This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json) Hash identifier: N9C/1V8E3cXr+L0qYZapYyAm7TXHDGsIWOECOUj16sA= Subject key identifier: C5:7A:31:08:8E:E2:FA:F7:4A:7B:BF:01:56:05:72:5B:C5:DE:76:F6 Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1 Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1 Certificate serial: 019B19BCD8CC910176FBAE00802BE850C32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft Manifest number: 1107 Signing time: Sat 13 Dec 2025 22:02:44 +0000 Manifest this update: Sat 13 Dec 2025 22:02:44 +0000 Manifest next update: Sun 14 Dec 2025 22:02:44 +0000 Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=) 2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: IzUrLza0PKYcPaowMrP8pzMjkVUNn7b1vCngEcs3yW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:d8:cc:91:01:76:fb:ae:00:80:2b:e8:50:c3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1 Validity Not Before: Dec 13 22:02:44 2025 GMT Not After : Dec 14 22:02:44 2025 GMT Subject: CN=c57a31088ee2faf74a7bbf015605725bc5de76f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:9d:a7:3d:93:d2:28:c0:4f:e1:20:58:74: e3:c9:2e:69:be:5a:36:5a:3d:21:42:62:57:4e:ae: 79:a4:6b:22:cd:24:b9:13:87:16:93:1f:49:b9:b1: 85:29:71:e6:19:d0:fc:57:a3:10:4f:54:45:af:4a: 46:98:76:53:0f:b5:9e:d4:eb:d6:d4:47:bf:1a:f1: 6c:77:c8:23:73:f5:ba:76:77:aa:f1:a8:f1:35:1a: 1a:5b:7a:e6:a1:cb:58:7c:64:2f:e3:e7:01:56:00: 43:80:22:f6:ba:36:cd:f0:f6:c4:a1:ab:07:e2:dd: cf:64:50:95:17:19:62:ab:90:bf:c3:5d:d5:57:73: 66:05:26:d4:e9:f6:6b:b9:d0:f6:7a:9b:e5:cf:ad: 99:a9:11:9b:f0:37:69:5f:a0:68:fd:99:6e:9b:f2: 5e:c7:92:2d:ba:dc:4f:2b:da:1f:c9:d5:84:c4:a0: 94:14:10:6d:1a:b8:42:b9:61:34:3b:a6:11:62:db: c9:6a:d8:4e:15:2d:ac:a0:89:91:4f:0d:fb:4d:3a: 9f:99:ba:40:3d:3a:3d:47:3a:a7:41:f6:f5:a3:d5: 00:5e:01:67:8f:d1:d3:9c:d8:46:6b:d5:01:92:34: 3c:d6:63:68:23:1c:ce:ef:6a:65:e1:fe:8d:b9:3d: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7A:31:08:8E:E2:FA:F7:4A:7B:BF:01:56:05:72:5B:C5:DE:76:F6 X509v3 Authority Key Identifier: keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:90:f3:86:8d:35:0f:32:28:f1:dd:6d:34:2e:b8:66:e1:ec: 11:b2:78:9d:0f:dd:0e:ee:2c:86:c3:63:95:b6:29:f9:04:4f: a3:02:ef:5d:9b:da:06:9c:a4:a8:6b:9a:8a:63:c2:b5:f0:00: cd:b2:8b:d1:8d:d2:4f:1f:e3:53:0f:41:76:2b:81:3d:f8:ef: bd:70:92:e9:64:79:5d:41:df:de:06:b8:e9:5c:0c:fa:93:d0: 1a:b0:12:14:ee:57:6f:15:31:36:7b:ae:27:72:85:06:e1:d3: 60:24:fb:e4:5e:c7:d6:3e:e9:09:0b:6c:65:fc:01:09:15:09: 0c:e8:90:b7:20:6f:7b:90:21:d3:01:eb:7f:e4:74:09:f7:27: 73:d7:39:81:bf:7a:a2:33:d3:0f:d3:13:98:ee:8b:75:d5:b4: a9:6a:f2:03:de:c9:64:6e:a4:1e:0b:8a:26:e4:28:90:ca:fb: a6:a5:df:59:fd:89:f0:59:4e:69:2f:cf:df:60:a2:ac:64:1f: 97:cf:1e:35:38:0e:9f:3a:ae:93:d9:93:cd:b9:b6:36:e9:c7: 9a:51:15:fa:b4:96:2c:7c:5d:57:3f:f1:57:95:b7:92:07:f0: 35:1f:dd:e2:e0:37:ec:02:ed:86:f1:e6:3c:c4:ce:0d:ff:f1: 84:06:b5:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvNjMkQF2+64AgCvoUMMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZjFlNDFjZTdjMjQyNGY5ZGY4OGViOTg0NjRjOWIwODI2 YmU5YzEwHhcNMjUxMjEzMjIwMjQ0WhcNMjUxMjE0MjIwMjQ0WjAzMTEwLwYDVQQD EyhjNTdhMzEwODhlZTJmYWY3NGE3YmJmMDE1NjA1NzI1YmM1ZGU3NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU2dpz2T0ijAT+EgWHTjyS5pvlo2 Wj0hQmJXTq55pGsizSS5E4cWkx9JubGFKXHmGdD8V6MQT1RFr0pGmHZTD7We1OvW 1Ee/GvFsd8gjc/W6dneq8ajxNRoaW3rmoctYfGQv4+cBVgBDgCL2ujbN8PbEoasH 4t3PZFCVFxliq5C/w13VV3NmBSbU6fZrudD2epvlz62ZqRGb8DdpX6Bo/Zlum/Je x5ItutxPK9ofydWExKCUFBBtGrhCuWE0O6YRYtvJathOFS2soImRTw37TTqfmbpA PTo9RzqnQfb1o9UAXgFnj9HTnNhGa9UBkjQ81mNoIxzO72pl4f6NuT2h/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV6MQiO4vr3Snu/AVYFclvF3nb2MB8GA1UdIwQY MBaAFCzx5BznwkJPnfiOuYRkybCCa+nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDkt OTdiODljNDdkNTBhLzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDktOTdiODljNDdkNTBh LzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJDzho01 DzIo8d1tNC64ZuHsEbJ4nQ/dDu4shsNjlbYp+QRPowLvXZvaBpykqGuaimPCtfAA zbKL0Y3STx/jUw9BdiuBPfjvvXCS6WR5XUHf3ga46VwM+pPQGrASFO5XbxUxNnuu J3KFBuHTYCT75F7H1j7pCQtsZfwBCRUJDOiQtyBve5Ah0wHrf+R0Cfcnc9c5gb96 ojPTD9MTmO6LddW0qWryA97JZG6kHguKJuQokMr7pqXfWf2J8FlOaS/P32CirGQf l88eNTgOnzquk9mTzbm2NunHmlEV+rSWLHxdVz/xV5W3kgfwNR/d4uA37ALthvHm PMTODf/xhAa1Iw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:58 2025 by rpki-client