This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json) Hash identifier: pnsyYQudQMm8CVSORGuoWaT6jJmh4YDQ/4HCtAjtj9c= Subject key identifier: 78:A6:E2:E3:98:29:A2:46:DE:D4:BC:1D:30:B6:89:78:3F:76:6F:BC Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Certificate serial: 019B32D71FEC003F0106829D8F88107E7A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:01:57 +0000 Manifest this update: Thu 18 Dec 2025 19:01:57 +0000 Manifest next update: Fri 19 Dec 2025 19:01:57 +0000 Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: G4VycqU78jw1jSIw/4U9aT+0yDHrivFOup+0xCaNR7M=) 2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:1f:ec:00:3f:01:06:82:9d:8f:88:10:7e:7a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Validity Not Before: Dec 18 19:01:57 2025 GMT Not After : Dec 19 19:01:57 2025 GMT Subject: CN=78a6e2e39829a246ded4bc1d30b689783f766fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:d4:cb:df:11:a9:de:87:a8:2a:2a:8d:11: d1:bd:96:41:8d:61:bb:20:4a:33:c4:bc:92:e3:67: 51:99:ac:21:a8:48:30:4e:ca:d0:9d:d2:43:b7:b3: 11:a5:69:c9:17:52:c9:13:74:35:ef:6b:89:ff:e4: 4b:a9:13:1d:94:58:f4:39:c8:05:c2:99:76:3c:bb: 50:57:74:e7:c8:aa:e1:70:50:3b:58:21:e0:5c:e7: ce:4f:c7:72:71:2f:3a:1a:99:c0:f4:ba:9b:e6:cf: bd:f1:d4:15:b3:15:5a:b6:9b:ad:bf:b7:08:81:80: d3:d5:98:7f:64:6f:09:69:3d:e8:67:21:3b:39:b5: c8:41:f3:ae:2b:81:6b:3c:d0:c7:3e:fe:73:1c:1e: 0c:fc:9a:3a:6a:50:5d:1f:49:a4:6a:ce:3f:06:7c: a9:6c:05:93:0f:f8:b4:02:1e:41:89:f8:2e:47:21: 86:43:7a:8b:31:43:4e:05:be:7c:71:96:1b:da:6e: 50:0c:7e:41:ed:ff:29:9b:4f:fd:40:92:78:67:0f: 3f:a7:f8:39:0a:0b:2b:04:ad:e4:05:fc:72:d1:82: 7f:ea:e7:9e:8f:9e:13:a9:d1:92:cf:24:68:b7:07: 06:0d:c9:ce:eb:76:a2:9c:a8:8a:93:d2:e6:f9:39: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A6:E2:E3:98:29:A2:46:DE:D4:BC:1D:30:B6:89:78:3F:76:6F:BC X509v3 Authority Key Identifier: keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:1a:2f:14:4a:67:3e:75:4d:9e:ea:77:8d:60:19:f1:3f: ba:15:1f:28:9d:5f:70:04:66:39:f5:88:8d:ef:c2:61:f8:4f: 00:c6:b1:52:02:aa:00:46:8e:28:59:ea:eb:60:11:84:9e:2a: ae:9a:81:84:de:06:86:44:ed:e9:0b:11:1c:02:9a:a1:3e:31: 76:f2:59:9e:c6:97:53:0c:43:cb:85:07:14:c8:e8:a5:c0:21: af:b0:ca:00:48:8e:cb:7a:61:20:43:54:98:87:7f:c9:11:ed: b9:ba:66:38:b1:4f:55:07:3f:98:95:8c:49:d8:64:62:9f:3a: f6:ee:70:36:b3:49:29:0c:d3:24:0b:ca:4d:f9:97:6d:6f:99: 84:0d:58:4d:bc:c6:0d:30:d0:6e:fd:81:de:cd:10:b7:bd:68: a4:99:99:5c:33:58:33:b7:e2:a7:44:2c:ee:42:6f:e4:76:e6: 6c:81:a5:5a:18:d5:1c:7b:d3:24:44:7e:56:64:19:b1:52:e9: c8:e1:cb:b2:3c:a5:1a:16:03:7b:c1:54:63:51:1a:6c:80:23: b7:43:79:4c:ea:eb:f2:70:82:4d:2c:fe:14:4a:5f:a3:62:20: 1c:6e:9c:18:47:7a:2f:d6:18:85:c9:1f:b5:7c:ae:82:e3:db: 24:64:32:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1x/sAD8BBoKdj4gQfnpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl MWM2MGIwHhcNMjUxMjE4MTkwMTU3WhcNMjUxMjE5MTkwMTU3WjAzMTEwLwYDVQQD Eyg3OGE2ZTJlMzk4MjlhMjQ2ZGVkNGJjMWQzMGI2ODk3ODNmNzY2ZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO3Uy98Rqd6HqCoqjRHRvZZBjWG7 IEozxLyS42dRmawhqEgwTsrQndJDt7MRpWnJF1LJE3Q172uJ/+RLqRMdlFj0OcgF wpl2PLtQV3TnyKrhcFA7WCHgXOfOT8dycS86GpnA9Lqb5s+98dQVsxVatputv7cI gYDT1Zh/ZG8JaT3oZyE7ObXIQfOuK4FrPNDHPv5zHB4M/Jo6alBdH0mkas4/Bnyp bAWTD/i0Ah5BifguRyGGQ3qLMUNOBb58cZYb2m5QDH5B7f8pm0/9QJJ4Zw8/p/g5 CgsrBK3kBfxy0YJ/6ueej54TqdGSzyRotwcGDcnO63ainKiKk9Lm+Tmj8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHim4uOYKaJG3tS8HTC2iXg/dm+8MB8GA1UdIwQY MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt YTBiNDkzMGNiZDFlLzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFIaLxRK Zz51TZ7qd41gGfE/uhUfKJ1fcARmOfWIje/CYfhPAMaxUgKqAEaOKFnq62ARhJ4q rpqBhN4GhkTt6QsRHAKaoT4xdvJZnsaXUwxDy4UHFMjopcAhr7DKAEiOy3phIENU mId/yRHtubpmOLFPVQc/mJWMSdhkYp869u5wNrNJKQzTJAvKTfmXbW+ZhA1YTbzG DTDQbv2B3s0Qt71opJmZXDNYM7fip0Qs7kJv5HbmbIGlWhjVHHvTJER+VmQZsVLp yOHLsjylGhYDe8FUY1EabIAjt0N5TOrr8nCCTSz+FEpfo2IgHG6cGEd6L9YYhckf tXyuguPbJGQyVA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:06 2025 by rpki-client