This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json) Hash identifier: vbPeEvziIoApMd74yUaiJW0slxXOpPTCy7FhzomNNCA= Subject key identifier: A5:B0:54:CF:F1:1F:01:E3:C8:5C:81:0F:37:4E:88:04:8E:A0:DC:92 Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Certificate serial: 019B20CF93BCE874348DD52882470567AFB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft Manifest number: 1185 Signing time: Mon 15 Dec 2025 07:00:33 +0000 Manifest this update: Mon 15 Dec 2025 07:00:33 +0000 Manifest next update: Tue 16 Dec 2025 07:00:33 +0000 Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=) 2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: LmVZosc/0i2CPo3HQQI8egSAnHqumnKKXz5UG31OqTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:93:bc:e8:74:34:8d:d5:28:82:47:05:67:af:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Validity Not Before: Dec 15 07:00:33 2025 GMT Not After : Dec 16 07:00:33 2025 GMT Subject: CN=a5b054cff11f01e3c85c810f374e88048ea0dc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:8b:9c:42:31:7d:76:11:4b:5d:40:d5:fe: 95:47:90:82:69:85:a9:ac:91:ab:e0:19:01:87:ee: 4e:01:24:f9:de:50:10:40:aa:25:e4:7b:18:52:a5: cc:0e:a9:90:cb:58:4a:5e:75:19:8d:6c:0a:d1:c2: 09:1d:ae:2d:ef:cc:dd:f1:e2:f1:b4:1d:ce:62:bc: 06:d6:20:f7:18:6a:ea:55:5e:14:ff:20:f9:d3:64: 43:c5:a6:41:d4:c2:ca:63:e8:66:1f:10:ce:1f:44: c9:20:a0:96:a7:c6:dc:be:51:26:a3:54:59:47:39: 16:c3:09:d8:4d:33:f1:aa:04:ca:59:c2:d2:78:ea: 64:92:d8:5b:8e:d5:39:eb:af:07:a4:30:5c:d9:05: ce:2b:e6:c3:59:d8:3c:11:cf:50:95:ba:36:e1:3b: 44:0e:15:93:6d:ab:f0:ba:d0:e7:9d:d9:9e:f5:88: ea:5a:6e:92:6a:44:0b:bb:f3:23:85:21:b3:51:e5: fa:a1:13:fe:24:8a:ce:4c:cd:d2:3c:d2:37:86:20: 89:41:99:4d:5a:bd:80:fc:bf:e6:ac:08:ef:66:3e: 44:e6:48:2f:5f:84:f1:87:50:e1:bc:8e:a5:25:c1: b2:5b:6b:d3:d4:20:fe:77:9e:9c:51:47:c5:13:ce: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B0:54:CF:F1:1F:01:E3:C8:5C:81:0F:37:4E:88:04:8E:A0:DC:92 X509v3 Authority Key Identifier: keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:6e:bb:12:ad:22:36:52:53:c7:5f:fc:52:05:53:da:0b: 6d:72:03:84:52:52:c5:d8:5c:28:2a:be:aa:c7:a1:00:05:2c: 62:e3:aa:cf:9f:cf:07:05:f8:32:b7:2d:fb:da:2a:de:7f:15: a9:87:8f:88:64:cc:05:5c:6b:8a:17:08:2a:56:f7:fe:9e:d4: 0c:fb:6b:82:4a:6a:6e:4a:45:ef:3e:08:0e:6d:7a:b0:54:90: ca:a5:b4:fa:05:05:04:33:f3:ca:26:e6:c4:30:37:9a:f1:b4: 0d:a9:3a:0d:a4:73:de:27:58:29:22:b8:59:dc:b4:26:45:02: 47:d5:89:9b:c9:22:f6:46:6d:ed:70:e0:40:22:b9:2b:2f:1f: 72:03:a2:c8:c1:e2:19:ca:7f:6f:e5:20:aa:8f:9c:3a:63:b9: 95:e6:45:4e:64:74:e1:4f:f6:47:a1:61:95:f3:c0:c5:1a:e4: 4d:e0:1a:16:ee:26:bb:62:f9:1d:35:43:0e:32:46:3f:e4:28: cf:fb:3d:4a:f4:45:96:86:1e:70:12:b6:db:08:5c:1a:17:4b: a0:56:30:54:b8:aa:3d:0d:57:1e:65:5c:29:a9:02:49:3b:5e: 6c:e3:2d:fc:41:6c:cb:cb:b7:b0:90:af:b8:9b:96:17:1b:cb: 1a:74:c2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz5O86HQ0jdUogkcFZ6+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2 OGFjOWIwHhcNMjUxMjE1MDcwMDMzWhcNMjUxMjE2MDcwMDMzWjAzMTEwLwYDVQQD EyhhNWIwNTRjZmYxMWYwMWUzYzg1YzgxMGYzNzRlODgwNDhlYTBkYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyOLnEIxfXYRS11A1f6VR5CCaYWp rJGr4BkBh+5OAST53lAQQKol5HsYUqXMDqmQy1hKXnUZjWwK0cIJHa4t78zd8eLx tB3OYrwG1iD3GGrqVV4U/yD502RDxaZB1MLKY+hmHxDOH0TJIKCWp8bcvlEmo1RZ RzkWwwnYTTPxqgTKWcLSeOpkkthbjtU5668HpDBc2QXOK+bDWdg8Ec9Qlbo24TtE DhWTbavwutDnndme9YjqWm6SakQLu/MjhSGzUeX6oRP+JIrOTM3SPNI3hiCJQZlN Wr2A/L/mrAjvZj5E5kgvX4Txh1DhvI6lJcGyW2vT1CD+d56cUUfFE8547QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWwVM/xHwHjyFyBDzdOiASOoNySMB8GA1UdIwQY MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZNuuxKt IjZSU8df/FIFU9oLbXIDhFJSxdhcKCq+qsehAAUsYuOqz5/PBwX4Mrct+9oq3n8V qYePiGTMBVxrihcIKlb3/p7UDPtrgkpqbkpF7z4IDm16sFSQyqW0+gUFBDPzyibm xDA3mvG0Dak6DaRz3idYKSK4Wdy0JkUCR9WJm8ki9kZt7XDgQCK5Ky8fcgOiyMHi Gcp/b+Ugqo+cOmO5leZFTmR04U/2R6FhlfPAxRrkTeAaFu4mu2L5HTVDDjJGP+Qo z/s9SvRFloYecBK22whcGhdLoFYwVLiqPQ1XHmVcKakCSTtebOMt/EFsy8u3sJCv uJuWFxvLGnTCJA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:39:38 2025 by rpki-client