This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json) Hash identifier: X2esldsJCC9M6aLEZJ31wnw2aqhlGciSQSZ3IRdhrvo= Subject key identifier: 15:31:65:A9:25:98:57:77:9A:04:6B:94:A3:EB:76:DB:54:EF:9B:18 Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Certificate serial: 019B35695FA4EF046FC6082DE20CE5D71641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 07:00:56 +0000 Manifest this update: Fri 19 Dec 2025 07:00:56 +0000 Manifest next update: Sat 20 Dec 2025 07:00:56 +0000 Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: 2pEAlLem/MbzIxf38Uzx6PHCCyDSxQASfm2mjJqnlF4=) 2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:5f:a4:ef:04:6f:c6:08:2d:e2:0c:e5:d7:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Validity Not Before: Dec 19 07:00:56 2025 GMT Not After : Dec 20 07:00:56 2025 GMT Subject: CN=153165a9259857779a046b94a3eb76db54ef9b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:2f:ae:c4:f1:94:ce:83:c2:7f:89:45:f8: a1:4e:ee:f0:83:ea:26:fc:0d:f4:5f:09:9a:8e:82: e9:bc:6a:39:dd:d1:b3:ec:d5:e9:39:33:b5:ed:3d: 48:4d:5c:45:2e:2f:8f:e6:97:fa:12:2d:90:cd:0b: 79:67:d9:05:56:37:2d:8f:31:56:60:0a:95:81:bf: 86:82:e5:17:88:0e:59:1a:33:7e:34:7a:95:2a:6b: bf:b0:47:eb:4d:ad:cb:1d:01:ed:26:b9:a2:f2:98: 99:2f:d9:c1:80:b3:c2:73:bf:3d:46:3c:08:64:7e: 11:63:fc:59:fa:c8:5e:0b:71:4a:df:7c:17:2d:2d: e6:b2:68:fa:c1:9b:b5:ef:4b:2e:62:3c:33:5f:9a: 2a:98:c9:91:d7:43:95:aa:a0:d6:92:da:30:51:22: a9:01:43:b9:f7:06:ea:01:3f:cb:8e:6b:a9:b8:34: 4a:d2:ff:34:38:c1:fa:2d:c6:33:ba:8d:80:65:da: 87:24:b7:92:de:ff:5d:d4:6b:13:05:de:2d:1f:dd: dc:ce:84:1a:e6:6a:c4:28:70:cc:5a:37:86:4e:92: 67:33:21:50:e6:d3:d8:44:12:ed:11:35:a6:1e:dc: 6f:35:d5:95:f8:c6:78:9c:86:a0:d9:75:b9:9c:e5: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:65:A9:25:98:57:77:9A:04:6B:94:A3:EB:76:DB:54:EF:9B:18 X509v3 Authority Key Identifier: keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e8:d7:19:fc:c0:b8:29:b1:c9:8b:0b:c8:4e:c5:13:18:46: ad:bb:03:09:c4:1d:e6:eb:27:90:92:fc:ad:11:b5:20:86:1c: 1e:e6:c2:46:2c:78:43:0b:32:1a:94:a3:da:df:5c:20:e8:31: 37:83:ba:4e:81:9d:88:34:d3:e7:2c:61:8c:79:eb:e1:f7:74: 96:06:0f:be:ef:ee:8a:8a:e3:83:cf:75:c7:33:f1:aa:36:4e: 4f:ea:78:77:d6:87:d0:77:ba:4d:1a:e5:24:fc:58:a6:62:dd: 3a:ad:dc:a6:81:04:34:fc:26:dc:07:16:de:fb:42:32:0d:55: 2e:57:58:97:44:8f:8f:51:fc:8d:31:46:5e:1b:08:01:4c:42: 8b:0e:98:22:b5:32:cf:c4:84:ee:14:2e:69:65:ca:b7:7a:42: 8b:f7:cb:88:f3:f1:2b:b7:c7:30:f6:56:92:34:aa:76:7a:7b: 53:cc:b7:20:4a:17:32:fb:1d:4a:b7:ae:bd:e2:16:4c:47:42: ba:16:af:5e:ba:29:4a:e2:4f:6f:88:cc:a1:d2:a2:c1:1f:70: 35:7e:14:d7:82:af:81:6c:f7:b1:5b:f3:a9:f5:f3:49:38:b3: a6:ce:09:20:65:01:f6:23:87:a3:69:9d:42:5f:1c:ad:ca:d6: f0:09:c5:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aV+k7wRvxggt4gzl1xZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3 YTg0ZGUwHhcNMjUxMjE5MDcwMDU2WhcNMjUxMjIwMDcwMDU2WjAzMTEwLwYDVQQD EygxNTMxNjVhOTI1OTg1Nzc3OWEwNDZiOTRhM2ViNzZkYjU0ZWY5YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttwvrsTxlM6Dwn+JRfihTu7wg+om /A30XwmajoLpvGo53dGz7NXpOTO17T1ITVxFLi+P5pf6Ei2QzQt5Z9kFVjctjzFW YAqVgb+GguUXiA5ZGjN+NHqVKmu/sEfrTa3LHQHtJrmi8piZL9nBgLPCc789RjwI ZH4RY/xZ+sheC3FK33wXLS3msmj6wZu170suYjwzX5oqmMmR10OVqqDWktowUSKp AUO59wbqAT/LjmupuDRK0v80OMH6LcYzuo2AZdqHJLeS3v9d1GsTBd4tH93czoQa 5mrEKHDMWjeGTpJnMyFQ5tPYRBLtETWmHtxvNdWV+MZ4nIag2XW5nOX9JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUxZaklmFd3mgRrlKPrdttU75sYMB8GA1UdIwQY MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhejXGfzA uCmxyYsLyE7FExhGrbsDCcQd5usnkJL8rRG1IIYcHubCRix4QwsyGpSj2t9cIOgx N4O6ToGdiDTT5yxhjHnr4fd0lgYPvu/uiorjg891xzPxqjZOT+p4d9aH0He6TRrl JPxYpmLdOq3cpoEENPwm3AcW3vtCMg1VLldYl0SPj1H8jTFGXhsIAUxCiw6YIrUy z8SE7hQuaWXKt3pCi/fLiPPxK7fHMPZWkjSqdnp7U8y3IEoXMvsdSreuveIWTEdC uhavXropSuJPb4jModKiwR9wNX4U14KvgWz3sVvzqfXzSTizps4JIGUB9iOHo2md Ql8crcrW8AnF8A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:02 2025 by rpki-client