYoEp24M/daekCTP3c/MdG3dNEH 44OdFkTqHRrWYHRyvFolK/GeewOROce6Ng6rA0w0brXELxFZyujQxP4RfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8hjyj1G7i1TYoSCWsUtw/mKg7GMB8GA1UdIwQY MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4 LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSP/tlYX FBFKQDqha9yxZ+cdBjqBSB28IPyNoKpVgSuc32TSZcOg1U+Dq0ckiZx15EtN+vVZ WJMl4/DpitcDmUg2/WD0ppHFEdBlLEz4nx4MDkcbig+fw0Xm3I0r3ckXw3cfZnse 5YHxUGLP1OrcjFYV4GwsWeKHbEIwkKebGBJ+t8ZOErt7p1QkSVNM5fNe9Pp3vvhe c36VjFMIOALTH7C0zWi0bEyiI8V9A4GXDnZUWo8tQs2f7MNmnUwEidXZ3nz35Ufu /hIjOGf1jZ+736i50/mr1pcYdl4lYARd3D5dVrd5k33N8lnt/vLmAIC+q0aL7vAn xRhEixLckeYSLA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:09:01 2025 by rpki-client