This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json) Hash identifier: GnJuMYbuZABPya6BVk61w/q/21V7yjlYDgqjP/I7qzM= Subject key identifier: 58:67:E2:E5:83:F8:4D:E4:C3:BB:1E:51:7D:19:4B:7B:F0:F3:70:C1 Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Certificate serial: 019B0E5BDF1307027B0F3E5EB5DD5FC023B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft Manifest number: 0A8F Signing time: Thu 11 Dec 2025 17:01:00 +0000 Manifest this update: Thu 11 Dec 2025 17:01:00 +0000 Manifest next update: Fri 12 Dec 2025 17:01:00 +0000 Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=) 2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: m2mv9AzSnFVF6IfZFVhyKy9SVEnVk7dGkK0d/P6UEss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:df:13:07:02:7b:0f:3e:5e:b5:dd:5f:c0:23:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Validity Not Before: Dec 11 17:01:00 2025 GMT Not After : Dec 12 17:01:00 2025 GMT Subject: CN=5867e2e583f84de4c3bb1e517d194b7bf0f370c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:5a:a8:40:5f:42:55:50:66:b3:68:13:c2: a6:ea:e7:39:d4:15:d0:da:14:ab:ef:98:4e:c7:d7: 94:53:cf:dd:26:4b:9c:d9:f2:49:d4:ad:74:be:f0: f9:fa:d8:aa:00:01:8a:37:b3:61:4c:cf:48:51:56: 54:6f:01:61:e4:ee:f9:d9:69:79:25:1c:d4:fd:62: f2:cb:6d:37:6d:22:e9:f2:ea:28:6d:9e:17:e5:93: 53:1f:1d:1f:d0:9a:cd:c6:08:0d:d9:fb:fe:3e:d5: 7a:1f:ac:ee:5f:b4:71:f7:10:f2:03:de:54:ca:9a: 9c:d3:a5:bb:0d:c2:6f:fe:0a:16:a6:6e:67:57:fb: dd:d1:50:70:56:14:20:64:87:9d:3f:ce:68:b2:52: fe:01:bc:a7:b8:17:4c:33:7a:0d:0b:da:b3:1e:60: aa:4d:27:7d:76:95:f8:9d:9b:14:a6:b8:47:31:15: ec:e9:69:01:ff:4a:39:12:2b:3c:1d:8e:5a:2c:46: 5b:59:41:5c:5f:e4:10:45:70:f7:25:ea:8c:af:06: 6a:4f:61:90:3a:f8:11:e0:dd:28:90:3b:dd:48:ba: f0:ad:fd:38:da:3d:66:4b:f0:7c:e1:d2:aa:eb:a0: 38:fb:0c:10:48:ab:0f:6f:23:7c:d5:73:58:d2:69: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:67:E2:E5:83:F8:4D:E4:C3:BB:1E:51:7D:19:4B:7B:F0:F3:70:C1 X509v3 Authority Key Identifier: keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9b:ed:1d:e4:3a:ce:91:96:f0:1d:20:eb:d8:ee:a3:44:b3: f2:2c:21:94:ea:9c:f5:de:2c:0e:14:97:e3:dc:99:6c:bc:af: 6e:4e:b9:22:8c:aa:fa:8a:a7:22:cc:06:12:c7:ac:34:6b:59: 19:a9:3e:7b:07:a2:f0:e5:9d:00:b9:aa:ca:bf:c7:32:3d:a0: 5e:e2:c0:51:0b:90:b9:7a:1c:9d:c8:80:72:cc:ad:07:6a:33: 04:1a:03:47:93:c3:87:b5:15:ba:4e:78:5c:44:3f:c3:dd:9a: 51:ed:5f:89:8c:b7:ad:28:0a:c7:c8:0a:c3:e5:ea:3c:96:13: a1:63:8d:19:e8:bb:aa:7e:a9:d0:a0:e3:86:94:e9:6f:ef:1e: 4d:da:0e:18:21:87:f0:3a:43:2b:9f:8a:7a:f6:2c:54:3d:02: 02:af:80:6b:4e:75:a6:28:3a:76:18:b3:e2:11:5d:5b:dc:7d: 35:c2:03:93:b8:9c:94:c6:23:aa:ef:6d:12:36:fb:df:64:fd: bd:c8:cb:c2:1d:9d:7d:8c:9d:49:30:d4:20:29:6f:83:4e:b6: 22:cf:8a:77:4b:0c:ef:fd:16:6e:96:6b:20:5f:0a:b5:d6:ae: 4a:d5:c8:8f:3f:ca:9d:51:fb:62:21:7e:9d:07:d7:05:dc:9f: 2a:31:1a:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW98TBwJ7Dz5etd1fwCO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj NmU5ZWIwHhcNMjUxMjExMTcwMTAwWhcNMjUxMjEyMTcwMTAwWjAzMTEwLwYDVQQD Eyg1ODY3ZTJlNTgzZjg0ZGU0YzNiYjFlNTE3ZDE5NGI3YmYwZjM3MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF5aqEBfQlVQZrNoE8Km6uc51BXQ 2hSr75hOx9eUU8/dJkuc2fJJ1K10vvD5+tiqAAGKN7NhTM9IUVZUbwFh5O752Wl5 JRzU/WLyy203bSLp8uoobZ4X5ZNTHx0f0JrNxggN2fv+PtV6H6zuX7Rx9xDyA95U ypqc06W7DcJv/goWpm5nV/vd0VBwVhQgZIedP85oslL+AbynuBdMM3oNC9qzHmCq TSd9dpX4nZsUprhHMRXs6WkB/0o5Eis8HY5aLEZbWUFcX+QQRXD3JeqMrwZqT2GQ OvgR4N0okDvdSLrwrf042j1mS/B84dKq66A4+wwQSKsPbyN81XNY0mkaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhn4uWD+E3kw7seUX0ZS3vw83DBMB8GA1UdIwQY MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpvtHeQ6 zpGW8B0g69juo0Sz8iwhlOqc9d4sDhSX49yZbLyvbk65Ioyq+oqnIswGEsesNGtZ Gak+ewei8OWdALmqyr/HMj2gXuLAUQuQuXocnciAcsytB2ozBBoDR5PDh7UVuk54 XEQ/w92aUe1fiYy3rSgKx8gKw+XqPJYToWONGei7qn6p0KDjhpTpb+8eTdoOGCGH 8DpDK5+KevYsVD0CAq+Aa051pig6dhiz4hFdW9x9NcIDk7iclMYjqu9tEjb732T9 vcjLwh2dfYydSTDUIClvg062Is+Kd0sM7/0WbpZrIF8KtdauStXIjz/KnVH7YiF+ nQfXBdyfKjEauQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:46 2025 by rpki-client