This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json) Hash identifier: zoaZQ7WkUyqYVidm8gUkolde4LoJpiGz8hIrW3tu3U8= Subject key identifier: F7:AD:71:9A:BD:6B:03:3E:CC:98:95:DD:32:F9:8B:AF:ED:90:B1:56 Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41 Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341 Certificate serial: 019B35695055D03464262D40A0AE1FAA5831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft Manifest number: 0F9B Signing time: Fri 19 Dec 2025 07:00:52 +0000 Manifest this update: Fri 19 Dec 2025 07:00:52 +0000 Manifest next update: Sat 20 Dec 2025 07:00:52 +0000 Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: ASM1UNoR2c2R32R229EK9etV9nQ0hANpi8XJWlxtJLI=) 2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=) 3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:50:55:d0:34:64:26:2d:40:a0:ae:1f:aa:58:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341 Validity Not Before: Dec 19 07:00:52 2025 GMT Not After : Dec 20 07:00:52 2025 GMT Subject: CN=f7ad719abd6b033ecc9895dd32f98bafed90b156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:ba:8b:85:30:95:64:0e:23:d2:ec:4e:91: 33:ad:8f:48:d0:b3:1d:68:d9:03:22:9e:40:c5:60: e5:30:d8:62:5c:9d:7c:dd:ac:b3:7f:0e:ea:98:d3: aa:c7:40:48:0d:f5:a3:27:f1:f6:3b:76:c0:a5:3d: d1:36:50:23:75:cf:57:d9:e4:92:ed:d0:b1:8a:99: bf:1f:ab:99:84:c0:26:b7:91:bc:ea:5f:9e:20:8d: 62:00:e2:de:d0:dc:92:31:48:0a:f4:32:c6:bb:e7: a6:50:cd:8d:88:f9:10:d5:d1:6c:2f:25:91:c4:db: 91:0d:47:40:55:c9:dd:e3:b0:cf:17:7e:e3:5b:c8: c5:57:98:36:6a:af:b6:2c:07:e3:22:72:f9:b8:76: 4c:47:3f:a8:1c:5c:85:aa:61:33:cc:ec:82:8a:db: 28:cf:4a:41:b8:89:48:92:31:32:37:d8:3c:05:5c: 7d:ac:0b:5e:c1:28:ff:5a:9e:ce:44:e8:f6:ec:96: 0d:8a:76:e2:44:76:01:41:be:d5:f2:b1:4e:eb:92: e3:ed:37:98:ee:62:d0:6a:f4:60:fc:7d:a1:f8:96: 7a:79:ab:09:78:86:90:d8:d7:35:58:2e:80:31:bf: 2d:42:1c:dd:4d:ed:c7:e7:80:28:30:02:1c:3c:be: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AD:71:9A:BD:6B:03:3E:CC:98:95:DD:32:F9:8B:AF:ED:90:B1:56 X509v3 Authority Key Identifier: keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5d:9a:a1:f1:3a:22:2a:ad:6c:91:7c:c8:17:fb:c8:b8:a0: 19:17:ad:17:b9:35:07:32:92:eb:8f:2a:01:2a:ad:b3:e0:94: 7e:c0:0c:72:ec:11:23:61:42:1f:b7:bb:d2:bf:78:f9:f2:29: 5a:d9:61:24:37:13:91:ec:f4:bc:84:f3:19:a5:c5:f4:8b:89: 73:e3:b3:40:a5:eb:18:c4:30:9f:85:21:e4:65:f9:25:ab:95: 0a:07:01:e0:99:f6:ac:40:d6:0c:15:20:cf:86:cd:15:45:e3: 03:b9:72:55:36:79:0c:20:72:67:d7:32:b3:4d:41:75:f0:d1: aa:16:ef:11:88:34:6c:eb:5b:e7:d3:33:2e:17:91:b2:03:05: 30:cc:45:5d:9c:fa:39:08:8b:33:78:e2:43:df:14:15:1d:0e: 1a:e2:a7:63:37:42:57:36:79:ea:1c:ae:b2:46:fb:bf:17:18: bf:c8:8e:0d:2f:aa:c0:e0:3e:3f:5d:73:55:c7:2f:b7:d6:e6: df:f1:03:96:dd:1b:ee:05:9e:79:aa:24:b3:3f:7e:df:5b:60: 81:b5:22:0e:90:81:d6:9c:49:62:e2:cc:a3:25:27:9c:54:4f: 40:88:8f:bc:a0:4a:5e:06:44:00:77:34:ad:ec:20:27:a3:80: 56:5b:67:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aVBV0DRkJi1AoK4fqlgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzVmMzVkMjU2Y2M0YTViODgzMTliYjdlNGJiYmEzMjll NDkzNDEwHhcNMjUxMjE5MDcwMDUyWhcNMjUxMjIwMDcwMDUyWjAzMTEwLwYDVQQD EyhmN2FkNzE5YWJkNmIwMzNlY2M5ODk1ZGQzMmY5OGJhZmVkOTBiMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbq6i4UwlWQOI9LsTpEzrY9I0LMd aNkDIp5AxWDlMNhiXJ183ayzfw7qmNOqx0BIDfWjJ/H2O3bApT3RNlAjdc9X2eSS 7dCxipm/H6uZhMAmt5G86l+eII1iAOLe0NySMUgK9DLGu+emUM2NiPkQ1dFsLyWR xNuRDUdAVcnd47DPF37jW8jFV5g2aq+2LAfjInL5uHZMRz+oHFyFqmEzzOyCitso z0pBuIlIkjEyN9g8BVx9rAtewSj/Wp7OROj27JYNinbiRHYBQb7V8rFO65Lj7TeY 7mLQavRg/H2h+JZ6easJeIaQ2Nc1WC6AMb8tQhzdTe3H54AoMAIcPL60cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPetcZq9awM+zJiV3TL5i6/tkLFWMB8GA1UdIwQY MBaAFCx1810lbMSluIMZu35Lu6Mp5JNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhYelhTVnN4S1c0Z3htN2ZrdTdveW5razBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MGExZTUtN2QyYS00OGQ2LWE1MGUt Zjk2ZmI0ZWE3ZTcwLzEvTEhYelhTVnN4S1c0Z3htN2ZrdTdveW5razBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MGExZTUtN2QyYS00OGQ2LWE1MGUtZjk2ZmI0ZWE3ZTcw LzEvTEhYelhTVnN4S1c0Z3htN2ZrdTdveW5razBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmF2aofE6 IiqtbJF8yBf7yLigGRetF7k1BzKS648qASqts+CUfsAMcuwRI2FCH7e70r94+fIp WtlhJDcTkez0vITzGaXF9IuJc+OzQKXrGMQwn4Uh5GX5JauVCgcB4Jn2rEDWDBUg z4bNFUXjA7lyVTZ5DCByZ9cys01BdfDRqhbvEYg0bOtb59MzLheRsgMFMMxFXZz6 OQiLM3jiQ98UFR0OGuKnYzdCVzZ56hyuskb7vxcYv8iODS+qwOA+P11zVccvt9bm 3/EDlt0b7gWeeaoksz9+31tggbUiDpCB1pxJYuLMoyUnnFRPQIiPvKBKXgZEAHc0 rewgJ6OAVltn1g== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:41 2025 by rpki-client